last executing test programs: 8m45.675597191s ago: executing program 32 (id=366): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x141000, 0x1c3) fdatasync(r0) 7m23.950000309s ago: executing program 33 (id=815): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) setrlimit(0x2, &(0x7f00000000c0)={0x2000000, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x300000a, 0x32, 0xffffffffffffffff, 0x0) 6m45.758500547s ago: executing program 34 (id=1142): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x5}]}, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000073"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 6m25.241194129s ago: executing program 1 (id=1218): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf64(r0, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x10, 0x7, 0x2, 0x81, 0x2, 0x3e, 0xfffffff9, 0x1d8, 0x40, 0x8b, 0xd33, 0x7, 0x38, 0x1, 0x9, 0x3, 0x9}, [{0x4, 0x6ecd, 0x2, 0x9, 0x41000101, 0x400005, 0xb, 0xa}]}, 0x78) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 6m24.343394123s ago: executing program 1 (id=1226): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) close(0x3) 6m23.748027705s ago: executing program 1 (id=1232): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200008}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x4008c80, &(0x7f0000000280)={0xa, 0x400, 0xfefffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x800003}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000003c0)={0x0, 0x1, 0x7}, 0x8) 6m23.041623963s ago: executing program 1 (id=1238): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x60b9, &(0x7f0000013cc0)="$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") lsetxattr$security_ima(&(0x7f0000000b00)='./file0/file1\x00', &(0x7f0000000100), &(0x7f0000000080)=ANY=[], 0x1, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000b40)='./file0/file1\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000001a80)='./file0\x00', 0x0, 0x3101015, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, 0x0) 6m20.165541949s ago: executing program 1 (id=1258): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fddbdf253700000008000300", @ANYRES32=r1, @ANYBLOB="080026006c0900000800a0006c09000008005700881300000800a10000100000080027"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x90) 6m17.482907199s ago: executing program 1 (id=1282): bpf$ENABLE_STATS(0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000440)={0x3, &(0x7f0000000040)=[{0x40, 0x0, 0x20}, {0x20, 0x0, 0x3, 0xfffff010}, {0x6, 0x0, 0x81, 0x9a85}]}, 0x10) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="0ccc3611", 0x4}], 0x1) 6m16.882905392s ago: executing program 35 (id=1282): bpf$ENABLE_STATS(0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000440)={0x3, &(0x7f0000000040)=[{0x40, 0x0, 0x20}, {0x20, 0x0, 0x3, 0xfffff010}, {0x6, 0x0, 0x81, 0x9a85}]}, 0x10) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="0ccc3611", 0x4}], 0x1) 4m57.46120128s ago: executing program 7 (id=1882): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x20, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x1}) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000080)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000480)={&(0x7f0000000040)=@can={{0x3, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "11e97f5d0c1f526b"}, 0x10}, 0x1, 0x0, 0x900, 0x2}, 0x20044850) 4m55.968553976s ago: executing program 7 (id=1887): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000000000000009500a505000000001058cb65"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r0, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff74, 0x19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 4m53.870763936s ago: executing program 7 (id=1902): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x100141, 0xa) write(r0, &(0x7f0000000140)='n', 0x1) pwrite64(r0, &(0x7f0000000180)='Y', 0x1, 0x4) 4m51.622883412s ago: executing program 7 (id=1911): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000001c0)="$eJzs3T9rc2UUAPBzkzSNOqSIiyJ4QQen0rq6NEoFsZMSQR002BYkCYUWAlYwduoncPR7+BFcXPwGgqvg1g6VKzf33ia16R/65k3h7e83nd7nnvOc3KckU06+eXPY3z1I4uTsz2i1kqhtxVacJ7EWtaj8FI0AAF4c51kW/2QPyWzUFt8NALAMxed/4bF7AQCW47Mvvvyks7Oz/WmatuL19umom0TE8HTULdY7+/FdDGIvNqIdFxHZpSL+6OOd7WikubV4ZzgedfPM4de/l/U7f0dM8jejHWvz8zfTwmX+y1V3aXT2V6o/2vHa/Pz3/p8fw3F0m/Hu2zP9r0c7/vg2DmIQu5HnTvN/3EzTD7Ofz374Kt8mz09q0V2d3DeV1Zd0JAAAAAAAAAAAAAAAAAAAAAAAPAHraZoU43sm83vyS5P5OaNu/WKyvp5WZuf7jKv5QElVqJgPlEU5omecxS/VfJ2NNE2z8sZpfiPeaPhhAQAAAAAAAAAAAAAAAAAAAMgdfX/c7w0Ge4cLCappANXX+h9aZ2vmyltx3O/Vby64ev+9ZqcN5L3eenM0GrGgx3JX8FLez8Irr04P9/MogupgFrrXqx8URY/7vbRcqh5yv5fctVerOrhfZ5ea8ayNZZN/iYvs6pm2Llu9mtVc0NNovjJ36d8sy+5X5/2/ijMqrySTERv3232lDOa+wDxoXT+L324ueONbRn0hbzwAAAAAAAAAAAAAAAAAAMA10y/9zlk8uTW19tyaAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAlm/7+fxW0IuLqlWvBuEy+7Z4yaMbh0SO/RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ6A/wIAAP//4ipOSw==") mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') 4m51.039216312s ago: executing program 7 (id=1913): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000010000304fffffffffedbdf2500000400", @ANYRES32=r1, @ANYBLOB="14040000b07f450014001280060001"], 0x34}, 0x1, 0x0, 0x0, 0x20048084}, 0x40050) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0xfffffff0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x64}}, 0x4000004) 4m50.20653955s ago: executing program 7 (id=1918): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d002008009c11"], 0xd6) 4m49.611601372s ago: executing program 36 (id=1918): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaa2986dd6d002008009c11"], 0xd6) 3m40.267560757s ago: executing program 9 (id=2415): r0 = socket(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x40}}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 3m39.994936482s ago: executing program 9 (id=2417): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc020000000000000000000000000000140004"], 0x84}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0xfffffffffffffef8}}, 0x28}}, 0x4000040) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) 3m39.837787919s ago: executing program 9 (id=2419): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b02, 0x0) 3m38.105130893s ago: executing program 9 (id=2431): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x60b9, &(0x7f0000013cc0)="$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") lsetxattr$security_ima(&(0x7f0000000b00)='./file0/file1\x00', &(0x7f0000000100), &(0x7f0000000080)=ANY=[], 0x1, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000b40)='./file0/file1\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000001a80)='./file0\x00', 0x0, 0x3101015, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, 0x0) 3m37.001884496s ago: executing program 9 (id=2435): syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') prctl$PR_SET_MM(0x23, 0x5, &(0x7f0000026000/0x1000)=nil) read$FUSE(r0, &(0x7f0000003380)={0x2020}, 0x2020) 3m35.967144443s ago: executing program 9 (id=2442): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) close(0x3) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) 3m35.51735733s ago: executing program 37 (id=2442): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) close(0x3) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private0, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20) 2m36.923426682s ago: executing program 5 (id=2848): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030300000000fcffffff0c00000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r0) 2m36.433048069s ago: executing program 5 (id=2854): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)) 2m36.128267481s ago: executing program 5 (id=2858): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r0, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x4}, 0x8) 2m35.84196705s ago: executing program 5 (id=2864): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x60b9, &(0x7f0000013cc0)="$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") lsetxattr$security_ima(&(0x7f0000000b00)='./file0/file1\x00', &(0x7f0000000100), &(0x7f0000000080)=ANY=[], 0x1, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000b40)='./file0/file1\x00', 0x0) mount$bind(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000001a80)='./file0\x00', 0x0, 0x3101015, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, 0x0) 2m34.178144456s ago: executing program 5 (id=2874): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20002040) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x8000001, 0x1}, 0x8) close(r0) 2m32.771283712s ago: executing program 5 (id=2883): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2m32.183365592s ago: executing program 38 (id=2883): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], 0x0, 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1m57.099362598s ago: executing program 2 (id=3109): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) fsopen(&(0x7f0000000180)='iso9660\x00', 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r0], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m56.855522746s ago: executing program 2 (id=3112): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x258cc74d, 0x4000, 0x0, 0x40, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000080)={0x3, 0x6, 0x40000002, 0x247, 0x19, "d206000094f3ffffd51930f9000100"}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x6) 1m56.483256385s ago: executing program 2 (id=3116): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/block/sda/hctx0/tags\x00', 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 1m56.231267255s ago: executing program 2 (id=3119): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) r0 = syz_clone(0x0, 0x0, 0x43, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 1m54.791241668s ago: executing program 2 (id=3132): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r2, 0x5}, &(0x7f0000000240)=0x8) 1m54.435393603s ago: executing program 2 (id=3136): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, 0x0, &(0x7f00000000c0)}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005700)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) 1m39.364157327s ago: executing program 39 (id=3136): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, 0x0, &(0x7f00000000c0)}, 0x20) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005700)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) 9.851497981s ago: executing program 8 (id=3815): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 3.430527433s ago: executing program 4 (id=3864): syz_usb_connect(0x2, 0x3f, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 3.119345007s ago: executing program 8 (id=3867): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) write(r0, &(0x7f0000000100)='file read \\}tc/passwd exec argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) 2.85177439s ago: executing program 8 (id=3869): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x90c3ff, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4533, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x2, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x400121a2, 0x0, 0xfffffffffffffffd) 2.776483848s ago: executing program 0 (id=3870): r0 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 2.606200769s ago: executing program 8 (id=3872): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pwrite64(r0, 0x0, 0x0, 0x9000) 2.465789263s ago: executing program 0 (id=3873): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private2, 0x6}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000240)={r2, 0x95}, 0x8) 2.313840749s ago: executing program 8 (id=3875): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.116467716s ago: executing program 8 (id=3878): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2.095968691s ago: executing program 6 (id=3879): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000001940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$FUSE_INIT(r0, &(0x7f0000002800)={0x50, 0x0, 0x0, {0x7, 0x2d, 0xc, 0x880, 0xbe, 0x9, 0xe, 0x5738, 0x0, 0x0, 0x20, 0x5}}, 0x50) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2.01509282s ago: executing program 3 (id=3880): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000009e00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000020000000400000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.731209228s ago: executing program 3 (id=3881): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x2000000, &(0x7f0000000200), 0x1, 0x445, &(0x7f0000001dc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x70) getdents(r1, 0x0, 0x0) write$binfmt_script(r0, &(0x7f00000009c0)={'#! ', './file0'}, 0xb) 1.667126123s ago: executing program 6 (id=3882): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 1.360578536s ago: executing program 0 (id=3883): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x90c3ff, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4533, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x2, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x400121a2, 0x0, 0xfffffffffffffffd) 1.34753791s ago: executing program 6 (id=3884): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000072"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 1.212744781s ago: executing program 3 (id=3885): r0 = syz_create_resource$binfmt(&(0x7f0000000440)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0x2) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 1.188505547s ago: executing program 4 (id=3886): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc8910610700fa6fa26fa7088c60897d4a6148a1c1e43f00001bde605cbeac671e8e8fdecb035865e362ead91b1979a5ae30705b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd21142525815b91076ccb7b37b41215c184e731fb13d100323b77f613af02b6f3259d6f3ac85da4fe304ecfca2be5f4a8b3910a8f0a88d082ac161c4a3c1132831a88f199f67aca8f4698996d076250b2b75cdc7776b8cab72716149f70efb190007832c6077da0df4c63a226284cd6a2e5ec5bb28f18dd44821065b9758fd159c490421901361244c01bfa0cddbc726f2b4ceace9f9309f507e6a7135b33f418af0a63bfb480c2feced947dae1d7dc19c4f1807b17c559c27be4d18b2e0a3cf26832d7fc97cea307de1852f90317b501bf66473eb6dac986d7b5682abc3a5ea1dabde56b9e3a56ba20a65dc0df39edd5f34ed22a8f0c6594a894901e455d0369e407dae0f4fb4e181415153000000b6b384cb4bbfd4edfd70cd7324de228e1047a61292abe63fc71063a9040bd927779d56ef0f4725dfb3822ce1e24632f7d51a0e65bd5664fcd3e4a0b0388b842115b5689769438f9763a55956288e78b6cad0ff3f310722b4a5cc4f25a69753fcc8ece189808e6f2f71ca2337d0de3a9feaa3f4cd2a2c69d21daec3751aca69f0a6f5b0af65aace6d04dad91c67e57a0f7b8accb3f8d9b787e002e56a7149c2d10a268884e695256ddb9c17853e29689f41667522e6932294"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) socket(0x840000000002, 0x3, 0x100) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYRES16=r1], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r1, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.027948635s ago: executing program 0 (id=3887): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x108) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r0, 0x0, 0x0}, 0x20) 931.348629ms ago: executing program 3 (id=3888): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x1a}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newqdisc={0x64, 0x24, 0xf0b, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x0, 0x1, 0x1ff, 0x3}, {0x9, 0x0, 0x401, 0x442a, 0x8, 0xfffffff9}, 0x0, 0x7d, 0x1ecc}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x4d3a98ab47306390}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40844}, 0x4000010) 931.269129ms ago: executing program 6 (id=3889): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 855.285927ms ago: executing program 4 (id=3890): ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000000)={0x5, "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"}) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3400000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000700000000040014001a80100004800c0005800800"], 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x0) 728.219457ms ago: executing program 0 (id=3891): r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source\x00', &(0x7f0000000080)='127.0.0.1:/export_path_with_very_long_name_to_increase_xdr_payload_length\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='mountaddr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='mountproto\x00', &(0x7f0000000280)='udp\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 607.678756ms ago: executing program 3 (id=3892): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000001940)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$FUSE_INIT(r0, &(0x7f0000002800)={0x50, 0x0, 0x0, {0x7, 0x2d, 0xc, 0x880, 0xbe, 0x9, 0xe, 0x5738, 0x0, 0x0, 0x20, 0x5}}, 0x50) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 607.576326ms ago: executing program 6 (id=3893): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff70) ioctl$TCXONC(r0, 0x540a, 0x2) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) 551.316659ms ago: executing program 4 (id=3894): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) ioctl$int_in(r0, 0x5452, &(0x7f0000000080)=0x2) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000040)=0x186, 0x4) 409.555903ms ago: executing program 0 (id=3895): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket(0x1a, 0xc0530f76dbf76697, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x10) 275.262435ms ago: executing program 4 (id=3896): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 250.452931ms ago: executing program 6 (id=3897): syz_usb_connect(0x2, 0x3f, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) 96.852788ms ago: executing program 3 (id=3898): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000100)=0x90c3ff, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x4533, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f0000000080)={0xa, 0x0, 0x2, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r0, 0x0, 0x0, 0x400121a2, 0x0, 0xfffffffffffffffd) 0s ago: executing program 4 (id=3899): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000072"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) kernel console output (not intermixed with test programs): from 0 to 1024 [ 149.188921][ T5785] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 149.263070][ T5785] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 149.374374][ T5785] BTRFS info (device loop0): using free space tree [ 149.520138][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.528269][ T4775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.536575][ T26] audit: type=1800 audit(1790311661.053:10): pid=5809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.448" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 149.579924][ T4775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.587942][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.643437][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 149.694529][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 149.941444][ T5785] BTRFS info (device loop0): enabling ssd optimizations [ 150.279031][ T5847] loop1: detected capacity change from 0 to 4096 [ 150.321116][ T5847] EXT4-fs: inline encryption not supported [ 150.381687][ T5847] EXT4-fs (loop1): Test dummy encryption mode enabled [ 150.426728][ T5847] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 150.461687][ T5847] System zones: 0-5 [ 150.499344][ T5847] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 150.565288][ T5847] EXT4-fs (loop1): shut down requested (0) [ 150.651364][ T5861] loop4: detected capacity change from 0 to 256 [ 150.749026][ T5861] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 150.820436][ T4281] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 150.869126][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 151.234409][ T5875] loop1: detected capacity change from 0 to 1024 [ 151.344833][ T5882] FAULT_INJECTION: forcing a failure. [ 151.344833][ T5882] name failslab, interval 1, probability 0, space 0, times 0 [ 151.413701][ T5882] CPU: 1 PID: 5882 Comm: syz.4.467 Not tainted syzkaller #0 [ 151.421702][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.431811][ T5882] Call Trace: [ 151.435124][ T5882] [ 151.438176][ T5882] dump_stack_lvl+0x188/0x24e [ 151.442909][ T5882] ? show_regs_print_info+0x12/0x12 [ 151.448316][ T5882] ? load_image+0x410/0x410 [ 151.452872][ T5882] ? __might_sleep+0xd0/0xd0 [ 151.457505][ T5882] ? __lock_acquire+0x7c40/0x7c40 [ 151.462585][ T5882] should_fail_ex+0x390/0x4c0 [ 151.467317][ T5882] should_failslab+0x5/0x20 [ 151.471852][ T5882] slab_pre_alloc_hook+0x59/0x300 [ 151.477273][ T5882] ? hugetlbfs_init_fs_context+0x4f/0x360 [ 151.483039][ T5882] __kmem_cache_alloc_node+0x4f/0x270 [ 151.488454][ T5882] ? hugetlbfs_init_fs_context+0x4f/0x360 [ 151.494223][ T5882] kmalloc_trace+0x26/0xe0 [ 151.498681][ T5882] hugetlbfs_init_fs_context+0x4f/0x360 [ 151.504274][ T5882] alloc_fs_context+0x628/0x7d0 [ 151.509267][ T5882] __se_sys_fsopen+0xa0/0x2c0 [ 151.513991][ T5882] do_syscall_64+0x4c/0xa0 [ 151.518458][ T5882] ? clear_bhb_loop+0x60/0xb0 [ 151.523281][ T5882] ? clear_bhb_loop+0x60/0xb0 [ 151.527999][ T5882] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 151.533947][ T5882] RIP: 0033:0x7f3b37f9e159 [ 151.538405][ T5882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.558232][ T5882] RSP: 002b:00007f3b38f47028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 151.566704][ T5882] RAX: ffffffffffffffda RBX: 00007f3b38225fa0 RCX: 00007f3b37f9e159 [ 151.574807][ T5882] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000040 [ 151.582822][ T5882] RBP: 00007f3b3803506b R08: 0000000000000000 R09: 0000000000000000 [ 151.590837][ T5882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.598874][ T5882] R13: 00007f3b38226038 R14: 00007f3b38225fa0 R15: 00007ffe6048e408 [ 151.606918][ T5882] [ 151.625411][ T26] audit: type=1800 audit(1790311663.143:11): pid=5875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.465" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 151.754136][ T4328] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 151.946406][ T4328] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 151.965455][ T4328] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.994079][ T4328] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 152.032555][ T4328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.180044][ T5902] netem: change failed [ 152.265212][ T4328] usb 4-1: usb_control_msg returned -32 [ 152.270929][ T4328] usbtmc 4-1:16.0: can't read capabilities [ 152.376384][ T5907] netlink: 28 bytes leftover after parsing attributes in process `syz.4.475'. [ 152.437410][ T5907] netlink: 28 bytes leftover after parsing attributes in process `syz.4.475'. [ 152.479350][ T5907] netlink: 28 bytes leftover after parsing attributes in process `syz.4.475'. [ 152.519236][ T4358] usb 4-1: USB disconnect, device number 8 [ 152.536223][ T5907] netlink: 28 bytes leftover after parsing attributes in process `syz.4.475'. [ 152.569950][ T5909] loop0: detected capacity change from 0 to 4096 [ 152.614846][ T5909] EXT4-fs: inline encryption not supported [ 152.653583][ T5909] EXT4-fs (loop0): Test dummy encryption mode enabled [ 152.726565][ T5909] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c1a8, mo2=0003] [ 152.746295][ T5909] System zones: 0-5 [ 152.767889][ T5909] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 152.793746][ T5909] EXT4-fs (loop0): shut down requested (0) [ 152.939493][ T4281] EXT4-fs (loop0): unmounting filesystem. [ 153.093670][ T5921] device syzkaller1 entered promiscuous mode [ 153.202176][ T5905] loop5: detected capacity change from 0 to 32768 [ 153.229754][ T5917] loop4: detected capacity change from 0 to 8192 [ 153.288655][ T5905] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.474 (5905) [ 153.339065][ T5905] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 153.354353][ T5917] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 153.371516][ T5905] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 153.394294][ T5905] BTRFS info (device loop5): using free space tree [ 153.446658][ T5917] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 153.484180][ T5917] REISERFS (device loop4): using ordered data mode [ 153.490837][ T5917] reiserfs: using flush barriers [ 153.514389][ T5917] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 153.584745][ T5917] REISERFS (device loop4): checking transaction log (loop4) [ 153.609299][ T5905] BTRFS info (device loop5): enabling ssd optimizations [ 153.873033][ T5917] REISERFS (device loop4): Using tea hash to sort names [ 153.903655][ T5917] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 154.089639][ T4291] block nbd3: Receive control failed (result -32) [ 154.100376][ T5924] block nbd3: shutting down sockets [ 154.530520][ T5465] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 155.086647][ T4972] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop5 scanned by udevd (4972) [ 155.149625][ T5983] 9pnet: p9_errstr2errno: server reported unknown error @c18446744073709551615 [ 155.404490][ T125] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 155.609647][ T125] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 155.634605][ T125] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.709137][ T125] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 155.742085][ T125] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.055333][ T5999] loop1: detected capacity change from 0 to 32768 [ 156.059613][ T125] usb 1-1: usb_control_msg returned -32 [ 156.089731][ T5999] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 156.094092][ T125] usbtmc 1-1:16.0: can't read capabilities [ 156.098480][ T5999] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 156.136982][ T5999] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 156.149693][ T4358] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 156.157997][ T4358] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 156.216097][ T4358] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 58ms [ 156.235174][ T4358] gfs2: fsid=syz:syz.0: jid=0: Done [ 156.242740][ T5999] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 156.441904][ T4328] usb 1-1: USB disconnect, device number 6 [ 156.470616][ T5999] gfs2: fsid=syz:syz.0: found 1 quota changes [ 156.738078][ T4272] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 156.738078][ T4272] inode = 11 2339 [ 156.738078][ T4272] function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 413 [ 156.782195][ T4272] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 156.812827][ T4272] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:4272 [syz-executor] gfs2_quota_sync+0x355/0x780 [ 156.848328][ T4272] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 156.865783][ T4272] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 156.915051][ T4272] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 156.935235][ T4272] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 156.976370][ T4272] gfs2: fsid=syz:syz.0: File system withdrawn [ 157.000661][ T4272] CPU: 0 PID: 4272 Comm: syz-executor Not tainted syzkaller #0 [ 157.008287][ T4272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.018382][ T4272] Call Trace: [ 157.021701][ T4272] [ 157.024809][ T4272] dump_stack_lvl+0x188/0x24e [ 157.029545][ T4272] ? show_regs_print_info+0x12/0x12 [ 157.034964][ T4272] ? load_image+0x410/0x410 [ 157.039743][ T4272] ? kobject_uevent_env+0x364/0x890 [ 157.045276][ T4272] gfs2_withdraw+0xc69/0x1450 [ 157.050037][ T4272] ? gfs2_lm+0x240/0x240 [ 157.054360][ T4272] ? gfs2_consist_inode_i+0xf1/0x110 [ 157.059710][ T4272] gfs2_inode_refresh+0xb2d/0x1190 [ 157.064881][ T4272] ? gfs2_inode_metasync+0xf0/0xf0 [ 157.070135][ T4272] ? gfs2_glock_nq+0xcee/0x14d0 [ 157.075044][ T4272] gfs2_instantiate+0x15e/0x210 [ 157.079952][ T4272] gfs2_glock_wait+0x1d0/0x2a0 [ 157.084772][ T4272] do_sync+0x4af/0xbb0 [ 157.088884][ T4272] ? gfs2_quota_sync+0x355/0x780 [ 157.093877][ T4272] ? slot_put+0x1e0/0x1e0 [ 157.098255][ T4272] ? __lock_acquire+0x7c40/0x7c40 [ 157.103341][ T4272] ? do_raw_spin_lock+0x128/0x2f0 [ 157.108421][ T4272] ? gfs2_quota_sync+0x355/0x780 [ 157.113668][ T4272] ? do_raw_spin_unlock+0x11d/0x230 [ 157.119016][ T4272] gfs2_quota_sync+0x355/0x780 [ 157.123844][ T4272] gfs2_sync_fs+0x48/0xb0 [ 157.128224][ T4272] sync_filesystem+0xe6/0x220 [ 157.132953][ T4272] generic_shutdown_super+0x6b/0x340 [ 157.138289][ T4272] kill_block_super+0x7c/0xe0 [ 157.143009][ T4272] deactivate_locked_super+0x93/0xf0 [ 157.148337][ T4272] cleanup_mnt+0x471/0x4f0 [ 157.152897][ T4272] task_work_run+0x1d0/0x260 [ 157.157545][ T4272] ? task_work_cancel+0x220/0x220 [ 157.162636][ T4272] ? exit_to_user_mode_loop+0x3b/0x110 [ 157.168190][ T4272] exit_to_user_mode_loop+0xe6/0x110 [ 157.173531][ T4272] exit_to_user_mode_prepare+0xee/0x180 [ 157.179132][ T4272] syscall_exit_to_user_mode+0x16/0x40 [ 157.184643][ T4272] do_syscall_64+0x58/0xa0 [ 157.189108][ T4272] ? clear_bhb_loop+0x60/0xb0 [ 157.193823][ T4272] ? clear_bhb_loop+0x60/0xb0 [ 157.198542][ T4272] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.204485][ T4272] RIP: 0033:0x7f257d79f397 [ 157.208935][ T4272] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 157.228747][ T4272] RSP: 002b:00007ffdbc7fce98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 157.237216][ T4272] RAX: 0000000000000000 RBX: 00007f257d8344bb RCX: 00007f257d79f397 [ 157.245321][ T4272] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdbc7fcf50 [ 157.253360][ T4272] RBP: 00007ffdbc7fcf50 R08: 00007ffdbc7fdf50 R09: 00000000ffffffff [ 157.261388][ T4272] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdbc7fdfe0 [ 157.269405][ T4272] R13: 00007f257d8344bb R14: 00000000000263aa R15: 00007ffdbc7fe020 [ 157.277446][ T4272] [ 157.515466][ T6010] loop4: detected capacity change from 0 to 32768 [ 157.524644][ T4272] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485 [ 157.567581][ T6010] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 157.573013][ T4272] CPU: 1 PID: 4272 Comm: syz-executor Not tainted syzkaller #0 [ 157.586139][ T4272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 157.596238][ T4272] Call Trace: [ 157.599546][ T4272] [ 157.602508][ T4272] dump_stack_lvl+0x188/0x24e [ 157.607228][ T4272] ? gfs2_assert_warn_i+0xbb/0x2c0 [ 157.612472][ T4272] ? show_regs_print_info+0x12/0x12 [ 157.617806][ T4272] ? load_image+0x410/0x410 [ 157.622374][ T4272] ? do_raw_spin_unlock+0x11d/0x230 [ 157.627629][ T4272] gfs2_assert_warn_i+0x187/0x2c0 [ 157.632886][ T4272] gfs2_quota_cleanup+0x48c/0x670 [ 157.638139][ T4272] gfs2_put_super+0x22f/0x920 [ 157.642966][ T4272] ? gfs2_evict_inode+0x1290/0x1290 [ 157.648397][ T4272] generic_shutdown_super+0x130/0x340 [ 157.653816][ T4272] kill_block_super+0x7c/0xe0 [ 157.658553][ T4272] deactivate_locked_super+0x93/0xf0 [ 157.663888][ T4272] cleanup_mnt+0x471/0x4f0 [ 157.668343][ T4272] task_work_run+0x1d0/0x260 [ 157.672986][ T4272] ? task_work_cancel+0x220/0x220 [ 157.678072][ T4272] ? exit_to_user_mode_loop+0x3b/0x110 [ 157.683586][ T4272] exit_to_user_mode_loop+0xe6/0x110 [ 157.689096][ T4272] exit_to_user_mode_prepare+0xee/0x180 [ 157.694721][ T4272] syscall_exit_to_user_mode+0x16/0x40 [ 157.700229][ T4272] do_syscall_64+0x58/0xa0 [ 157.704697][ T4272] ? clear_bhb_loop+0x60/0xb0 [ 157.709415][ T4272] ? clear_bhb_loop+0x60/0xb0 [ 157.714138][ T4272] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 157.720083][ T4272] RIP: 0033:0x7f257d79f397 [ 157.724885][ T4272] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 157.744541][ T4272] RSP: 002b:00007ffdbc7fce98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 157.753362][ T4272] RAX: 0000000000000000 RBX: 00007f257d8344bb RCX: 00007f257d79f397 [ 157.761375][ T4272] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdbc7fcf50 [ 157.769400][ T4272] RBP: 00007ffdbc7fcf50 R08: 00007ffdbc7fdf50 R09: 00000000ffffffff [ 157.777415][ T4272] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdbc7fdfe0 [ 157.785424][ T4272] R13: 00007f257d8344bb R14: 00000000000263aa R15: 00007ffdbc7fe020 [ 157.793536][ T4272] [ 157.878136][ T4972] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 159.604220][ T4480] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 159.708159][ T6046] loop0: detected capacity change from 0 to 40427 [ 159.756673][ T6046] F2FS-fs (loop0): Invalid log blocks per segment (1) [ 159.776056][ T6046] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 159.798753][ T6046] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x35f7 [ 159.818960][ T6046] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x3ffff [ 159.822963][ T4480] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 159.842022][ T6046] F2FS-fs (loop0): invalid crc value [ 159.870044][ T6046] F2FS-fs (loop0): Found nat_bits in checkpoint [ 159.875027][ T4480] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 159.922720][ T4480] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 159.981116][ T4480] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 160.052499][ T4480] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 160.055768][ T6046] F2FS-fs (loop0): Start checkpoint disabled! [ 160.082301][ T4480] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.112718][ T4480] usb 5-1: Product: syz [ 160.125803][ T4480] usb 5-1: Manufacturer: syz [ 160.130467][ T4480] usb 5-1: SerialNumber: syz [ 160.150084][ T6046] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 160.158191][ T6067] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 160.177708][ T6046] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 160.188591][ T4480] cdc_mbim 5-1:1.0: skipping garbage [ 160.371653][ T26] audit: type=1800 audit(1790311671.883:12): pid=6046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.512" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 160.430085][ T6046] syz.0.512: attempt to access beyond end of device [ 160.430085][ T6046] loop0: rw=2049, sector=45096, nr_sectors = 128 limit=40427 [ 160.433143][ T6067] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 160.472750][ T26] audit: type=1800 audit(1790311671.923:13): pid=6046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.512" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 160.515780][ T6067] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 160.544428][ T6046] F2FS-fs (loop0) : inject write IO error in f2fs_write_end_io of __submit_merged_bio+0x290/0x6c0 [ 160.855105][ T4304] kworker/u4:6: attempt to access beyond end of device [ 160.855105][ T4304] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 161.237939][ T6067] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 161.253657][ T6067] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 161.284587][ T4480] cdc_mbim 5-1:1.0: setting rx_max = 16384 [ 161.496081][ T4480] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 161.628497][ T4480] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 06:3b:23:c8:f4:c2 [ 161.707785][ T4480] usb 5-1: USB disconnect, device number 6 [ 161.730189][ T4480] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 162.624826][ T6129] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 162.714130][ T1192] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 162.783012][ T6126] loop0: detected capacity change from 0 to 32768 [ 162.904136][ T1192] usb 4-1: Using ep0 maxpacket: 16 [ 162.915977][ T1192] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.934413][ T1192] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.957573][ T1192] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 162.967668][ T1192] usb 4-1: SerialNumber: syz [ 162.987303][ T1192] hub 4-1:1.0: bad descriptor, ignoring hub [ 163.031253][ T1192] hub: probe of 4-1:1.0 failed with error -5 [ 163.504225][ T1192] usb 4-1: reset high-speed USB device number 9 using dummy_hcd [ 163.562671][ T125] smpboot: CPU 1 is now offline [ 163.767121][ T6152] x86: Booting SMP configuration: [ 163.811235][ T6152] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 164.067497][ T4480] usb 4-1: USB disconnect, device number 9 [ 164.352636][ T6162] loop5: detected capacity change from 0 to 4096 [ 164.514202][ T4480] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 164.554541][ T6173] x86/PAT: syz.4.557:6173 freeing invalid memtype [mem 0xfe004000-0xfe004fff] [ 164.714342][ T4480] usb 2-1: Using ep0 maxpacket: 32 [ 164.721480][ T4480] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 164.770997][ T4480] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 164.814219][ T4480] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 164.867856][ T4480] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 164.917907][ T4480] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 164.973615][ T4480] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 165.027517][ T4480] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 165.077370][ T4480] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.116023][ T4480] usb 2-1: config 0 descriptor?? [ 165.227978][ T6191] gadgetfs: bound to dummy_udc driver [ 165.342152][ T6194] loop5: detected capacity change from 0 to 512 [ 165.366306][ T4480] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 165.418583][ T6194] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 165.507399][ T6194] EXT4-fs (loop5): 1 truncate cleaned up [ 165.533542][ T6194] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 165.649389][ C0] usblp0: nonzero read bulk status received: -71 [ 165.656848][ T4480] usb 2-1: USB disconnect, device number 10 [ 165.797214][ T5465] EXT4-fs (loop5): unmounting filesystem. [ 165.866670][ T6160] usblp0: removed [ 166.595584][ T6204] loop5: detected capacity change from 0 to 32768 [ 166.611806][ T6207] loop3: detected capacity change from 0 to 32768 [ 166.641516][ T6204] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.575 (6204) [ 166.686129][ T6204] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 166.700177][ T6204] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 166.710048][ T6204] BTRFS info (device loop5): setting nodatasum [ 166.717025][ T6204] BTRFS info (device loop5): force zlib compression, level 3 [ 166.727157][ T6204] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 166.738734][ T6204] BTRFS info (device loop5): use lzo compression, level 0 [ 166.746167][ T6204] BTRFS info (device loop5): turning on flush-on-commit [ 166.753575][ T6204] BTRFS info (device loop5): enabling auto defrag [ 166.753901][ T6207] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 166.769737][ T6204] BTRFS info (device loop5): max_inline at 4096 [ 166.776155][ T6204] BTRFS info (device loop5): using free space tree [ 166.907349][ T4283] ocfs2: Unmounting device (7,3) on (node local) [ 167.202969][ T6204] BTRFS info (device loop5): enabling ssd optimizations [ 167.334971][ T26] audit: type=1800 audit(1790311678.853:14): pid=6204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.575" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 168.095828][ T5465] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 168.147029][ T6235] loop3: detected capacity change from 0 to 32768 [ 168.681710][ T6235] XFS (loop3): Mounting V5 Filesystem [ 168.814638][ T6235] XFS (loop3): Ending clean mount [ 168.996410][ T26] audit: type=1800 audit(1790311680.513:15): pid=6271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.566" name="file1" dev="loop3" ino=4422 res=0 errno=0 [ 169.014332][ T6270] loop1: detected capacity change from 0 to 2048 [ 169.212122][ T6276] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 169.260587][ T4283] XFS (loop3): Unmounting Filesystem [ 169.343528][ T6277] NILFS error (device loop1): nilfs_readdir: zero-length directory entry [ 169.403805][ T6270] NILFS (loop1): error -2 truncating bmap (ino=16) [ 169.442716][ T6277] Remounting filesystem read-only [ 169.592167][ T4272] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 169.644135][ T125] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 169.658065][ T6286] loop4: detected capacity change from 0 to 512 [ 169.684303][ T4322] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 169.820522][ T6286] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.582: invalid indirect mapped block 256 (level 2) [ 169.844120][ T125] usb 6-1: Using ep0 maxpacket: 8 [ 169.851539][ T125] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 169.884402][ T4322] usb 1-1: Using ep0 maxpacket: 32 [ 169.892969][ T4322] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 169.918357][ T125] usb 6-1: config 0 has no interface number 0 [ 169.938503][ T125] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 169.953467][ T6286] EXT4-fs (loop4): 2 truncates cleaned up [ 169.965320][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.981243][ T6286] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 169.997094][ T125] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 170.017930][ T4322] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 170.036942][ T125] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.063831][ T125] usb 6-1: config 0 descriptor?? [ 170.111114][ T125] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 170.244281][ T6290] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 170.402332][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 170.629518][ T6311] device hsr0 entered promiscuous mode [ 170.657612][ T6311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.585'. [ 170.699919][ T6311] device hsr_slave_0 left promiscuous mode [ 170.726769][ T6311] device hsr_slave_1 left promiscuous mode [ 170.858468][ T6311] device hsr0 left promiscuous mode [ 171.038657][ T4322] gspca_nw80x: reg_w err -71 [ 171.044654][ T4322] nw80x: probe of 1-1:3.0 failed with error -71 [ 171.074330][ T4322] usb 1-1: USB disconnect, device number 7 [ 171.459902][ T4322] usb 6-1: USB disconnect, device number 2 [ 171.601190][ T6305] loop1: detected capacity change from 0 to 32768 [ 171.672825][ T6305] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 171.743811][ T6305] JBD2: Ignoring recovery information on journal [ 171.840606][ T6337] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 171.946083][ T6305] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 172.454494][ T4272] ocfs2: Unmounting device (7,1) on (node local) [ 172.690132][ T6362] netlink: 80 bytes leftover after parsing attributes in process `syz.4.599'. [ 172.884122][ T4322] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 173.086034][ T4322] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 173.114105][ T4322] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.159452][ T4322] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 173.207355][ T4322] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.271438][ T4322] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 173.321798][ T4322] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 173.352267][ T4322] usb 6-1: Product: syz [ 173.368950][ T4322] usb 6-1: Manufacturer: syz [ 173.415404][ T4322] cdc_wdm 6-1:1.0: skipping garbage [ 173.444099][ T4322] cdc_wdm 6-1:1.0: skipping garbage [ 173.474407][ T4322] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 173.507694][ T4322] cdc_wdm 6-1:1.0: Unknown control protocol [ 173.638964][ T6378] delete_channel: no stack [ 173.654960][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 173.661833][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 173.669020][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 173.675659][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 173.684154][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 173.690808][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 173.697135][ T4322] usb 6-1: USB disconnect, device number 3 [ 173.710274][ T6394] loop3: detected capacity change from 0 to 512 [ 173.732955][ T6398] loop4: detected capacity change from 0 to 128 [ 173.752314][ T6398] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 173.765357][ T6398] hpfs: filesystem error: improperly stopped [ 173.771406][ T6398] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 173.781431][ T6394] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8806c118, mo2=0002] [ 173.790642][ T6398] hpfs: You really don't want any checks? You are crazy... [ 173.809236][ T6394] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 173.824851][ T6398] hpfs: Code page index out of array [ 173.830569][ T6394] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 173.839444][ T6398] hpfs: code page support is disabled [ 173.854980][ T6398] hpfs: hpfs_map_4sectors(): unaligned read [ 173.867561][ T6394] EXT4-fs (loop3): 1 truncate cleaned up [ 173.888404][ T6398] hpfs: hpfs_map_4sectors(): unaligned read [ 173.894860][ T6394] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 173.905693][ T6398] hpfs: filesystem error: unable to find root dir [ 173.974095][ T4473] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 174.025474][ T6394] System zones: 1-12 [ 174.053141][ T6394] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 174.210725][ T4473] usb 1-1: unable to get BOS descriptor or descriptor too short [ 174.220932][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 174.233050][ T4473] usb 1-1: no configurations [ 174.245466][ T4473] usb 1-1: can't read configurations, error -22 [ 175.051398][ T6436] loop4: detected capacity change from 0 to 256 [ 175.142844][ T4972] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 175.746410][ T6454] Invalid argument reading file caps for ./file0 [ 176.146319][ T6465] loop4: detected capacity change from 0 to 8 [ 176.531578][ T6479] loop1: detected capacity change from 0 to 1024 [ 176.612911][ T6479] EXT4-fs: Ignoring removed nomblk_io_submit option [ 176.787852][ T6479] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 176.880072][ T26] audit: type=1800 audit(1790311688.393:16): pid=6479 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.633" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 176.882132][ T6479] EXT4-fs (loop1): shut down requested (0) [ 177.296988][ T6510] loop5: detected capacity change from 0 to 16 [ 177.362150][ T6510] erofs: (device loop5): mounted with root inode @ nid 36. [ 177.450212][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 177.524888][ T6513] loop3: detected capacity change from 0 to 1024 [ 177.568810][ T6513] EXT4-fs: Ignoring removed orlov option [ 177.651904][ T6518] loop4: detected capacity change from 0 to 2048 [ 177.666704][ T6513] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 177.841668][ T6518] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 178.178018][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 178.232555][ T4271] EXT4-fs (loop4): unmounting filesystem. [ 179.640060][ T6551] loop1: detected capacity change from 0 to 131072 [ 179.664501][ T6551] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0) [ 179.672775][ T6551] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 179.681854][ T6551] F2FS-fs (loop1): invalid crc value [ 179.739602][ T6551] F2FS-fs (loop1): Found nat_bits in checkpoint [ 179.890293][ T6551] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 179.897614][ T6551] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 180.104220][ T4473] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 180.287675][ T6593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.660'. [ 180.306141][ T4473] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 180.323937][ T4473] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 180.340012][ T6593] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 180.356146][ T4473] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 180.409532][ T4473] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 180.442198][ T4473] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 180.482569][ T4473] usb 4-1: Product: syz [ 180.495777][ T4473] usb 4-1: Manufacturer: syz [ 180.510628][ T4473] usb 4-1: SerialNumber: syz [ 180.751206][ T4473] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 180.966239][ T4473] usb 4-1: USB disconnect, device number 10 [ 180.984156][ T4475] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 180.996757][ T4473] usblp0: removed [ 181.185822][ T4475] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 181.214785][ T4475] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 181.244155][ T4475] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 181.265136][ T4475] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.286172][ T6599] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 181.434155][ T4473] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 181.542853][ T26] audit: type=1326 audit(1790311693.053:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.668" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b37f9e159 code=0x7ffc0000 [ 181.610028][ T26] audit: type=1326 audit(1790311693.063:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.668" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f3b37f9e159 code=0x7ffc0000 [ 181.613463][ T4475] usb 1-1: USB disconnect, device number 10 [ 181.642894][ T4473] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 181.654346][ T26] audit: type=1326 audit(1790311693.063:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.668" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b37f9e159 code=0x7ffc0000 [ 181.674182][ T4473] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 181.689158][ T26] audit: type=1326 audit(1790311693.063:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.668" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b37f9e159 code=0x7ffc0000 [ 181.717512][ T4473] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 181.727192][ T26] audit: type=1326 audit(1790311693.073:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.668" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f3b37f9e159 code=0x7ffc0000 [ 181.744081][ T4473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.762278][ T26] audit: type=1326 audit(1790311693.083:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.668" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b37f9e159 code=0x7ffc0000 [ 181.795940][ T26] audit: type=1326 audit(1790311693.093:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.668" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f3b37f9e159 code=0x7ffc0000 [ 181.836765][ T6605] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 181.882095][ T26] audit: type=1326 audit(1790311693.103:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.668" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b37f9e159 code=0x7ffc0000 [ 181.913033][ T26] audit: type=1326 audit(1790311693.103:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.668" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b37f9e159 code=0x7ffc0000 [ 181.947132][ T26] audit: type=1326 audit(1790311693.103:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.668" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7f3b37f9e159 code=0x7ffc0000 [ 182.009812][ T26] audit: type=1326 audit(1790311693.103:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.668" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b37f9e159 code=0x7ffc0000 [ 182.017537][ T6619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.671'. [ 182.049755][ T26] audit: type=1326 audit(1790311693.103:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6612 comm="syz.4.668" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b37f9e159 code=0x7ffc0000 [ 182.143203][ T6619] netlink: 8 bytes leftover after parsing attributes in process `syz.3.671'. [ 182.174830][ T4475] usb 6-1: USB disconnect, device number 4 [ 182.352591][ T6623] netlink: 'syz.4.673': attribute type 34 has an invalid length. [ 182.430413][ T6625] netlink: 20 bytes leftover after parsing attributes in process `syz.1.674'. [ 182.677621][ T6632] loop9: detected capacity change from 0 to 7 [ 182.724852][ T6632] Dev loop9: unable to read RDB block 7 [ 182.751174][ T6632] loop9: unable to read partition table [ 182.768254][ T6632] loop9: partition table beyond EOD, truncated [ 182.788299][ T6632] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 183.531593][ T6650] loop4: detected capacity change from 0 to 512 [ 183.601370][ T6650] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 183.644326][ T6650] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 183.714142][ T6650] EXT4-fs (loop4): group descriptors corrupted! [ 183.778296][ T6656] loop1: detected capacity change from 0 to 8 [ 184.221652][ T6671] loop3: detected capacity change from 0 to 128 [ 184.258166][ T6671] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 184.286745][ T6671] hpfs: filesystem error: improperly stopped [ 184.310021][ T6671] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 184.327209][ T6671] hpfs: You really don't want any checks? You are crazy... [ 184.335469][ T6671] hpfs: hpfs_map_sector(): read error [ 184.350607][ T6671] hpfs: code page support is disabled [ 184.364967][ T6671] hpfs: hpfs_map_4sectors(): unaligned read [ 184.377345][ T6671] hpfs: hpfs_map_4sectors(): unaligned read [ 184.391784][ T6671] hpfs: filesystem error: unable to find root dir [ 184.442749][ T6671] hpfs: hpfs_map_4sectors(): unaligned read [ 184.458877][ T6671] hpfs: hpfs_map_sector(): read error [ 184.474317][ T4322] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 184.687343][ T4322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.710273][ T4322] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.732599][ T4322] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 184.767190][ T4322] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 184.786654][ T4322] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.809276][ T4322] usb 5-1: config 0 descriptor?? [ 184.862209][ T6661] all (unregistering): Released all slaves [ 185.040294][ T6673] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input12 [ 185.239005][ T4322] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 185.300894][ T4322] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 186.074698][ T6675] loop1: detected capacity change from 0 to 32768 [ 186.176890][ T6675] JBD2: Ignoring recovery information on journal [ 186.384743][ T6698] autofs4:pid:6698:autofs_fill_super: could not open pipe file descriptor [ 186.430287][ T6675] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 186.815801][ T4272] ocfs2: Unmounting device (7,1) on (node local) [ 186.851874][ T6693] loop5: detected capacity change from 0 to 32768 [ 187.425099][ T4475] usb 5-1: USB disconnect, device number 7 [ 187.711099][ T6722] device ipvlan2 entered promiscuous mode [ 187.760608][ T6722] team0: Device ipvlan2 failed to register rx_handler [ 187.844111][ T4322] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 188.036621][ T4322] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 188.054741][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.086484][ T4322] usb 1-1: config 0 descriptor?? [ 188.108499][ T4322] cp210x 1-1:0.0: cp210x converter detected [ 188.310297][ T4322] usb 1-1: cp210x converter now attached to ttyUSB0 [ 188.521601][ T4322] usb 1-1: USB disconnect, device number 11 [ 188.550853][ T4322] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 188.583549][ T4322] cp210x 1-1:0.0: device disconnected [ 188.705636][ T6748] netlink: 104 bytes leftover after parsing attributes in process `syz.3.740'. [ 188.843550][ T6754] netlink: 4 bytes leftover after parsing attributes in process `syz.4.731'. [ 189.151578][ T6759] Bluetooth: MGMT ver 1.22 [ 189.201355][ T4322] input: syz0 as /devices/virtual/misc/uhid/0005:FFFD057E:0305.000D/input/input13 [ 189.255158][ T4322] hid-generic 0005:FFFD057E:0305.000D: input,hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 189.514139][ T4475] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 189.679860][ T6773] FAULT_INJECTION: forcing a failure. [ 189.679860][ T6773] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 189.720303][ T4475] usb 5-1: unable to get BOS descriptor or descriptor too short [ 189.764827][ T4475] usb 5-1: no configurations [ 189.769568][ T4475] usb 5-1: can't read configurations, error -22 [ 189.793119][ T6773] CPU: 0 PID: 6773 Comm: syz.1.738 Not tainted syzkaller #0 [ 189.800470][ T6773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 189.810634][ T6773] Call Trace: [ 189.813912][ T6773] [ 189.816842][ T6773] dump_stack_lvl+0x188/0x24e [ 189.821522][ T6773] ? show_regs_print_info+0x12/0x12 [ 189.826896][ T6773] ? load_image+0x410/0x410 [ 189.831412][ T6773] ? __lock_acquire+0x7c40/0x7c40 [ 189.836457][ T6773] ? __schedule+0x1087/0x4030 [ 189.841180][ T6773] should_fail_ex+0x390/0x4c0 [ 189.845892][ T6773] prepare_alloc_pages+0x1e1/0x5b0 [ 189.851012][ T6773] __alloc_pages+0x130/0x4f0 [ 189.855603][ T6773] ? zone_statistics+0x170/0x170 [ 189.860559][ T6773] ? __lock_acquire+0x7c40/0x7c40 [ 189.865611][ T6773] pte_alloc_one+0x7b/0x310 [ 189.870132][ T6773] ? pfn_modify_allowed+0x560/0x560 [ 189.875335][ T6773] ? count_memcg_event_mm+0x36b/0x3c0 [ 189.880701][ T6773] ? __lock_acquire+0x7c40/0x7c40 [ 189.885821][ T6773] ? count_memcg_event_mm+0x8a/0x3c0 [ 189.891134][ T6773] ? put_page+0x270/0x270 [ 189.895478][ T6773] __pte_alloc+0x21/0x150 [ 189.899921][ T6773] handle_mm_fault+0x34b1/0x3d40 [ 189.904880][ T6773] ? mt_find+0x157/0x830 [ 189.909159][ T6773] ? numa_migrate_prep+0x250/0x250 [ 189.914287][ T6773] ? lock_chain_count+0x20/0x20 [ 189.919160][ T6773] ? lock_mm_and_find_vma+0xae/0x2f0 [ 189.924463][ T6773] do_user_addr_fault+0x58e/0xb20 [ 189.929517][ T6773] exc_page_fault+0x60/0x100 [ 189.934125][ T6773] ? clear_bhb_loop+0x60/0xb0 [ 189.938857][ T6773] asm_exc_page_fault+0x22/0x30 [ 189.943888][ T6773] RIP: 0033:0x7f257d6571b6 [ 189.948319][ T6773] Code: 24 50 4c 8b 4c 24 58 4c 8b 6c 24 50 48 89 4c 24 30 48 8d 0d dc da 1a 00 48 29 ca 44 89 4c 24 24 49 8d bd 00 10 00 00 4c 89 e9 <49> c7 45 10 ff 03 00 00 49 89 7d 08 45 89 fd 4d 89 e7 49 89 cc 48 [ 189.968024][ T6773] RSP: 002b:00007f257e65ff60 EFLAGS: 00010206 [ 189.974107][ T6773] RAX: 0000000000000020 RBX: 0000000000000000 RCX: 0000200000c00000 [ 189.982087][ T6773] RDX: 00000000000025f5 RSI: 0000200000c00000 RDI: 0000200000c01000 [ 189.990069][ T6773] RBP: 00007f257d854760 R08: 0000000000000000 R09: 0000000000000003 [ 189.998071][ T6773] R10: 0000000000000003 R11: 0000000000000000 R12: 00000000003ff000 [ 190.006076][ T6773] R13: 0000200000c00000 R14: 00007f257da25fa0 R15: 0000000000000000 [ 190.014172][ T6773] [ 190.116705][ T6777] netlink: 'syz.3.742': attribute type 10 has an invalid length. [ 190.144116][ T6777] netlink: 152 bytes leftover after parsing attributes in process `syz.3.742'. [ 190.340650][ T6779] loop3: detected capacity change from 0 to 2048 [ 190.402194][ T6781] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 190.467519][ T6781] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 190.497930][ T6781] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 190.537115][ T6781] Remounting filesystem read-only [ 190.666218][ T4283] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 190.777079][ T6775] loop5: detected capacity change from 0 to 32768 [ 190.832645][ T6775] XFS (loop5): Mounting V5 Filesystem [ 190.889455][ T6773] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 191.012463][ T6775] XFS (loop5): Ending clean mount [ 191.085235][ T6775] XFS (loop5): Quotacheck needed: Please wait. [ 191.233563][ T6775] XFS (loop5): Quotacheck: Done. [ 191.382904][ T6805] loop3: detected capacity change from 0 to 512 [ 191.405154][ T6805] EXT4-fs: Ignoring removed bh option [ 191.439540][ T6805] EXT4-fs: Ignoring removed mblk_io_submit option [ 191.458380][ T6775] XFS (loop5): User initiated shutdown received. [ 191.495584][ T6805] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 191.508618][ T6775] XFS (loop5): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 191.547365][ T6775] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 191.557475][ T6805] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 191.579363][ T6805] EXT4-fs (loop3): orphan cleanup on readonly fs [ 191.647185][ T6805] Quota error (device loop3): do_insert_tree: Free block already used in tree: block 4 [ 191.729841][ T6805] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 191.755483][ T6813] loop1: detected capacity change from 0 to 2048 [ 191.774966][ T6805] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.751: Failed to acquire dquot type 1 [ 191.804922][ T5465] XFS (loop5): Unmounting Filesystem [ 191.834548][ T6805] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:477: comm syz.3.751: Invalid block bitmap block 0 in block_group 0 [ 191.905156][ T6813] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 191.934447][ T6805] Quota error (device loop3): write_blk: dquota write failed [ 191.966702][ T6821] tipc: Started in network mode [ 191.972161][ T6805] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 192.016621][ T26] audit: type=1800 audit(1790311703.533:29): pid=6813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.764" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 192.017410][ T6821] tipc: Node identity 00002d003a2d003a0040ffffe0000001, cluster identity 4711 [ 192.064203][ T6805] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.751: Failed to acquire dquot type 1 [ 192.126263][ T6805] Quota error (device loop3): write_blk: dquota write failed [ 192.154622][ T6805] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 192.183430][ T6821] tipc: Enabling of bearer rejected, failed to enable media [ 192.196593][ T6805] EXT4-fs error (device loop3): ext4_acquire_dquot:6841: comm syz.3.751: Failed to acquire dquot type 1 [ 192.210459][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 192.295774][ T6805] EXT4-fs (loop3): 1 orphan inode deleted [ 192.345320][ T6805] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 192.423552][ T6828] loop1: detected capacity change from 0 to 256 [ 192.473931][ T6828] exFAT-fs (loop1): error, invalid access to FAT bad cluster (entry 0x00000005) [ 192.515009][ T6828] exFAT-fs (loop1): failed to load upcase table [ 192.543205][ T6828] exFAT-fs (loop1): failed to recognize exfat type [ 192.674984][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 192.823347][ T6839] loop1: detected capacity change from 0 to 128 [ 192.862299][ T6839] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 192.887690][ T6839] System zones: 1-3, 19-19, 35-36 [ 192.909549][ T6839] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 192.922131][ T6839] ext4 filesystem being mounted at /144/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 193.038554][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 193.051436][ T4473] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 193.244103][ T4473] usb 5-1: Using ep0 maxpacket: 16 [ 193.253407][ T4473] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 193.294486][ T4473] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.302738][ T4473] usb 5-1: Product: syz [ 193.341301][ T4473] usb 5-1: Manufacturer: syz [ 193.359801][ T4473] usb 5-1: SerialNumber: syz [ 193.387369][ T4473] usb 5-1: config 0 descriptor?? [ 193.407630][ T4473] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 193.445801][ T4473] usb 5-1: Detected FT-X [ 193.595037][ T6855] loop5: detected capacity change from 0 to 1024 [ 193.608411][ T4473] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 193.624404][ T4322] kernel read not supported for file /kmsg (pid: 4322 comm: kworker/0:5) [ 193.950021][ T6864] loop1: detected capacity change from 0 to 1024 [ 194.027170][ T4473] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 194.044749][ T6866] netlink: 24 bytes leftover after parsing attributes in process `syz.3.775'. [ 194.234252][ T4473] usb 5-1: USB disconnect, device number 10 [ 194.268972][ T4473] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 194.292270][ T6871] loop5: detected capacity change from 0 to 512 [ 194.338231][ T4473] ftdi_sio 5-1:0.0: device disconnected [ 194.356427][ T6871] EXT4-fs: Ignoring removed oldalloc option [ 194.417950][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.424534][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.476948][ T6871] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 194.572757][ T26] audit: type=1800 audit(1790311706.083:30): pid=6871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.777" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 194.746194][ T6886] FAULT_INJECTION: forcing a failure. [ 194.746194][ T6886] name failslab, interval 1, probability 0, space 0, times 0 [ 194.794152][ T6886] CPU: 0 PID: 6886 Comm: syz.0.782 Not tainted syzkaller #0 [ 194.801778][ T6886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 194.811872][ T6886] Call Trace: [ 194.815150][ T6886] [ 194.818074][ T6886] dump_stack_lvl+0x188/0x24e [ 194.822755][ T6886] ? show_regs_print_info+0x12/0x12 [ 194.827963][ T6886] ? load_image+0x410/0x410 [ 194.832471][ T6886] ? __might_sleep+0xd0/0xd0 [ 194.837150][ T6886] ? __lock_acquire+0x7c40/0x7c40 [ 194.842183][ T6886] should_fail_ex+0x390/0x4c0 [ 194.846871][ T6886] should_failslab+0x5/0x20 [ 194.851386][ T6886] slab_pre_alloc_hook+0x59/0x300 [ 194.856430][ T6886] kmem_cache_alloc_lru+0x49/0x2e0 [ 194.861548][ T6886] ? __d_alloc+0x2e/0x6e0 [ 194.865901][ T6886] __d_alloc+0x2e/0x6e0 [ 194.870075][ T6886] ? d_alloc_pseudo+0xe/0x70 [ 194.874701][ T6886] d_alloc_pseudo+0x19/0x70 [ 194.879221][ T6886] alloc_file_pseudo+0xe0/0x200 [ 194.884174][ T6886] ? alloc_empty_file_noaccount+0x80/0x80 [ 194.889905][ T6886] ? alloc_fd+0x590/0x640 [ 194.894250][ T6886] sock_alloc_file+0xb3/0x240 [ 194.898943][ T6886] __sys_socket+0x12d/0x190 [ 194.903478][ T6886] __x64_sys_socket+0x76/0x80 [ 194.908189][ T6886] do_syscall_64+0x4c/0xa0 [ 194.912616][ T6886] ? clear_bhb_loop+0x60/0xb0 [ 194.917303][ T6886] ? clear_bhb_loop+0x60/0xb0 [ 194.921988][ T6886] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.927912][ T6886] RIP: 0033:0x7fa00d19e159 [ 194.932481][ T6886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.952107][ T6886] RSP: 002b:00007fa00e0da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 194.960536][ T6886] RAX: ffffffffffffffda RBX: 00007fa00d425fa0 RCX: 00007fa00d19e159 [ 194.968517][ T6886] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 194.976495][ T6886] RBP: 00007fa00d23506b R08: 0000000000000000 R09: 0000000000000000 [ 194.984471][ T6886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.992457][ T6886] R13: 00007fa00d426038 R14: 00007fa00d425fa0 R15: 00007fffd8a6ca98 [ 195.000449][ T6886] [ 195.309275][ T5465] EXT4-fs (loop5): unmounting filesystem. [ 195.459933][ T6897] sctp: [Deprecated]: syz.1.785 (pid 6897) Use of int in maxseg socket option. [ 195.459933][ T6897] Use struct sctp_assoc_value instead [ 195.652069][ T6910] loop4: detected capacity change from 0 to 256 [ 195.734350][ T4972] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 196.174590][ T4473] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 196.374321][ T4473] usb 6-1: Using ep0 maxpacket: 8 [ 196.382760][ T4473] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 196.421296][ T4473] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 196.482585][ T4473] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.536210][ T4473] usb 6-1: config 0 interface 0 has no altsetting 0 [ 196.542979][ T4473] usb 6-1: New USB device found, idVendor=045e, idProduct=97ba, bcdDevice= 0.00 [ 196.602988][ T4473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.627837][ T4473] usb 6-1: config 0 descriptor?? [ 196.697973][ T6932] loop4: detected capacity change from 0 to 256 [ 196.715610][ T6932] exfat: Deprecated parameter 'utf8' [ 196.721022][ T6932] exfat: Deprecated parameter 'namecase' [ 196.742823][ T6932] exfat: Deprecated parameter 'namecase' [ 196.759277][ T6932] exfat: Deprecated parameter 'utf8' [ 196.775006][ T6932] exfat: Deprecated parameter 'namecase' [ 196.807001][ T6932] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0ab4ecf1, utbl_chksum : 0xe619d30d) [ 196.870138][ T6912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.894137][ T4322] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 196.901907][ T125] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 196.912303][ T6912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.094293][ T125] usb 1-1: Using ep0 maxpacket: 8 [ 197.106281][ T4322] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 197.116673][ T125] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 197.136937][ T4322] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.158533][ T4473] hid-generic 0003:045E:97BA.000E: unknown main item tag 0x0 [ 197.169087][ T125] usb 1-1: config 179 has no interface number 0 [ 197.186613][ T4473] hid-generic 0003:045E:97BA.000E: unknown main item tag 0x0 [ 197.196856][ T125] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 197.217386][ T4322] usb 4-1: New USB device found, idVendor=15a4, idProduct=9035, bcdDevice= 2.00 [ 197.227263][ T4473] hid-generic 0003:045E:97BA.000E: unknown main item tag 0x0 [ 197.254086][ T125] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 197.265763][ T4322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.274169][ T4473] hid-generic 0003:045E:97BA.000E: unknown main item tag 0x0 [ 197.301395][ T4473] hid-generic 0003:045E:97BA.000E: unknown main item tag 0x0 [ 197.309607][ T125] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 197.335150][ T6937] loop1: detected capacity change from 0 to 2048 [ 197.344139][ T4473] hid-generic 0003:045E:97BA.000E: unknown main item tag 0x0 [ 197.365206][ T125] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 197.378431][ T4473] hid-generic 0003:045E:97BA.000E: unknown main item tag 0x0 [ 197.404308][ T4473] hid-generic 0003:045E:97BA.000E: unknown main item tag 0x0 [ 197.413562][ T125] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 197.427322][ T6938] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 197.434173][ T4473] hid-generic 0003:045E:97BA.000E: unknown main item tag 0x0 [ 197.459860][ T125] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 197.483587][ T4473] hid-generic 0003:045E:97BA.000E: unbalanced collection at end of report description [ 197.502768][ T125] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.522263][ T4473] hid-generic: probe of 0003:045E:97BA.000E failed with error -22 [ 197.548535][ T6929] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 197.577272][ T4473] usb 6-1: USB disconnect, device number 5 [ 197.646371][ T125] kernel read not supported for file /usbmon9 (pid: 125 comm: kworker/0:2) [ 197.888068][ T4473] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input14 [ 198.253186][ T6948] loop1: detected capacity change from 0 to 1024 [ 198.267683][ T6951] netlink: 8 bytes leftover after parsing attributes in process `syz.5.806'. [ 198.291329][ T4473] usb 1-1: USB disconnect, device number 12 [ 198.291367][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 198.305626][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 198.316104][ T4473] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 198.328285][ T4322] dvb_usb_af9035 4-1:1.0: command=00 checksum mismatch (0102 != feff) [ 198.346809][ T4322] dvb_usb_af9035: probe of 4-1:1.0 failed with error -5 [ 198.368817][ T6951] netlink: 'syz.5.806': attribute type 20 has an invalid length. [ 198.417517][ T6951] netlink: 'syz.5.806': attribute type 21 has an invalid length. [ 198.433893][ T6948] hfsplus: bad catalog entry type [ 198.568487][ T6954] loop4: detected capacity change from 0 to 256 [ 198.575835][ T4322] usb 4-1: USB disconnect, device number 11 [ 198.675043][ T6956] loop5: detected capacity change from 0 to 512 [ 199.379205][ T6958] loop1: detected capacity change from 0 to 131072 [ 199.404585][ T6958] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 199.411404][ T6958] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 199.430868][ T6958] F2FS-fs (loop1): invalid crc value [ 199.438269][ T6956] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 199.449873][ T6956] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 199.481663][ T6956] EXT4-fs (loop5): orphan cleanup on readonly fs [ 199.490135][ T6958] F2FS-fs (loop1): Found nat_bits in checkpoint [ 199.553200][ T6958] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 199.560639][ T6958] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 199.600211][ T6956] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 199.644374][ T6956] EXT4-fs warning (device loop5): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 199.737817][ T6956] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 199.794206][ T6956] EXT4-fs error (device loop5): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 199.882212][ T6956] EXT4-fs (loop5): Remounting filesystem read-only [ 199.930197][ T6956] EXT4-fs (loop5): 1 truncate cleaned up [ 199.947294][ T6956] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 200.027241][ T6970] netlink: 132 bytes leftover after parsing attributes in process `syz.3.816'. [ 200.154401][ T5465] EXT4-fs (loop5): unmounting filesystem. [ 200.802686][ T6982] MTD: Couldn't look up './file0': -15 [ 201.246669][ T6977] loop5: detected capacity change from 0 to 32768 [ 201.314156][ T4322] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 201.361154][ T6977] XFS (loop5): Mounting V5 Filesystem [ 201.449589][ T6977] XFS (loop5): Ending clean mount [ 201.514262][ T4322] usb 1-1: Using ep0 maxpacket: 32 [ 201.522109][ T4322] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 201.551033][ T4322] usb 1-1: config 0 has no interface number 0 [ 201.577667][ T4322] usb 1-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 201.608554][ T4322] usb 1-1: config 0 interface 184 has no altsetting 0 [ 201.624167][ T4290] Bluetooth: hci0: command 0x0406 tx timeout [ 201.630319][ T4290] Bluetooth: hci1: command 0x0406 tx timeout [ 201.634079][ T4291] Bluetooth: hci3: command 0x0406 tx timeout [ 201.664653][ T4322] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 201.740655][ T4322] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.782281][ T4322] usb 1-1: Product: syz [ 201.801142][ T4322] usb 1-1: Manufacturer: syz [ 201.821277][ T4322] usb 1-1: SerialNumber: syz [ 201.826979][ T6977] XFS (loop5): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 201.874521][ T4322] usb 1-1: config 0 descriptor?? [ 201.880109][ T6986] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 201.889049][ T7003] gadgetfs: bound to dummy_udc driver [ 201.915117][ T4322] smsc75xx v1.0.0 [ 202.106272][ T6986] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 202.175237][ T5465] XFS (loop5): Unmounting Filesystem [ 202.292686][ T7007] loop1: detected capacity change from 0 to 4096 [ 202.532443][ T26] audit: type=1800 audit(1790311714.043:31): pid=7007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.827" name="file1" dev="loop1" ino=0 res=0 errno=0 [ 202.546242][ T4322] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 202.598809][ T4322] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 202.835712][ T4322] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 202.867216][ T4322] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 202.911357][ T4322] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 202.962309][ T4322] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 202.982064][ T4322] usb 1-1: USB disconnect, device number 13 [ 203.674389][ T4475] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 203.875922][ T4475] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 203.914089][ T4475] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 203.957610][ T4475] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 203.992080][ T4475] usb 2-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 204.049608][ T4475] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 204.089413][ T4475] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.135493][ T7026] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 204.202376][ T7024] loop5: detected capacity change from 0 to 32768 [ 204.290729][ T7024] XFS (loop5): Mounting V5 Filesystem [ 204.377356][ T4475] usbhid 2-1:2.0: can't add hid device: -71 [ 204.383813][ T4475] usbhid: probe of 2-1:2.0 failed with error -71 [ 204.427027][ T7024] XFS (loop5): Ending clean mount [ 204.459447][ T4475] usb 2-1: USB disconnect, device number 11 [ 204.532838][ T7024] XFS (loop5): User initiated shutdown received. [ 204.589311][ T7024] XFS (loop5): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 204.670615][ T7024] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 204.812787][ T5465] XFS (loop5): Unmounting Filesystem [ 205.006119][ T4475] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 205.204116][ T4475] usb 2-1: Using ep0 maxpacket: 32 [ 205.211934][ T4475] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 205.259133][ T4475] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 205.309485][ T4475] usb 2-1: config 2 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 7 [ 205.373847][ T4475] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.00 [ 205.403876][ T4475] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.492822][ T4475] ldusb 2-1:2.0: LD USB Device #0 now attached to major 180 minor 0 [ 205.700296][ T7026] ldusb 2-1:2.0: Write buffer overflow, 1 bytes dropped [ 205.745897][ T7026] ldusb 2-1:2.0: Couldn't submit interrupt_out_urb -90 [ 205.823168][ T125] usb 2-1: USB disconnect, device number 12 [ 205.838084][ T125] ldusb 2-1:2.0: LD USB Device #0 now disconnected [ 205.848954][ T7071] loop5: detected capacity change from 0 to 1024 [ 206.254421][ T4322] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 206.445478][ T4322] usb 6-1: config 0 has an invalid interface number: 6 but max is 0 [ 206.461722][ T4322] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.497744][ T7082] loop1: detected capacity change from 0 to 256 [ 206.514519][ T4322] usb 6-1: config 0 has no interface number 0 [ 206.536816][ T4322] usb 6-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 206.579604][ T4322] usb 6-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 206.591312][ T7082] FAT-fs (loop1): Directory bread(block 64) failed [ 206.606023][ T7082] FAT-fs (loop1): Directory bread(block 65) failed [ 206.627541][ T7082] FAT-fs (loop1): Directory bread(block 66) failed [ 206.647183][ T4322] usb 6-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 206.672562][ T7082] FAT-fs (loop1): Directory bread(block 67) failed [ 206.687274][ T4322] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.702172][ T7082] FAT-fs (loop1): Directory bread(block 68) failed [ 206.720037][ T4322] usb 6-1: Product: syz [ 206.727695][ T7082] FAT-fs (loop1): Directory bread(block 69) failed [ 206.737966][ T4322] usb 6-1: Manufacturer: syz [ 206.748352][ T7082] FAT-fs (loop1): Directory bread(block 70) failed [ 206.755320][ T4322] usb 6-1: SerialNumber: syz [ 206.769091][ T4322] usb 6-1: config 0 descriptor?? [ 206.777369][ T7082] FAT-fs (loop1): Directory bread(block 71) failed [ 206.792194][ T7071] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 206.800869][ T7082] FAT-fs (loop1): Directory bread(block 72) failed [ 206.819811][ T4322] vmk80xx 6-1:0.6: driver 'vmk80xx' failed to auto-configure device. [ 206.831868][ T7082] FAT-fs (loop1): Directory bread(block 73) failed [ 206.848470][ T4322] vmk80xx: probe of 6-1:0.6 failed with error -22 [ 207.034274][ T125] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 207.087439][ T4475] usb 6-1: USB disconnect, device number 6 [ 207.234103][ T125] usb 1-1: Using ep0 maxpacket: 16 [ 207.240689][ T125] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.276110][ T125] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 207.304946][ T125] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.335362][ T125] usb 1-1: config 0 descriptor?? [ 207.530353][ T7094] loop1: detected capacity change from 0 to 512 [ 207.565578][ T4291] Bluetooth: hci3: adv larger than maximum supported [ 207.565661][ T4291] Bluetooth: hci3: Malformed LE Event: 0x0d [ 207.565923][ T125] usb 1-1: USB disconnect, device number 14 [ 207.604118][ T4475] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 207.646579][ T7094] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.862: inode #1048320: comm syz.1.862: iget: illegal inode # [ 207.684319][ T7094] EXT4-fs (loop1): Remounting filesystem read-only [ 207.711549][ T7094] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.862: error while reading EA inode 1048320 err=-117 [ 207.742537][ T7094] EXT4-fs (loop1): Remounting filesystem read-only [ 207.765174][ T7094] EXT4-fs (loop1): 1 orphan inode deleted [ 207.791206][ T7094] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 207.802038][ T4475] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 207.823142][ T4475] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.875588][ T4475] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.926305][ T4475] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 207.975697][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 207.981723][ T4475] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 208.022180][ T4475] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 208.052506][ T4475] usb 4-1: Manufacturer: syz [ 208.093491][ T4475] usb 4-1: config 0 descriptor?? [ 208.526891][ T4475] appleir 0003:05AC:8243.000F: unknown main item tag 0x0 [ 208.567759][ T4475] appleir 0003:05AC:8243.000F: No inputs registered, leaving [ 208.617575][ T4475] appleir 0003:05AC:8243.000F: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 208.868884][ T125] usb 4-1: USB disconnect, device number 12 [ 209.394133][ T4473] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 209.586318][ T4473] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 209.596340][ T4475] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 209.624507][ T4473] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 209.664952][ T4473] usb 1-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 209.703561][ T4473] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.225374][ T7134] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 210.588586][ T7129] loop3: detected capacity change from 0 to 32768 [ 210.751363][ T7129] XFS (loop3): Mounting V5 Filesystem [ 210.758853][ T4473] gud 1-1:1.0: USB-1: Failed to add properties (ret=-71) [ 210.777822][ T4473] gud 1-1:1.0: Failed to get connectors (error=-71) [ 210.832335][ T4473] gud: probe of 1-1:1.0 failed with error -71 [ 210.936499][ T4473] usb 1-1: USB disconnect, device number 15 [ 211.034724][ T7129] XFS (loop3): Ending clean mount [ 211.235731][ T7156] input: syz0 as /devices/virtual/input/input15 [ 211.393670][ T4283] XFS (loop3): Unmounting Filesystem [ 211.815763][ T7166] loop1: detected capacity change from 0 to 512 [ 211.884176][ T7166] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c198, mo2=0003] [ 211.934357][ T7166] System zones: 1-12 [ 211.965328][ T7166] EXT4-fs (loop1): 1 truncate cleaned up [ 212.012549][ T7166] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 212.236908][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 212.694202][ T4477] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 212.894376][ T4477] usb 2-1: Using ep0 maxpacket: 8 [ 212.901296][ T4477] usb 2-1: config index 0 descriptor too short (expected 74, got 45) [ 212.944088][ T4477] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 213.004719][ T4477] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 213.045493][ T4477] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 213.104630][ T4477] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 213.148497][ T4477] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.204120][ T4477] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 213.244113][ T4477] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.494356][ T4477] usb 2-1: GET_CAPABILITIES returned 0 [ 213.500252][ T4477] usbtmc 2-1:16.0: can't read capabilities [ 213.524097][ T125] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 213.728105][ T125] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 213.741057][ C0] usbtmc 2-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 213.759059][ T7181] usbtmc 2-1:16.0: Unable to send data, error -71 [ 213.766261][ T125] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.788252][ T125] usb 1-1: Product: syz [ 213.792502][ T125] usb 1-1: Manufacturer: syz [ 213.807661][ T125] usb 1-1: SerialNumber: syz [ 213.820841][ T4475] usb 2-1: USB disconnect, device number 13 [ 213.865224][ T125] ums-karma 1-1:1.0: USB Mass Storage device detected [ 213.890991][ T125] ums-karma 1-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 213.890991][ T125] Please send a copy of this message to and [ 214.334510][ T125] ums-karma: probe of 1-1:1.0 failed with error -5 [ 214.528759][ T4477] usb 1-1: USB disconnect, device number 16 [ 215.371684][ T4278] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 215.383185][ T4278] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 215.392536][ T4278] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 215.397504][ T7233] loop3: detected capacity change from 0 to 512 [ 215.401799][ T4278] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 215.413916][ T4278] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 215.425203][ T4278] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 215.594926][ T7233] EXT4-fs (loop3): 1 truncate cleaned up [ 215.600649][ T7233] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 215.630548][ T7215] loop5: detected capacity change from 0 to 40427 [ 215.680597][ T7232] chnl_net:caif_netlink_parms(): no params data found [ 215.788733][ T7233] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.3.914: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 215.816599][ T7215] F2FS-fs (loop5): invalid crc value [ 215.855002][ T7215] F2FS-fs (loop5): Found nat_bits in checkpoint [ 215.877075][ T7244] loop1: detected capacity change from 0 to 256 [ 215.947647][ T7244] FAT-fs (loop1): Unrecognized mount option "./file0" or missing value [ 215.995797][ T7232] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.003039][ T7232] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.035343][ T7232] device bridge_slave_0 entered promiscuous mode [ 216.079783][ T7232] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.125008][ T7215] F2FS-fs (loop5): Start checkpoint disabled! [ 216.125013][ T7232] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.160403][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 216.179913][ T7232] device bridge_slave_1 entered promiscuous mode [ 216.186978][ T7215] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 216.354185][ T4477] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 216.393949][ T7215] syz.5.906: attempt to access beyond end of device [ 216.393949][ T7215] loop5: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 216.437168][ T7232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.467263][ T7232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.561437][ T4477] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.593366][ T4477] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.614090][ T4477] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 216.628170][ T9] kworker/u4:0: attempt to access beyond end of device [ 216.628170][ T9] loop5: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 216.644151][ T4477] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 216.663725][ T4477] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.674098][ T4475] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 216.721696][ T4477] usb 2-1: config 0 descriptor?? [ 216.758534][ T4304] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.793854][ T7232] team0: Port device team_slave_0 added [ 216.809192][ T7232] team0: Port device team_slave_1 added [ 216.866163][ T4475] usb 4-1: config 0 has an invalid descriptor of length 112, skipping remainder of the config [ 216.867838][ T4304] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.891898][ T4475] usb 4-1: config 0 has no interfaces? [ 216.919760][ T4475] usb 4-1: New USB device found, idVendor=056a, idProduct=00c6, bcdDevice= 0.00 [ 216.959516][ T4475] usb 4-1: New USB device strings: Mfr=0, Product=64, SerialNumber=0 [ 216.963946][ T7232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.984251][ T4475] usb 4-1: Product: syz [ 216.986834][ T7232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.017678][ T4475] usb 4-1: config 0 descriptor?? [ 217.022336][ T7232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.073550][ T4304] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.095678][ T7232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.102764][ T7232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.140892][ T7232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.144536][ T4477] lua 0003:1E7D:2C2E.0010: unknown main item tag 0xd [ 217.183837][ T4477] lua 0003:1E7D:2C2E.0010: item fetching failed at offset 4/24 [ 217.225462][ T4477] lua 0003:1E7D:2C2E.0010: parse failed [ 217.231149][ T4477] lua: probe of 0003:1E7D:2C2E.0010 failed with error -22 [ 217.247176][ T4304] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.284703][ T4475] usb 4-1: USB disconnect, device number 13 [ 217.340620][ T7232] device hsr_slave_0 entered promiscuous mode [ 217.375747][ T7232] device hsr_slave_1 entered promiscuous mode [ 217.393281][ T7232] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.402339][ T7232] Cannot create hsr debugfs directory [ 217.418258][ T4477] usb 2-1: USB disconnect, device number 14 [ 217.454626][ T4278] Bluetooth: hci5: command 0x0409 tx timeout [ 217.665368][ T7263] netlink: 80 bytes leftover after parsing attributes in process `syz.0.920'. [ 217.734385][ T4304] tipc: Left network mode [ 217.895049][ T4322] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 217.962029][ T7266] capability: warning: `syz.3.921' uses 32-bit capabilities (legacy support in use) [ 218.017231][ T7266] program syz.3.921 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.045813][ T7232] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 218.086786][ T4322] usb 6-1: unable to get BOS descriptor or descriptor too short [ 218.095083][ T7232] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 218.103148][ T4322] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.141714][ T4322] usb 6-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 218.163383][ T4322] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 218.203699][ T4322] usb 6-1: Product: syz [ 218.218426][ T4322] usb 6-1: Manufacturer: syz [ 218.271730][ T4322] usb 6-1: Found UVC 1.00 device syz (8086:0ad2) [ 218.302554][ T7232] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 218.315366][ T7232] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 218.524233][ T4475] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 218.653780][ T4322] usb 6-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 218.714115][ T4475] usb 2-1: Using ep0 maxpacket: 16 [ 218.725494][ T4475] usb 2-1: unable to get BOS descriptor or descriptor too short [ 218.744533][ T4322] videodev: could not get a free minor [ 218.750065][ T4322] uvcvideo 6-1:1.1: Failed to register meta-cap device (-23). [ 218.754962][ T7232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.770169][ T4475] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.801495][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 218.803027][ T4322] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input16 [ 218.816627][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 218.824056][ T4475] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.857578][ T4475] usb 2-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 218.871624][ T7232] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.897572][ T4475] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.919935][ T4322] usb 6-1: USB disconnect, device number 8 [ 218.930561][ T4475] usb 2-1: Product: syz [ 218.965305][ T4475] usb 2-1: Manufacturer: syz [ 218.994178][ T4475] usb 2-1: SerialNumber: syz [ 219.158214][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 219.185647][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 219.213542][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.220748][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.266684][ T4475] usb 2-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to g@b4.vu [ 219.334081][ T4475] usb 2-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 219.399541][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 219.414773][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 219.416972][ T4475] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 219.447139][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 219.452810][ T7297] loop3: detected capacity change from 0 to 2048 [ 219.467590][ T4475] usb 2-1: USB disconnect, device number 15 [ 219.475680][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.482923][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.496158][ T4972] udevd[4972]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.508692][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 219.534248][ T4278] Bluetooth: hci5: command 0x041b tx timeout [ 219.548537][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 219.559681][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 219.571416][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 219.593508][ T7232] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 219.607512][ T7232] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 219.628640][ T7297] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 219.714987][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 219.723075][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 219.755435][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 219.770295][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 219.779416][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 219.789868][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 219.798946][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 219.874433][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 220.636857][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.654511][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.664240][ T4475] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 220.674942][ T4304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.682497][ T4304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.727991][ T4304] device bridge_slave_1 left promiscuous mode [ 220.751576][ T4304] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.779175][ T4304] device bridge_slave_0 left promiscuous mode [ 220.787621][ T4304] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.856065][ T4475] usb 2-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 220.879719][ T4304] device veth1_macvtap left promiscuous mode [ 220.891185][ T4475] usb 2-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 220.898342][ T4304] device veth0_macvtap left promiscuous mode [ 220.922090][ T4304] device veth1_vlan left promiscuous mode [ 220.930728][ T4475] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 220.940413][ T4304] device veth0_vlan left promiscuous mode [ 220.967367][ T4475] usb 2-1: Product: syz [ 220.987908][ T4475] usb 2-1: Manufacturer: syz [ 221.013649][ T4475] hub 2-1:1.0: bad descriptor, ignoring hub [ 221.043404][ T4475] hub: probe of 2-1:1.0 failed with error -5 [ 221.077546][ T4475] usb_debug 2-1:1.0: debug converter detected [ 221.121173][ T4475] usb 2-1: debug converter now attached to ttyUSB0 [ 221.514280][ T4475] usb 2-1: USB disconnect, device number 16 [ 221.555441][ T4475] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 221.601374][ T4475] usb_debug 2-1:1.0: device disconnected [ 221.622585][ T4278] Bluetooth: hci5: command 0x040f tx timeout [ 222.408842][ T4304] team0 (unregistering): Port device team_slave_1 removed [ 222.465692][ T4304] team0 (unregistering): Port device team_slave_0 removed [ 222.523033][ T4304] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.577206][ T4304] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.976107][ T4304] bond0 (unregistering): Released all slaves [ 223.161339][ T7232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.184577][ T5830] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 223.194836][ T5830] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 223.694187][ T4278] Bluetooth: hci5: command 0x0419 tx timeout [ 224.274625][ T4322] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 224.407113][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 224.421190][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 224.480968][ T4322] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 224.487011][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 224.501700][ T4322] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 224.505724][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 224.532429][ T7232] device veth0_vlan entered promiscuous mode [ 224.537423][ T4322] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 224.539911][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 224.562577][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 224.597694][ T4322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.598319][ T7232] device veth1_vlan entered promiscuous mode [ 224.633765][ T4322] usb 4-1: Product: syz [ 224.643328][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 224.652657][ T4322] usb 4-1: Manufacturer: syz [ 224.668666][ T4322] usb 4-1: SerialNumber: syz [ 224.671128][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 224.693726][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 224.725948][ T5098] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 224.764962][ T7232] device veth0_macvtap entered promiscuous mode [ 224.792560][ T7232] device veth1_macvtap entered promiscuous mode [ 224.838095][ T7232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.894346][ T7232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.914892][ T7232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.922104][ T4322] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 224.931714][ T7232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.974263][ T7232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.994022][ T7232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.003913][ T7232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.034127][ T7232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.055676][ T7232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.064588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 225.096980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 225.124957][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 225.133854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 225.160863][ T7232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.200986][ T7232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.211252][ T7232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.222097][ T7232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.232426][ T7232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.249668][ T7232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.260080][ T7232] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.273355][ T7232] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.285424][ T7232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.298904][ T7415] netlink: 'syz.0.956': attribute type 4 has an invalid length. [ 225.315795][ T4473] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 225.330108][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 225.346844][ T4304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 225.363672][ T7232] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.386097][ T4322] usb 4-1: USB disconnect, device number 14 [ 225.393329][ T7232] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.403844][ T4322] usblp0: removed [ 225.420869][ T7232] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.440228][ T7232] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.624302][ T4322] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 225.674429][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.682285][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.730515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 225.805345][ T4304] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.819668][ T4304] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.850899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 226.034107][ T4473] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 226.226111][ T4473] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 226.249358][ T4473] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 226.266848][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.6.966'. [ 226.313410][ T4473] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 226.347955][ T4473] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 226.403565][ T4473] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 226.467887][ T4473] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 226.516399][ T4473] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 226.551900][ T4473] usb 1-1: Product: syz [ 226.565537][ T4473] usb 1-1: Manufacturer: syz [ 226.608162][ T4473] cdc_wdm 1-1:1.0: skipping garbage [ 226.629349][ T4473] cdc_wdm 1-1:1.0: skipping garbage [ 226.661005][ T4473] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 226.682401][ T4473] cdc_wdm 1-1:1.0: Unknown control protocol [ 226.985326][ T7466] af_packet: tpacket_rcv: packet too big, clamped from 65007 to 3952. macoff=96 [ 227.626453][ T4322] usb 1-1: USB disconnect, device number 17 [ 227.725202][ T7490] FAULT_INJECTION: forcing a failure. [ 227.725202][ T7490] name failslab, interval 1, probability 0, space 0, times 0 [ 227.763487][ T7490] CPU: 0 PID: 7490 Comm: syz.3.982 Not tainted syzkaller #0 [ 227.770857][ T7490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.780957][ T7490] Call Trace: [ 227.784305][ T7490] [ 227.787280][ T7490] dump_stack_lvl+0x188/0x24e [ 227.792009][ T7490] ? show_regs_print_info+0x12/0x12 [ 227.797353][ T7490] ? load_image+0x410/0x410 [ 227.801912][ T7490] ? __might_sleep+0xd0/0xd0 [ 227.806537][ T7490] ? __lock_acquire+0x7c40/0x7c40 [ 227.811607][ T7490] should_fail_ex+0x390/0x4c0 [ 227.816349][ T7490] should_failslab+0x5/0x20 [ 227.820898][ T7490] slab_pre_alloc_hook+0x59/0x300 [ 227.825967][ T7490] kmem_cache_alloc+0x56/0x2f0 [ 227.830766][ T7490] ? __proc_create+0x36f/0x8b0 [ 227.835573][ T7490] __proc_create+0x36f/0x8b0 [ 227.840206][ T7490] ? proc_symlink+0x210/0x210 [ 227.844930][ T7490] ? make_kgid+0x1c4/0x650 [ 227.849870][ T7490] ? from_kuid_munged+0x6e0/0x6e0 [ 227.855094][ T7490] ? rcu_is_watching+0x11/0xa0 [ 227.859948][ T7490] _proc_mkdir+0x5f/0x160 [ 227.864334][ T7490] proc_net_ns_init+0x287/0x380 [ 227.869304][ T7490] ops_init+0x360/0x5e0 [ 227.873489][ T7490] setup_net+0x4f2/0xbd0 [ 227.877789][ T7490] ? copy_net_ns+0x5b0/0x5b0 [ 227.882488][ T7490] ? copy_net_ns+0x324/0x5b0 [ 227.887098][ T7490] ? down_read_killable+0x1cc/0x340 [ 227.892319][ T7490] copy_net_ns+0x33e/0x5b0 [ 227.896767][ T7490] create_new_namespaces+0x3ce/0x700 [ 227.902162][ T7490] unshare_nsproxy_namespaces+0x116/0x160 [ 227.908082][ T7490] ksys_unshare+0x4f6/0x8e0 [ 227.912628][ T7490] ? sighand_ctor+0x40/0x40 [ 227.917164][ T7490] ? lock_chain_count+0x20/0x20 [ 227.922062][ T7490] ? syscall_enter_from_user_mode+0x21/0x80 [ 227.928099][ T7490] __x64_sys_unshare+0x34/0x40 [ 227.932893][ T7490] do_syscall_64+0x4c/0xa0 [ 227.937419][ T7490] ? clear_bhb_loop+0x60/0xb0 [ 227.942113][ T7490] ? clear_bhb_loop+0x60/0xb0 [ 227.946895][ T7490] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 227.952919][ T7490] RIP: 0033:0x7fab3bb9e159 [ 227.957369][ T7490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.977000][ T7490] RSP: 002b:00007fab3ca89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 227.985427][ T7490] RAX: ffffffffffffffda RBX: 00007fab3be25fa0 RCX: 00007fab3bb9e159 [ 227.993412][ T7490] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040040000 [ 228.001654][ T7490] RBP: 00007fab3bc3506b R08: 0000000000000000 R09: 0000000000000000 [ 228.009635][ T7490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.017622][ T7490] R13: 00007fab3be26038 R14: 00007fab3be25fa0 R15: 00007ffea7e5da98 [ 228.025792][ T7490] [ 228.028921][ C0] vkms_vblank_simulate: vblank timer overrun [ 228.208004][ T7497] device syzkaller1 entered promiscuous mode [ 228.212694][ T7500] loop6: detected capacity change from 0 to 512 [ 228.285563][ T7500] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: inode #2: comm syz.6.985: missing EA_INODE flag [ 228.378321][ T7500] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.985: error while reading EA inode 2 err=-117 [ 228.412167][ T7500] EXT4-fs (loop6): 1 orphan inode deleted [ 228.424639][ T7500] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 228.727567][ T7232] EXT4-fs (loop6): unmounting filesystem. [ 228.989688][ T7513] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 229.042753][ T7516] loop1: detected capacity change from 0 to 256 [ 229.624099][ T4475] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 229.814084][ T4475] usb 2-1: Using ep0 maxpacket: 32 [ 229.821136][ T4475] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.871776][ T4475] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.922319][ T4475] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 229.964965][ T4475] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.999495][ T4475] usb 2-1: config 0 descriptor?? [ 230.440796][ T4475] savu 0003:1E7D:2D5A.0011: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 230.665229][ T7560] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 230.746325][ T4473] usb 2-1: USB disconnect, device number 17 [ 230.962425][ T7563] fido_id[7563]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 231.323489][ T7549] loop6: detected capacity change from 0 to 32768 [ 231.353742][ T7572] loop5: detected capacity change from 0 to 8192 [ 231.362937][ T7549] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.1000 (7549) [ 231.401605][ T7572] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 231.454212][ T7572] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 231.484899][ T7572] REISERFS (device loop5): using ordered data mode [ 231.507285][ T7572] reiserfs: using flush barriers [ 231.531339][ T7572] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 231.531797][ T7549] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 231.581740][ T7572] REISERFS (device loop5): checking transaction log (loop5) [ 231.634215][ T7549] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 231.652387][ T7549] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 231.722686][ T7549] BTRFS info (device loop6): use zstd compression, level 3 [ 231.769862][ T7549] BTRFS info (device loop6): using free space tree [ 231.826465][ T7592] Invalid ELF header len 8 [ 231.881760][ T4278] block nbd0: Receive control failed (result -32) [ 231.882225][ T7573] block nbd0: shutting down sockets [ 232.035430][ T7572] REISERFS (device loop5): Using tea hash to sort names [ 232.042737][ T7572] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 232.184421][ T7549] BTRFS info (device loop6): enabling ssd optimizations [ 232.473887][ T7232] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 232.602834][ T7618] loop3: detected capacity change from 0 to 2048 [ 232.746340][ T7624] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 232.867833][ T7618] NILFS (loop3): error -2 truncating bmap (ino=16) [ 232.917900][ T7626] NILFS error (device loop3): nilfs_readdir: zero-length directory entry [ 233.003196][ T7626] Remounting filesystem read-only [ 233.153901][ T4283] NILFS (loop3): disposed unprocessed dirty file(s) when detaching log writer [ 233.624095][ T4322] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 233.815962][ T4322] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 233.843864][ T4322] usb 4-1: config 179 has no interface number 0 [ 233.870838][ T4322] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 233.909834][ T7621] loop5: detected capacity change from 0 to 32768 [ 233.924064][ T4322] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 233.958979][ T4322] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 233.985891][ T7616] loop1: detected capacity change from 0 to 40427 [ 233.995544][ T4322] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 234.049713][ T7616] F2FS-fs (loop1): invalid crc value [ 234.063603][ T4322] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 234.118130][ T7616] F2FS-fs (loop1): Found nat_bits in checkpoint [ 234.171813][ T4322] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 234.219385][ T4322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.293833][ T7633] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 234.302977][ T7621] XFS (loop5): Mounting V5 Filesystem [ 234.329496][ T7633] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 234.560825][ T7616] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 234.569078][ T7621] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 234.724583][ T7621] XFS (loop5): Starting recovery (logdev: internal) [ 234.830958][ T7621] XFS (loop5): Ending recovery (logdev: internal) [ 235.028945][ T4322] usb 4-1: USB disconnect, device number 15 [ 235.035132][ C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 235.035179][ C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 235.074054][ T7621] XFS (loop5): User initiated shutdown received. [ 235.090983][ T7621] XFS (loop5): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 235.142281][ T7621] XFS (loop5): Please unmount the filesystem and rectify the problem(s) [ 235.163069][ T4272] syz-executor: attempt to access beyond end of device [ 235.163069][ T4272] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 235.304341][ T5465] XFS (loop5): Unmounting Filesystem [ 235.574117][ T4322] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 235.766037][ T4322] usb 7-1: config 0 has no interfaces? [ 235.773221][ T4322] usb 7-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 235.813068][ T7681] loop3: detected capacity change from 0 to 8 [ 235.824045][ T4322] usb 7-1: New USB device strings: Mfr=0, Product=28, SerialNumber=3 [ 235.832856][ T4322] usb 7-1: Product: syz [ 235.879713][ T4322] usb 7-1: SerialNumber: syz [ 235.894215][ T7681] SQUASHFS error: Unable to read inode 0x11f [ 235.954918][ T4322] usb 7-1: config 0 descriptor?? [ 235.975043][ T4972] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 236.003192][ T7681] loop3: detected capacity change from 0 to 512 [ 236.003815][ T4972] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 236.092679][ T7681] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 236.137177][ T7681] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 236.202454][ T7681] System zones: 1-12 [ 236.272723][ T7681] EXT4-fs (loop3): 1 truncate cleaned up [ 236.289195][ T4322] usb 7-1: USB disconnect, device number 2 [ 236.311448][ T7681] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 236.572590][ T4283] EXT4-fs (loop3): unmounting filesystem. [ 236.931331][ T7712] mkiss: ax0: crc mode is auto. [ 237.057731][ T7719] sctp: [Deprecated]: syz.5.1036 (pid 7719) Use of int in max_burst socket option. [ 237.057731][ T7719] Use struct sctp_assoc_value instead [ 237.564344][ T5595] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 237.694328][ T4322] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 237.756055][ T5595] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 237.769942][ T5595] usb 7-1: config 179 has no interface number 0 [ 237.777447][ T5595] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 237.795750][ T5595] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 237.807657][ T5595] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 237.819344][ T5595] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 237.830845][ T5595] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 237.844737][ T5595] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 237.853820][ T5595] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.884318][ T4322] usb 1-1: Using ep0 maxpacket: 32 [ 237.889476][ T7727] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 237.889604][ T7727] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 237.918864][ T4322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.994425][ T4322] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.044059][ T4322] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 238.083895][ T7737] loop1: detected capacity change from 0 to 2048 [ 238.093835][ T4322] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.126235][ T4322] usb 1-1: config 0 descriptor?? [ 238.156223][ T4322] hub 1-1:0.0: USB hub found [ 238.193427][ T7737] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 238.234536][ T7737] ext4 filesystem being mounted at /201/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 238.362670][ T4322] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 238.372530][ T4289] usb 7-1: USB disconnect, device number 3 [ 238.378743][ C1] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 238.387122][ C1] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 238.528227][ T4272] EXT4-fs (loop1): unmounting filesystem. [ 238.774885][ T4322] hid-generic 0003:046D:C31C.0012: unknown main item tag 0x0 [ 238.807801][ T4322] hid-generic 0003:046D:C31C.0012: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 239.087140][ T7749] loop5: detected capacity change from 0 to 32768 [ 239.101397][ T7752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1054'. [ 239.145612][ T7749] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.1043 (7749) [ 239.189711][ T7749] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 239.238087][ T7749] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 239.294187][ T7749] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 239.344093][ T7749] BTRFS info (device loop5): use zstd compression, level 3 [ 239.351574][ T7749] BTRFS info (device loop5): using free space tree [ 239.391592][ T7759] device veth0 entered promiscuous mode [ 239.446886][ T125] usb 1-1: USB disconnect, device number 18 [ 239.491082][ T7758] device veth0 left promiscuous mode [ 239.581172][ T7749] BTRFS info (device loop5): enabling ssd optimizations [ 239.828833][ T7792] mkiss: ax0: crc mode is auto. [ 239.922927][ T5465] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 240.624086][ T4480] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 240.834082][ T4480] usb 2-1: Using ep0 maxpacket: 32 [ 240.871032][ T4480] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.906763][ T4480] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.984064][ T4480] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 241.044112][ T4480] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.177844][ T4480] usb 2-1: config 0 descriptor?? [ 241.247477][ T4480] hub 2-1:0.0: USB hub found [ 241.449419][ T4480] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 241.864211][ T4545] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 241.876125][ T4480] hid-generic 0003:046D:C31C.0013: unknown main item tag 0x0 [ 241.896407][ T4480] hid-generic 0003:046D:C31C.0013: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 242.065316][ T4473] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 242.076895][ T4545] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 242.099378][ T4545] usb 1-1: config 179 has no interface number 0 [ 242.111020][ T4545] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 242.123161][ T4545] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 242.154445][ T4545] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 242.177470][ T4545] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 242.201078][ T4545] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 242.231084][ T4545] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 242.254093][ T4473] usb 6-1: Using ep0 maxpacket: 16 [ 242.262018][ T4473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.313084][ T4545] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.331933][ T4473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.362757][ T7858] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 242.375534][ T7858] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 242.393075][ T4473] usb 6-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 242.418436][ T7875] device veth0 entered promiscuous mode [ 242.436993][ T4473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.445163][ T7874] device veth0 left promiscuous mode [ 242.492961][ T4473] usb 6-1: config 0 descriptor?? [ 242.518840][ T4545] usb 2-1: USB disconnect, device number 18 [ 242.574167][ T4278] Bluetooth: hci4: command 0x0406 tx timeout [ 242.827015][ T4545] usb 1-1: USB disconnect, device number 19 [ 242.827069][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 242.841524][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 242.930393][ T4473] apple 0003:05AC:024B.0014: unknown global tag 0xe [ 242.947645][ T4473] apple 0003:05AC:024B.0014: item 0 1 1 14 parsing failed [ 242.964736][ T4473] apple 0003:05AC:024B.0014: parse failed [ 242.974547][ T4473] apple: probe of 0003:05AC:024B.0014 failed with error -22 [ 243.132691][ T4545] usb 6-1: USB disconnect, device number 9 [ 243.254292][ T4480] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 243.446292][ T4480] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 243.471857][ T4480] usb 4-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 243.501740][ T4480] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.951560][ T4480] wacom 0003:056A:033B.0015: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 243.964960][ T4480] wacom 0003:056A:033B.0015: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.3-1/input0 [ 243.977452][ T4480] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:056A:033B.0015/input/input18 [ 244.044197][ T4545] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 244.234295][ T4545] usb 2-1: Using ep0 maxpacket: 8 [ 244.241631][ T4545] usb 2-1: config 0 has no interfaces? [ 244.259794][ T4545] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 244.277496][ T4545] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.297868][ T4545] usb 2-1: config 0 descriptor?? [ 244.421970][ T4545] usb 4-1: USB disconnect, device number 16 [ 244.509426][ T4480] usb 2-1: USB disconnect, device number 19 [ 245.334233][ T5595] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 245.524363][ T5595] usb 7-1: Using ep0 maxpacket: 32 [ 245.538425][ T5595] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.568005][ T5595] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.579931][ T5595] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 245.596258][ T5595] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.633062][ T5595] usb 7-1: config 0 descriptor?? [ 245.656687][ T5595] hub 7-1:0.0: USB hub found [ 245.871481][ T5595] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 246.114184][ T4545] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 246.296290][ T5595] hid-generic 0003:046D:C31C.0016: unknown main item tag 0x0 [ 246.317279][ T4545] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.333309][ T5595] hid-generic 0003:046D:C31C.0016: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.6-1/input0 [ 246.335960][ T4545] usb 6-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 246.389600][ T4545] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.416867][ T7956] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 246.734835][ T5595] usb 7-1: USB disconnect, device number 4 [ 246.847225][ T4545] wacom 0003:056A:033B.0017: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 246.882312][ T4545] wacom 0003:056A:033B.0017: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.5-1/input0 [ 246.945654][ T4545] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/0003:056A:033B.0017/input/input21 [ 247.093917][ T7979] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1097'. [ 247.264249][ T4480] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 247.354080][ T4545] usb 6-1: USB disconnect, device number 10 [ 247.394397][ T7980] fido_id[7980]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 247.474253][ T4480] usb 4-1: Using ep0 maxpacket: 32 [ 247.482021][ T4480] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 247.524071][ T4480] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 247.572510][ T4480] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 247.604057][ T4480] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 247.648054][ T4480] usb 4-1: config 0 interface 0 has no altsetting 0 [ 247.676938][ T4480] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 247.714350][ T4480] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 247.745818][ T4480] usb 4-1: Product: syz [ 247.750065][ T4480] usb 4-1: Manufacturer: syz [ 247.773390][ T4480] usb 4-1: SerialNumber: syz [ 247.781130][ T7997] Format for deleting device is "id" (uint). [ 247.809083][ T4480] usb 4-1: config 0 descriptor?? [ 247.827358][ T4480] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 247.896433][ T4480] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 248.124443][ T8006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1104'. [ 248.142805][ T4480] usb 4-1: USB disconnect, device number 17 [ 248.148889][ C0] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 248.155598][ T7976] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 248.181095][ T8003] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 248.214674][ T4480] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 249.214356][ T4480] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 249.436955][ T4480] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 249.473853][ T4480] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.516106][ T4480] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.559027][ T4480] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.638823][ T4480] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 249.669180][ T4480] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.705168][ T4480] usb 6-1: config 0 descriptor?? [ 249.821715][ T8056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1118'. [ 249.854322][ T4291] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 249.854438][ T4278] Bluetooth: hci0: command 0x1003 tx timeout [ 250.158228][ T4480] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 250.196963][ T4480] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 250.209710][ T8067] loop1: detected capacity change from 0 to 1024 [ 250.266679][ T8067] hfsplus: keylen 65060 too large [ 250.275062][ T8067] hfsplus: xattr searching failed [ 250.468340][ T4480] usb 6-1: USB disconnect, device number 11 [ 250.550350][ T8075] fido_id[8075]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 250.573809][ T8080] loop1: detected capacity change from 0 to 1024 [ 250.803044][ T5830] hfsplus: b-tree write err: -5, ino 25 [ 250.813839][ T5830] hfsplus: b-tree write err: -5, ino 4 [ 250.841788][ T5830] hfsplus: b-tree write err: -5, ino 2 [ 251.244182][ T4475] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 251.273019][ T8094] loop5: detected capacity change from 0 to 4096 [ 251.342607][ T8099] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 251.371321][ T8098] loop3: detected capacity change from 0 to 4096 [ 251.408323][ T8098] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 251.420609][ T8094] NILFS (loop5): nilfs_sufile_do_free: segment 9 is already clean [ 251.436578][ T4475] usb 2-1: unable to get BOS descriptor or descriptor too short [ 251.453338][ T4475] usb 2-1: not running at top speed; connect to a high speed hub [ 251.474846][ T4475] usb 2-1: config 5 has an invalid interface number: 29 but max is 0 [ 251.519420][ T4475] usb 2-1: config 5 has no interface number 0 [ 251.535349][ T4475] usb 2-1: config 5 interface 29 has no altsetting 0 [ 251.584335][ T4475] usb 2-1: New USB device found, idVendor=04e2, idProduct=1410, bcdDevice=78.22 [ 251.606899][ T8098] ntfs3: loop3: Inode r=19 is not in use! [ 251.612821][ T8098] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 251.644362][ T4475] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.662986][ T4475] usb 2-1: Product: syz [ 251.683873][ T4475] usb 2-1: Manufacturer: syz [ 251.724044][ T4475] usb 2-1: SerialNumber: syz [ 251.970675][ T4475] usb 2-1: USB disconnect, device number 20 [ 251.987741][ T8108] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1131'. [ 252.338075][ T8114] loop5: detected capacity change from 0 to 256 [ 252.796707][ T8126] netlink: 'syz.0.1138': attribute type 4 has an invalid length. [ 252.837073][ T8126] netlink: 'syz.0.1138': attribute type 4 has an invalid length. [ 253.306264][ T8140] loop1: detected capacity change from 0 to 4096 [ 253.350403][ T8140] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 253.410090][ T8140] ntfs3: loop1: Inode r=19 is not in use! [ 253.421838][ T8140] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 253.883335][ T4278] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 253.896121][ T4278] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 253.907416][ T4278] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 253.919038][ T4278] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 253.926912][ T4278] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 253.937568][ T4278] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 254.136634][ T5830] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.163667][ T8149] chnl_net:caif_netlink_parms(): no params data found [ 254.236666][ T5830] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.430622][ T5830] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.471919][ T8149] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.479351][ T8149] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.487851][ T8149] device bridge_slave_0 entered promiscuous mode [ 254.498091][ T8149] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.505978][ T8149] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.520526][ T8149] device bridge_slave_1 entered promiscuous mode [ 254.547838][ T5830] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.596175][ T8149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.609291][ T8149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.703730][ T8149] team0: Port device team_slave_0 added [ 254.720729][ T8149] team0: Port device team_slave_1 added [ 254.761994][ T8149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.771741][ T8149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.814212][ T8149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.831526][ T8149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.841381][ T8149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.878264][ T8149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.964930][ T8149] device hsr_slave_0 entered promiscuous mode [ 254.971981][ T8149] device hsr_slave_1 entered promiscuous mode [ 254.979133][ T8149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.987595][ T8149] Cannot create hsr debugfs directory [ 255.392824][ T8149] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 255.403074][ T8149] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 255.416024][ T8149] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 255.426421][ T8149] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 255.581098][ T8149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.635656][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 255.651396][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 255.663311][ T8149] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.705437][ T7834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 255.722660][ T7834] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 255.733317][ T7834] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.740622][ T7834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.757957][ T7834] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 255.813117][ T7834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 255.828596][ T7834] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 255.838102][ T7834] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.845382][ T7834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.857887][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.865256][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.905101][ T7834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 255.936492][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 256.013661][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 256.022455][ T4291] Bluetooth: hci0: command 0x0409 tx timeout [ 256.052957][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 256.079059][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 256.088572][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 256.098311][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 256.107040][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 256.119327][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 256.127988][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 256.142737][ T8149] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 256.220998][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 256.488761][ T5830] device hsr_slave_0 left promiscuous mode [ 256.502084][ T5830] device hsr_slave_1 left promiscuous mode [ 256.525198][ T5830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 256.532727][ T5830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 256.552237][ T5830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 256.562765][ T5830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 256.581437][ T5830] device bridge_slave_1 left promiscuous mode [ 256.596869][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.610728][ T5830] device bridge_slave_0 left promiscuous mode [ 256.624189][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.672346][ T5830] device veth1_macvtap left promiscuous mode [ 256.680927][ T5830] device veth0_macvtap left promiscuous mode [ 256.692194][ T5830] device veth1_vlan left promiscuous mode [ 256.701301][ T5830] device veth0_vlan left promiscuous mode [ 257.580008][ T5830] team0 (unregistering): Port device team_slave_1 removed [ 257.631543][ T5830] team0 (unregistering): Port device team_slave_0 removed [ 257.687908][ T5830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.742047][ T5830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.098708][ T4291] Bluetooth: hci0: command 0x041b tx timeout [ 258.198271][ T5830] bond0 (unregistering): Released all slaves [ 258.360096][ T7827] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 258.368405][ T7827] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 258.393913][ T8149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.032632][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 259.049118][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 259.086517][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 259.095893][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 259.109230][ T8149] device veth0_vlan entered promiscuous mode [ 259.118099][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 259.127365][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 259.148595][ T8149] device veth1_vlan entered promiscuous mode [ 259.188442][ T7834] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 259.204766][ T7834] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 259.213144][ T7834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 259.235754][ T7834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 259.248033][ T8149] device veth0_macvtap entered promiscuous mode [ 259.276083][ T8149] device veth1_macvtap entered promiscuous mode [ 259.295570][ T8149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.306847][ T8149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.316955][ T8149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.327727][ T8149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.337850][ T8149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.348454][ T8149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.359100][ T8149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 259.369617][ T8149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.381330][ T8149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.392059][ T8149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.402779][ T8149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.413127][ T8149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.423645][ T8149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.433670][ T8149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.444521][ T8149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.454462][ T8149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 259.464948][ T8149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 259.478041][ T8149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.486920][ T7834] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 259.495604][ T7834] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 259.503596][ T7834] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 259.512446][ T7834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 259.521302][ T7834] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 259.530451][ T7834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 259.544590][ T8149] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.553332][ T8149] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.563262][ T8149] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.573268][ T8149] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.690789][ T7834] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.722462][ T7834] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.735097][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 259.770157][ T7838] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.783741][ T7838] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.799387][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 259.976052][ T8240] TCP: MD5 Hash mismatch for [fe88::108]:20004->[fe80::aa]:20004 L3 index 0 [ 260.175466][ T4291] Bluetooth: hci0: command 0x040f tx timeout [ 260.547021][ T26] audit: type=1326 audit(1790311772.063:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8257 comm="syz.0.1150" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00d19e159 code=0x7ffc0000 [ 260.616473][ T26] audit: type=1326 audit(1790311772.063:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8257 comm="syz.0.1150" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00d19e159 code=0x7ffc0000 [ 260.740907][ T26] audit: type=1326 audit(1790311772.063:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8257 comm="syz.0.1150" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00d19e159 code=0x7ffc0000 [ 260.831028][ T26] audit: type=1326 audit(1790311772.063:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8257 comm="syz.0.1150" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00d19e159 code=0x7ffc0000 [ 260.881740][ T8264] loop6: detected capacity change from 0 to 1024 [ 260.905821][ T4278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 260.917673][ T26] audit: type=1326 audit(1790311772.063:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8257 comm="syz.0.1150" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa00d19e159 code=0x7ffc0000 [ 260.918371][ T4278] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 260.956998][ T4290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 260.964991][ T4278] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 260.985318][ T4278] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 260.992849][ T4278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 261.021763][ T26] audit: type=1326 audit(1790311772.063:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8257 comm="syz.0.1150" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00d19e159 code=0x7ffc0000 [ 261.047475][ T26] audit: type=1326 audit(1790311772.073:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8257 comm="syz.0.1150" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00d19e159 code=0x7ffc0000 [ 261.084298][ T26] audit: type=1326 audit(1790311772.073:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8257 comm="syz.0.1150" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00d19e159 code=0x7ffc0000 [ 261.197772][ T26] audit: type=1326 audit(1790311772.073:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8257 comm="syz.0.1150" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa00d19e159 code=0x7ffc0000 [ 261.331186][ T26] audit: type=1326 audit(1790311772.073:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8257 comm="syz.0.1150" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00d19e159 code=0x7ffc0000 [ 261.562284][ T8248] loop5: detected capacity change from 0 to 40427 [ 261.574065][ T4480] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 261.602058][ T8248] F2FS-fs (loop5): invalid crc value [ 261.679253][ T8248] F2FS-fs (loop5): Found nat_bits in checkpoint [ 261.765985][ T4480] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 261.802379][ T4480] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.817166][ T8263] chnl_net:caif_netlink_parms(): no params data found [ 261.864885][ T4480] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.876679][ T8248] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 261.906031][ T4480] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 261.929855][ T8248] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 261.972018][ T4480] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 262.004686][ T4480] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 262.073062][ T4480] usb 1-1: Manufacturer: syz [ 262.104784][ T8294] loop6: detected capacity change from 0 to 1024 [ 262.113175][ T8294] hfsplus: unable to find HFS+ superblock [ 262.131320][ T4480] usb 1-1: config 0 descriptor?? [ 262.132728][ T8263] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.143721][ T8263] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.152271][ T8263] device bridge_slave_0 entered promiscuous mode [ 262.158166][ T8248] syz.5.1149: attempt to access beyond end of device [ 262.158166][ T8248] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 262.176660][ T4972] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 262.191077][ T8263] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.213397][ T8263] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.246970][ T8263] device bridge_slave_1 entered promiscuous mode [ 262.254533][ T4291] Bluetooth: hci0: command 0x0419 tx timeout [ 262.332203][ T8263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.418799][ T8263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.514308][ T4289] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 262.545475][ T8263] team0: Port device team_slave_0 added [ 262.572973][ T8263] team0: Port device team_slave_1 added [ 262.588256][ T5465] syz-executor: attempt to access beyond end of device [ 262.588256][ T5465] loop5: rw=2051, sector=36912, nr_sectors = 8152 limit=40427 [ 262.608563][ T4480] appleir 0003:05AC:8243.0019: unknown main item tag 0x0 [ 262.634710][ T4480] appleir 0003:05AC:8243.0019: No inputs registered, leaving [ 262.642333][ T5465] syz-executor: attempt to access beyond end of device [ 262.642333][ T5465] loop5: rw=2051, sector=45104, nr_sectors = 85968 limit=40427 [ 262.666522][ T4480] appleir 0003:05AC:8243.0019: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 262.675486][ T8263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.692979][ T8263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.703573][ T5465] F2FS-fs (loop5): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 262.764229][ T4289] usb 8-1: Using ep0 maxpacket: 16 [ 262.773329][ T5465] F2FS-fs (loop5): Issue discard(5638, 5638, 10746) failed, ret: -5 [ 262.788307][ T8263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.815470][ T4289] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.844013][ T4289] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.853878][ T4289] usb 8-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 262.884522][ T4289] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.886266][ T4480] usb 1-1: USB disconnect, device number 20 [ 262.899963][ T8263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.930321][ T8263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.962544][ T4289] usb 8-1: config 0 descriptor?? [ 263.020939][ T8263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.063325][ T4278] Bluetooth: hci1: command 0x0409 tx timeout [ 263.081254][ T8306] fido_id[8306]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 263.178114][ T8263] device hsr_slave_0 entered promiscuous mode [ 263.211721][ T8263] device hsr_slave_1 entered promiscuous mode [ 263.221849][ T8263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.234105][ T8263] Cannot create hsr debugfs directory [ 263.403198][ T4289] hid (null): usage index exceeded [ 263.598043][ T4289] usb 8-1: string descriptor 0 read error: -71 [ 263.635728][ T4289] usb 8-1: Max retries (5) exceeded reading string descriptor 200 [ 263.643683][ T4289] letsketch: probe of 0003:6161:4D15.001A failed with error -32 [ 263.654863][ T8304] loop6: detected capacity change from 0 to 32768 [ 263.684533][ T8304] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop6 scanned by syz.6.1166 (8304) [ 263.709728][ T4289] usb 8-1: USB disconnect, device number 2 [ 263.764236][ T8304] BTRFS info (device loop6): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 263.792878][ T8304] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm [ 263.815105][ T8304] BTRFS info (device loop6): using free space tree [ 264.061288][ T8304] BTRFS info (device loop6): enabling ssd optimizations [ 264.184062][ T4480] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 264.307516][ T7232] BTRFS info (device loop6): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 264.377677][ T4480] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 264.401328][ T4480] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 264.446516][ T4480] usb 1-1: New USB device found, idVendor=03f0, idProduct=0207, bcdDevice= 0.01 [ 264.480184][ T4480] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.503179][ T4480] usb 1-1: Product: syz [ 264.518480][ T4480] usb 1-1: Manufacturer: syz [ 264.550324][ T4480] usb 1-1: SerialNumber: syz [ 264.581788][ T8324] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 264.594323][ T8324] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 264.604836][ T4480] ums-usbat 1-1:1.0: USB Mass Storage device detected [ 264.697011][ T4480] ums-usbat 1-1:1.0: This device (03f0,0207,0001 S 05 P 80) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 264.697011][ T4480] Please send a copy of this message to and [ 264.964932][ T4655] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 265.134763][ T4278] Bluetooth: hci1: command 0x041b tx timeout [ 265.161396][ T8357] gfs2: gfs2 mount does not exist [ 265.176001][ T4655] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 265.194886][ T4655] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 265.214700][ T4655] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 265.235452][ T4655] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 265.263666][ T4655] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 265.311957][ T4655] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 265.319257][ T8263] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 265.351719][ T4655] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 265.380174][ T8263] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 265.384491][ T4655] usb 8-1: Product: syz [ 265.403366][ T4655] usb 8-1: Manufacturer: syz [ 265.427720][ T4655] cdc_wdm 8-1:1.0: skipping garbage [ 265.436126][ T8263] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 265.443299][ T4655] cdc_wdm 8-1:1.0: skipping garbage [ 265.478570][ T4655] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 265.480354][ T8263] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 265.511219][ T4655] cdc_wdm 8-1:1.0: Unknown control protocol [ 265.714558][ T8364] loop5: detected capacity change from 0 to 64 [ 265.777514][ T8263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.849366][ T8263] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.870416][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 265.887471][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 265.949611][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 265.960527][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 265.971066][ T7840] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.978391][ T7840] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.987740][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 265.997206][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 266.006580][ T7840] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.013775][ T7840] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.025139][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 266.053901][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 266.065249][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 266.074326][ T5595] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 266.083204][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 266.096674][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 266.126697][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 266.142967][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 266.153107][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 266.162957][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 266.173034][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 266.195064][ T8263] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 266.220976][ T8263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 266.242535][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 266.255837][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 266.268801][ T5595] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 266.279737][ T5595] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.300574][ T5595] usb 7-1: config 0 descriptor?? [ 266.319102][ T5595] cp210x 7-1:0.0: cp210x converter detected [ 266.439238][ T5591] usb 8-1: USB disconnect, device number 3 [ 266.549169][ T8378] netlink: 'syz.5.1178': attribute type 4 has an invalid length. [ 266.574623][ T8378] netlink: 'syz.5.1178': attribute type 4 has an invalid length. [ 266.582545][ T8378] netlink: 'syz.5.1178': attribute type 7 has an invalid length. [ 266.601952][ T8378] netlink: 'syz.5.1178': attribute type 8 has an invalid length. [ 266.619705][ T8378] netlink: 'syz.5.1178': attribute type 7 has an invalid length. [ 266.627873][ T8378] netlink: 125876 bytes leftover after parsing attributes in process `syz.5.1178'. [ 266.732242][ T5595] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 266.753804][ T5595] cp210x 7-1:0.0: GPIO initialisation failed: -524 [ 266.796963][ T5595] usb 7-1: cp210x converter now attached to ttyUSB0 [ 266.916140][ T8389] netlink: 'syz.5.1181': attribute type 4 has an invalid length. [ 266.951124][ T8389] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1181'. [ 266.961563][ T5591] usb 7-1: USB disconnect, device number 5 [ 267.001483][ T5591] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 267.048511][ T4480] ums-usbat: probe of 1-1:1.0 failed with error -5 [ 267.066673][ T5591] cp210x 7-1:0.0: device disconnected [ 267.074480][ T4480] usb 1-1: USB disconnect, device number 21 [ 267.080246][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 267.097298][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 267.138870][ T8392] 9pnet: p9_errstr2errno: server reported unknown error Dfß ¥®r [ 267.138870][ T8392] °’°µÿÿÿÿÿÿÿÿ [ 267.149307][ T8263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.216632][ T4278] Bluetooth: hci1: command 0x040f tx timeout [ 267.259792][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 267.295128][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 267.335149][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 267.377254][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 267.409268][ T8263] device veth0_vlan entered promiscuous mode [ 267.430921][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 267.448772][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 267.500533][ T8263] device veth1_vlan entered promiscuous mode [ 267.619353][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 267.641101][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 267.680970][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 267.716637][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 267.753925][ T8263] device veth0_macvtap entered promiscuous mode [ 267.876961][ T8263] device veth1_macvtap entered promiscuous mode [ 267.912222][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 267.927515][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 268.083654][ T8263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.114295][ T8263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.144051][ T8263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.171964][ T8263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.203064][ T8263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.244007][ T8263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.274086][ T8263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.285863][ T8263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.298234][ T8263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.309049][ T8263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.321579][ T8263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.358426][ T7827] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 268.385390][ T7827] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 268.822457][ T8438] loop7: detected capacity change from 0 to 256 [ 269.050417][ T8439] FAT-fs (loop7): error, clusters badly computed (0 != 128) [ 269.092665][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 269.133247][ T8439] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 269.171074][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 269.206250][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 269.248557][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 269.278357][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 269.295066][ T4278] Bluetooth: hci1: command 0x0419 tx timeout [ 269.324328][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 269.348514][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 269.392447][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 269.427551][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 269.460177][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 269.480978][ T8428] loop5: detected capacity change from 0 to 131072 [ 269.493191][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 269.505425][ T8428] F2FS-fs (loop5): Invalid log sectorsize (67108873) [ 269.512223][ T8428] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 269.521366][ T8428] F2FS-fs (loop5): invalid crc value [ 269.529444][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 269.544509][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 269.555427][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 269.564960][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 269.573654][ T8263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.573705][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 269.593820][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 269.615192][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 269.616320][ T8263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.634276][ T8428] F2FS-fs (loop5): Found nat_bits in checkpoint [ 269.668022][ T8263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.690853][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 269.714260][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 269.723048][ T8263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.733771][ T8263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.744501][ T8428] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 269.747310][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 269.752105][ T8428] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 269.796049][ T8263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.811540][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 269.816303][ T8263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.851794][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 269.879462][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 269.898014][ T8263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.924252][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 269.931497][ T8263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 269.956349][ T8263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 269.958187][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 269.970831][ T8263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.993912][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 270.003735][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 270.062522][ T8263] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.071549][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.094383][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.103048][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.125267][ T8263] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.155051][ T8263] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.164158][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.164203][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.164294][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.191318][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.200507][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.200575][ T8263] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.218243][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.237603][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.257533][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.276373][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.314138][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.358315][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.390915][ T8454] IPVS: Scheduler module ip_vs_sip not found [ 270.394236][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.464128][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.503814][ T7838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.525555][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.534637][ T7838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.546078][ T8459] loop6: detected capacity change from 0 to 2048 [ 270.597701][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.615291][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.630890][ T8459] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 270.642691][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 270.647670][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.671514][ T7834] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.687734][ T7834] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.694904][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.734405][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 270.745330][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.753916][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.766088][ T8459] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 270.823802][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.877852][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.914332][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.964126][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.983032][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 270.986568][ T8464] netlink: 198388 bytes leftover after parsing attributes in process `syz.0.1200'. [ 271.022419][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 271.049262][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 271.083542][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 271.139033][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 271.184155][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 271.210129][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 271.250466][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 271.292366][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 271.329494][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 271.375998][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 271.414205][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 271.422890][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 271.474408][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 271.490232][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 271.529572][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 271.559153][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 271.584486][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 271.627444][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 271.674310][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 271.683161][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 271.784289][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 271.824317][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 271.851741][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 271.899792][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 271.935992][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 271.999588][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 272.071247][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 272.127192][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 272.154299][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 272.206938][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 272.274035][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 272.354918][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 272.363521][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 272.426944][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 272.479891][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 272.526637][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 272.548194][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 272.614165][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 272.664254][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 272.672975][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 272.780108][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 272.801206][ T8438] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 272.829525][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 272.829539][ T26] audit: type=1800 audit(1790311784.343:51): pid=8438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1195" name="file1" dev="loop7" ino=1048645 res=0 errno=0 [ 272.936329][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1210'. [ 272.975271][ T8505] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1210'. [ 272.995259][ T8501] loop5: detected capacity change from 0 to 4096 [ 273.044946][ T8501] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 273.209536][ T8501] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 273.306852][ T8501] ntfs3: loop5: ntfs_sync_fs r=1a failed, -22. [ 273.315306][ T8501] ntfs3: loop5: ntfs_evict_inode r=1a failed, -22. [ 273.429537][ T8515] loop7: detected capacity change from 0 to 4096 [ 273.455470][ T8515] EXT4-fs: Ignoring removed orlov option [ 273.505000][ T8515] EXT4-fs (loop7): Test dummy encryption mode enabled [ 273.567213][ T8515] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 273.921146][ T8536] loop6: detected capacity change from 0 to 2048 [ 273.949995][ T8536] UDF-fs: bad mount option "0xffffffffffffffff" or missing value [ 274.080974][ T8149] EXT4-fs (loop7): unmounting filesystem. [ 274.668224][ T8556] loop5: detected capacity change from 0 to 16 [ 274.751613][ T8556] erofs: (device loop5): mounted with root inode @ nid 36. [ 274.799332][ T8556] erofs: (device loop5): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 274.866442][ T8556] syz.5.1227: attempt to access beyond end of device [ 274.866442][ T8556] loop5: rw=524288, sector=34359738360, nr_sectors = 8 limit=16 [ 274.984204][ T4545] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 275.005981][ T8556] erofs: (device loop5): z_erofs_readahead: readahead error at page 4 @ nid 89 [ 275.045956][ T8556] syz.5.1227: attempt to access beyond end of device [ 275.045956][ T8556] loop5: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 275.100887][ T8556] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -4055 in[4096, 0] out[8192] [ 275.134799][ T26] audit: type=1800 audit(1790311786.653:52): pid=8556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1227" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 275.196862][ T4545] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.238268][ T4545] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 275.280331][ T4545] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 275.318926][ T4545] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 275.347441][ T4545] usb 1-1: SerialNumber: syz [ 275.584184][ T4545] usb 1-1: 0:2 : does not exist [ 275.674738][ T4545] usb 1-1: USB disconnect, device number 22 [ 275.824674][ T8589] device hsr0 entered promiscuous mode [ 275.901798][ T8589] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1237'. [ 275.969918][ T4359] udevd[4359]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.698222][ T8611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'. [ 276.729032][ T8611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'. [ 276.798901][ T4480] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 277.058519][ T4480] usb 6-1: Using ep0 maxpacket: 16 [ 277.073307][ T4480] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 277.095490][ T8618] maxtcpc: probe of 0-0022 failed with error -5 [ 277.103430][ T8618] i2c i2c-0: new_device: Instantiated device maxtcpc at 0x22 [ 277.124207][ T4480] usb 6-1: New USB device found, idVendor=056a, idProduct=030a, bcdDevice= 0.00 [ 277.157883][ T4480] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.204380][ T4480] usb 6-1: config 0 descriptor?? [ 277.565122][ T8636] netlink: 'syz.0.1252': attribute type 39 has an invalid length. [ 277.646448][ T4480] wacom 0003:056A:030A.001B: unknown main item tag 0x0 [ 277.650233][ T8641] FAULT_INJECTION: forcing a failure. [ 277.650233][ T8641] name failslab, interval 1, probability 0, space 0, times 0 [ 277.666717][ T4480] wacom 0003:056A:030A.001B: unknown main item tag 0x1 [ 277.672589][ T8641] CPU: 1 PID: 8641 Comm: syz.7.1254 Not tainted syzkaller #0 [ 277.681081][ T8641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 277.689310][ T4480] wacom 0003:056A:030A.001B: unknown main item tag 0x0 [ 277.691245][ T8641] Call Trace: [ 277.691258][ T8641] [ 277.691266][ T8641] dump_stack_lvl+0x188/0x24e [ 277.709107][ T8641] ? show_regs_print_info+0x12/0x12 [ 277.714357][ T8641] ? load_image+0x410/0x410 [ 277.718080][ T4480] wacom 0003:056A:030A.001B: unknown main item tag 0x0 [ 277.718913][ T8641] ? __lock_acquire+0x7c40/0x7c40 [ 277.718960][ T8641] should_fail_ex+0x390/0x4c0 [ 277.735574][ T8641] should_failslab+0x5/0x20 [ 277.740124][ T8641] slab_pre_alloc_hook+0x59/0x300 [ 277.743602][ T4480] wacom 0003:056A:030A.001B: unknown main item tag 0x3 [ 277.745347][ T8641] ? __might_fault+0xa6/0x120 [ 277.745380][ T8641] kmem_cache_alloc+0x56/0x2f0 [ 277.745404][ T8641] ? ioctx_alloc+0x104/0x7b0 [ 277.745428][ T8641] ioctx_alloc+0x104/0x7b0 [ 277.745447][ T8641] ? __might_fault+0xc2/0x120 [ 277.745464][ T8641] ? __might_fault+0xa6/0x120 [ 277.766152][ T4480] wacom 0003:056A:030A.001B: unknown main item tag 0x6 [ 277.766650][ T8641] __se_sys_io_setup+0x7b/0x190 [ 277.784263][ T4480] wacom 0003:056A:030A.001B: hidraw0: USB HID v0.09 Device [HID 056a:030a] on usb-dummy_hcd.5-1/input0 [ 277.787290][ T8641] do_syscall_64+0x4c/0xa0 [ 277.787319][ T8641] ? clear_bhb_loop+0x60/0xb0 [ 277.812847][ T8641] ? clear_bhb_loop+0x60/0xb0 [ 277.817578][ T8641] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 277.823534][ T8641] RIP: 0033:0x7f478cd9e159 [ 277.828002][ T8641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.841901][ T4545] usb 6-1: USB disconnect, device number 12 [ 277.847724][ T8641] RSP: 002b:00007f478dbbd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 277.847756][ T8641] RAX: ffffffffffffffda RBX: 00007f478d025fa0 RCX: 00007f478cd9e159 [ 277.847771][ T8641] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 277.847784][ T8641] RBP: 00007f478ce3506b R08: 0000000000000000 R09: 0000000000000000 [ 277.847797][ T8641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.847808][ T8641] R13: 00007f478d026038 R14: 00007f478d025fa0 R15: 00007ffd13ec58e8 [ 277.847837][ T8641] [ 278.013223][ T8642] fido_id[8642]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 278.029096][ T5595] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 278.064305][ T8594] loop1: detected capacity change from 0 to 32768 [ 278.246799][ T5595] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.280200][ T5595] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.281207][ T8644] loop7: detected capacity change from 0 to 512 [ 278.313266][ T8594] read_mapping_page failed! [ 278.320757][ T5595] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 278.340401][ T8594] ERROR: (device loop1): txCommit: [ 278.340401][ T8594] [ 278.365788][ T5595] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 278.392050][ T5595] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.411962][ T8644] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 278.422945][ T8594] ERROR: (device loop1): diFree: numfree > numinos [ 278.422945][ T8594] [ 278.472559][ T5595] usb 7-1: config 0 descriptor?? [ 278.655243][ T8263] read_mapping_page failed! [ 278.704080][ T8263] ERROR: (device loop1): txCommit: [ 278.704080][ T8263] [ 278.750952][ T8149] EXT4-fs (loop7): unmounting filesystem. [ 278.752797][ T8263] read_mapping_page failed! [ 278.774924][ T8263] ERROR: (device loop1): txCommit: [ 278.774924][ T8263] [ 278.977213][ T5595] plantronics 0003:047F:FFFF.001C: unknown main item tag 0xd [ 278.996360][ T5595] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 279.026797][ T5595] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 279.312225][ T5595] usb 7-1: USB disconnect, device number 6 [ 279.408716][ T8486] ERROR: (device loop1): diFree: numfree > numinos [ 279.408716][ T8486] [ 279.464930][ T107] ERROR: (device loop1): diFree: numfree > numinos [ 279.464930][ T107] [ 279.575143][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1270'. [ 279.604195][ T8679] netlink: 'syz.5.1270': attribute type 20 has an invalid length. [ 279.612096][ T8679] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1270'. [ 279.637297][ T8679] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.647020][ T8679] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.656025][ T8679] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.664908][ T8679] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 279.836760][ T8681] device syzkaller1 entered promiscuous mode [ 280.700336][ T5830] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.916082][ T5830] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.024265][ T4473] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 281.073706][ T8683] loop6: detected capacity change from 0 to 32768 [ 281.115154][ T5830] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.148935][ T8683] XFS (loop6): Mounting V5 Filesystem [ 281.209187][ T8709] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1281'. [ 281.215220][ T8683] XFS (loop6): Ending clean mount [ 281.231226][ T4473] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.263355][ T4473] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.300983][ T4473] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 281.326334][ T5830] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.334125][ T4473] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 281.368141][ T4473] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.422811][ T4473] usb 1-1: config 0 descriptor?? [ 281.456184][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 281.479204][ T7232] XFS (loop6): Unmounting Filesystem [ 281.614411][ T8712] loop5: detected capacity change from 0 to 2048 [ 281.764451][ T8712] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 281.813579][ T8712] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 281.840896][ T8712] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28 [ 281.858424][ T8712] EXT4-fs (loop5): This should not happen!! Data will be lost [ 281.858424][ T8712] [ 281.870339][ T8712] EXT4-fs (loop5): Total free blocks count 0 [ 281.881827][ T8716] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 281.895756][ T4473] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 281.903384][ T4473] plantronics 0003:047F:FFFF.001D: unknown main item tag 0x0 [ 281.911486][ T8712] EXT4-fs (loop5): Free/Dirty block details [ 281.917825][ T8712] EXT4-fs (loop5): free_blocks=4096 [ 281.924940][ T4473] plantronics 0003:047F:FFFF.001D: No inputs registered, leaving [ 281.935590][ T8712] EXT4-fs (loop5): dirty_blocks=32 [ 281.940768][ T8712] EXT4-fs (loop5): Block reservation details [ 281.958230][ T4473] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 281.974997][ T8716] EXT4-fs (loop5): This should not happen!! Data will be lost [ 281.974997][ T8716] [ 282.190951][ T8692] loop7: detected capacity change from 0 to 40427 [ 282.259359][ T8692] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 282.329149][ T8692] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 282.399368][ T8692] F2FS-fs (loop7): invalid crc value [ 282.468120][ T8692] F2FS-fs (loop7): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 9809626597) [ 282.775308][ T8692] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 282.782434][ T8692] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 282.884275][ T4545] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 283.085834][ T4545] usb 6-1: Using ep0 maxpacket: 16 [ 283.101185][ T4545] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.122894][ T4545] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.152543][ T4278] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 283.169069][ T4278] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 283.173841][ T4545] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 283.190019][ T4290] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 283.198688][ T4290] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 283.208979][ T4290] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 283.216774][ T4290] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 283.229143][ T4545] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 283.238804][ T4545] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.276414][ T4545] usb 6-1: config 0 descriptor?? [ 283.292376][ T4480] usb 1-1: USB disconnect, device number 23 [ 283.586553][ T8744] netlink: 236 bytes leftover after parsing attributes in process `syz.6.1288'. [ 283.738733][ T4545] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.001E/input/input29 [ 283.897888][ T4545] microsoft 0003:045E:07DA.001E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 284.094922][ T4480] usb 6-1: USB disconnect, device number 13 [ 284.182258][ T8750] fido_id[8750]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 284.604141][ T4473] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 284.824088][ T4473] usb 1-1: Using ep0 maxpacket: 32 [ 284.840006][ T4473] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.881690][ T4473] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.922610][ T4473] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 284.953038][ T4473] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.042888][ T4473] usb 1-1: config 0 descriptor?? [ 285.118447][ T8736] chnl_net:caif_netlink_parms(): no params data found [ 285.171523][ T8775] loop6: detected capacity change from 0 to 128 [ 285.199402][ T5830] device hsr_slave_0 left promiscuous mode [ 285.218169][ T5830] device hsr_slave_1 left promiscuous mode [ 285.241740][ T8775] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 285.255885][ T5830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.276396][ T5830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.295678][ T4291] Bluetooth: hci1: command 0x0409 tx timeout [ 285.322010][ T5830] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.355720][ T8775] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 285.394031][ T5830] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.435675][ T5830] device bridge_slave_1 left promiscuous mode [ 285.441974][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.494369][ T5830] device bridge_slave_0 left promiscuous mode [ 285.501637][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.501904][ T4473] savu 0003:1E7D:2D5A.001F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 285.670012][ T5830] device veth1_macvtap left promiscuous mode [ 285.689703][ T5830] device veth0_macvtap left promiscuous mode [ 285.716511][ T5830] device veth1_vlan left promiscuous mode [ 285.732951][ T5830] device veth0_vlan left promiscuous mode [ 285.809219][ T7232] EXT4-fs (loop6): unmounting filesystem. [ 285.823080][ T4473] usb 1-1: USB disconnect, device number 24 [ 286.408669][ T4473] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 286.605816][ T4473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 286.624093][ T4473] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.639878][ T4473] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 286.662906][ T4473] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 286.672527][ T4473] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.713543][ T4473] usb 6-1: config 0 descriptor?? [ 287.141215][ T4473] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 287.190247][ T4473] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 287.335461][ T5830] team0 (unregistering): Port device team_slave_1 removed [ 287.384140][ T4291] Bluetooth: hci1: command 0x041b tx timeout [ 287.419901][ T5830] team0 (unregistering): Port device team_slave_0 removed [ 287.461979][ T4473] usb 6-1: USB disconnect, device number 14 [ 287.489547][ T5830] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.562048][ T5830] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.078988][ T5830] bond0 (unregistering): Released all slaves [ 288.334531][ T8802] device syzkaller1 entered promiscuous mode [ 288.347911][ T8819] x86/PAT: syz.5.1308:8819 freeing invalid memtype [mem 0xfe004000-0xfe008fff] [ 288.395546][ T8819] x86/PAT: syz.5.1308:8819 freeing invalid memtype [mem 0xfe000000-0xfe003fff] [ 288.610391][ T8736] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.676792][ T8736] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.734533][ T8736] device bridge_slave_0 entered promiscuous mode [ 288.775530][ T8736] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.801463][ T8736] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.839801][ T8736] device bridge_slave_1 entered promiscuous mode [ 289.004250][ T4545] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 289.077218][ T8736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.099353][ T8736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.196505][ T4545] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 289.230143][ T4545] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.251210][ T8736] team0: Port device team_slave_0 added [ 289.269816][ T4545] usb 6-1: config 0 descriptor?? [ 289.277507][ T8736] team0: Port device team_slave_1 added [ 289.300442][ T4545] cp210x 6-1:0.0: cp210x converter detected [ 289.355060][ T8849] loop7: detected capacity change from 0 to 512 [ 289.419979][ T8736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.454220][ T4291] Bluetooth: hci1: command 0x040f tx timeout [ 289.480904][ T8736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.501772][ T4545] usb 6-1: cp210x converter now attached to ttyUSB0 [ 289.624261][ T8736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.680532][ T8736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.754673][ T8736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.759597][ T4480] usb 6-1: USB disconnect, device number 15 [ 289.846475][ T4480] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 289.871722][ T4480] cp210x 6-1:0.0: device disconnected [ 289.903017][ T8736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.150664][ T8736] device hsr_slave_0 entered promiscuous mode [ 290.189029][ T8736] device hsr_slave_1 entered promiscuous mode [ 290.229133][ T8736] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.238434][ T8736] Cannot create hsr debugfs directory [ 290.719662][ T5591] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 290.949845][ T5591] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.984181][ T5591] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 291.024446][ T5591] usb 8-1: config 0 interface 0 has no altsetting 0 [ 291.046631][ T5591] usb 8-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 291.066919][ T8736] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 291.088190][ T5591] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.145030][ T5591] usb 8-1: config 0 descriptor?? [ 291.147504][ T8900] autofs4:pid:8900:autofs_fill_super: could not open pipe file descriptor [ 291.161955][ T8736] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 291.195701][ T8736] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 291.245147][ T8736] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 291.480857][ T8910] loop5: detected capacity change from 0 to 1024 [ 291.528328][ T4655] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 291.534212][ T4291] Bluetooth: hci1: command 0x0419 tx timeout [ 291.634246][ T8736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.664526][ T5591] hid-picolcd 0003:04D8:F002.0021: No report with id 0xf3 found [ 291.682579][ T5591] hid-picolcd 0003:04D8:F002.0021: No report with id 0xf4 found [ 291.703867][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 291.716418][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 291.778967][ T4655] usb 7-1: unable to get BOS descriptor or descriptor too short [ 291.790657][ T8736] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.828640][ T4655] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 291.846416][ C1] hid-picolcd 0003:04D8:F002.0021: invalid size value (89) for picolcd raw event (0) [ 291.857945][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 291.875966][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 291.889512][ T4655] usb 7-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 291.913024][ T4775] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.920237][ T4775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.928032][ T4655] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.946195][ T4655] usb 7-1: Product: syz [ 291.950533][ T4655] usb 7-1: Manufacturer: syz [ 291.988877][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 291.997204][ T4655] usb 7-1: SerialNumber: syz [ 292.019005][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 292.047266][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 292.059337][ T5591] usb 8-1: USB disconnect, device number 4 [ 292.081050][ T4775] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.088337][ T4775] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.105921][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 292.117861][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 292.165157][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 292.197928][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 292.218986][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 292.247121][ T4655] usb 7-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 292.260241][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 292.280565][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 292.349067][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 292.375984][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 292.392781][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 292.402641][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 292.423493][ T8736] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 292.964853][ T8947] hugetlbfs: Bad value '0x00000000ffffffff' for mount option 'uid' [ 292.964853][ T8947] [ 293.065025][ T4655] usb 7-1: failed to enable PITCH for EP 0x82 [ 293.076942][ T4655] usb 7-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 293.106603][ T4655] usb 7-1: clock source 0 is not valid, cannot use [ 293.145202][ T4655] usb 7-1: 2:1: cannot get freq (v2/v3): err -71 [ 293.152836][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 293.175085][ T4655] usb 7-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 293.196170][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 293.205751][ T26] audit: type=1326 audit(1790311804.723:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8951 comm="syz.7.1347" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f478cd9e159 code=0x0 [ 293.266851][ T8736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.292264][ T4655] usb 7-1: USB disconnect, device number 7 [ 293.636636][ T4424] udevd[4424]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 294.171652][ T8982] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1355'. [ 294.211510][ T8982] bond0: ARP target 1.4.0.0 is already present [ 294.231708][ T8982] bond0: option arp_ip_target: invalid value (1025) [ 294.514092][ T4545] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 294.676440][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 294.694188][ T4545] usb 8-1: Using ep0 maxpacket: 8 [ 294.701199][ T7838] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 294.701527][ T4545] usb 8-1: config index 0 descriptor too short (expected 74, got 45) [ 294.762596][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 294.774104][ T4545] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 294.786905][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 294.806043][ T4545] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 294.819761][ T8736] device veth0_vlan entered promiscuous mode [ 294.852982][ T4545] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 294.879917][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 294.890807][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 294.894141][ T4545] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 294.918810][ T4545] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 294.925983][ T8736] device veth1_vlan entered promiscuous mode [ 294.949487][ T4545] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 294.980721][ T4545] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.983609][ T7834] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 295.008698][ T7834] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 295.021139][ T7834] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 295.039681][ T7834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 295.087834][ T8736] device veth0_macvtap entered promiscuous mode [ 295.218579][ T4545] usb 8-1: GET_CAPABILITIES returned 0 [ 295.224525][ T4545] usbtmc 8-1:16.0: can't read capabilities [ 295.255792][ T8736] device veth1_macvtap entered promiscuous mode [ 295.332550][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.389336][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.464119][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.499983][ T9015] loop5: detected capacity change from 0 to 128 [ 295.504017][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.514238][ T4545] usb 8-1: USB disconnect, device number 5 [ 295.560235][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.593995][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.610278][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.642041][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.661497][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 295.680420][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.693333][ T8736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 295.704873][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 295.717817][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 295.746780][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 295.775220][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 295.814599][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.874161][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.891671][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.924001][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 295.963332][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 295.984783][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.034051][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.052098][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.074190][ T8736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 296.125340][ T8736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 296.185780][ T8736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 296.213829][ T5830] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 296.238185][ T5830] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 296.301017][ T8736] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.349265][ T8736] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.394161][ T8736] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.431560][ T8736] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 296.527950][ T9030] delete_channel: no stack [ 296.665606][ T4775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.693879][ T4775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.705427][ T5830] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 296.804610][ T5830] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.812528][ T5830] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.856512][ T7840] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 298.162941][ T9089] device macsec0 entered promiscuous mode [ 298.206681][ T9089] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1392'. [ 298.229693][ T9091] loop6: detected capacity change from 0 to 512 [ 298.254338][ T5595] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 298.263851][ T9089] device veth1_macvtap left promiscuous mode [ 298.463121][ T9091] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:477: comm syz.6.1393: Invalid block bitmap block 0 in block_group 0 [ 298.477145][ T5595] usb 9-1: Using ep0 maxpacket: 16 [ 298.483181][ T9091] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 298.494633][ T5595] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.506162][ T9091] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.1393: attempt to clear invalid blocks 983261 len 1 [ 298.513197][ T9089] device macsec0 left promiscuous mode [ 298.520951][ T5595] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 298.536634][ T9091] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.1393: invalid indirect mapped block 2683928664 (level 0) [ 298.561038][ T5595] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 298.584274][ T5595] usb 9-1: SerialNumber: syz [ 298.589767][ T9091] EXT4-fs error (device loop6): __ext4_get_inode_loc:4520: comm syz.6.1393: Invalid inode table block 0 in block_group 0 [ 298.619558][ T5595] hub 9-1:1.0: bad descriptor, ignoring hub [ 298.634212][ T5595] hub: probe of 9-1:1.0 failed with error -5 [ 298.641454][ T9091] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 298.691874][ T9091] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 298.735602][ T9091] EXT4-fs error (device loop6): __ext4_get_inode_loc:4520: comm syz.6.1393: Invalid inode table block 0 in block_group 0 [ 298.791350][ T9091] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 298.830789][ T9091] EXT4-fs error (device loop6): ext4_truncate:4325: inode #13: comm syz.6.1393: mark_inode_dirty error [ 298.881218][ T9091] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 298.929315][ T9091] EXT4-fs error (device loop6): __ext4_get_inode_loc:4520: comm syz.6.1393: Invalid inode table block 0 in block_group 0 [ 299.001055][ T9091] EXT4-fs (loop6): 1 truncate cleaned up [ 299.030753][ T9091] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 299.174028][ T3599] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 299.253873][ T7232] EXT4-fs (loop6): unmounting filesystem. [ 299.408257][ T9093] loop7: detected capacity change from 0 to 40427 [ 299.468131][ T9093] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 299.488539][ T9093] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 299.553081][ T9093] F2FS-fs (loop7): invalid crc_offset: 33558524 [ 299.627185][ T9093] F2FS-fs (loop7): Found nat_bits in checkpoint [ 299.714572][ T3599] usb 9-1: USB disconnect, device number 2 [ 299.842566][ T9093] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 299.893563][ T9093] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 299.952125][ T9126] loop6: detected capacity change from 0 to 256 [ 300.096208][ T9126] FAT-fs (loop6): Directory bread(block 64) failed [ 300.135376][ T9126] FAT-fs (loop6): Directory bread(block 65) failed [ 300.142099][ T9126] FAT-fs (loop6): Directory bread(block 66) failed [ 300.236448][ T9126] FAT-fs (loop6): Directory bread(block 67) failed [ 300.243150][ T9126] FAT-fs (loop6): Directory bread(block 68) failed [ 300.321367][ T9126] FAT-fs (loop6): Directory bread(block 69) failed [ 300.344223][ T9126] FAT-fs (loop6): Directory bread(block 70) failed [ 300.371339][ T9126] FAT-fs (loop6): Directory bread(block 71) failed [ 300.402902][ T9126] FAT-fs (loop6): Directory bread(block 72) failed [ 300.449268][ T9126] FAT-fs (loop6): Directory bread(block 73) failed [ 300.649107][ T4473] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 300.854076][ T4473] usb 1-1: Using ep0 maxpacket: 32 [ 300.863379][ T4473] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 300.922238][ T4473] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.951046][ T4473] usb 1-1: Product: syz [ 300.961167][ T4473] usb 1-1: Manufacturer: syz [ 300.976440][ T4473] usb 1-1: SerialNumber: syz [ 301.001005][ T4473] usb 1-1: config 0 descriptor?? [ 301.009306][ T9151] loop5: detected capacity change from 0 to 7 [ 301.037595][ T9151] Dev loop5: unable to read RDB block 7 [ 301.043301][ T9147] loop7: detected capacity change from 0 to 2048 [ 301.062155][ T9151] loop5: AHDI p1 p2 p3 [ 301.120849][ T9147] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 301.130221][ T9151] loop5: partition table partially beyond EOD, truncated [ 301.152332][ T9151] loop5: p1 size 16318467 extends beyond EOD, truncated [ 301.206297][ T9151] loop5: p2 start 167772160 is beyond EOD, truncated [ 301.421618][ T9157] loop8: detected capacity change from 0 to 256 [ 301.452948][ T4473] airspy 1-1:0.0: Board ID: 00 [ 301.456879][ T4359] udevd[4359]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 301.458675][ T4473] airspy 1-1:0.0: Firmware version: [ 301.822310][ T9140] loop5: detected capacity change from 0 to 32768 [ 301.884929][ T9140] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.1407 (9140) [ 301.996044][ T9140] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 302.044537][ T9140] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 302.056466][ T4473] airspy 1-1:0.0: usb_control_msg() failed -71 request 12 [ 302.078501][ T4473] airspy 1-1:0.0: Registered as swradio24 [ 302.104244][ T9140] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 302.124065][ T4473] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 302.144228][ T9140] BTRFS info (device loop5): use zstd compression, level 3 [ 302.153862][ T4473] usb 1-1: USB disconnect, device number 25 [ 302.193710][ T9140] BTRFS info (device loop5): using free space tree [ 302.485156][ T9140] BTRFS info (device loop5): enabling ssd optimizations [ 302.765286][ T5465] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 302.856199][ T4473] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 302.887686][ T26] audit: type=1326 audit(1790311814.403:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.0.1422" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00d19e159 code=0x7ffc0000 [ 303.036012][ T26] audit: type=1326 audit(1790311814.403:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.0.1422" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00d19e159 code=0x7ffc0000 [ 303.085892][ T4473] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 303.114077][ T4473] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 303.150151][ T26] audit: type=1326 audit(1790311814.403:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.0.1422" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00d19e159 code=0x7ffc0000 [ 303.165021][ T4473] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 303.230690][ T4972] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop5 scanned by udevd (4972) [ 303.247569][ T4473] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.259804][ T26] audit: type=1326 audit(1790311814.433:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.0.1422" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa00d19e159 code=0x7ffc0000 [ 303.303282][ T9199] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 303.333196][ T26] audit: type=1326 audit(1790311814.433:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.0.1422" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00d19e159 code=0x7ffc0000 [ 303.506561][ T26] audit: type=1326 audit(1790311814.433:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.0.1422" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00d19e159 code=0x7ffc0000 [ 303.630972][ T26] audit: type=1326 audit(1790311814.433:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.0.1422" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00d19e159 code=0x7ffc0000 [ 303.762319][ T26] audit: type=1326 audit(1790311814.433:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.0.1422" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00d19e159 code=0x7ffc0000 [ 303.905258][ T26] audit: type=1326 audit(1790311814.433:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.0.1422" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fa00d19e159 code=0x7ffc0000 [ 303.906195][ T125] usb 9-1: USB disconnect, device number 3 [ 304.027820][ T26] audit: type=1326 audit(1790311814.433:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9203 comm="syz.0.1422" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00d19e159 code=0x7ffc0000 [ 305.144072][ T125] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 305.334132][ T125] usb 9-1: Using ep0 maxpacket: 16 [ 305.341310][ T125] usb 9-1: config 0 interface 0 has no altsetting 0 [ 305.363093][ T125] usb 9-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00 [ 305.393270][ T125] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.421824][ T125] usb 9-1: config 0 descriptor?? [ 305.482537][ T9223] loop5: detected capacity change from 0 to 32768 [ 305.605222][ T9230] loop7: detected capacity change from 0 to 32768 [ 305.821384][ T9230] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 305.876392][ T125] input: HID 258a:6a88 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:258A:6A88.0022/input/input32 [ 306.065691][ T125] itetech 0003:258A:6A88.0022: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 258a:6a88] on usb-dummy_hcd.8-1/input0 [ 306.076532][ T8149] ocfs2: Unmounting device (7,7) on (node local) [ 306.256181][ T125] usb 9-1: USB disconnect, device number 4 [ 306.543406][ T9270] fido_id[9270]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 306.582262][ T9278] FAULT_INJECTION: forcing a failure. [ 306.582262][ T9278] name failslab, interval 1, probability 0, space 0, times 0 [ 306.624539][ T9278] CPU: 0 PID: 9278 Comm: syz.5.1442 Not tainted syzkaller #0 [ 306.632139][ T9278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 306.642425][ T9278] Call Trace: [ 306.645748][ T9278] [ 306.648715][ T9278] dump_stack_lvl+0x188/0x24e [ 306.653454][ T9278] ? show_regs_print_info+0x12/0x12 [ 306.658712][ T9278] ? load_image+0x410/0x410 [ 306.663282][ T9278] ? __lock_acquire+0x7c40/0x7c40 [ 306.668367][ T9278] should_fail_ex+0x390/0x4c0 [ 306.673106][ T9278] should_failslab+0x5/0x20 [ 306.677748][ T9278] slab_pre_alloc_hook+0x59/0x300 [ 306.682826][ T9278] ? __split_vma+0x4f0/0x4f0 [ 306.687466][ T9278] ? vma_merge+0x883/0xa50 [ 306.691934][ T9278] kmem_cache_alloc+0x56/0x2f0 [ 306.696835][ T9278] ? vm_area_dup+0x23/0x1a0 [ 306.701827][ T9278] vm_area_dup+0x23/0x1a0 [ 306.706212][ T9278] __split_vma+0xb9/0x4f0 [ 306.710602][ T9278] madvise_update_vma+0x3de/0xad0 [ 306.715694][ T9278] do_madvise+0xfae/0x3520 [ 306.720167][ T9278] ? release_firmware_map_entry+0x187/0x187 [ 306.726108][ T9278] ? plist_add+0x3d7/0x490 [ 306.731802][ T9278] ? madvise_set_anon_name+0x420/0x420 [ 306.737756][ T9278] ? schedule+0xd0/0x180 [ 306.742362][ T9278] ? futex_wait_queue+0x23/0x1b0 [ 306.747334][ T9278] ? futex_wait_queue+0x134/0x1b0 [ 306.752466][ T9278] ? futex_unqueue+0xc7/0xf0 [ 306.757069][ T9278] ? futex_wait+0x4a3/0x5c0 [ 306.761588][ T9278] ? futex_wait_setup+0x270/0x270 [ 306.766648][ T9278] ? file_end_write+0x156/0x250 [ 306.771517][ T9278] ? vfs_write+0x777/0x9a0 [ 306.776040][ T9278] ? do_futex+0x310/0x320 [ 306.780390][ T9278] ? __ia32_sys_get_robust_list+0x100/0x100 [ 306.786406][ T9278] ? lock_chain_count+0x20/0x20 [ 306.791277][ T9278] __x64_sys_madvise+0xa2/0xb0 [ 306.796145][ T9278] do_syscall_64+0x4c/0xa0 [ 306.800573][ T9278] ? clear_bhb_loop+0x60/0xb0 [ 306.805261][ T9278] ? clear_bhb_loop+0x60/0xb0 [ 306.809951][ T9278] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 306.815863][ T9278] RIP: 0033:0x7f110659e159 [ 306.820290][ T9278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.839913][ T9278] RSP: 002b:00007f1107447028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 306.848342][ T9278] RAX: ffffffffffffffda RBX: 00007f1106825fa0 RCX: 00007f110659e159 [ 306.856323][ T9278] RDX: 000000000000000f RSI: 0000000000003000 RDI: 0000200000001000 [ 306.864325][ T9278] RBP: 00007f110663506b R08: 0000000000000000 R09: 0000000000000000 [ 306.872348][ T9278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 306.880359][ T9278] R13: 00007f1106826038 R14: 00007f1106825fa0 R15: 00007ffda53c13b8 [ 306.888394][ T9278] [ 307.247003][ T9291] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 307.683827][ T9305] loop8: detected capacity change from 0 to 2048 [ 307.705132][ T5595] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 307.776889][ T9309] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 307.843411][ T9309] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 307.881202][ T9309] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4) [ 307.914153][ T5595] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.914907][ T9313] Bluetooth: MGMT ver 1.22 [ 307.935991][ T9309] Remounting filesystem read-only [ 307.944520][ T5595] usb 8-1: New USB device found, idVendor=1ae7, idProduct=9001, bcdDevice= 0.00 [ 307.953632][ T5595] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.053326][ T5595] usb 8-1: config 0 descriptor?? [ 308.062954][ T8736] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer [ 308.237466][ T9321] loop8: detected capacity change from 0 to 512 [ 308.296013][ T9316] loop6: detected capacity change from 0 to 8192 [ 308.323264][ T9321] EXT4-fs error (device loop8): ext4_xattr_inode_iget:401: inode #2: comm syz.8.1461: missing EA_INODE flag [ 308.359317][ T9321] EXT4-fs error (device loop8): ext4_xattr_inode_iget:406: comm syz.8.1461: error while reading EA inode 2 err=-117 [ 308.388816][ T9316] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 308.424331][ T9316] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal [ 308.436518][ T9321] EXT4-fs (loop8): 1 orphan inode deleted [ 308.442422][ T9321] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 308.444225][ T9316] REISERFS (device loop6): using ordered data mode [ 308.458910][ T9316] reiserfs: using flush barriers [ 308.466856][ T9316] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 308.484372][ T9316] REISERFS (device loop6): checking transaction log (loop6) [ 308.495631][ T5595] speedlink 0003:1AE7:9001.0023: unbalanced collection at end of report description [ 308.523667][ T5595] speedlink: probe of 0003:1AE7:9001.0023 failed with error -22 [ 308.677577][ T8736] EXT4-fs (loop8): unmounting filesystem. [ 308.757002][ T4480] usb 8-1: USB disconnect, device number 6 [ 308.768785][ T9316] REISERFS (device loop6): Using tea hash to sort names [ 308.793804][ T9316] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage. [ 309.020702][ T9335] loop8: detected capacity change from 0 to 22 [ 309.042526][ T9335] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 309.084396][ T9335] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 309.144264][ T4290] Bluetooth: hci2: command 0x0406 tx timeout [ 309.265977][ T9339] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 309.762967][ T9357] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 309.855142][ T9364] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 310.191846][ T9377] loop7: detected capacity change from 0 to 2048 [ 310.303909][ T9377] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 310.387612][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 310.387629][ T26] audit: type=1800 audit(1790312076.901:77): pid=9377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1482" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 310.497095][ T9392] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1486'. [ 310.508260][ T8149] EXT4-fs (loop7): unmounting filesystem. [ 310.531568][ T9392] netlink: 'syz.6.1486': attribute type 1 has an invalid length. [ 310.552281][ T9392] netlink: 'syz.6.1486': attribute type 2 has an invalid length. [ 310.553280][ T3599] kernel read not supported for file /kmsg (pid: 3599 comm: kworker/1:3) [ 311.105888][ T9411] device dummy0 entered promiscuous mode [ 311.171197][ T9411] device dummy0 left promiscuous mode [ 311.221932][ T9413] loop7: detected capacity change from 0 to 1764 [ 311.368222][ T9418] loop6: detected capacity change from 0 to 512 [ 311.401976][ T9418] EXT4-fs: Ignoring removed oldalloc option [ 311.533766][ T9418] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 311.640120][ T26] audit: type=1800 audit(1790312078.151:78): pid=9418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1497" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 311.939224][ T9434] FAULT_INJECTION: forcing a failure. [ 311.939224][ T9434] name failslab, interval 1, probability 0, space 0, times 0 [ 311.969781][ T9436] loop7: detected capacity change from 0 to 16 [ 311.989333][ T9434] CPU: 0 PID: 9434 Comm: syz.8.1502 Not tainted syzkaller #0 [ 311.996976][ T9434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 312.006500][ T9436] erofs: (device loop7): mounted with root inode @ nid 36. [ 312.007228][ T9434] Call Trace: [ 312.007239][ T9434] [ 312.020738][ T9434] dump_stack_lvl+0x188/0x24e [ 312.025574][ T9434] ? show_regs_print_info+0x12/0x12 [ 312.030834][ T9434] ? load_image+0x410/0x410 [ 312.035397][ T9434] ? __might_sleep+0xd0/0xd0 [ 312.040066][ T9434] ? __lock_acquire+0x7c40/0x7c40 [ 312.045157][ T9434] should_fail_ex+0x390/0x4c0 [ 312.050149][ T9434] should_failslab+0x5/0x20 [ 312.054727][ T9434] slab_pre_alloc_hook+0x59/0x300 [ 312.059904][ T9434] kmem_cache_alloc_lru+0x49/0x2e0 [ 312.065168][ T9434] ? __d_alloc+0x2e/0x6e0 [ 312.069743][ T9434] __d_alloc+0x2e/0x6e0 [ 312.073946][ T9434] ? d_alloc_pseudo+0xe/0x70 [ 312.078672][ T9434] d_alloc_pseudo+0x19/0x70 [ 312.083226][ T9434] alloc_file_pseudo+0xe0/0x200 [ 312.088134][ T9434] ? alloc_empty_file_noaccount+0x80/0x80 [ 312.093995][ T9434] ? alloc_fd+0x590/0x640 [ 312.098551][ T9434] sock_alloc_file+0xb3/0x240 [ 312.103292][ T9434] __sys_socket+0x12d/0x190 [ 312.107845][ T9434] __x64_sys_socket+0x76/0x80 [ 312.112645][ T9434] do_syscall_64+0x4c/0xa0 [ 312.117171][ T9434] ? clear_bhb_loop+0x60/0xb0 [ 312.121861][ T9434] ? clear_bhb_loop+0x60/0xb0 [ 312.126572][ T9434] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 312.132654][ T9434] RIP: 0033:0x7f6c6cd9e159 [ 312.137276][ T9434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.157085][ T9434] RSP: 002b:00007f6c6dcfa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 312.165616][ T9434] RAX: ffffffffffffffda RBX: 00007f6c6d025fa0 RCX: 00007f6c6cd9e159 [ 312.174321][ T9434] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 312.182496][ T9434] RBP: 00007f6c6ce3506b R08: 0000000000000000 R09: 0000000000000000 [ 312.190593][ T9434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.198672][ T9434] R13: 00007f6c6d026038 R14: 00007f6c6d025fa0 R15: 00007ffeb4299db8 [ 312.206681][ T9434] [ 312.254842][ T7232] EXT4-fs (loop6): unmounting filesystem. [ 312.524743][ T9443] misc userio: Begin command sent, but we're already running [ 312.944184][ T4480] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 312.963748][ T4475] kernel read not supported for file /usbmon9 (pid: 4475 comm: kworker/0:9) [ 312.979018][ T9459] netlink: 'syz.6.1513': attribute type 12 has an invalid length. [ 313.156795][ T4480] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 313.168501][ T4480] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 313.179126][ T4480] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 313.199011][ T4480] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 313.217786][ T4480] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 313.237726][ T4480] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 313.256379][ T4480] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 313.271903][ T4480] usb 9-1: Product: syz [ 313.280852][ T4480] usb 9-1: Manufacturer: syz [ 313.303462][ T4480] cdc_wdm 9-1:1.0: skipping garbage [ 313.316479][ T4480] cdc_wdm 9-1:1.0: skipping garbage [ 313.329996][ T4480] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 313.342978][ T4480] cdc_wdm 9-1:1.0: Unknown control protocol [ 313.659314][ T9473] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input34 [ 313.924360][ T9484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1523'. [ 313.959377][ T9484] device ip6gre1 entered promiscuous mode [ 313.995776][ T4480] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 314.006536][ T4480] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 314.045434][ T4475] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 314.084456][ T4475] usb 9-1: USB disconnect, device number 5 [ 314.344198][ T4475] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 314.634445][ T4475] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 314.677468][ T9505] loop8: detected capacity change from 0 to 512 [ 314.765120][ T9505] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 314.804395][ T9505] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 314.900406][ T9505] EXT4-fs (loop8): orphan cleanup on readonly fs [ 314.935481][ T9505] Quota error (device loop8): v2_read_file_info: Free block number 1 out of range (1, 6). [ 314.954626][ T9505] EXT4-fs warning (device loop8): ext4_enable_quotas:7093: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 315.062691][ T9505] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 315.118653][ T9505] EXT4-fs error (device loop8): mb_free_blocks:1839: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 315.174141][ T9505] EXT4-fs (loop8): Remounting filesystem read-only [ 315.204796][ T9505] EXT4-fs (loop8): 1 truncate cleaned up [ 315.210757][ T9505] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 315.428635][ T8736] EXT4-fs (loop8): unmounting filesystem. [ 315.555880][ T9525] Format for deleting device is "id" (uint). [ 316.560892][ T5595] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 316.753335][ T9530] loop8: detected capacity change from 0 to 131072 [ 316.774096][ T9530] F2FS-fs (loop8): invalid crc value [ 316.774312][ T5595] usb 8-1: Using ep0 maxpacket: 16 [ 316.807287][ T5595] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.832880][ T9530] F2FS-fs (loop8): Found nat_bits in checkpoint [ 316.839439][ T5595] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.839487][ T5595] usb 8-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 316.839512][ T5595] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.906271][ T5595] usb 8-1: config 0 descriptor?? [ 316.929774][ T9530] F2FS-fs (loop8): Cannot turn on quotas: -2 on 2 [ 316.976969][ T9530] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 317.297246][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.333092][ T5595] apple 0003:05AC:024B.0024: unknown global tag 0xe [ 317.350649][ T5595] apple 0003:05AC:024B.0024: item 0 1 1 14 parsing failed [ 317.379870][ T5595] apple 0003:05AC:024B.0024: parse failed [ 317.407954][ T5595] apple: probe of 0003:05AC:024B.0024 failed with error -22 [ 317.565273][ T5595] usb 8-1: USB disconnect, device number 7 [ 318.251061][ T9583] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 318.251061][ T9583] The task syz.5.1552 (9583) triggered the difference, watch for misbehavior. [ 318.414173][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 318.475271][ T9589] loop6: detected capacity change from 0 to 1024 [ 318.544076][ T9589] hfsplus: xattr searching failed [ 318.614472][ T9589] hfsplus: walked past end of dir [ 320.271337][ T9604] loop7: detected capacity change from 0 to 32768 [ 320.444611][ T9604] XFS (loop7): Mounting V5 Filesystem [ 320.628307][ T9604] XFS (loop7): Ending clean mount [ 320.772922][ T9604] XFS (loop7): User initiated shutdown received. [ 320.801435][ T9604] XFS (loop7): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 320.851229][ T9604] XFS (loop7): Please unmount the filesystem and rectify the problem(s) [ 320.859866][ T9614] loop8: detected capacity change from 0 to 40427 [ 320.927121][ T9614] F2FS-fs (loop8): invalid crc value [ 321.064144][ T9614] F2FS-fs (loop8): Found nat_bits in checkpoint [ 321.155069][ T8149] XFS (loop7): Unmounting Filesystem [ 321.278860][ T9614] F2FS-fs (loop8): Cannot turn on quotas: -2 on 0 [ 321.427930][ T9614] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 321.813189][ T9662] netlink: 'syz.6.1570': attribute type 4 has an invalid length. [ 321.892651][ T9662] netlink: 'syz.6.1570': attribute type 4 has an invalid length. [ 321.903345][ T8736] syz-executor: attempt to access beyond end of device [ 321.903345][ T8736] loop8: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 322.249115][ T9668] loop6: detected capacity change from 0 to 512 [ 322.425069][ T9668] EXT4-fs error (device loop6): ext4_xattr_inode_iget:401: comm syz.6.1573: inode #1048320: comm syz.6.1573: iget: illegal inode # [ 322.537306][ T9668] EXT4-fs (loop6): Remounting filesystem read-only [ 322.597586][ T9668] EXT4-fs error (device loop6): ext4_xattr_inode_iget:406: comm syz.6.1573: error while reading EA inode 1048320 err=-117 [ 322.669210][ T9668] EXT4-fs (loop6): Remounting filesystem read-only [ 322.690393][ T9668] EXT4-fs (loop6): 1 orphan inode deleted [ 322.709115][ T9668] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 322.964618][ T7232] EXT4-fs (loop6): unmounting filesystem. [ 323.294684][ T9689] ip_tables: iptables: counters copy to user failed while replacing table [ 323.341383][ T4475] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 323.648215][ T9698] loop7: detected capacity change from 0 to 512 [ 323.829889][ T4475] usb 1-1: unable to get BOS descriptor or descriptor too short [ 323.840253][ T4475] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.843897][ T9698] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 323.860481][ T9698] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.972147][ T4475] usb 1-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 324.014836][ T4475] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 324.052228][ T4475] usb 1-1: Product: syz [ 324.077149][ T4475] usb 1-1: Manufacturer: syz [ 324.095562][ T8149] EXT4-fs (loop7): unmounting filesystem. [ 324.100768][ T4475] usb 1-1: Found UVC 1.00 device syz (8086:0ad2) [ 324.497812][ T4475] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 324.522192][ T4475] videodev: could not get a free minor [ 324.561077][ T4475] uvcvideo 1-1:1.1: Failed to register meta-cap device (-23). [ 324.588423][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805652c800: rx timeout, send abort [ 324.609173][ T4475] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input35 [ 324.761491][ T4322] usb 1-1: USB disconnect, device number 26 [ 325.099066][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805652c800: abort rx timeout. Force session deactivation [ 325.597371][ T9756] loop6: detected capacity change from 0 to 512 [ 325.700360][ T9756] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 325.758211][ T9756] EXT4-fs (loop6): 1 truncate cleaned up [ 325.792218][ T9756] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 325.920175][ T26] audit: type=1800 audit(1790312092.431:79): pid=9756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1599" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 326.064072][ T4322] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 326.266206][ T4322] usb 6-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 326.282795][ T4322] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.316021][ T4322] usb 6-1: config 0 descriptor?? [ 326.339313][ T7232] EXT4-fs (loop6): unmounting filesystem. [ 326.465914][ T9777] loop7: detected capacity change from 0 to 2048 [ 326.517693][ T9777] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 326.582879][ T9777] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 326.729839][ T4322] microsoft 0003:045E:009D.0025: unknown main item tag 0x2 [ 326.757894][ T4322] microsoft 0003:045E:009D.0025: unknown main item tag 0x1 [ 326.794556][ T4322] microsoft 0003:045E:009D.0025: unknown main item tag 0x0 [ 326.823470][ T4322] microsoft 0003:045E:009D.0025: unknown main item tag 0x0 [ 326.864760][ T4322] microsoft 0003:045E:009D.0025: unknown main item tag 0x0 [ 326.872390][ T4322] microsoft 0003:045E:009D.0025: ignoring exceeding usage max [ 326.929125][ T9763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.963160][ T4322] microsoft 0003:045E:009D.0025: unknown main item tag 0x5 [ 326.978347][ T9763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.994182][ T4322] microsoft 0003:045E:009D.0025: unknown main item tag 0x6 [ 327.024372][ T4322] microsoft 0003:045E:009D.0025: hidraw0: USB HID v0.c4 Device [HID 045e:009d] on usb-dummy_hcd.5-1/input0 [ 327.066979][ T4322] microsoft 0003:045E:009D.0025: no inputs found [ 327.073509][ T4322] microsoft 0003:045E:009D.0025: could not initialize ff, continuing anyway [ 327.133548][ T4322] usb 6-1: USB disconnect, device number 16 [ 327.384604][ T9799] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1608'. [ 327.433895][ T9799] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1608'. [ 327.441115][ T9795] fido_id[9795]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 327.443420][ T4475] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 327.465324][ T9797] loop6: detected capacity change from 0 to 4096 [ 327.504554][ T9797] EXT4-fs: Ignoring removed orlov option [ 327.520270][ T9797] EXT4-fs (loop6): Test dummy encryption mode enabled [ 327.539210][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 327.620298][ T9797] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 327.685993][ T4475] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 327.742305][ T4475] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 327.818513][ T4475] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 327.850184][ T4475] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 327.908333][ T7232] EXT4-fs (loop6): unmounting filesystem. [ 327.910339][ T4475] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 327.937131][ T4475] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.950292][ T4475] usb 1-1: Product: syz [ 327.957514][ T4475] usb 1-1: Manufacturer: syz [ 327.962292][ T4475] usb 1-1: SerialNumber: syz [ 327.981387][ T9787] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 328.035142][ T4475] cdc_mbim 1-1:1.0: skipping garbage [ 328.204721][ T4322] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 328.251660][ T9787] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 328.282126][ T9787] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 328.364235][ T4480] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 328.396525][ T4322] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.417412][ T4322] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 328.436998][ T4322] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 328.447603][ T4322] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 328.471739][ T4322] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 328.491480][ T4322] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.521995][ T9814] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 328.539283][ T9814] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 328.560399][ T4322] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 328.572518][ T4480] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.593354][ T4322] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 328.602865][ T4480] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.613594][ T4322] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 328.629142][ T4480] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 328.644871][ T4322] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 328.653452][ T4480] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 328.680048][ T4322] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 88 [ 328.694143][ T4480] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.702753][ T4322] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 328.717805][ T4480] usb 8-1: config 0 descriptor?? [ 328.727969][ T4322] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 328.805459][ T9834] loop8: detected capacity change from 0 to 16 [ 328.887524][ T9834] erofs: (device loop8): mounted with root inode @ nid 36. [ 328.942598][ T9787] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 328.962305][ T9787] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 329.004782][ T4475] cdc_mbim 1-1:1.0: setting rx_max = 16384 [ 329.163029][ T4480] plantronics 0003:047F:FFFF.0026: unknown main item tag 0xd [ 329.194261][ T4480] plantronics 0003:047F:FFFF.0026: No inputs registered, leaving [ 329.215480][ T4475] cdc_mbim 1-1:1.0: cdc-wdm0: USB WDM device [ 329.239470][ T4480] plantronics 0003:047F:FFFF.0026: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 329.259107][ T4475] cdc_mbim 1-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.0-1, CDC MBIM, 7e:c6:86:1f:b8:e9 [ 329.312054][ T4475] usb 1-1: USB disconnect, device number 27 [ 329.385582][ T4475] cdc_mbim 1-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.0-1, CDC MBIM [ 329.433123][ T4322] usb 8-1: USB disconnect, device number 8 [ 329.439538][ T4480] usb 6-1: USB disconnect, device number 17 [ 329.460779][ T4480] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 329.492622][ T4480] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 329.525265][ T4480] keyspan 6-1:1.0: device disconnected [ 329.681084][ T9844] fido_id[9844]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 329.850397][ T9852] device hsr0 entered promiscuous mode [ 329.859761][ T9852] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1627'. [ 330.628280][ T5595] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 330.876072][ T5595] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 330.906948][ T5595] usb 9-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 330.958729][ T5595] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 331.004521][ T5595] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 331.040994][ T5595] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 331.076950][ T5595] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 331.097445][ T5595] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 331.114085][ T5595] usb 9-1: Product: syz [ 331.118696][ T5595] usb 9-1: Manufacturer: syz [ 331.145161][ T5595] cdc_wdm 9-1:1.0: skipping garbage [ 331.171156][ T5595] cdc_wdm 9-1:1.0: skipping garbage [ 331.194140][ T4475] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 331.213428][ T5595] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 331.220006][ T5595] cdc_wdm 9-1:1.0: Unknown control protocol [ 331.386978][ T4475] usb 7-1: unable to get BOS descriptor or descriptor too short [ 331.401661][ T4475] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 132, using maximum allowed: 30 [ 331.422637][ T4322] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 331.451908][ T4475] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.483773][ T4475] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 132 [ 331.504054][ T4480] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 331.514474][ T4475] usb 7-1: New USB device found, idVendor=056a, idProduct=5000, bcdDevice= 0.00 [ 331.527567][ T4475] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.550213][ T4475] usb 7-1: config 0 descriptor?? [ 331.617189][ T4322] usb 6-1: unable to get BOS descriptor or descriptor too short [ 331.627946][ T4322] usb 6-1: config 1 has an invalid interface association descriptor of length 2, skipping [ 331.639070][ T4322] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.649928][ T4322] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 331.668971][ T4322] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 331.680001][ T4322] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.688480][ T4322] usb 6-1: Product: syz [ 331.693007][ T4322] usb 6-1: Manufacturer: syz [ 331.698988][ T4322] usb 6-1: SerialNumber: syz [ 331.709942][ T4480] usb 8-1: unable to get BOS descriptor or descriptor too short [ 331.728156][ T4480] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.738987][ T4480] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 331.753038][ T4480] usb 8-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 331.764134][ T4480] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.772511][ T4480] usb 8-1: Product: syz [ 331.784524][ T4480] usb 8-1: Manufacturer: syz [ 331.790454][ T4480] usb 8-1: SerialNumber: syz [ 331.810007][ T4480] usb 8-1: selecting invalid altsetting 1 [ 331.819413][ T4480] usb 8-1: unit 6 not found! [ 331.933914][ T4322] cdc_ncm 6-1:1.0: skipping garbage [ 331.939329][ T4322] cdc_ncm 6-1:1.0: skipping garbage [ 331.946422][ T4322] cdc_ncm 6-1:1.0: invalid descriptor buffer length [ 331.956295][ T4322] cdc_ncm 6-1:1.0: NCM or ECM functional descriptors missing [ 331.963829][ T4322] cdc_ncm 6-1:1.0: bind() failure [ 331.976664][ T4322] usb 6-1: USB disconnect, device number 18 [ 332.022116][ T4475] wacom 0003:056A:5000.0027: hidraw0: USB HID v8.00 Joystick [HID 056a:5000] on usb-dummy_hcd.6-1/input0 [ 332.127312][ T4655] usb 9-1: USB disconnect, device number 6 [ 332.216567][ T5595] usb 7-1: USB disconnect, device number 8 [ 332.627658][ T4480] usb 8-1: 2:0: failed to get current value for ch 0 (-71) [ 332.718306][ T4480] snd-usb-audio: probe of 8-1:1.0 failed with error -22 [ 332.736507][ T9910] printk: console [ttyS0] disabled syzkaller syzkaller login: Read from remote host us-central1-ssh-serialport.googleapis.com: Connection reset by peer client_loop: send disconnect: Broken pipe