last executing test programs: 2m24.218183092s ago: executing program 3 (id=4): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) setpgid(r0, r0) setpgid(0x0, r0) 2m23.656897617s ago: executing program 3 (id=6): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000080)=[{r0, 0x10000}], 0x1, 0x0, 0x0, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000140)={0x6, 0xfb, 0x40000, {r0}}, 0x20) 2m23.200626968s ago: executing program 3 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) chdir(&(0x7f0000000200)='./file0/file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000000)='sysfs\x00', 0x1214040, 0x0) 2m22.634180463s ago: executing program 3 (id=12): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001340)=@newqdisc={0x30, 0x24, 0xd0f, 0x4703d2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x24000040}, 0xc080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x3f}, 0x4004814) 2m21.888288812s ago: executing program 3 (id=16): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffffffff, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a40001000000010902"], 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000100)=0x7) 2m21.453771453s ago: executing program 32 (id=16): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0xffffffff, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0) syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a40001000000010902"], 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000100)=0x7) 1m4.994681324s ago: executing program 4 (id=479): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x240540c7, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="f6", 0x1, 0x20048081, 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x400000000000000) 1m4.688448382s ago: executing program 4 (id=481): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x33, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x4, 0x2001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc090}, 0x48006) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x13, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2827e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac008000000000000200", "f4bd000000801900", [0x8, 0xffffffff9673e359]}}) 1m4.287716412s ago: executing program 4 (id=485): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000000001801000020646c4200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m3.9832899s ago: executing program 4 (id=488): mkdir(&(0x7f00000001c0)='./file0\x00', 0x124) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x103090, 0x0) mount$bind(&(0x7f0000001900)='.\x00', &(0x7f0000000380)='./file0/file0\x00', 0x0, 0x2a05004, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 1m3.792408565s ago: executing program 4 (id=490): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$cgroup_pid(r2, &(0x7f00000003c0), 0xffffffa0) getsockopt$sock_buf(r2, 0x1, 0x1a, 0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000e, 0x204031, 0xffffffffffffffff, 0xd0c6f000) 1m3.20340464s ago: executing program 4 (id=493): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 1m2.81049541s ago: executing program 33 (id=493): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 26.086495977s ago: executing program 1 (id=709): syz_mount_image$xfs(&(0x7f0000000280), &(0x7f0000009740)='./file1\x00', 0x8, &(0x7f0000009780), 0x1, 0x9798, &(0x7f0000016540)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f00000007c0)) chdir(&(0x7f0000000140)='./bus\x00') syz_mount_image$vfat(&(0x7f0000006600), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000cc0)) syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f0000001180)) symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00') rename(&(0x7f0000000080)='.\x02\x00', &(0x7f0000000100)='.\x02/file0\x00') 24.727719112s ago: executing program 1 (id=715): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x4000007f, @empty, 0x1}, 0x1c) listen(r0, 0x0) 22.992321596s ago: executing program 1 (id=721): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r1, @ANYBLOB="08000500", @ANYRES32=r1, @ANYBLOB="1c00"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x240408d4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="e8000000190001002dbd7000fbdbdf2502202000ff02ff020018000008000100ac1414aac100098026"], 0xe8}, 0x1, 0x0, 0x0, 0x44050}, 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x4000, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 22.812682081s ago: executing program 1 (id=723): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000300)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x7, &(0x7f0000000e00)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000080)='$', 0x1, 0x0, 0x0, 0x0, r2}]) 22.235637236s ago: executing program 1 (id=725): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x1, 0x1, 0x0, 0x200000, &(0x7f0000200000/0x200000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000c00000/0x18000)=nil, &(0x7f0000002000)=[@text32={0x20, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001000)={0x1, 0x0, 0x2000000, 0x200000, &(0x7f0000200000/0x200000)=nil}) 21.792389278s ago: executing program 1 (id=728): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) personality(0x4100001) ppoll(0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) 21.222027562s ago: executing program 34 (id=728): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) personality(0x4100001) ppoll(0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) 5.988882155s ago: executing program 2 (id=809): syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') 5.40753179s ago: executing program 2 (id=812): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x117) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) removexattr(&(0x7f00000002c0)='./file0/file1\x00', &(0x7f0000000300)=@known='system.posix_acl_access\x00') 5.100321448s ago: executing program 7 (id=731): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000019, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x20045a, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10a942, 0x9f667fd378a54ed4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) 5.058289489s ago: executing program 2 (id=815): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/19, 0x13}}], 0x1, 0x40000002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x10000005, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 4.723157408s ago: executing program 5 (id=819): r0 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000108c0d020140000102030109021200010105"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x409}}}, 0x0) 4.64635314s ago: executing program 2 (id=821): r0 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x1, 0x21, 0xeb}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x8, 0x0, 0x0, 'queue0\x00', 0xffffffff}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000040)={0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, 0x76e0}) close_range(r0, 0xffffffffffffffff, 0x0) 4.565082111s ago: executing program 7 (id=822): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[], 0x3, 0x2b5, &(0x7f0000000380)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r0, 0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x4000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) fadvise64(r0, 0xfffffffffffffffe, 0x84, 0x4) 4.178862032s ago: executing program 2 (id=824): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) 3.972882127s ago: executing program 7 (id=825): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = eventfd2(0x74a6, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000280)="00ffffffffffffff", 0x8}], 0x1f) 3.488579449s ago: executing program 2 (id=828): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f0000000340)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x7000000) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/28, 0x1211000, 0x800}, 0x20) 2.676903s ago: executing program 5 (id=832): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x6, @local, 0x1}]}, &(0x7f00000001c0)=0x10) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={r2}, 0x8) 2.080637486s ago: executing program 7 (id=834): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x9, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) 2.047388876s ago: executing program 6 (id=835): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 1.866594651s ago: executing program 7 (id=836): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a, 0x10000}, 0x9c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0xf, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x1, 0x54, 0x0, 0x1}, 0x9c) 1.799094353s ago: executing program 6 (id=837): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0xa0, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x14044804, &(0x7f0000000140)={0xa, 0x4e21, 0x767, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}, 0x1c) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/127, 0xfffffffffffffca2}, 0x5}], 0x1, 0x40012041, 0x0) 1.624319018s ago: executing program 5 (id=838): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) mkdirat$cgroup(r0, &(0x7f0000000080)='syz1\x00', 0x1ff) mkdirat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x1ff) sendfile(r1, r1, 0x0, 0x9) 1.601825398s ago: executing program 6 (id=839): openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0xa0201, 0x0) write$dsp(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0xc0010004, 0x0, 0x10000000001780}]}) 1.484886801s ago: executing program 7 (id=840): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) writev(r1, &(0x7f0000008d40)=[{&(0x7f0000007a00)="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", 0xf91}], 0x1) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005880)=ANY=[@ANYBLOB="6a71666d743d76667376312c686561702c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c666c7573685f6d657267652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030303032332c646973636172642c6e6f61636c2c6673796e635f6d6f64653d706f7369782c616c6c6f635f6d6f64653d64656661756c742c6e6f65782762248bc183140000656e745f63616368652c6163746976655f6c6f67733d322c6661756c745f747970653d3030303030303030303030303136"], 0x1, 0x5505, &(0x7f0000000340)="$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") r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x3bf, 0x101, 0x147}}) ioctl$TIOCL_PASTESEL(r2, 0x541c, &(0x7f0000000000)) 1.413706043s ago: executing program 0 (id=841): openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1.304870246s ago: executing program 5 (id=842): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="4401000010000100fefffffffddbdf25fe8800051a0000000000000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcfbffff2abd700000000000020001002000000000000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015005b07350008"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 1.13551663s ago: executing program 0 (id=843): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x66, &(0x7f0000000080), &(0x7f000009de80)=0x8) 1.071169962s ago: executing program 6 (id=844): mkdir(&(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./mysys/bus/pci/devices/0000:00:01.0/enable\x00', 0x1, 0x0) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setreuid(0x0, r2) write(r0, &(0x7f0000000400)='1', 0x1) 795.140119ms ago: executing program 5 (id=845): syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) unshare(0x22020600) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) 787.486879ms ago: executing program 0 (id=846): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0908"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4108, 0x100c}], 0x1}, 0x2002) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c034002040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa, 0x0, 0x0, 0x4000}, 0x0) 752.51775ms ago: executing program 6 (id=847): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)='%pi6 \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 428.274938ms ago: executing program 0 (id=848): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r1, &(0x7f00000059c0)=[{{&(0x7f0000000380)={0x2, 0x4e28, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000005900)=[{&(0x7f0000000680)="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", 0x5c1}], 0x1}}], 0x2, 0x2000c044) writev(r1, &(0x7f0000002e00)=[{&(0x7f0000001c00)="f6497e4d3a759290ed7ee6012f0836f59a2f799466bcb06ae764775f53d23571345f128afe37853ceadd4b2960a827e0a87ff422eeb9556d0acb39a434156fa8effca205670aea809091721b7702cfc5a75056b0b6fd32068fc91aceac2bf1ffe55d752ea5254343e63b1a6053541a221b98bd045330ff5480e62f2026464e0dfb99d2b9f32c8b4e6a1a375bc7807dc8381ae583b3fdf360ffc345ad4e9ae7", 0x9f}], 0x1) 415.315149ms ago: executing program 5 (id=849): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c00009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(0x3) ppoll(&(0x7f00000002c0)=[{r1, 0x1200}], 0x1, 0x0, 0x0, 0x0) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) keyctl$session_to_parent(0x12) 375.529219ms ago: executing program 6 (id=850): r0 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0xd8c, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0x60, 0x60, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x30, 0x2}}}}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003550000005503"], 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 151.713755ms ago: executing program 0 (id=851): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x40010) 0s ago: executing program 0 (id=852): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x2f8e, &(0x7f0000000540)={0x0, 0xc384, 0x1, 0x2, 0x306}, &(0x7f0000000240)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000000)) syz_io_uring_modify_offsets$generic(r1, r2, 0x50, 0x8) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/4\x00') read$FUSE(r3, &(0x7f0000000a00)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): cuous mode [ 95.192861][ T4280] Bluetooth: hci2: command 0x041b tx timeout [ 95.222923][ T4325] device veth0_vlan left promiscuous mode [ 96.312323][ T4325] team0 (unregistering): Port device team_slave_1 removed [ 96.376618][ T4325] team0 (unregistering): Port device team_slave_0 removed [ 96.427913][ T4325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.488256][ T4325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.754760][ T4325] bond0 (unregistering): Released all slaves [ 96.858612][ T4512] netlink: 4 bytes leftover after parsing attributes in process `syz.4.45'. [ 96.881601][ T4512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.061958][ T4512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.197999][ T4413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.208842][ T4527] loop2: detected capacity change from 0 to 1024 [ 97.225828][ T4413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.251816][ C0] vkms_vblank_simulate: vblank timer overrun [ 97.272744][ T4280] Bluetooth: hci2: command 0x040f tx timeout [ 97.431487][ T4413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.466051][ T4413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.501494][ T4413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.612497][ T4413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.766287][ T4413] device hsr_slave_0 entered promiscuous mode [ 97.802305][ T4413] device hsr_slave_1 entered promiscuous mode [ 97.836621][ T4400] wlan1: Trigger new scan to find an IBSS to join [ 97.902573][ T22] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 97.980103][ T4541] netlink: 20 bytes leftover after parsing attributes in process `syz.1.56'. [ 98.109157][ T22] usb 1-1: not running at top speed; connect to a high speed hub [ 98.139951][ T22] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.191323][ T22] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 128, setting to 64 [ 98.231330][ T22] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 98.327578][ T22] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 98.368387][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.409868][ T4534] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 98.419915][ T22] keyspan 1-1:1.0: Keyspan 2 port adapter converter detected [ 98.451200][ T22] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 84 [ 98.492739][ T22] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 2 [ 98.522145][ T22] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 98.555175][ T4413] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 98.577165][ T22] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 88 [ 98.600590][ T22] keyspan 1-1:1.0: found no endpoint descriptor for endpoint 6 [ 98.622962][ T22] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 98.677739][ T4413] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 98.711725][ T4413] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 98.753394][ T4413] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 98.764399][ T4355] wlan1: Creating new IBSS network, BSSID 36:b6:85:a0:9f:cb [ 98.924389][ T26] audit: type=1326 audit(1787963588.163:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4558 comm="syz.1.62" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde0259e159 code=0x0 [ 99.017694][ T7] usb 1-1: USB disconnect, device number 2 [ 99.072589][ T7] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 99.125265][ T7] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 99.183202][ T7] keyspan 1-1:1.0: device disconnected [ 99.220438][ T4413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.269763][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.281877][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.299528][ T4413] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.319314][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.333505][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.352881][ T4280] Bluetooth: hci2: command 0x0419 tx timeout [ 99.373038][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.380298][ T4297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.416637][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.478016][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.488567][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.516526][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.523766][ T4297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.573060][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.605584][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.624578][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.657035][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.725458][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.793941][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.814794][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.846462][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.875852][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.916298][ T4413] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.960039][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.016411][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.035479][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.146321][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.157459][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.186633][ T4586] loop4: detected capacity change from 0 to 32768 [ 101.244672][ T4413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.276782][ T4586] gfs2: fsid=mycluster:mygfs2: Trying to join cluster "lock_nolock", "mycluster:mygfs2" [ 101.343830][ T4586] gfs2: fsid=mycluster:mygfs2: Now mounting FS (format 0)... [ 101.505145][ T4586] gfs2: fsid=mycluster:mygfs2.s: journal 0 mapped with 1 extents in 0ms [ 101.807056][ T4620] loop2: detected capacity change from 0 to 4096 [ 101.872551][ T4586] gfs2: fsid=mycluster:mygfs2.s: first mount done, others may mount [ 101.908534][ T4620] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 102.570588][ T4274] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 103.096758][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 103.115158][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.196585][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 103.216770][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.247118][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.280502][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.306756][ T4413] device veth0_vlan entered promiscuous mode [ 103.366517][ T4413] device veth1_vlan entered promiscuous mode [ 103.471376][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 103.494371][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 103.529430][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.567864][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.620604][ T4413] device veth0_macvtap entered promiscuous mode [ 103.669491][ T4413] device veth1_macvtap entered promiscuous mode [ 103.739276][ T4413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.792491][ T4413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.802388][ T4413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.887953][ T4413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.920387][ T4413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.962195][ T4413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.028543][ T4413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.078818][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.095310][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.115024][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.151146][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.192283][ T4413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.232754][ T4413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.288943][ T4413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.310020][ T4413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.352876][ T4413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.394370][ T4413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.433259][ T4413] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.460448][ T4669] loop0: detected capacity change from 0 to 32768 [ 104.481101][ T4413] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.542585][ T4413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.560050][ T4671] loop4: detected capacity change from 0 to 32768 [ 104.567958][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.578272][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.598474][ T4677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.88'. [ 104.617227][ T4413] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.624919][ T4671] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.87 (4671) [ 104.640046][ T4413] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.648888][ T4413] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.660340][ T4413] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.716433][ T4669] XFS (loop0): Mounting V5 Filesystem [ 104.825403][ T4671] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 104.872684][ T4671] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 104.882026][ T4671] BTRFS info (device loop4): using free space tree [ 105.034788][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.068688][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.082097][ T4669] XFS (loop0): Ending clean mount [ 105.135642][ T31] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 105.158245][ T4669] XFS (loop0): Quotacheck needed: Please wait. [ 105.212192][ T4615] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.258623][ T4615] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.322767][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 105.330613][ T4671] BTRFS info (device loop4): enabling ssd optimizations [ 105.355972][ T4669] XFS (loop0): Quotacheck: Done. [ 105.570451][ T4717] netlink: 4 bytes leftover after parsing attributes in process `syz.2.92'. [ 105.766034][ T4277] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 105.806479][ T4270] XFS (loop0): Unmounting Filesystem [ 106.651842][ T4740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.98'. [ 106.689732][ T4740] netlink: 'syz.2.98': attribute type 12 has an invalid length. [ 106.760807][ T4740] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.770309][ T4740] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.779119][ T4740] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.787941][ T4740] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.831703][ T4740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.98'. [ 106.841750][ T4740] netlink: 'syz.2.98': attribute type 12 has an invalid length. [ 107.185428][ T4750] loop2: detected capacity change from 0 to 4096 [ 107.319621][ T4750] ntfs3: loop2: ino=5, "/" directory corrupted [ 107.342049][ T4743] loop4: detected capacity change from 0 to 32768 [ 107.441425][ T4743] XFS (loop4): Mounting V5 Filesystem [ 107.451633][ T4274] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 107.526254][ T4274] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 107.562019][ T4743] XFS (loop4): Ending clean mount [ 107.771572][ T4768] process 'syz.2.103' launched './file0' with NULL argv: empty string added [ 107.877704][ T4743] syz.4.99 (4743) used greatest stack depth: 20208 bytes left [ 108.033164][ T4277] XFS (loop4): Unmounting Filesystem [ 108.382575][ T33] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 108.576366][ T33] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 108.602592][ T33] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.642560][ T33] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 108.672096][ T33] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.911477][ T33] usb 3-1: usb_control_msg returned -32 [ 108.926166][ T33] usbtmc 3-1:16.0: can't read capabilities [ 109.138874][ T4319] usb 3-1: USB disconnect, device number 3 [ 109.500551][ T4803] input: syz0 as /devices/virtual/input/input5 [ 110.606430][ T4830] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 111.107707][ T4834] loop5: detected capacity change from 0 to 32768 [ 111.163360][ T4834] loop5: p1 p3 < > [ 111.695744][ T4388] udevd[4388]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 111.697473][ T4389] udevd[4389]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 111.820577][ T4855] loop5: detected capacity change from 0 to 16 [ 111.891351][ T4855] erofs: (device loop5): mounted with root inode @ nid 36. [ 112.212831][ T4847] loop4: detected capacity change from 0 to 40427 [ 112.263868][ T4847] F2FS-fs (loop4): Unrecognized mount option "age_extent_cache" or missing value [ 112.859527][ T4878] loop0: detected capacity change from 0 to 512 [ 112.923571][ T4878] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 112.955804][ T4878] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 113.053723][ T4878] EXT4-fs (loop0): 1 truncate cleaned up [ 113.059462][ T4878] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 113.264992][ T4872] loop2: detected capacity change from 0 to 40427 [ 113.343954][ T4872] F2FS-fs (loop2): invalid crc value [ 113.378871][ T4872] F2FS-fs (loop2): Found nat_bits in checkpoint [ 113.467377][ T26] audit: type=1804 audit(1787963602.713:3): pid=4892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.135" name="/newroot/23/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=27934 res=1 errno=0 [ 113.568758][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 113.604030][ T4872] F2FS-fs (loop2): Start checkpoint disabled! [ 113.678516][ T4872] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 113.807827][ T4896] loop0: detected capacity change from 0 to 512 [ 113.869066][ T4896] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 113.894441][ T4872] 9pnet: p9_errstr2errno: server reported unknown error @cD†üB€|˜ÿÿÿÿ [ 113.914964][ T4896] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.136: invalid indirect mapped block 256 (level 2) [ 113.934026][ T4896] EXT4-fs (loop0): 2 truncates cleaned up [ 113.940045][ T4896] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 114.026745][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 114.208073][ T4905] loop5: detected capacity change from 0 to 128 [ 114.224716][ T4905] EXT4-fs: Ignoring removed mblk_io_submit option [ 114.296071][ T4325] kworker/u4:6: attempt to access beyond end of device [ 114.296071][ T4325] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 114.314992][ T4905] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 114.356315][ T4905] System zones: 1-3, 19-19, 35-36 [ 114.370537][ T4905] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 114.482940][ T4905] ext4 filesystem being mounted at /15/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.587766][ T4905] syz.5.139 (pid 4905) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 114.828191][ T4413] EXT4-fs (loop5): unmounting filesystem. [ 115.212672][ T33] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 115.318962][ T4923] loop1: detected capacity change from 0 to 32768 [ 115.369149][ T4942] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 115.376185][ T4942] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 115.414715][ T33] usb 5-1: Using ep0 maxpacket: 16 [ 115.424161][ T33] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 115.462618][ T33] usb 5-1: config 0 has no interface number 0 [ 115.489375][ T33] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 115.503378][ T4942] vhci_hcd vhci_hcd.0: Device attached [ 115.539512][ T33] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 115.588272][ T33] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 115.634212][ T33] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.672948][ T33] usb 5-1: Product: syz [ 115.686991][ T33] usb 5-1: Manufacturer: syz [ 115.702206][ T33] usb 5-1: SerialNumber: syz [ 115.711886][ T33] usb 5-1: config 0 descriptor?? [ 115.731855][ T4927] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 115.758133][ T4951] loop0: detected capacity change from 0 to 128 [ 115.770217][ T4927] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 115.804376][ T4951] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 115.862584][ T4318] usb 33-1: new high-speed USB device number 2 using vhci_hcd [ 115.874273][ T4946] vhci_hcd: sendmsg failed!, ret=-107 for 48 [ 115.883738][ T4945] vhci_hcd: xmit failed -4 [ 115.888410][ T47] vhci_hcd: stop threads [ 115.910247][ T47] vhci_hcd: release socket [ 115.939706][ T4951] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 115.973894][ T47] vhci_hcd: disconnect device [ 115.994660][ T4951] ext2 filesystem being mounted at /41/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.022390][ T4927] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 116.109682][ T4927] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 116.332586][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 116.358414][ T33] asix 5-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 116.421273][ T4965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.154'. [ 116.520040][ T4967] loop0: detected capacity change from 0 to 1024 [ 116.765019][ T4971] netlink: 260 bytes leftover after parsing attributes in process `syz.5.157'. [ 116.913718][ T4978] fuse: root generation should be zero [ 117.114406][ T4980] binder: 4979:4980 ioctl c0306201 2000000001c0 returned -14 [ 117.163082][ T33] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 117.189853][ T33] asix: probe of 5-1:0.34 failed with error -71 [ 117.211583][ T33] usb 5-1: USB disconnect, device number 2 [ 117.673393][ T5006] ip_tables: iptables: counters copy to user failed while replacing table [ 117.680525][ T5003] loop1: detected capacity change from 0 to 8192 [ 118.305544][ T5021] loop0: detected capacity change from 0 to 4096 [ 118.339489][ T5021] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 118.437544][ T5021] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 118.462302][ T5021] ntfs3: loop0: mft corrupted [ 118.476646][ T5021] ntfs3: loop0: Failed to load $Extend. [ 118.616176][ T26] audit: type=1800 audit(1787963607.863:4): pid=5021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.176" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 119.361029][ T5045] loop4: detected capacity change from 0 to 32768 [ 119.370728][ T33] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 119.398599][ T5045] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.186 (5045) [ 119.433518][ T5045] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 119.443883][ T5045] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 119.453034][ T5045] BTRFS info (device loop4): using free space tree [ 119.565986][ T5055] loop0: detected capacity change from 0 to 17 [ 119.579560][ T5036] loop1: detected capacity change from 0 to 32768 [ 119.611274][ T33] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 119.630214][ T5055] syz.0.188: attempt to access beyond end of device [ 119.630214][ T5055] loop0: rw=4096, sector=128, nr_sectors = 8 limit=17 [ 119.661747][ T5055] gfs2: error 10 reading superblock [ 119.684275][ T33] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.711371][ T33] usb 3-1: config 0 descriptor?? [ 119.768968][ T5045] BTRFS info (device loop4): enabling ssd optimizations [ 119.810976][ T5036] XFS (loop1): Mounting V5 Filesystem [ 120.003272][ T5036] XFS (loop1): Ending clean mount [ 120.663852][ T4277] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 120.693002][ T4271] XFS (loop1): Unmounting Filesystem [ 120.827858][ T5096] loop0: detected capacity change from 0 to 8192 [ 121.037956][ T4318] vhci_hcd: vhci_device speed not set [ 121.159252][ T33] usb 3-1: Cannot set autoneg [ 121.168155][ T33] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 121.229938][ T33] usb 3-1: USB disconnect, device number 4 [ 121.446963][ T5111] netlink: 'syz.1.194': attribute type 1 has an invalid length. [ 121.482230][ T5111] netlink: 'syz.1.194': attribute type 2 has an invalid length. [ 121.516707][ T5111] netlink: 'syz.1.194': attribute type 1 has an invalid length. [ 121.543996][ T5111] netlink: 'syz.1.194': attribute type 2 has an invalid length. [ 121.773158][ T5105] loop4: detected capacity change from 0 to 32768 [ 121.815045][ T5108] loop5: detected capacity change from 0 to 131072 [ 121.831138][ T5108] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0) [ 121.839535][ T5108] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 121.849597][ T5108] F2FS-fs (loop5): invalid crc value [ 121.956202][ T5108] F2FS-fs (loop5): Found nat_bits in checkpoint [ 122.037344][ T5108] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 122.045344][ T5108] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 122.064762][ T5105] XFS (loop4): Mounting V5 Filesystem [ 122.313442][ T5105] XFS (loop4): Ending clean mount [ 122.511401][ T5136] overlayfs: failed to resolve './file2': -2 [ 122.856377][ T4277] XFS (loop4): Unmounting Filesystem [ 122.996970][ T5147] Invalid argument reading file caps for ./file0 [ 123.491114][ T5151] loop1: detected capacity change from 0 to 40427 [ 123.521725][ T5151] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 123.562054][ T5151] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 123.595929][ T5155] loop5: detected capacity change from 0 to 32768 [ 123.606868][ T5151] F2FS-fs (loop1): invalid crc value [ 123.635853][ T5151] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 123.675918][ T5155] (syz.5.209,5155,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 123.741171][ T5155] (syz.5.209,5155,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 123.913110][ T5155] JBD2: Ignoring recovery information on journal [ 124.015380][ T5155] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 124.025923][ T5151] F2FS-fs (loop1): Start checkpoint disabled! [ 124.101936][ T5151] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 124.131372][ T5151] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 124.369138][ T5151] syz.1.208: attempt to access beyond end of device [ 124.369138][ T5151] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 124.412505][ T33] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 124.612672][ T33] usb 3-1: Using ep0 maxpacket: 32 [ 124.614788][ T31] kworker/u4:2: attempt to access beyond end of device [ 124.614788][ T31] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 124.626250][ T33] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.668196][ T33] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.691048][ T33] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 124.727320][ T33] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.781309][ T33] usb 3-1: config 0 descriptor?? [ 124.794850][ T33] hub 3-1:0.0: USB hub found [ 125.025445][ T33] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 125.093969][ T4413] ocfs2: Unmounting device (7,5) on (node local) [ 125.244096][ T33] hid-generic 0003:046D:C31C.0002: item fetching failed at offset 0/1 [ 125.281739][ T33] hid-generic: probe of 0003:046D:C31C.0002 failed with error -22 [ 125.593257][ T33] usb 3-1: USB disconnect, device number 5 [ 125.939765][ C1] Unknown status report in ack skb [ 126.769068][ T5211] loop0: detected capacity change from 0 to 32768 [ 126.826371][ T5211] (syz.0.223,5211,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 126.860489][ T5211] (syz.0.223,5211,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 126.979379][ T5211] JBD2: Ignoring recovery information on journal [ 127.188603][ T5211] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 127.277784][ T33] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 127.474394][ T33] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.510334][ T33] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 127.557765][ T33] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 127.609391][ T33] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 127.633681][ T33] usb 2-1: SerialNumber: syz [ 127.893203][ T4270] ocfs2: Unmounting device (7,0) on (node local) [ 127.905009][ T33] usb 2-1: 0:2 : does not exist [ 128.032864][ T33] usb 2-1: USB disconnect, device number 3 [ 128.142818][ T5252] loop0: detected capacity change from 0 to 128 [ 128.310462][ T5252] syz.0.232: attempt to access beyond end of device [ 128.310462][ T5252] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 128.375927][ T4389] udevd[4389]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 128.518263][ T5257] syz.0.232: attempt to access beyond end of device [ 128.518263][ T5257] loop0: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 128.618330][ T5257] Buffer I/O error on dev loop0, logical block 71, lost async page write [ 128.840663][ T4615] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 129.052086][ T5287] loop0: detected capacity change from 0 to 256 [ 129.087082][ T5287] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 130.150440][ T5304] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 130.177445][ T5304] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 130.253699][ T5304] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 130.306459][ T5304] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 130.357166][ T5304] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 130.395788][ T5304] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 130.501445][ T5304] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 130.656419][ T5322] loop4: detected capacity change from 0 to 128 [ 130.895742][ T5322] syz.4.251: attempt to access beyond end of device [ 130.895742][ T5322] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 130.951867][ T5327] Invalid ELF header len 7 [ 130.991884][ T5330] syz.4.251: attempt to access beyond end of device [ 130.991884][ T5330] loop4: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 131.062314][ T5330] Buffer I/O error on dev loop4, logical block 71, lost async page write [ 131.806026][ T26] audit: type=1800 audit(1787963621.053:5): pid=5356 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.261" name="streaming_maxpacket" dev="configfs" ino=37965 res=0 errno=0 [ 132.018634][ T5362] loop5: detected capacity change from 0 to 512 [ 132.454414][ T5361] loop1: detected capacity change from 0 to 32768 [ 132.514828][ T5361] (syz.1.263,5361,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 132.572560][ T5361] (syz.1.263,5361,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 132.655297][ T5362] EXT4-fs (loop5): Test dummy encryption mode enabled [ 132.735623][ T5361] JBD2: Ignoring recovery information on journal [ 132.784458][ T5362] EXT4-fs error (device loop5): ext4_orphan_get:1405: inode #15: comm syz.5.262: inode has both inline data and extents flags [ 132.806340][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.813242][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.879924][ T5362] EXT4-fs error (device loop5): ext4_orphan_get:1410: comm syz.5.262: couldn't read orphan inode 15 (err -117) [ 132.955292][ T5361] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 132.983062][ T5362] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 133.282007][ T5393] loop4: detected capacity change from 0 to 256 [ 133.438869][ T4271] ocfs2: Unmounting device (7,1) on (node local) [ 133.445507][ T5393] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1fe4a43c, utbl_chksum : 0xe619d30d) [ 133.682182][ T5362] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 134.028569][ T5410] loop0: detected capacity change from 0 to 4096 [ 134.063064][ T5410] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 134.111202][ T5410] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 134.243634][ T5362] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 134.322698][ T5103] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 134.517054][ T5103] usb 3-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice=61.47 [ 134.532903][ T4413] EXT4-fs (loop5): unmounting filesystem. [ 134.549381][ T5103] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.587686][ T5103] usb 3-1: config 0 descriptor?? [ 134.638744][ T5103] gspca_main: STV06xx-2.14.0 probing 046d:0850 [ 135.327744][ T5427] sctp: failed to load transform for md5: -2 [ 135.659525][ T5103] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 135.932992][ T5103] STV06xx: probe of 3-1:0.0 failed with error -71 [ 135.972923][ T5103] usb 3-1: USB disconnect, device number 6 [ 136.059623][ T5449] loop4: detected capacity change from 0 to 512 [ 136.109070][ T5449] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #2: comm syz.4.283: missing EA_INODE flag [ 136.132000][ T5449] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.283: error while reading EA inode 2 err=-117 [ 136.161775][ T5449] EXT4-fs (loop4): 1 orphan inode deleted [ 136.170060][ T5449] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 136.491475][ T5439] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.500694][ T5439] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.673747][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 136.852500][ T5455] VFS: Can't find a romfs filesystem on dev mtdblock0. [ 136.852500][ T5455] [ 137.047274][ T5457] loop4: detected capacity change from 0 to 512 [ 137.165448][ T5457] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 137.197310][ T5457] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.371894][ T5452] loop2: detected capacity change from 0 to 40427 [ 137.432102][ T5452] F2FS-fs (loop2): invalid crc value [ 137.448573][ T5452] F2FS-fs (loop2): Found nat_bits in checkpoint [ 137.467224][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 137.725359][ T5452] F2FS-fs (loop2): Start checkpoint disabled! [ 137.743544][ T5439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.801753][ T5464] loop4: detected capacity change from 0 to 1024 [ 137.829029][ T5452] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 137.867965][ T5464] EXT4-fs: quotafile must be on filesystem root [ 137.892557][ T5439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.079760][ T5469] loop4: detected capacity change from 0 to 512 [ 138.170141][ T5469] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 138.192682][ T5469] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.297358][ T31] kworker/u4:2: attempt to access beyond end of device [ 138.297358][ T31] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 138.475749][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 139.069618][ T5439] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.082524][ T5439] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.091480][ T5439] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.112787][ T5439] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.333059][ T5445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.282'. [ 139.336110][ T26] audit: type=1800 audit(1787963628.583:6): pid=5481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.292" name="streaming_maxpacket" dev="configfs" ino=36664 res=0 errno=0 [ 139.341977][ T5445] netlink: 'syz.0.282': attribute type 11 has an invalid length. [ 139.415070][ T5445] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.423970][ T5445] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.433075][ T5445] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.441846][ T5445] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 139.486342][ T5447] team0: Port device syz_tun added [ 139.504795][ T5445] netlink: 12 bytes leftover after parsing attributes in process `syz.0.282'. [ 139.537268][ T5445] netlink: 'syz.0.282': attribute type 11 has an invalid length. [ 140.308167][ T5492] loop4: detected capacity change from 0 to 32768 [ 140.516491][ T5512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.347483][ T5531] capability: warning: `syz.5.307' uses 32-bit capabilities (legacy support in use) [ 141.400485][ T5530] loop0: detected capacity change from 0 to 4096 [ 141.499364][ T5536] loop4: detected capacity change from 0 to 4096 [ 141.570605][ T5536] EXT4-fs (loop4): Test dummy encryption mode enabled [ 141.665975][ T5536] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 141.748309][ T5541] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 142.077749][ T4277] EXT4-fs (loop4): unmounting filesystem. [ 142.334904][ T5530] syz.0.306 (5530) used greatest stack depth: 19568 bytes left [ 142.377089][ T26] audit: type=1326 audit(1787963631.623:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5554 comm="syz.1.312" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde0259e159 code=0x0 [ 142.842607][ T5314] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 143.022673][ T5314] usb 3-1: Using ep0 maxpacket: 16 [ 143.048410][ T5314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.092587][ T5314] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.113043][ T5314] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 143.132873][ T5314] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 143.152242][ T5314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.174646][ T5314] usb 3-1: config 0 descriptor?? [ 143.436287][ T5589] loop1: detected capacity change from 0 to 512 [ 143.449245][ T5588] loop4: detected capacity change from 0 to 64 [ 143.497107][ T5588] syz.4.317: attempt to access beyond end of device [ 143.497107][ T5588] loop4: rw=0, sector=8192, nr_sectors = 2 limit=64 [ 143.510898][ T5588] Buffer I/O error on dev loop4, logical block 4096, async page read [ 143.519896][ T5588] syz.4.317: attempt to access beyond end of device [ 143.519896][ T5588] loop4: rw=0, sector=8192, nr_sectors = 2 limit=64 [ 143.533070][ T5588] Buffer I/O error on dev loop4, logical block 4096, async page read [ 143.542039][ T26] audit: type=1800 audit(1787963632.783:8): pid=5588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.317" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 143.611698][ T5589] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #2: comm syz.1.316: missing EA_INODE flag [ 143.642810][ T5314] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0003/input/input6 [ 143.746943][ T5589] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.316: error while reading EA inode 2 err=-117 [ 143.853068][ T5314] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 143.903673][ T5589] EXT4-fs (loop1): 1 orphan inode deleted [ 143.960346][ T5589] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 143.996916][ T5314] usb 3-1: USB disconnect, device number 7 [ 144.090065][ T5592] loop5: detected capacity change from 0 to 131072 [ 144.117784][ T5592] F2FS-fs (loop5): invalid crc value [ 144.229763][ T5592] F2FS-fs (loop5): Found nat_bits in checkpoint [ 144.271795][ T5592] F2FS-fs (loop5): Cannot turn on quotas: -2 on 2 [ 144.314281][ T5592] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 144.363970][ T26] audit: type=1804 audit(1787963633.613:9): pid=5592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.318" name="/newroot/54/file1/file1" dev="loop5" ino=7 res=1 errno=0 [ 144.556838][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 144.599479][ T5601] fido_id[5601]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 145.250623][ T5623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.326'. [ 145.292575][ T5623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.326'. [ 145.341649][ T5623] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.351023][ T5623] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.359904][ T5623] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.368723][ T5623] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.385310][ T5623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.326'. [ 145.450672][ T5623] netlink: 4 bytes leftover after parsing attributes in process `syz.1.326'. [ 145.516699][ T5634] loop0: detected capacity change from 0 to 1024 [ 145.589819][ T5634] EXT4-fs: Ignoring removed nomblk_io_submit option [ 145.631438][ T5634] EXT4-fs: Ignoring removed orlov option [ 145.776340][ T5634] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 145.911005][ T5649] syz.1.333 uses obsolete (PF_INET,SOCK_PACKET) [ 146.118992][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 146.149537][ T5640] loop2: detected capacity change from 0 to 32768 [ 147.028432][ T5665] loop4: detected capacity change from 0 to 32768 [ 147.052674][ T5665] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.338 (5665) [ 147.093177][ T5665] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 147.127835][ T5665] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 147.162616][ T5665] BTRFS info (device loop4): using free space tree [ 147.401418][ T5695] loop0: detected capacity change from 0 to 256 [ 147.422185][ T5695] exfat: Deprecated parameter 'namecase' [ 147.461467][ T5665] BTRFS info (device loop4): enabling ssd optimizations [ 147.495463][ T5695] exfat: Deprecated parameter 'utf8' [ 147.566457][ T5695] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d) [ 148.033233][ T5695] loop0: detected capacity change from 256 to 1 [ 148.048551][ T4277] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 149.540947][ T5713] loop5: detected capacity change from 0 to 32768 [ 150.153483][ T5595] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by udevd (5595) [ 150.280523][ T5731] loop4: detected capacity change from 0 to 128 [ 150.343226][ T5731] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 150.447301][ T5731] UDF-fs: warning (device loop4): udf_fill_super: No fileset found [ 151.214378][ T5767] loop1: detected capacity change from 0 to 128 [ 151.277314][ T5767] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 151.308399][ T5767] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 151.353187][ T5100] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 151.544894][ T5100] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 151.562289][ T5100] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 151.579833][ T5100] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 151.597766][ T5100] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.612769][ T5761] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 151.713257][ T5773] Mass Storage Function, version: 2009/09/11 [ 151.740120][ T5773] LUN: removable file: (no medium) [ 151.769369][ T26] audit: type=1800 audit(1787963641.013:10): pid=5773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.379" name="file" dev="configfs" ino=39128 res=0 errno=0 [ 151.912956][ T5767] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 151.996066][ T5098] usb 3-1: USB disconnect, device number 8 [ 152.074598][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 152.595024][ T5784] loop5: detected capacity change from 0 to 32768 [ 153.301694][ T5804] netlink: 52 bytes leftover after parsing attributes in process `syz.2.380'. [ 153.371455][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.378938][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.456087][ T5806] netlink: 52 bytes leftover after parsing attributes in process `syz.2.380'. [ 153.836762][ T5813] netlink: 4 bytes leftover after parsing attributes in process `syz.5.383'. [ 154.458992][ T5817] loop2: detected capacity change from 0 to 32768 [ 154.550414][ T5817] (syz.2.386,5817,1):ocfs2_init_global_system_inodes:461 ERROR: status = -22 [ 154.579478][ T5817] (syz.2.386,5817,1):ocfs2_init_global_system_inodes:463 ERROR: Unable to load system inode 4, possibly corrupt fs? [ 154.579521][ T5817] (syz.2.386,5817,1):ocfs2_init_global_system_inodes:472 ERROR: status = -22 [ 154.668442][ T5817] (syz.2.386,5817,1):ocfs2_initialize_super:2253 ERROR: status = -22 [ 154.692823][ T5817] (syz.2.386,5817,1):ocfs2_fill_super:1176 ERROR: status = -22 [ 154.922603][ T5314] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 155.122531][ T5314] usb 2-1: Using ep0 maxpacket: 16 [ 155.136514][ T5314] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 155.175883][ T5314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.204465][ T5314] usb 2-1: Product: syz [ 155.208703][ T5314] usb 2-1: Manufacturer: syz [ 155.224724][ T5314] usb 2-1: SerialNumber: syz [ 155.245677][ T5314] usb 2-1: config 0 descriptor?? [ 155.323201][ T5314] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 155.558142][ T5862] netlink: 28 bytes leftover after parsing attributes in process `syz.2.403'. [ 155.581080][ T5862] bridge0: port 3(veth0) entered blocking state [ 155.598411][ T5862] bridge0: port 3(veth0) entered disabled state [ 155.620304][ T5862] device veth0 entered promiscuous mode [ 155.671700][ T5314] usb 2-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 155.886154][ T4315] usb 2-1: USB disconnect, device number 4 [ 155.915482][ T4315] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 155.938680][ T4315] visor 2-1:0.0: device disconnected [ 156.114711][ T5314] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 156.322383][ T5314] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 156.331913][ T5314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.352500][ T5314] usb 5-1: Product: syz [ 156.356737][ T5314] usb 5-1: Manufacturer: syz [ 156.361380][ T5314] usb 5-1: SerialNumber: syz [ 156.392547][ T5314] usb 5-1: config 0 descriptor?? [ 156.424566][ T5314] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 156.503662][ T5314] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 156.562078][ T5314] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 156.589598][ T5314] usb 5-1: media controller created [ 156.646801][ T5314] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 156.925427][ T5314] DVB: Unable to find symbol mt352_attach() [ 157.128417][ T5900] loop5: detected capacity change from 0 to 256 [ 157.147851][ T5900] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 157.166668][ T5314] DVB: Unable to find symbol nxt6000_attach() [ 157.192215][ T5314] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 157.237525][ T5314] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 157.319547][ T5314] dvb-usb: schedule remote query interval to 1000 msecs. [ 157.344878][ T5314] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 157.384288][ T5314] dvb-usb: bulk message failed: -22 (7/0) [ 157.390470][ T5314] dvb-usb: bulk message failed: -22 (7/0) [ 157.434981][ T5314] usb 5-1: USB disconnect, device number 3 [ 157.588331][ T5314] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 157.617999][ T5913] loop2: detected capacity change from 0 to 256 [ 157.684250][ T26] audit: type=1804 audit(1787963646.923:11): pid=5913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.423" name="/newroot/80/file0/blkio.bfq.group_wait_time" dev="loop2" ino=1048615 res=1 errno=0 [ 157.808781][ T4280] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 157.826870][ T5098] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 158.017264][ T5920] loop0: detected capacity change from 0 to 1024 [ 158.065083][ T5098] usb 6-1: config 0 has an invalid interface number: 133 but max is 0 [ 158.098076][ T5098] usb 6-1: config 0 has no interface number 0 [ 158.124577][ T5098] usb 6-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 158.157500][ T5098] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.189815][ T5098] usb 6-1: Product: syz [ 158.213341][ T5098] usb 6-1: Manufacturer: syz [ 158.235256][ T5098] usb 6-1: SerialNumber: syz [ 158.273309][ T5098] usb 6-1: config 0 descriptor?? [ 158.500670][ T5098] keyspan 6-1:0.133: Keyspan 1 port adapter converter detected [ 158.518376][ T5098] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 81 [ 158.548582][ T5098] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 1 [ 158.556888][ T5098] keyspan 6-1:0.133: found no endpoint descriptor for endpoint 2 [ 158.580378][ T5098] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 158.722685][ T4316] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 158.748806][ T5911] loop5: detected capacity change from 0 to 128 [ 158.755311][ T4317] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 158.776192][ T5911] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 158.822274][ T5911] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.924628][ T4316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.941517][ T4316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.958787][ T4317] usb 5-1: Using ep0 maxpacket: 16 [ 158.963260][ T4316] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 158.969224][ T4317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.000591][ T4316] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 159.033853][ T4317] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.052332][ T4316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.054185][ T4317] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 159.089438][ T4316] usb 2-1: config 0 descriptor?? [ 159.103982][ T4317] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 159.118703][ T5102] usb 6-1: USB disconnect, device number 2 [ 159.123257][ T4317] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.150153][ T4317] usb 5-1: config 0 descriptor?? [ 159.156859][ T5102] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 159.183032][ T5102] keyspan 6-1:0.133: device disconnected [ 159.549575][ T4316] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 159.582332][ T4316] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 159.631383][ T4317] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 159.661018][ T4317] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 159.682608][ T4317] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 159.712227][ T4317] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 159.734777][ T4317] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 159.763566][ T4317] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 159.797953][ T4317] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 159.826952][ T4317] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 159.843654][ T4317] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 159.868896][ T31] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 159.872674][ T4317] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 159.938790][ T4317] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0005/input/input8 [ 159.972343][ T4317] microsoft 0003:045E:07DA.0005: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 160.067927][ T4317] usb 5-1: USB disconnect, device number 4 [ 160.283480][ T5948] fido_id[5948]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 160.338515][ T5938] syz.0.434 (5938): drop_caches: 2 [ 160.443455][ T5950] loop5: detected capacity change from 0 to 128 [ 160.452053][ T5950] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 161.419966][ T5965] tipc: Started in network mode [ 161.426020][ T5965] tipc: Node identity 9, cluster identity 4711 [ 161.432507][ T5965] tipc: Node number set to 9 [ 161.642541][ T5314] usb 2-1: USB disconnect, device number 5 [ 162.619140][ T5976] loop2: detected capacity change from 0 to 1024 [ 162.763606][ T5976] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 162.820055][ T5976] EXT4-fs error (device loop2): ext4_get_max_inline_size:116: inode #18: comm syz.2.446: can't get inode location 18 [ 162.875091][ T5976] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Out of memory [ 162.903492][ T5976] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #18: comm syz.2.446: mark_inode_dirty error [ 162.936647][ T5976] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 7278273066370725442 [ 163.018530][ T5976] EXT4-fs warning (device loop2): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 7278273066370725442 [ 163.086219][ T5976] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Out of memory [ 163.120959][ T5976] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #18: comm syz.2.446: mark_inode_dirty error [ 163.148068][ T5976] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Out of memory [ 163.176896][ T5976] EXT4-fs error (device loop2): ext4_ext_truncate:4475: inode #18: comm syz.2.446: mark_inode_dirty error [ 163.216565][ T5976] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5952: Out of memory [ 163.250389][ T5976] EXT4-fs error (device loop2): ext4_truncate:4325: inode #18: comm syz.2.446: mark_inode_dirty error [ 163.430309][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 163.619556][ T5985] loop4: detected capacity change from 0 to 32768 [ 163.792385][ T5985] XFS (loop4): Mounting V5 Filesystem [ 163.916023][ T5985] XFS (loop4): Ending clean mount [ 163.980988][ T26] audit: type=1800 audit(1787963653.223:12): pid=5985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.449" name="file1" dev="loop4" ino=4422 res=0 errno=0 [ 164.387123][ T6020] loop0: detected capacity change from 0 to 512 [ 164.437108][ T6020] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.459: invalid block [ 164.487701][ T6020] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.459: invalid indirect mapped block 4294967295 (level 1) [ 164.517295][ T6020] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.459: invalid indirect mapped block 4294967295 (level 1) [ 164.533020][ T6020] EXT4-fs (loop0): 2 truncates cleaned up [ 164.538821][ T6020] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 164.574800][ T6021] loop5: detected capacity change from 0 to 4096 [ 164.615522][ T4277] XFS (loop4): Unmounting Filesystem [ 164.744374][ T6021] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 164.832268][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 165.051158][ T6034] sctp: [Deprecated]: syz.0.464 (pid 6034) Use of int in max_burst socket option. [ 165.051158][ T6034] Use struct sctp_assoc_value instead [ 165.273688][ T4413] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 165.392551][ T5100] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 165.418234][ T26] audit: type=1326 audit(1787963654.663:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.1.471" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0259e159 code=0x7ffc0000 [ 165.478217][ T26] audit: type=1326 audit(1787963654.663:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.1.471" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0259e159 code=0x7ffc0000 [ 165.554097][ T26] audit: type=1326 audit(1787963654.673:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.1.471" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fde0259e159 code=0x7ffc0000 [ 165.604749][ T5100] usb 5-1: config index 0 descriptor too short (expected 28277, got 36) [ 165.627232][ T5100] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 165.647813][ T5100] usb 5-1: config 0 has no interfaces? [ 165.653419][ T5100] usb 5-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 165.682661][ T5100] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.707228][ T26] audit: type=1326 audit(1787963654.673:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.1.471" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0259e159 code=0x7ffc0000 [ 165.719381][ T5100] usb 5-1: config 0 descriptor?? [ 165.758553][ T26] audit: type=1326 audit(1787963654.673:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.1.471" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0259e159 code=0x7ffc0000 [ 165.839486][ T26] audit: type=1326 audit(1787963654.673:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.1.471" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fde0259e159 code=0x7ffc0000 [ 165.866343][ T26] audit: type=1326 audit(1787963654.673:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.1.471" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0259e159 code=0x7ffc0000 [ 165.902064][ T6057] loop1: detected capacity change from 0 to 256 [ 165.909394][ T26] audit: type=1326 audit(1787963654.693:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.1.471" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0259e159 code=0x7ffc0000 [ 165.955837][ T26] audit: type=1326 audit(1787963654.693:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6043 comm="syz.1.471" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fde0259e159 code=0x7ffc0000 [ 166.023775][ T5098] usb 5-1: USB disconnect, device number 5 [ 166.057480][ T6057] FAT-fs (loop1): Directory bread(block 64) failed [ 166.080501][ T6057] FAT-fs (loop1): Directory bread(block 65) failed [ 166.093996][ T6057] FAT-fs (loop1): Directory bread(block 66) failed [ 166.100697][ T6057] FAT-fs (loop1): Directory bread(block 67) failed [ 166.116937][ T6057] FAT-fs (loop1): Directory bread(block 68) failed [ 166.126653][ T6057] FAT-fs (loop1): Directory bread(block 69) failed [ 166.140317][ T6057] FAT-fs (loop1): Directory bread(block 70) failed [ 166.158448][ T6057] FAT-fs (loop1): Directory bread(block 71) failed [ 166.172059][ T6057] FAT-fs (loop1): Directory bread(block 72) failed [ 166.182577][ T6057] FAT-fs (loop1): Directory bread(block 73) failed [ 166.354396][ T6063] netlink: 'syz.0.475': attribute type 22 has an invalid length. [ 166.371824][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.475'. [ 166.395703][ T6065] Cannot find add_set index 4 as target [ 166.474574][ T6063] netlink: 'syz.0.475': attribute type 22 has an invalid length. [ 166.512574][ T6063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.475'. [ 166.600610][ T6067] device macvlan2 entered promiscuous mode [ 166.642774][ T6067] device bond0 entered promiscuous mode [ 166.662575][ T6067] device bond_slave_0 entered promiscuous mode [ 166.679197][ T6067] device bond_slave_1 entered promiscuous mode [ 166.696357][ T6071] loop1: detected capacity change from 0 to 512 [ 166.707906][ T6067] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 166.765809][ T6071] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 166.784206][ T6067] device bond0 left promiscuous mode [ 166.803349][ T6067] device bond_slave_0 left promiscuous mode [ 166.822743][ T6067] device bond_slave_1 left promiscuous mode [ 166.829825][ T6071] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.478: bad orphan inode 131083 [ 166.854694][ T6071] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 167.010486][ T6078] loop4: detected capacity change from 0 to 7 [ 167.045433][ T6078] Dev loop4: unable to read RDB block 7 [ 167.060325][ T6078] loop4: unable to read partition table [ 167.081110][ T6078] loop4: partition table beyond EOD, truncated [ 167.106896][ T6078] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 167.315932][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 167.742575][ T5098] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 167.908985][ T6097] loop0: detected capacity change from 0 to 40427 [ 167.947245][ T6097] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 167.958930][ T6097] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 167.967202][ T5098] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.967249][ T5098] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 167.967274][ T5098] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 167.967299][ T5098] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.967338][ T5098] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 167.967364][ T5098] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.081373][ T6097] F2FS-fs (loop0): Found nat_bits in checkpoint [ 168.270245][ T6097] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 168.288764][ T6097] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 168.511608][ T4270] syz-executor: attempt to access beyond end of device [ 168.511608][ T4270] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 169.371484][ T5098] gud 2-1:1.0: USB-1: Failed to add TV modes (ret=-71) [ 169.678934][ T5098] gud 2-1:1.0: USB-1: Failed to add properties (ret=-71) [ 169.784484][ T5098] gud 2-1:1.0: Failed to get connectors (error=-71) [ 169.811172][ T5098] gud: probe of 2-1:1.0 failed with error -71 [ 169.906193][ T5098] usb 2-1: USB disconnect, device number 6 [ 170.054636][ T4272] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 170.074388][ T4272] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 170.082799][ T4272] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 170.092137][ T4272] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 170.115503][ T4272] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 170.123041][ T4272] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 170.699184][ T6129] chnl_net:caif_netlink_parms(): no params data found [ 170.849192][ T5100] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 170.864140][ T6129] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.871645][ T6129] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.880844][ T6129] device bridge_slave_0 entered promiscuous mode [ 170.891967][ T6129] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.899503][ T6129] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.907988][ T6129] device bridge_slave_1 entered promiscuous mode [ 170.938039][ T6129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.950081][ T6129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.985723][ T6129] team0: Port device team_slave_0 added [ 170.994843][ T6129] team0: Port device team_slave_1 added [ 171.021765][ T6129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.029921][ T6129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.065307][ T5100] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 171.082176][ T5100] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 171.098692][ T5100] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 171.109806][ T6129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.113751][ T6151] loop2: detected capacity change from 0 to 32768 [ 171.122755][ T5100] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.140122][ T6145] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 171.152691][ T6129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.159687][ T6129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.186706][ T6151] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.509 (6151) [ 171.251364][ T6129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.269996][ T6151] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 171.309646][ T6151] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 171.352453][ T6151] BTRFS info (device loop2): using free space tree [ 171.442095][ T6129] device hsr_slave_0 entered promiscuous mode [ 171.473873][ T6129] device hsr_slave_1 entered promiscuous mode [ 171.494445][ T6129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.521312][ T6129] Cannot create hsr debugfs directory [ 171.633417][ T5100] usb 1-1: USB disconnect, device number 3 [ 171.703008][ T6151] BTRFS info (device loop2): enabling ssd optimizations [ 171.735728][ T6151] BTRFS info (device loop2: state M): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 171.757141][ T6151] BTRFS info (device loop2: state M): use zstd compression, level 15 [ 171.949823][ T4274] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 171.972504][ T4315] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 172.105719][ T5595] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (5595) [ 172.152803][ T4272] Bluetooth: hci4: command 0x0409 tx timeout [ 172.165772][ T4315] usb 6-1: Using ep0 maxpacket: 16 [ 172.173721][ T4315] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.191571][ T6129] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 172.198741][ T4315] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 172.212066][ T4315] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 172.221209][ T4315] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.231125][ T4315] usb 6-1: config 0 descriptor?? [ 172.404960][ T6129] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 172.444296][ T6129] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 172.485693][ T6129] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 172.736141][ T6129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.798757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.863635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.891917][ T6129] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.936992][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.963037][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.981008][ T6196] loop0: detected capacity change from 0 to 32768 [ 172.999589][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.006779][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.042187][ T6196] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.515 (6196) [ 173.083958][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.111306][ T6196] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 173.125129][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.146742][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.158324][ T6196] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 173.181356][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.188560][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.207435][ T6196] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 173.222117][ T6196] BTRFS info (device loop0): use lzo compression, level 0 [ 173.229854][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.240825][ T6196] BTRFS info (device loop0): force clearing of disk cache [ 173.263783][ T6196] BTRFS info (device loop0): using free space tree [ 173.264808][ T4315] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 173.274514][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.300325][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.310680][ T4315] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 173.363724][ T4315] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 173.389922][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.408438][ T4315] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 173.428847][ T4315] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 173.453692][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.476148][ T4315] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 173.497972][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.513716][ T4315] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 173.541117][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.556599][ T4315] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 173.556639][ T6196] BTRFS info (device loop0): enabling ssd optimizations [ 173.586540][ T6196] BTRFS info (device loop0): rebuilding free space tree [ 173.613805][ T4315] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 173.624920][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.673459][ T4315] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 173.701270][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.718863][ T4315] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 173.747700][ T4315] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 173.767434][ T4315] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 173.774913][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.790613][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.812217][ T4315] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 173.854691][ T6129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.860811][ T4315] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0006/input/input9 [ 173.904588][ T4315] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 173.980484][ T4315] usb 6-1: USB disconnect, device number 3 [ 174.164455][ T4270] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 174.232704][ T4272] Bluetooth: hci4: command 0x041b tx timeout [ 174.388352][ T6226] fido_id[6226]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 175.001117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 175.012267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 175.079045][ T6129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.139187][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 176.171826][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 176.239867][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 176.259303][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 176.279910][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 176.290743][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 176.310325][ T6129] device veth0_vlan entered promiscuous mode [ 176.316508][ T4272] Bluetooth: hci4: command 0x040f tx timeout [ 176.340928][ T6129] device veth1_vlan entered promiscuous mode [ 176.417018][ T5971] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 176.435317][ T5971] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 176.450225][ T5971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 176.502247][ T5971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 176.514543][ T6129] device veth0_macvtap entered promiscuous mode [ 176.522669][ T6191] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 176.538184][ T6129] device veth1_macvtap entered promiscuous mode [ 176.571034][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.583145][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.593525][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.610492][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.629377][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.650548][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.690740][ T6129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.705868][ T6289] loop0: detected capacity change from 0 to 512 [ 176.712930][ T6191] usb 3-1: Using ep0 maxpacket: 32 [ 176.719491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 176.723587][ T6191] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 176.759137][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 176.760813][ T6191] usb 3-1: config 0 has no interface number 0 [ 176.790467][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 176.799541][ T6289] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 176.824860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 176.832272][ T6191] usb 3-1: config 0 interface 184 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 255 [ 176.853653][ T6191] usb 3-1: config 0 interface 184 has no altsetting 0 [ 176.864226][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.886255][ T6289] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.537: bad orphan inode 131083 [ 176.890254][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.906903][ T6289] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 176.914508][ T6191] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 176.941405][ T6191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.949746][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.960798][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.971673][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.984364][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.994797][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.004719][ T6191] usb 3-1: Product: syz [ 177.007344][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.021843][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 177.021860][ T26] audit: type=1326 audit(1787963666.263:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.1.539" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0259e159 code=0x7fc00000 [ 177.025498][ T6129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.038669][ T6191] usb 3-1: Manufacturer: syz [ 177.064952][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 177.076655][ T26] audit: type=1326 audit(1787963666.323:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.1.539" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fde0259e159 code=0x7fc00000 [ 177.081151][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 177.125912][ T6129] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.139387][ T6129] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.160020][ T6129] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.171047][ T26] audit: type=1326 audit(1787963666.353:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6293 comm="syz.1.539" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fde0259e159 code=0x7fc00000 [ 177.192855][ T6129] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.204524][ T6191] usb 3-1: SerialNumber: syz [ 177.233918][ T6191] usb 3-1: config 0 descriptor?? [ 177.240193][ T6283] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 177.283593][ T6191] smsc75xx v1.0.0 [ 177.358822][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 177.450457][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.464538][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.477612][ T6283] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 177.515557][ T6125] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 177.558446][ T6125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.575794][ T6125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.589579][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 177.931643][ T6191] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 177.952905][ T6191] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 178.402844][ T4272] Bluetooth: hci4: command 0x0419 tx timeout [ 178.575501][ T6191] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 178.605987][ T6191] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 178.655044][ T6191] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 178.693418][ T6191] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 178.738645][ T6191] usb 3-1: USB disconnect, device number 9 [ 179.046123][ T6326] loop0: detected capacity change from 0 to 32768 [ 179.142000][ T6326] XFS (loop0): Mounting V5 Filesystem [ 179.377240][ T6326] XFS (loop0): Ending clean mount [ 179.422996][ T6326] XFS (loop0): Quotacheck needed: Please wait. [ 179.616491][ T6326] XFS (loop0): Quotacheck: Done. [ 180.381985][ T4270] XFS (loop0): Unmounting Filesystem [ 180.479491][ T6383] loop2: detected capacity change from 0 to 16 [ 180.509256][ T6383] erofs: (device loop2): mounted with root inode @ nid 36. [ 180.519503][ T6384] netlink: 12 bytes leftover after parsing attributes in process `syz.5.562'. [ 180.612780][ T6384] netlink: 12 bytes leftover after parsing attributes in process `syz.5.562'. [ 181.210391][ T5102] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 181.395537][ T5102] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 181.412870][ T5102] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 181.497507][ T5102] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 181.527906][ T5102] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.589280][ T6397] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 181.692668][ T6413] loop1: detected capacity change from 0 to 4096 [ 181.723593][ T6414] tipc: Started in network mode [ 181.750380][ T6414] tipc: Node identity 4acc2ccce5fe, cluster identity 4711 [ 181.823872][ T6413] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 181.840668][ T6414] tipc: Enabled bearer , priority 10 [ 181.902310][ T6411] tipc: Resetting bearer [ 182.084430][ T6411] tipc: Disabling bearer [ 182.196606][ T4316] usb 3-1: USB disconnect, device number 10 [ 182.422530][ T4271] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 182.618868][ T6426] loop1: detected capacity change from 0 to 2048 [ 182.785117][ T6426] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 183.037407][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 183.722618][ T4316] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 183.780184][ T6444] loop2: detected capacity change from 0 to 32768 [ 183.861774][ T6444] XFS (loop2): Mounting V5 Filesystem [ 183.895359][ T6432] loop5: detected capacity change from 0 to 32768 [ 183.931030][ T4316] usb 7-1: Using ep0 maxpacket: 16 [ 183.980724][ T4316] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.033262][ T4316] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 184.086710][ T4316] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 184.102771][ T4316] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.111602][ T4316] usb 7-1: Product: syz [ 184.116551][ T4316] usb 7-1: Manufacturer: syz [ 184.121458][ T4316] usb 7-1: SerialNumber: syz [ 184.159025][ T6444] XFS (loop2): Ending clean mount [ 184.181798][ T6444] XFS (loop2): Quotacheck needed: Please wait. [ 184.214318][ T6432] XFS (loop5): Mounting V5 Filesystem [ 184.337483][ T4316] usb 7-1: 0:2 : does not exist [ 184.358821][ T4316] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 184.483220][ T6444] XFS (loop2): Quotacheck: Done. [ 184.506808][ T4316] usb 7-1: USB disconnect, device number 2 [ 184.735488][ T6432] XFS (loop5): Ending clean mount [ 184.745106][ T5595] udevd[5595]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.938206][ T4274] XFS (loop2): Unmounting Filesystem [ 185.007985][ T6478] loop0: detected capacity change from 0 to 512 [ 185.060396][ T6478] EXT4-fs: inline encryption not supported [ 185.100822][ T6478] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 185.164190][ T6478] EXT4-fs (loop0): orphan cleanup on readonly fs [ 185.172773][ T6478] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.587: inode #15: comm syz.0.587: iget: illegal inode # [ 185.253024][ T6478] EXT4-fs error (device loop0): ext4_orphan_get:1410: comm syz.0.587: couldn't read orphan inode 15 (err -117) [ 185.382962][ T6478] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 185.401132][ T4413] XFS (loop5): Unmounting Filesystem [ 185.588734][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 186.600061][ T6509] overlayfs: upper fs does not support file handles, falling back to index=off. [ 187.582607][ T5102] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 187.774447][ T5102] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 187.792144][ T5102] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.023671][ T5102] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 188.297736][ T6549] loop1: detected capacity change from 0 to 8192 [ 188.354819][ T6549] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 188.370031][ T6549] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 188.381108][ T6549] REISERFS (device loop1): using ordered data mode [ 188.388090][ T6549] reiserfs: using flush barriers [ 188.398866][ T6549] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 188.418337][ T6549] REISERFS (device loop1): checking transaction log (loop1) [ 188.652322][ T6549] REISERFS (device loop1): Using tea hash to sort names [ 188.680850][ T6549] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 188.880059][ T6549] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 2) not found (pos 4) [ 189.261056][ T6557] netlink: 'syz.0.612': attribute type 4 has an invalid length. [ 189.289300][ T6557] netlink: 128 bytes leftover after parsing attributes in process `syz.0.612'. [ 189.942801][ T5102] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 190.075724][ T6580] device-mapper: ioctl: Invalid target message parameters. [ 190.092745][ T6191] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 190.151341][ T5102] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.171905][ T5102] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.197168][ T6583] bridge0: port 4(bond0) entered blocking state [ 190.205571][ T6583] bridge0: port 4(bond0) entered disabled state [ 190.212240][ T5102] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.224538][ T6583] device bond0 entered promiscuous mode [ 190.230326][ T6583] device bond_slave_0 entered promiscuous mode [ 190.237175][ T6583] device bond_slave_1 entered promiscuous mode [ 190.249946][ T6584] bridge0: port 5(batadv0) entered blocking state [ 190.261335][ T5102] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.285041][ T6191] usb 1-1: unable to get BOS descriptor or descriptor too short [ 190.289986][ T5102] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.303231][ T6191] usb 1-1: not running at top speed; connect to a high speed hub [ 190.313649][ T6584] bridge0: port 5(batadv0) entered disabled state [ 190.324074][ T6191] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 190.327503][ T5102] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.351668][ T6191] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 190.369061][ T6584] device batadv0 entered promiscuous mode [ 190.379586][ T5102] usb 2-1: config 0 descriptor?? [ 190.394767][ T6191] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 190.429077][ T6191] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 190.459306][ T6191] usb 1-1: New USB device found, idVendor=dead, idProduct=beef, bcdDevice= 1.00 [ 190.502603][ T6191] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.531119][ T6191] usb 1-1: Product: syz [ 190.535493][ T6191] usb 1-1: Manufacturer: syz [ 190.540295][ T6191] usb 1-1: SerialNumber: syz [ 190.554478][ T6578] loop5: detected capacity change from 0 to 32768 [ 190.564880][ T6574] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 190.572962][ T6574] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 190.620910][ T6586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.625'. [ 190.630254][ T6586] netlink: 'syz.2.625': attribute type 14 has an invalid length. [ 190.638770][ T6586] netlink: 12 bytes leftover after parsing attributes in process `syz.2.625'. [ 190.648601][ T6586] netlink: 'syz.2.625': attribute type 14 has an invalid length. [ 190.673411][ T6578] XFS (loop5): Mounting V5 Filesystem [ 190.679260][ T57] batman_adv: batadv0: IGMP Querier appeared [ 190.686145][ T57] batman_adv: batadv0: MLD Querier appeared [ 190.768305][ T6578] XFS (loop5): Ending clean mount [ 190.804433][ T5102] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 190.850194][ T5102] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 190.880323][ T6194] usb 1-1: USB disconnect, device number 4 [ 190.887921][ T6574] usb 1-1: Unknown version 0x0000 [ 190.894888][ T6125] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 191.089372][ T5102] usb 2-1: USB disconnect, device number 7 [ 191.118930][ T4413] XFS (loop5): Unmounting Filesystem [ 193.612889][ T6194] usb 7-1: USB disconnect, device number 3 [ 193.739781][ T6607] loop0: detected capacity change from 0 to 512 [ 193.750815][ T6605] loop5: detected capacity change from 0 to 256 [ 193.818281][ T6605] FAT-fs (loop5): Directory bread(block 64) failed [ 193.883605][ T6605] FAT-fs (loop5): Directory bread(block 65) failed [ 193.890648][ T6607] EXT4-fs warning (device loop0): read_mmp_block:115: Error -117 while reading MMP block 12 [ 193.917083][ T6605] FAT-fs (loop5): Directory bread(block 66) failed [ 193.989906][ T6605] FAT-fs (loop5): Directory bread(block 67) failed [ 194.014502][ T6605] FAT-fs (loop5): Directory bread(block 68) failed [ 194.021129][ T6605] FAT-fs (loop5): Directory bread(block 69) failed [ 194.079193][ T6605] FAT-fs (loop5): Directory bread(block 70) failed [ 194.110292][ T6605] FAT-fs (loop5): Directory bread(block 71) failed [ 194.145533][ T6605] FAT-fs (loop5): Directory bread(block 72) failed [ 194.183237][ T6605] FAT-fs (loop5): Directory bread(block 73) failed [ 194.235018][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.241478][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.574567][ T6626] loop5: detected capacity change from 0 to 512 [ 194.583153][ T6624] tipc: Started in network mode [ 194.602617][ T6624] tipc: Node identity 9210ae0730c2, cluster identity 4711 [ 194.611462][ T6626] EXT4-fs: Ignoring removed nobh option [ 194.646601][ T6626] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 194.656817][ T6624] tipc: Enabled bearer , priority 10 [ 194.693123][ T6622] tipc: Resetting bearer [ 194.708285][ T6626] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 194.752263][ T6626] EXT4-fs (loop5): 1 truncate cleaned up [ 194.764957][ T6626] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 194.814291][ T6622] tipc: Disabling bearer [ 195.008252][ T6623] loop1: detected capacity change from 0 to 32768 [ 195.074744][ T6623] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 195.107462][ T4413] EXT4-fs (loop5): unmounting filesystem. [ 195.483718][ T4389] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 195.579463][ T6643] device netdevsim0 entered promiscuous mode [ 195.630424][ T6643] device netdevsim0 left promiscuous mode [ 195.744263][ T6642] netlink: 'syz.0.641': attribute type 1 has an invalid length. [ 195.751990][ T6642] netlink: 76 bytes leftover after parsing attributes in process `syz.0.641'. [ 196.539574][ T6666] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.569318][ T6666] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.148947][ T6680] loop0: detected capacity change from 0 to 2048 [ 197.312636][ T6680] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 197.479144][ T6685] overlayfs: upper fs does not support file handles, falling back to index=off. [ 197.928266][ T6697] loop5: detected capacity change from 0 to 1024 [ 198.169911][ T6703] loop2: detected capacity change from 0 to 512 [ 198.192127][ T6703] EXT4-fs: inline encryption not supported [ 198.254976][ T6703] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 198.357500][ T6692] loop1: detected capacity change from 0 to 32768 [ 198.414561][ T6703] EXT4-fs (loop2): orphan cleanup on readonly fs [ 198.428067][ T6703] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.659: inode #15: comm syz.2.659: iget: illegal inode # [ 198.462030][ T6703] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.659: couldn't read orphan inode 15 (err -117) [ 198.480232][ T6692] XFS (loop1): Mounting V5 Filesystem [ 198.510662][ T4413] hfsplus: walked past end of dir [ 198.543171][ T6703] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 198.585882][ T6717] loop0: detected capacity change from 0 to 4096 [ 198.661381][ T4413] hfsplus: xattr search failed [ 198.712269][ T6721] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 198.732788][ T6692] XFS (loop1): Ending clean mount [ 198.753641][ T6692] XFS (loop1): Quotacheck needed: Please wait. [ 198.892954][ T6692] XFS (loop1): Quotacheck: Done. [ 198.935229][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 198.970298][ T6727] loop5: detected capacity change from 0 to 16 [ 199.141390][ T6727] erofs: (device loop5): mounted with root inode @ nid 36. [ 199.263179][ T6730] Illegal XDP return value 4294967294 on prog (id 48) dev syz_tun, expect packet loss! [ 199.317099][ T6724] overlayfs: upper fs does not support tmpfile. [ 199.341811][ T4280] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 199.361472][ T6727] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[4096] [ 199.506200][ T4271] XFS (loop1): Unmounting Filesystem [ 199.536249][ T6724] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 199.548209][ T6724] overlayfs: failed to set xattr on upper [ 199.555352][ T6724] overlayfs: ...falling back to index=off,metacopy=off. [ 200.089105][ T6717] syz.0.661 (6717) used greatest stack depth: 19456 bytes left [ 200.868773][ T6761] loop5: detected capacity change from 0 to 16 [ 200.930822][ T6761] erofs: (device loop5): mounted with root inode @ nid 36. [ 201.275313][ T6767] netlink: 'syz.0.676': attribute type 1 has an invalid length. [ 201.348614][ T6749] loop1: detected capacity change from 0 to 32768 [ 201.373570][ T6749] gfs2: Unexpected value for 'spectator' [ 201.502614][ T6767] 8021q: adding VLAN 0 to HW filter on device bond1 [ 201.615846][ T6773] bond1: (slave gretap1): making interface the new active one [ 201.673652][ T6773] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 201.697746][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 202.407008][ T6808] loop6: detected capacity change from 0 to 256 [ 202.627051][ T6808] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 202.872060][ T6806] loop5: detected capacity change from 0 to 32768 [ 202.963457][ T6806] XFS (loop5): Mounting V5 Filesystem [ 202.982784][ T6194] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 203.175786][ T6194] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 203.187982][ T6806] XFS (loop5): Ending clean mount [ 203.199539][ T6194] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 44, changing to 9 [ 203.233979][ T6806] XFS (loop5): Quotacheck needed: Please wait. [ 203.249261][ T6194] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 203.273561][ T6194] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 203.306035][ T6194] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 203.330048][ T6194] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.360656][ T6806] XFS (loop5): Quotacheck: Done. [ 203.371467][ T6194] usb 7-1: config 0 descriptor?? [ 203.731193][ T4413] XFS (loop5): Unmounting Filesystem [ 203.810744][ T6194] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xd [ 203.824575][ T6194] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 203.854455][ T6194] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 203.879111][ T6194] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 203.916829][ T6194] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 204.115509][ T6194] usb 7-1: USB disconnect, device number 4 [ 204.240120][ T6840] fido_id[6840]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 204.890099][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.5.701'. [ 206.139001][ T6877] loop6: detected capacity change from 0 to 32768 [ 206.161494][ T6881] loop1: detected capacity change from 0 to 32768 [ 206.206718][ T6897] loop0: detected capacity change from 0 to 128 [ 206.238485][ T6877] XFS (loop6): Mounting V5 Filesystem [ 206.249612][ T6897] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 206.267705][ T6897] System zones: 1-3, 19-19, 35-36 [ 206.277192][ T6897] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 206.319425][ T6881] XFS (loop1): Mounting V5 Filesystem [ 206.328799][ T6897] ext4 filesystem being mounted at /153/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 206.360804][ C1] vkms_vblank_simulate: vblank timer overrun [ 206.400049][ T6877] XFS (loop6): Ending clean mount [ 206.533858][ T6881] XFS (loop1): Ending clean mount [ 206.552574][ T4272] Bluetooth: hci0: command 0x0406 tx timeout [ 206.553222][ T4280] Bluetooth: hci1: command 0x0406 tx timeout [ 206.558678][ T4272] Bluetooth: hci3: command 0x0406 tx timeout [ 206.604488][ T6917] bonding: unable to delete non-existent b [ 206.841246][ T6897] EXT4-fs warning (device loop0): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 206.867739][ T4271] XFS (loop1): Unmounting Filesystem [ 207.058110][ T6129] XFS (loop6): Unmounting Filesystem [ 207.065599][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 207.512784][ T6191] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 207.522723][ T5102] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 207.712494][ T6191] usb 3-1: Using ep0 maxpacket: 32 [ 207.725805][ T5102] usb 1-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice= 1.00 [ 207.731386][ T6191] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 207.743256][ T5102] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 207.762648][ T5102] usb 1-1: Product: syz [ 207.766877][ T5102] usb 1-1: Manufacturer: syz [ 207.781094][ T6191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.801789][ T6191] usb 3-1: Product: syz [ 207.805663][ T5102] iuu_phoenix 1-1:1.0: iuu_phoenix converter detected [ 207.806307][ T6191] usb 3-1: Manufacturer: syz [ 207.822647][ T6191] usb 3-1: SerialNumber: syz [ 207.829454][ T6191] usb 3-1: config 0 descriptor?? [ 207.856850][ T5102] usb 1-1: iuu_phoenix converter now attached to ttyUSB0 [ 207.875002][ T6191] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 208.901043][ T6952] loop1: detected capacity change from 0 to 512 [ 209.092741][ T6952] loop1: detected capacity change from 512 to 0 [ 209.124798][ T6940] iuu_phoenix ttyUSB0: vcc_mode_store - vcc_mode: s is not a unsigned long [ 209.157530][ T4315] usb 1-1: USB disconnect, device number 5 [ 209.218243][ T4315] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 209.250170][ T4315] iuu_phoenix 1-1:1.0: device disconnected [ 209.291379][ T6191] gspca_topro: reg_r err -71 [ 209.300053][ T6191] gspca_topro: Sensor soi763a [ 209.334875][ T6191] usb 3-1: USB disconnect, device number 11 [ 209.611512][ T4271] team0: Port device syz_tun removed [ 209.691259][ T57] FAT-fs (loop1): Invalid FSINFO signature: 0x00416152, 0x05614172 (sector = 1) [ 210.103778][ T4615] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.151585][ T4615] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.404297][ T4615] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.465055][ T4615] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.754781][ T4615] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 210.792498][ T4615] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.072150][ T4615] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 211.101586][ T4615] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.453498][ T4272] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 211.465522][ T4272] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 211.474045][ T4272] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 211.485626][ T4272] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 211.493300][ T4272] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 211.500585][ T4272] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.031469][ T7004] netlink: 256 bytes leftover after parsing attributes in process `syz.6.743'. [ 212.037286][ T7004] unsupported nlmsg_type 40 [ 212.320818][ T6993] chnl_net:caif_netlink_parms(): no params data found [ 213.121535][ T6993] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.129011][ T6993] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.166197][ T6993] device bridge_slave_0 entered promiscuous mode [ 213.318852][ T6993] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.342681][ T6993] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.350991][ T6993] device bridge_slave_1 entered promiscuous mode [ 213.595021][ T4276] Bluetooth: hci1: command 0x0409 tx timeout [ 213.759562][ T6993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.810055][ T6993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.811683][ T7068] loop6: detected capacity change from 0 to 1024 [ 213.928816][ T7068] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 213.961284][ T7068] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 213.977095][ T7068] EXT4-fs (loop6): Remounting filesystem read-only [ 214.052152][ T6129] EXT4-fs (loop6): unmounting filesystem. [ 214.158490][ T6993] team0: Port device team_slave_0 added [ 214.188378][ T4615] device hsr_slave_0 left promiscuous mode [ 214.207750][ T4615] device hsr_slave_1 left promiscuous mode [ 214.274829][ T4615] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.288730][ T4615] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.317657][ T4615] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.354402][ T4615] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.384142][ T4615] device bridge_slave_1 left promiscuous mode [ 214.428247][ T4615] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.440481][ T4615] device bridge_slave_0 left promiscuous mode [ 214.449106][ T4615] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.510291][ T7083] loop2: detected capacity change from 0 to 512 [ 214.545219][ T4615] device veth1_macvtap left promiscuous mode [ 214.561806][ T7083] EXT4-fs: Ignoring removed nobh option [ 214.600528][ T4615] device veth0_macvtap left promiscuous mode [ 214.617336][ T4615] device veth1_vlan left promiscuous mode [ 214.630353][ T7083] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 214.660944][ T4615] device veth0_vlan left promiscuous mode [ 214.741697][ T7083] EXT4-fs (loop2): 1 truncate cleaned up [ 214.758201][ T7083] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 214.977326][ T4274] EXT4-fs (loop2): unmounting filesystem. [ 215.345940][ T7102] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 215.617096][ T7108] loop2: detected capacity change from 0 to 2048 [ 215.672719][ T4276] Bluetooth: hci1: command 0x041b tx timeout [ 215.694020][ T7108] Alternate GPT is invalid, using primary GPT. [ 215.711648][ T7108] loop2: p2 p3 p7 [ 216.019098][ T7112] loop6: detected capacity change from 0 to 128 [ 216.073511][ T7112] FAT-fs (loop6): Unrecognized mount option "nfs=nostale_rset=macinuit" or missing value [ 216.287595][ T26] audit: type=1804 audit(1787963705.533:30): pid=7112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.767" name="/newroot/41/file0/file1" dev="overlay" ino=242 res=1 errno=0 [ 216.792572][ T4276] Bluetooth: hci2: command 0x0406 tx timeout [ 216.957294][ T4615] team0 (unregistering): Port device team_slave_1 removed [ 217.043253][ T4615] team0 (unregistering): Port device team_slave_0 removed [ 217.125258][ T4615] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.191571][ T4615] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.758276][ T4272] Bluetooth: hci1: command 0x040f tx timeout [ 217.812537][ T5100] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 217.881796][ T4615] bond0 (unregistering): Released all slaves [ 217.990275][ T6993] team0: Port device team_slave_1 added [ 218.002805][ T5100] usb 7-1: Using ep0 maxpacket: 32 [ 218.010371][ T5100] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 218.022960][ T5100] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.039363][ T5100] usb 7-1: config 0 descriptor?? [ 218.049284][ T5100] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 218.138803][ T7091] bond0: (slave bond_slave_1): Releasing backup interface [ 218.195339][ T6993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.222524][ T6993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.362614][ T6993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.414287][ T6993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.421307][ T6993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.477906][ T7138] loop5: detected capacity change from 0 to 128 [ 218.557369][ T7141] ip_tables: iptables: counters copy to user failed while replacing table [ 218.558315][ T6993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.841379][ T6993] device hsr_slave_0 entered promiscuous mode [ 218.908728][ T6993] device hsr_slave_1 entered promiscuous mode [ 218.937239][ T6993] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.989585][ T6993] Cannot create hsr debugfs directory [ 219.473666][ T6993] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 219.497103][ T6993] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 219.521759][ T5100] gspca_vc032x: reg_w err -71 [ 219.531038][ T5100] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.539440][ T6993] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 219.549659][ T5100] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.559381][ T5100] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.570544][ T5100] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.578314][ T5100] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.594798][ T5100] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.606038][ T5100] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.620422][ T5100] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.637088][ T5100] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.675140][ T5100] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.680606][ T5100] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.712777][ T5100] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.718147][ T5100] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.730782][ T5100] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.750970][ T5100] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.756484][ T5100] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.761878][ T5100] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.772585][ T5100] gspca_vc032x: I2c Bus Busy Wait 00 [ 219.778025][ T5100] gspca_vc032x: Unknown sensor... [ 219.792653][ T5100] vc032x: probe of 7-1:0.0 failed with error -22 [ 219.819592][ T5100] usb 7-1: USB disconnect, device number 5 [ 219.834081][ T4272] Bluetooth: hci1: command 0x0419 tx timeout [ 219.880632][ T6993] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 220.372973][ T6993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.477763][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 220.505924][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 220.563893][ T6993] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.629576][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 220.657629][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 220.708898][ T4400] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.716080][ T4400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.768114][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 220.818969][ T5971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 220.830279][ T5971] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 220.871186][ T5971] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.878368][ T5971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.900822][ T5971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 220.932155][ T5971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 220.950412][ T5971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 220.969453][ T5971] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 220.980029][ T5971] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 220.990222][ T5971] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 221.007015][ T5971] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 221.016715][ T5100] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 221.030128][ T5971] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 221.042056][ T5971] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 221.071335][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 221.089291][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 221.150286][ T6993] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 221.222840][ T5100] usb 7-1: Using ep0 maxpacket: 32 [ 221.230152][ T5100] usb 7-1: config index 0 descriptor too short (expected 27632, got 27) [ 221.259036][ T5100] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 221.285390][ T5100] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 221.314453][ T5100] usb 7-1: config 1 has no interface number 0 [ 221.320880][ T5100] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 221.343974][ T5100] usb 7-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 221.362829][ T5100] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 221.372180][ T5100] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.433882][ T5100] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 221.612026][ T7198] loop0: detected capacity change from 0 to 128 [ 221.634612][ T5100] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now attached [ 221.673548][ T7198] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 221.723180][ T7198] ext4 filesystem being mounted at /171/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 222.208455][ T5100] usb 7-1: USB disconnect, device number 6 [ 222.220111][ T5100] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 222.396291][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 222.421733][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 222.455062][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 222.521396][ T6993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.572653][ T4315] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 222.763018][ T4315] usb 6-1: Using ep0 maxpacket: 8 [ 222.780823][ T4315] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 222.835848][ T4315] usb 6-1: config 179 has no interface number 0 [ 222.879429][ T4315] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 222.921158][ T4315] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 222.963022][ T4315] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 222.995571][ T4315] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 223.025514][ T4315] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 223.075592][ T4315] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 223.120679][ T4315] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.172949][ T7219] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 223.526745][ T4315] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input11 [ 223.756179][ T4315] usb 6-1: USB disconnect, device number 4 [ 223.762144][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 223.762192][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 223.839994][ T4315] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 223.980463][ T7244] loop6: detected capacity change from 0 to 32768 [ 224.142159][ T7244] XFS (loop6): Mounting V5 Filesystem [ 224.219089][ T7244] XFS (loop6): Ending clean mount [ 224.321271][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 224.345776][ T26] audit: type=1800 audit(1787963713.593:31): pid=7244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.797" name="file1" dev="loop6" ino=4427 res=0 errno=0 [ 224.384877][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 224.463915][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 224.477472][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 224.555858][ T6993] device veth0_vlan entered promiscuous mode [ 224.564511][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 224.576843][ T6129] XFS (loop6): Unmounting Filesystem [ 224.631187][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 224.673742][ T6993] device veth1_vlan entered promiscuous mode [ 224.859952][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 224.871592][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 224.880750][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 224.890589][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 224.909861][ T6993] device veth0_macvtap entered promiscuous mode [ 224.968941][ T6993] device veth1_macvtap entered promiscuous mode [ 225.026588][ T7283] loop5: detected capacity change from 0 to 1024 [ 225.056796][ T6993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.083618][ T6993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.094096][ T6993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.097763][ T7283] EXT4-fs: Ignoring removed mblk_io_submit option [ 225.109313][ T6993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.137744][ T7283] EXT4-fs: Ignoring removed oldalloc option [ 225.143165][ T6993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.187679][ T6993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.240989][ T6993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.250011][ T7283] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 225.263776][ T7283] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 225.279123][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 225.295321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 225.317388][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 225.429347][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 225.483396][ T6993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.520224][ T6993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.537741][ T6993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.550680][ T6993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.577244][ T6993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.592180][ T6993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.631188][ T6993] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.650088][ T6993] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.662236][ T4413] EXT4-fs (loop5): unmounting filesystem. [ 225.677289][ T6993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.702774][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 225.714493][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 225.744160][ T6993] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.772555][ T6993] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.804890][ T6993] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.848641][ T6993] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.861591][ T7305] loop2: detected capacity change from 0 to 16 [ 225.919277][ T7305] erofs: (device loop2): mounted with root inode @ nid 36. [ 226.129658][ T4325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.147331][ T4325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.211471][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 226.281028][ T4400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.318559][ T4400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.340058][ T4615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 227.037742][ T7336] loop6: detected capacity change from 0 to 128 [ 227.110360][ T7336] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 227.171555][ T7336] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 227.186855][ T7342] loop7: detected capacity change from 0 to 256 [ 227.248994][ T6191] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 227.287623][ T7342] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 227.388130][ T7344] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized [ 227.432757][ T4276] Bluetooth: hci2: command 0x0401 tx timeout [ 227.452606][ T6191] usb 6-1: Using ep0 maxpacket: 16 [ 227.465191][ T6191] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.473095][ T7344] lpc_ich 0000:00:00.0: No MFD cells added [ 227.485346][ T7344] lpc_ich 0000:00:01.0: I/O space for ACPI uninitialized [ 227.499315][ T6191] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 227.522545][ T7344] lpc_ich 0000:00:01.0: No MFD cells added [ 227.539465][ T6191] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 227.573609][ T6191] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.608502][ T6191] usb 6-1: Product: syz [ 227.622011][ T6191] usb 6-1: Manufacturer: syz [ 227.631458][ T6191] usb 6-1: SerialNumber: syz [ 228.309164][ T4315] usb 6-1: USB disconnect, device number 5 [ 228.327482][ T7366] lo speed is unknown, defaulting to 1000 [ 228.356112][ T7366] lo speed is unknown, defaulting to 1000 [ 228.385646][ T7366] lo speed is unknown, defaulting to 1000 [ 228.437178][ T7366] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 228.506945][ T7366] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 228.694148][ T7366] lo speed is unknown, defaulting to 1000 [ 228.707227][ T7366] lo speed is unknown, defaulting to 1000 [ 228.763514][ T7366] lo speed is unknown, defaulting to 1000 [ 228.806892][ T7366] lo speed is unknown, defaulting to 1000 [ 228.858949][ T7366] lo speed is unknown, defaulting to 1000 [ 228.893541][ T7366] lo speed is unknown, defaulting to 1000 [ 230.347970][ T7415] Bluetooth: hci0: invalid len left 7, exp >= 50 [ 230.972184][ T7428] netlink: 'syz.0.846': attribute type 3 has an invalid length. [ 230.972336][ T7428] netlink: 'syz.0.846': attribute type 8 has an invalid length. [ 230.972352][ T7428] netlink: 'syz.0.846': attribute type 7 has an invalid length. [ 230.992988][ T7428] netlink: 194740 bytes leftover after parsing attributes in process `syz.0.846'. [ 231.456709][ T7414] loop7: detected capacity change from 0 to 40427 [ 231.476413][ T7414] F2FS-fs (loop7): build fault injection attr: rate: 19, type: 0x3ffff [ 231.476534][ T7414] F2FS-fs (loop7): Unrecognized mount option "noex'b$‹Áƒ" or missing value [ 231.552597][ T4315] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 231.592520][ T6194] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 231.737679][ T7409] ================================================================== [ 231.737694][ T7409] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x1ba8/0x25d0 [ 231.737728][ T7409] Write of size 4 at addr ffffc900047b9080 by task syz.7.840/7409 [ 231.737749][ T7409] [ 231.737764][ T7409] CPU: 1 PID: 7409 Comm: syz.7.840 Not tainted syzkaller #0 [ 231.737787][ T7409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 231.737816][ T7409] Call Trace: [ 231.737825][ T7409] [ 231.737833][ T7409] dump_stack_lvl+0x188/0x24e [ 231.737868][ T7409] ? sys_imageblit+0x1ba8/0x25d0 [ 231.737893][ T7409] ? show_regs_print_info+0x12/0x12 [ 231.737927][ T7409] ? load_image+0x410/0x410 [ 231.737955][ T7409] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 231.737984][ T7409] ? __virt_addr_valid+0xbf/0x540 [ 231.738015][ T7409] ? sys_imageblit+0x1ba8/0x25d0 [ 231.738038][ T7409] print_report+0xa8/0x210 [ 231.738065][ T7409] kasan_report+0x10b/0x140 [ 231.738097][ T7409] ? __kmem_cache_free+0xb6/0x200 [ 231.738122][ T7409] ? sys_imageblit+0x1ba8/0x25d0 [ 231.738149][ T7409] sys_imageblit+0x1ba8/0x25d0 [ 231.738180][ T7409] ? sys_copyarea+0x2530/0x2530 [ 231.738202][ T7409] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 231.738239][ T7409] ? kasan_quarantine_put+0xd4/0x210 [ 231.738264][ T7409] drm_fb_helper_sys_imageblit+0x2e/0x510 [ 231.738298][ T7409] ? drm_fbdev_fb_imageblit+0x184/0x200 [ 231.738333][ T7409] soft_cursor+0x9fd/0xc30 [ 231.738359][ T7409] bit_cursor+0x16b5/0x1f40 [ 231.738390][ T7409] ? bit_clear_margins+0x550/0x550 [ 231.738410][ T7409] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 231.738443][ T7409] ? bit_clear_margins+0x550/0x550 [ 231.738466][ T7409] ? add_softcursor+0x8c/0x440 [ 231.738493][ T7409] con_flush_chars+0x1f6/0x270 [ 231.738520][ T7409] con_write+0x29/0x40 [ 231.738545][ T7409] n_tty_write+0xd61/0x11e0 [ 231.738583][ T7409] ? n_tty_read+0x1360/0x1360 [ 231.738611][ T7409] ? wait_woken+0x1c0/0x1c0 [ 231.738642][ T7409] ? __virt_addr_valid+0x467/0x540 [ 231.738673][ T7409] ? __check_object_size+0x4f6/0xa70 [ 231.738700][ T7409] file_tty_write+0x4c7/0x840 [ 231.738726][ T7409] ? n_tty_read+0x1360/0x1360 [ 231.738754][ T7409] do_iter_write+0x638/0xb10 [ 231.738790][ T7409] ? iovec_from_user+0x2dc/0x360 [ 231.738832][ T7409] ? vfs_iter_write+0xa0/0xa0 [ 231.738864][ T7409] ? __import_iovec+0x306/0x510 [ 231.738899][ T7409] ? import_iovec+0x6f/0xa0 [ 231.738931][ T7409] do_writev+0x27b/0x480 [ 231.738955][ T7409] ? do_readv+0x460/0x460 [ 231.738984][ T7409] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 231.739017][ T7409] ? lock_chain_count+0x20/0x20 [ 231.739050][ T7409] ? lockdep_hardirqs_on+0x94/0x140 [ 231.739076][ T7409] do_syscall_64+0x4c/0xa0 [ 231.739108][ T7409] ? clear_bhb_loop+0x60/0xb0 [ 231.739137][ T7409] ? clear_bhb_loop+0x60/0xb0 [ 231.739169][ T7409] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.739205][ T7409] RIP: 0033:0x7f688959e159 [ 231.739229][ T7409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.739248][ T7409] RSP: 002b:00007f688a4e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 231.739274][ T7409] RAX: ffffffffffffffda RBX: 00007f6889825fa0 RCX: 00007f688959e159 [ 231.739292][ T7409] RDX: 0000000000000001 RSI: 0000200000008d40 RDI: 0000000000000004 [ 231.739307][ T7409] RBP: 00007f6889635024 R08: 0000000000000000 R09: 0000000000000000 [ 231.739322][ T7409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.739336][ T7409] R13: 00007f6889826038 R14: 00007f6889825fa0 R15: 00007ffd9d80b768 [ 231.739361][ T7409] [ 231.739368][ T7409] [ 231.739373][ T7409] The buggy address belongs to a vmalloc virtual mapping [ 231.739389][ T7409] Memory state around the buggy address: [ 231.739400][ T7409] ffffc900047b8f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 231.739415][ T7409] ffffc900047b9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 231.739430][ T7409] >ffffc900047b9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 231.739441][ T7409] ^ [ 231.739451][ T7409] ffffc900047b9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 231.739466][ T7409] ffffc900047b9180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 231.739477][ T7409] ================================================================== [ 231.743770][ T4315] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 231.743803][ T4315] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 231.743839][ T4315] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 231.748636][ T4315] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 231.748668][ T4315] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 231.748692][ T4315] usb 6-1: Product: syz [ 231.748709][ T4315] usb 6-1: Manufacturer: syz [ 231.748726][ T4315] usb 6-1: SerialNumber: syz [ 231.768407][ T7409] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 231.768426][ T7409] CPU: 1 PID: 7409 Comm: syz.7.840 Not tainted syzkaller #0 [ 231.768458][ T7409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 231.768471][ T7409] Call Trace: [ 231.768478][ T7409] [ 231.768487][ T7409] dump_stack_lvl+0x188/0x24e [ 231.768528][ T7409] ? memcpy+0x3c/0x60 [ 231.768550][ T7409] ? show_regs_print_info+0x12/0x12 [ 231.768583][ T7409] ? load_image+0x410/0x410 [ 231.768615][ T7409] panic+0x2d3/0x710 [ 231.768638][ T7409] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 231.768674][ T7409] ? bpf_jit_dump+0xd0/0xd0 [ 231.768699][ T7409] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 231.768727][ T7409] ? _raw_spin_unlock+0x40/0x40 [ 231.768755][ T7409] check_panic_on_warn+0x80/0xa0 [ 231.768782][ T7409] ? sys_imageblit+0x1ba8/0x25d0 [ 231.768805][ T7409] end_report+0x66/0x110 [ 231.768835][ T7409] kasan_report+0x118/0x140 [ 231.768866][ T7409] ? __kmem_cache_free+0xb6/0x200 [ 231.768891][ T7409] ? sys_imageblit+0x1ba8/0x25d0 [ 231.768917][ T7409] sys_imageblit+0x1ba8/0x25d0 [ 231.768949][ T7409] ? sys_copyarea+0x2530/0x2530 [ 231.768971][ T7409] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 231.769008][ T7409] ? kasan_quarantine_put+0xd4/0x210 [ 231.769033][ T7409] drm_fb_helper_sys_imageblit+0x2e/0x510 [ 231.769066][ T7409] ? drm_fbdev_fb_imageblit+0x184/0x200 [ 231.769101][ T7409] soft_cursor+0x9fd/0xc30 [ 231.769127][ T7409] bit_cursor+0x16b5/0x1f40 [ 231.769157][ T7409] ? bit_clear_margins+0x550/0x550 [ 231.769177][ T7409] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 231.769209][ T7409] ? bit_clear_margins+0x550/0x550 [ 231.769231][ T7409] ? add_softcursor+0x8c/0x440 [ 231.769258][ T7409] con_flush_chars+0x1f6/0x270 [ 231.769285][ T7409] con_write+0x29/0x40 [ 231.769310][ T7409] n_tty_write+0xd61/0x11e0 [ 231.769347][ T7409] ? n_tty_read+0x1360/0x1360 [ 231.769373][ T7409] ? wait_woken+0x1c0/0x1c0 [ 231.769404][ T7409] ? __virt_addr_valid+0x467/0x540 [ 231.769437][ T7409] ? __check_object_size+0x4f6/0xa70 [ 231.769470][ T7409] file_tty_write+0x4c7/0x840 [ 231.769496][ T7409] ? n_tty_read+0x1360/0x1360 [ 231.769524][ T7409] do_iter_write+0x638/0xb10 [ 231.769560][ T7409] ? iovec_from_user+0x2dc/0x360 [ 231.769593][ T7409] ? vfs_iter_write+0xa0/0xa0 [ 231.769625][ T7409] ? __import_iovec+0x306/0x510 [ 231.769659][ T7409] ? import_iovec+0x6f/0xa0 [ 231.769692][ T7409] do_writev+0x27b/0x480 [ 231.769715][ T7409] ? do_readv+0x460/0x460 [ 231.769743][ T7409] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 231.769776][ T7409] ? lock_chain_count+0x20/0x20 [ 231.769808][ T7409] ? lockdep_hardirqs_on+0x94/0x140 [ 231.769834][ T7409] do_syscall_64+0x4c/0xa0 [ 231.769864][ T7409] ? clear_bhb_loop+0x60/0xb0 [ 231.769894][ T7409] ? clear_bhb_loop+0x60/0xb0 [ 231.769926][ T7409] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 231.769957][ T7409] RIP: 0033:0x7f688959e159 [ 231.769977][ T7409] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.769997][ T7409] RSP: 002b:00007f688a4e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 231.770023][ T7409] RAX: ffffffffffffffda RBX: 00007f6889825fa0 RCX: 00007f688959e159 [ 231.770040][ T7409] RDX: 0000000000000001 RSI: 0000200000008d40 RDI: 0000000000000004 [ 231.770055][ T7409] RBP: 00007f6889635024 R08: 0000000000000000 R09: 0000000000000000 [ 231.770070][ T7409] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.770084][ T7409] R13: 00007f6889826038 R14: 00007f6889825fa0 R15: 00007ffd9d80b768 [ 231.770108][ T7409] [ 231.770696][ T7409] Kernel Offset: disabled [ 232.605015][ T7409] Rebooting in 86400 seconds..