last executing test programs: 1.600037722s ago: executing program 1 (id=421): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x14004001) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000d40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000d80)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0xc000) 1.452015628s ago: executing program 2 (id=424): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket(0x1, 0x803, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x30, r3, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}}, 0x2) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000ac0)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @local, @local}}}}, 0x0) 1.446251169s ago: executing program 1 (id=425): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0xb34, 0xff16) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x102}], 0x1, 0x45833af92e4b38bf, 0x0) 1.311985914s ago: executing program 2 (id=427): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fbdbdf252100000008000300", @ANYRES32=r3, @ANYBLOB="14002d800004001000fe"], 0x30}, 0x1, 0x0, 0x0, 0x200000d0}, 0x20004080) 1.193813119s ago: executing program 2 (id=429): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000140)=@netrom={'nr', 0x0}, 0x10) 1.16945304s ago: executing program 3 (id=430): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000980), r0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x78, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x3c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x6}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xe9}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x78}, 0x1, 0x0, 0x0, 0x4080}, 0xc0) 1.063865035s ago: executing program 0 (id=432): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x2) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x1, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1.017523087s ago: executing program 3 (id=433): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 994.612788ms ago: executing program 4 (id=434): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x4e22, @local}, {0x2, 0x0, @empty}, 0x204, 0x0, 0x0, 0x0, 0xfffc}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0xc010) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) 940.10087ms ago: executing program 0 (id=435): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x24, r1, 0xb97534d5fe9704cf, 0x70bd2c, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x14a}]}, 0x24}, 0x1, 0x0, 0x0, 0x40084}, 0x8c098) 876.779003ms ago: executing program 4 (id=436): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) clock_gettime(0xfffffffffffffff6, 0x0) epoll_pwait(r2, 0x0, 0x0, 0xdeb, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x3}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000003a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x20000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000002300)=ANY=[@ANYBLOB="000086dd0000120000000000000060fc03000fc82c00fe8000000000000000000000000000aaff02000000000000000000000000000129"], 0xffe) 862.649504ms ago: executing program 0 (id=437): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x68, r2, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x45, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x3}, @device_b, @device_a, @from_mac, {0x9, 0x2}}, @void, @val, @val={0x3, 0x1}, @val={0x2d, 0x1a, {0x2, 0x0, 0x2, 0x0, {0x81, 0xc65, 0x0, 0x3a8, 0x0, 0x1, 0x1, 0x2, 0x1}, 0x8, 0x2, 0x10}}, @val={0x72, 0x6}}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, 0x0, 0x0) 795.906706ms ago: executing program 3 (id=438): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010003904000000000000000080040000", @ANYRES32=r2, @ANYBLOB="01980000000000002000128008000100736974001400028006000e000600000008000100", @ANYRES64=r2], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r0, &(0x7f0000000600)="05d936277c6f54220002097844ffcf8bd1846f7f83477ca1b278e3e4018a34844b9d62cbd7cd2a62646c95c716727eb53bcc1379f3d83cd0dfe2066008efa4b0aee65f7b2220304559576e089ff7aecf9140151cc621694891a078576718070e052144b6f9eb99f683f90597ecb8a915ea8ae015039c64e2490b28ab8dd41b9adc9f4abd", 0x84, 0x8c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 795.578337ms ago: executing program 2 (id=439): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006180)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x852, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x3ff, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1fe, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x2f6, 0x5, 0x10001, 0xf7, 0x3, 0x8, 0x9, 0x1, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d2c, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x863c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x8, 0xffffffff, 0x8, 0x470, 0x7f, 0x6, 0xfffffffc, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0xbaf, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x7ffffffe, 0x80, 0x8000, 0x6, 0xfed, 0xf, 0x6ae, 0x2, 0x23, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x5, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xac, 0x9, 0x6, 0x10, 0x9, 0x80008, 0x80000001, 0x0, 0x74, 0x6, 0x7fffffff, 0x0, 0xa, 0xfffffc01, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x200, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0x2, 0x5, 0xfca, 0x399d, 0x6, 0x8ab2, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x4, 0x1, 0x5, 0x354d, 0x0, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x0, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7e, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x8004b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x8, 0x8, 0x0, 0x4, 0x3, {0x6, 0x2, 0x2, 0x3, 0x81, 0x9}, {0x4, 0x2, 0x6, 0x0, 0x7, 0x4}, 0x1, 0x6, 0x6}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1080, 0x4, 0x80000ec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x381, 0x8, 0x6, 0x3, 0xb, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0x12, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0x2, 0x3, 0x10000, 0x5, 0x4, 0x1ff, 0x3, 0x0, 0xd, 0x6, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb827, 0x0, 0x0, 0x365, 0x8, 0x8, 0xf, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x5, 0x0, 0x2, 0x8, 0x1, 0x3, 0x9, 0xc, 0x7, 0x3, 0x3, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x7, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0xe, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0x2, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffc, 0xfffffffc, 0x1000, 0x7ff, 0x3, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0x7, 0x3, 0x0, 0x6, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x6, 0x4, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x4, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x9, 0x40, 0x2, 0xfff, 0x8, 0x3, 0x1, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0xffffff01, 0xc0a1, 0x8, 0x8, 0xa, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x8, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket(0x2, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x0) 726.794669ms ago: executing program 0 (id=440): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x2, r2}, 0x10) writev(r0, &(0x7f0000000600)=[{&(0x7f00000001c0)="b34e88cb", 0x4}, {0x0}], 0x2) 600.355825ms ago: executing program 3 (id=441): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x6, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40010) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 512.107799ms ago: executing program 1 (id=442): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328a01004ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff05000050"}, 0x38) sendmsg$inet(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[], 0x70}, 0x80) 511.103008ms ago: executing program 0 (id=452): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newqdisc={0x180, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x150, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x7f, 0x81, 0x9, 0xa, 0xab, 0xe, 0xb, 0x5, 0x6, 0xfffffff9, 0xe, 0x19, 0x18, 0x10, 0x4a, 0x2}}, @TCA_GRED_DPS={0x10, 0x3, {0xe, 0xf, 0x1, 0x3}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x40098}, 0x8044) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 468.396011ms ago: executing program 4 (id=443): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r1, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784002000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 462.157031ms ago: executing program 2 (id=444): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r0, &(0x7f000000dd00)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10162, 0x0) 340.092426ms ago: executing program 1 (id=445): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000002200)={0x40, 0x9, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x8}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x400c000) 339.818746ms ago: executing program 3 (id=446): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20010000", @ANYRES16=r1, @ANYBLOB="01007e069c07fcdbdf252500000008000300", @ANYRES32=r3, @ANYBLOB="08002600df16000068005080110001006ff4ea2d0c13a69b7a278e36d70000000800030001ac0f000400060005000900010000000800070000000000080007000da144e924000880040001000400010004000100040001000400010004000200040001000400010005000900000000000a000600080211000001000020006e800400010004000200040002000400020004000200040002000400020004000b00050008000000000009000700be71630c80000000080037000200000004000a00110007001129a04de4bd984887f722577900000008003500000000000a00340002"], 0x120}, 0x1, 0x0, 0x0, 0x20040040}, 0x4) 339.566216ms ago: executing program 4 (id=447): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@empty, @in=@multicast2, 0x4e21, 0x20, 0x0, 0x0, 0xa}, {0x1, 0x20000000, 0x20005, 0x8, 0x3, 0xfffffffffffffffa, 0x0, 0x5}, {0x2, 0xfffffffffffffffc, 0xffffffffffffffff}, 0xc24, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@local, 0x0, 0x32}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x0, 0x3, 0x101}}, 0xe8) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x12, 0x0, @empty}, 0x1c) 208.026862ms ago: executing program 1 (id=448): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000049c0)=ANY=[@ANYBLOB="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"/2702], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 207.757601ms ago: executing program 4 (id=449): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x38, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 125.309465ms ago: executing program 2 (id=450): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f0000000240)={{r0}, "f2b576c7d6d5b95470ef6a46c57dd89282dbac445b33363ea5e40c2115887fa0a4c79371605fe439b765b566067588cd9f19bd3f732d150fee354c00799f06d73034d60bfdd62e78a7893fbc3c6a3a4b3edccfaa2d8580d4f219d79b3241210a62bff8e2488257dd5eeeb0755234cfedb8835276210a25fa9e4f2f315da6e6050eb69b75e376f09ada8a874bb4ae3d53f083fcffc81ba14442d2c2d721a7bd15d73607831d544d8874d8bc0b13990d8bf27e1de76e3b6252fedd579d7a6ca1683ec46e87f4c5cdfd3953e2bdaee95faa3c61f54e0e014681827efb71846717abb8a1b1c9258c675ee9cb9c22f105920a9687cf8be32989ac7522373d71b621665363e2c063749bfa5c34afd74cb432e88e8fda6ab010a4d002d7d32c65f7137494894e98cadddc515fa5be18acc6eba3ce482d95ea36c44befd711a664545789309974922ec2817d310176351db301c4cdf180ea141876f64686508e4e7d785d55083f7532de5ff2e5704f938072735d1dd02aadf3d946d62b5aafaa2f4d6133808ae4e3dc76c763e4b6907d14b24fefebff3b510f84f3dbaf76e1849ce44f76d1381a968c09e8d5cecab506e1a209b5fe4baea96523443d3e39dd129890792b826907fe9eff24d1d9eca5ccc1d0eaca9b1267374c089d0ef5ffccf06247748a8f39dd351807f3333456dcacf6693ba1666c4dd3ce70f6f40d6b81c123d2c8904342f6bfab6ad828f3af4a8642c3e7c75344ca46843e3d73822f964aab0aeb5489aa668b9e369ad1320ed8a05b2face97a3e2f9c78bafee449afec80b5cf994663e6ea5b6ad6fd31f441511924a78155acd137f326ba38615a95cc22480699f47a43b857bfcd6ce6e6b0cc150b2610fa39014c9ba9681d05d6f292641c00131824b1418a0cd712fe3ce0c1b620b71b004c3dca5810f286b59931b7091d1b8a7f24c10b39273dfc9b65ee321eefd62f8d52a0e2471c0ddddaeea666e74703ac6b75f72df72bbd01a32cefae2f47687e31aed4df2809c4fac221081d0372a8d6f88037874bad3ca278987d4b809e9f9b640e8c38a550b94b3505f62efd53b37f13d86ef06b271cf86bcdc976945b315ebb0f612964fa0dbdd7054a4cc4f3e32b268bc2ccbf0c523c77c765ec45340ab428b57ff9748ce5b71c502e805c0772db658b2b075428df19e8b0e6d2de8647d92fce3272ce85f48373532c7fc3cf450dd5b98e919a68c1b59495096c19d67aef288354ae6967649e6fbdb9dd320d1e9ba484879a167985ba7caa950a3f2b07a4e16151472bc0d02201d64d87250a77414b9ac1d0f81a926fb7b71066d4bc1ee05871a4ac1f519d334221b57c819b67348596921615267bffc34b3d3ae75abb60ca3c9fa420d072932dfddb9ade7da99cfebc93b7bc9fd028df79b18632b6c198c1f7bc8896cfa01851ee7902e764ee156c9d2923c5af388f1a00bafc10a05c697d5e8617558f6c5937a5aadc0f25d45ce024175fc8641fdf96c3ab170e95ddaec739f3fa19c7aa60327793554f8da994446192b5117b7f18eb732cda76c6431442d2d8fed6c41ed4275331a7f5b04ed81d71c4f11d385d1c77229db2c186b70c611984d516d9a63538c42c541723c2ce78d2e9df4ca00136d17d96593861b90715e2b32312d1786a042b9716c00ec44e07c84badb102be0217432866abcc8ccded1dd1b5f6b353f3c94c8332aedb56125a9b2afb6cecbe8319f3eeca88a7ac626e86e32ebf7e4380d6b5dea256e76dd3847b7d29b1f8e370cf0ebf92ba9599a9e93b86ebc8ae2586c11030baa34e4041bc8302f5afd4cc3c7d402198f1be947c680d80713fd28d137dc166a144134cc8de748b7d4213900f862654da2478a4050ab50440698c5ee2019fe1ae89b76bd52ffec13ea7556a22f8afc213f4ef280da2d19a3805cbc7b51ee1a12a2e2a4556ecb0c24326f2bd8aa1f0cac603270e09e77e9b28eb2bf63522c26f62a5a5b1de9824e643e268161efc9db1718921d8ea84f8cb5d6c32571e8600fdf260aa3d1f9241ea084cf2eb601aeafe759c08e8f31c393a1932a685315643c3eb36f0da61867caf6c1eb869e789d2b99d0929cb7e96ae499463d08a2d41d3d020d7a64250e6f521faa74539c02b6bc01dcd5e8c4f34d6c2a9ea821ae5471d95e49c31d7e444aa0c7f065b1ddd3dd1770577c22e99b3612f22474c070f5d33bda23459f31912fb239597bbd2515fbbfb4efbff7417047e19ab4eb4a7bd0d62c03257cd14a2c19e6cc1df39b43d5bb22613644b4f2dcdeb86580e486ebc1172b2aa78e20495aacbf460e83e5be2b6d8deb2cb8a93c3b473c818d2924cf52f4ccddaebd783ee2efedd638d0b0a8df8cdd97ef8835378178b1eff0b8cc848958ff201fe32b51d4c17adddd9eb4a4391b3db74b8a3bf7ff16b3fc1cd6bc712b44c92f425ebe00565e12a585290c2fd53f3f68471edfd3c7b0b52c645c5eda1acb527d0c0cbf843517f8e963465075cabd72c088291ae58339a1933cc20af3eebc282802c91ac9317808374aca88532296f8441b129ffc40215600233594ee72ac10425e1cdd58934dd5c9b0f06d021024cfe454ae0bb61a0f629e314db3ca8073d5d523569d2f99282a8cba4322577cbccf47bc8f077fdde488a356f05c0754e8c6dca61a58c0cb1d0e1352cda84ecfd320aa3680d5e6da32a3c33327652d9a31d7a22c61752723840f10a2c63a1d31c8326f1528fdd8ea3333e46efeced0b2cd97c623563598277d8cac65575aec1f857a3e6f0273f58eee650b3a9a1a1682533dd099ffefaab2fb4ae66b38bf568037f12951b34f5c8830109168348c5e4bfc3569c2a23cb9561614e342e5ce3ea3e5d27b0f299b67c3c1cddfac98c838d5ca9ca8db3bfb1419a1ea36625b780ca29e9381e881485c9cd5299b61a32dadb76ec5aba328c8b8541b1817eba9c41d8bae35e0e4fac4b6b377e71c06c9a3311f4d26cd6ec8d31a257c2f0d1284e9b6714c75a2bb0c1b807d0552c934ebf186c9461b191ad9fd5bba8eac790908de2fd47c592e48c903e406de1f3288234eae21fbbd53ffd5b277168c7c0d4ef05c7b1949f6b76213a2f57f151ec3fbfd320ae35ddb57dbe66329e2c10f41e80a42949be53ede1ae8591276efd30d80ec332bf34ab021cc9f5bcea23e34738f10483584103e6a89333c1af1ef7cd81f8008025b5d159fd6d9e2223c6616497218ed5beb298414e1f7d9ce321806159c0f7a5797a315e25e2a8b60294eafab6e613cf1440371d8331723ea2acd9df70d1edca3416bbde5e0a6919ebaaf8aaeb46dd2f2ecf6c71cba82fc906919477c743a83ded8de1b41fda47f09deac515a62573f6dee821daef679be5643d70f5bcf1d88c872a964886bc5d55cf8853c9d83cd3f141db19a263baac64d7d008ecfaeadf750cbe4ceb74b16119731dca7c022e5256ec2e1d011f1fb8bdc76792aad5b02baeceeef2f1a0dff434c1d9991d9072e44aec7b2a587d6e356410e6b7456423401a77d52b1d4f863b9142f74f335db393af2ff23e4e6a292862601560177aae43dd2775bb26acc0e6a5f9ef0f02f9e499d39da8dbc2ab8d4a2cc65605a854830f9901982ffa77b2790013bceb46b6cf6fb99dd11e184e4c2200a5e9e49da458887cf5481e40bc812b1d6e575b4093fbc755ceb32851f992ff319decb40e2e340bc2eef125099bee74c52a68dfc8a62327927c4ab492a7b890c42dbac8c0de32a8015288b3ae8eae18dc7f82e0d71b7471a2b67162b5d09b42262222220ae40a16af672e36d4d4ef4532a5895287a7962bb72fef1d5a3a20fdcc51f28f8ae99c62644abe9bf3edac505b148a5863d3244c92c296481da16297fc0416052c6c4f8a51df4d2cbb051c44f10cfbae48d6f2053e613c6810a9e0c57bfe23ea78b5919e75ceeac87e4cc65099cb27d634067f75f472c7e03248e7ef3d974bdb4fc1cc0548097b5e598112bfe959d74b2328f9ad5858558510a8fc43a06e10edc4547a012fed49d33ae144090d2488301c8ea9dce0bef92ec7d3ef42da3c6624dd38937cec0b9f0d25be97b523f7fe514b30bc09ca7486327429198b57e6aaca39899ec9a10dada9da744f6f925817b47fa6f202bd4189a536e000edbb89596250a8083ea6b8714fc0c039b42dd01acc0d50c239447ed49f027d03b94cc33a001acb50d4184511a43c3481119ab7170736af5d92414d6c998a5b8892b599847f1554acb1d3bd59decfdaffb8678458e0dd684041cc2df9f08f76b2801cc115e8a832b56712fdad27dcc20bf93899c9a0eda708e78aa4ebebe79d048318015dd2ace4312d44e265b881113c1bb11631686bc2a617f2c333d4dbc8b777d0d0111daf476913252e8372d597e48e8697be434a78e82931222c973e6309a66923849faacbd2860455791fda88b9953cca4b681dc2d2661994e661b9b309c47b7afda6a6cf3f560b62a480a926a2199e13d2f18009f95766722bc6f8279750147b3cb459d72e6ff7055fc962b70c1e5b12e499f54c705e0c5ae0c34952bf6a51198529fa425c842735a4dd3af1f1c8e4b5a203a73df2e25163faa34bf5c4453e547fd7e668585ee4c9001a273873651238795b9b89c64e67451f0fae6a1c25da89a662c5e87fefa8fb63cdc47fbce426a5149c903f5e6c97021a0762fcbfd84b2a29538a89096c324840dfd994ee6097a25ac1a5d030c4f0da2b825ae4a8391fc81c5dd5ba4cf7f640f0efdaf80ca883cb7e59f3a14da7756196941bb55c5f8daa8236f9db165df81ceaaae404b4a37291f9b8a52940c7f9cb35ac67c278f72d87a59b29eac81a6f94f33fe2cb72f21e53c521cf9f7c98ae60e8b429a66a4288ae009746fa0b2845b04565a73c31a4749cab584302b30e2df034279d52fae65ac137c2d288c85c69ac670682e108e362506bd15ab74b26f9ad681807547c48af8f7fdc8c450694efff0dd4189b65579d5509fe7dd96b169f6e6f36fb28262fee6c9aca04a4c86d07d894e0cfe81f49f6f556b4b28721c36d7d9a664ac83909a761a62e67e01477b2a8a6573ce30d5a9063325f02e71b4bb99ee2ca3a6227a3f91c226f165181048149b8fb5d599c10bd77a9fac615fb1924ef3080668c79286a98b4278ca8085fa52289725627af95f8564a6fdd01c3a102e408d148e888cca5d063a69dd65785aa5e83b7bda4dd290e5ef0105dcf01badea368ce07994243c22f70746839b2a1c632d2bd4b0e35f0da47f24a102e243c4a714784c9b1e39bc7f93c56241689b763a7100faf57e836b0a6295584a4efe1f1500d20ba8ba5845d5ff611a09a0d56889d2e113fa96d1a5b8280ffe5869d6d061bc505fcafeb79d2da0a62d6ac48621bff37d1ee07468142d20690167402d5c7e89cde338f5371637b1f51f60e0b48f9115bd5573c901dbe4a644d6c5ac265dbac4cf24d00294caf0f3a19c85b460014b9b90903aec739db7378bdf9dca0e949a1586766797f779964da6ee24604a41487bdf4002370a0ce7e354467eb15a062bf2aeb6f16fffac022aad4f9e76df5e942c3e1663649206fff910976cd9b475fd5e1de9b66ddfdf12abcc5cbaac6f8face9242c71442c60f41896315b6e127035cc6ee72a86dc39a5c7deb26268c1c58341c2c897e54562cc1b1e17f65dd8283995377d1274e15bd5642533f4cbe5f76e48ff0ec2d7dc4d72281c6b01c32bbb6705158b8a9ebf6c95c19c6faf1aee21d4c806c422d5460167e334d648aba76535026d524e8eda1437994d818dfd16c812fee"}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000240)={0x2, &(0x7f0000000000)=[{0x40, 0x40}, {0x6}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 89.320317ms ago: executing program 0 (id=451): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, 0x0, 0x40000) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0xc}, {0x3, 0xb}, {0xa, 0x5}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x82, 0x0, 0x5, 0x1, 0xc}, 0xb, 0x1, 0x5, 0x5, 0x9, 0x2, 0x9, 0xd, 0x6, 0x1, {0xffff1c72, 0x3, 0x1000, 0x101, 0xfffffffc, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x8840}, 0x4008000) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x41}, @empty}}}], 0x20}}], 0x1, 0x8000004) 50.390059ms ago: executing program 3 (id=453): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0xffffffffffffffff, {0x1, 0xff, 0x4}, 0xfe}, 0x18) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000440)="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", 0x6fb}], 0x1}, 0x4048081) 49.746108ms ago: executing program 1 (id=454): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00'], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 4 (id=455): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="a0000000", @ANYRES16=r1, @ANYBLOB="cf042c9d7000fbdbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a000600ffffffffffff00000500c200820000100800a400030000"], 0xa0}, 0x1, 0x0, 0x0, 0x24008091}, 0x0) kernel console output (not intermixed with test programs): ress (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.106667][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.127778][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.138886][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.143620][ T4297] loop0: detected capacity change from 0 to 512 [ 70.149668][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.166079][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.185053][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.189322][ T4297] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 70.206404][ T4297] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 70.236785][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.246450][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.267906][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.277475][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.300127][ T4301] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 70.310712][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.330087][ T4297] EXT4-fs (loop0): 1 truncate cleaned up [ 70.340235][ T4297] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 70.372522][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.470761][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.504781][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.530649][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.536044][ T4297] EXT4-fs error (device loop0): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.0.1: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 70.545400][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.570150][ T4297] EXT4-fs (loop0): Remounting filesystem read-only [ 70.575419][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.610973][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.611209][ T4297] EXT4-fs error (device loop0) in ext4_delete_entry:2800: Corrupt filesystem [ 70.625949][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.636468][ T4297] EXT4-fs (loop0): Remounting filesystem read-only [ 70.645287][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.654315][ T4297] EXT4-fs warning (device loop0): ext4_rename_delete:3792: inode #2: comm syz.0.1: Deleting old file: nlink 5, error=-117 [ 70.659439][ T4183] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.678760][ T4183] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.699323][ T4183] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.713165][ T4183] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.727279][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.742906][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.969358][ T1280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.973427][ T4297] netem: incorrect gi model size [ 70.997337][ T4297] netem: change failed [ 71.003674][ T1280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.034942][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.167188][ T1280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.187112][ T1280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.208351][ T1280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.300487][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.308456][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.316418][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.327657][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.455215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.463309][ T4253] Bluetooth: hci1: command 0x0419 tx timeout [ 71.469934][ T1280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.478394][ T4253] Bluetooth: hci2: command 0x0419 tx timeout [ 71.501383][ T4253] Bluetooth: hci0: command 0x0419 tx timeout [ 71.503355][ T4308] loop1: detected capacity change from 0 to 32768 [ 71.507519][ T1280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.510222][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.538991][ T4253] Bluetooth: hci3: command 0x0419 tx timeout [ 71.549965][ T4306] Bluetooth: hci4: command 0x0419 tx timeout [ 71.558484][ T4308] ======================================================= [ 71.558484][ T4308] WARNING: The mand mount option has been deprecated and [ 71.558484][ T4308] and is ignored by this kernel. Remove the mand [ 71.558484][ T4308] option from the mount to silence this warning. [ 71.558484][ T4308] ======================================================= [ 71.597293][ T1326] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 71.607638][ T1280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.615663][ T1280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.722955][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.724147][ T4308] JBD2: Ignoring recovery information on journal [ 71.826451][ T4308] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 71.889226][ T1326] usb 1-1: Using ep0 maxpacket: 8 [ 72.010416][ T4310] loop4: detected capacity change from 0 to 32768 [ 72.036582][ T1326] usb 1-1: config 1 interface 0 altsetting 111 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 72.054359][ T1326] usb 1-1: config 1 interface 0 has no altsetting 0 [ 72.134908][ T4310] XFS (loop4): Mounting V5 Filesystem [ 72.237154][ T4310] XFS (loop4): Ending clean mount [ 72.247148][ T1326] usb 1-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 72.266589][ T1326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.276997][ T1326] usb 1-1: Product: syz [ 72.281208][ T1326] usb 1-1: Manufacturer: syz [ 72.285824][ T1326] usb 1-1: SerialNumber: syz [ 72.362593][ T4310] XFS (loop4): Quotacheck needed: Please wait. [ 72.420762][ T4314] loop3: detected capacity change from 0 to 40427 [ 72.439317][ T4310] XFS (loop4): Quotacheck: Done. [ 72.451421][ T4314] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 72.497048][ T4233] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 72.528904][ T4314] F2FS-fs (loop3): invalid crc value [ 72.644271][ T4314] F2FS-fs (loop3): Found nat_bits in checkpoint [ 72.759605][ T4233] usb 2-1: Using ep0 maxpacket: 8 [ 72.799746][ T1326] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input5 [ 72.960526][ T4314] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 73.087349][ T4233] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 73.127744][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.167209][ T4233] usb 2-1: Product: syz [ 73.171427][ T4233] usb 2-1: Manufacturer: syz [ 73.214680][ T4233] usb 2-1: SerialNumber: syz [ 73.222204][ T4317] loop2: detected capacity change from 0 to 32768 [ 73.260894][ T4233] usb 2-1: config 0 descriptor?? [ 73.289648][ T26] audit: type=1800 audit(1764922684.093:2): pid=4314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 73.368257][ T3546] bcm5974 1-1:1.0: could not read from device [ 73.380662][ T4314] F2FS-fs (loop3) : inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xbf9/0x1720 [ 73.383195][ T4193] XFS (loop4): Unmounting Filesystem [ 73.394345][ T4314] attempt to access beyond end of device [ 73.394345][ T4314] loop3: rw=2049, want=77904, limit=40427 [ 73.437329][ T3546] bcm5974 1-1:1.0: could not read from device [ 73.443675][ T1326] usb 1-1: USB disconnect, device number 2 [ 73.577797][ T4233] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 73.626540][ T4317] XFS (loop2): Mounting V5 Filesystem [ 73.825751][ T4317] XFS (loop2): Ending clean mount [ 73.850328][ T4317] XFS (loop2): Quotacheck needed: Please wait. [ 73.935951][ T4317] XFS (loop2): Quotacheck: Done. [ 74.087269][ T4233] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 74.125277][ T4233] usb 2-1: USB disconnect, device number 2 [ 74.267909][ T1326] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 74.645896][ T4350] libceph: resolve 'cc' (ret=-3): failed [ 74.735151][ T4354] ieee802154 phy0 wpan0: encryption failed: -22 [ 74.778783][ T4350] loop4: detected capacity change from 0 to 64 [ 74.835839][ T4183] XFS (loop2): Unmounting Filesystem [ 75.038086][ T4308] syz.1.6 (4308) used greatest stack depth: 20136 bytes left [ 75.087066][ T1326] usb 1-1: Using ep0 maxpacket: 8 [ 75.163211][ T4198] ocfs2: Unmounting device (7,1) on (node local) [ 75.214364][ T4355] loop3: detected capacity change from 0 to 32768 [ 75.247163][ T1326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 11008, setting to 64 [ 75.264952][ T4355] (syz.3.9,4355,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 75.356159][ T4357] loop4: detected capacity change from 0 to 8192 [ 75.592714][ T4357] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 75.604384][ T4357] REISERFS (device loop4): using ordered data mode [ 75.611479][ T4357] reiserfs: using flush barriers [ 75.631242][ T4357] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 75.648621][ T1326] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 75.779093][ T1326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.925111][ T1326] usb 1-1: Product: syz [ 76.005249][ T4357] REISERFS (device loop4): checking transaction log (loop4) [ 76.038661][ T1326] usb 1-1: Manufacturer: syz [ 76.126280][ T1326] usb 1-1: SerialNumber: syz [ 76.344265][ T1326] usb 1-1: config 0 descriptor?? [ 76.434407][ T1326] streamzap 1-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 76.547146][ T4241] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 76.685064][ T4357] REISERFS (device loop4): Using tea hash to sort names [ 76.705421][ T4357] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 76.797061][ T4241] usb 4-1: Using ep0 maxpacket: 16 [ 76.941909][ T4241] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.976961][ T4241] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.045769][ T4241] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 77.066429][ T4371] loop0: detected capacity change from 0 to 8192 [ 77.086024][ T4373] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 77.090156][ T4241] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 77.100347][ T4373] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 77.116370][ T4241] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.144002][ T4241] usb 4-1: config 0 descriptor?? [ 77.181215][ T4184] loop0: AHDI p1 p2 p4 [ 77.202369][ T4184] loop0: p4 start 40969 is beyond EOD, truncated [ 77.257039][ T4371] loop0: AHDI p1 p2 p4 [ 77.269128][ T4371] loop0: p4 start 40969 is beyond EOD, truncated [ 77.323560][ T4267] usb 1-1: USB disconnect, device number 3 [ 77.386339][ T4369] loop2: detected capacity change from 0 to 40427 [ 77.430916][ T4365] loop1: detected capacity change from 0 to 40427 [ 77.491768][ T4365] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 77.503613][ T4365] F2FS-fs (loop1): invalid crc value [ 77.524093][ T4365] F2FS-fs (loop1): Found nat_bits in checkpoint [ 77.547590][ T4369] F2FS-fs (loop2): Invalid gid value -1 [ 77.591051][ T4379] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 77.623609][ T4364] udc-core: couldn't find an available UDC or it's busy [ 77.705027][ T4364] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 78.175980][ T4365] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 78.193227][ T4378] loop2: detected capacity change from 0 to 4096 [ 78.204747][ T4241] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 78.227100][ T4241] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 78.256650][ T26] audit: type=1800 audit(1764922689.053:3): pid=4365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.12" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 78.287695][ T4241] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 78.301876][ T4365] F2FS-fs (loop1) : inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xbf9/0x1720 [ 78.318935][ T4241] microsoft 0003:045E:07DA.0001: unknown main item tag 0x2 [ 78.320072][ T4378] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 78.336508][ T4241] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 78.360365][ T4365] attempt to access beyond end of device [ 78.360365][ T4365] loop1: rw=2049, want=77904, limit=40427 [ 78.380383][ T4184] udevd[4184]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 78.384262][ T4241] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 78.407075][ T4241] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 78.435924][ T4241] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 78.470391][ T4241] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 78.491738][ T4184] udevd[4184]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 78.523977][ T4393] loop4: detected capacity change from 0 to 512 [ 78.535689][ T4241] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0001/input/input6 [ 78.578958][ T4241] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 78.672891][ T4393] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 78.704999][ T4393] System zones: 1-12 [ 78.820257][ T4393] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.18: Directory hole found for htree index block 0 [ 78.856480][ T4393] EXT4-fs (loop4): Remounting filesystem read-only [ 78.885736][ T4393] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -117 [ 78.914144][ T4393] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.18: Directory hole found for htree index block 0 [ 78.957080][ T4393] EXT4-fs (loop4): Remounting filesystem read-only [ 78.975572][ T4393] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 78.999665][ T4389] loop0: detected capacity change from 0 to 32768 [ 79.006261][ T4393] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpjquota=Jdebug,jqfmt=vfsold,noquota,bsdgroups,usrjquota="nojournal_checksum,errors=remount-ro,,. Quota mode: writeback. [ 79.193611][ T4393] EXT4-fs error (device loop4): dx_probe:823: inode #2: comm syz.4.18: Directory hole found for htree index block 0 [ 79.219977][ T4389] XFS (loop0): Mounting V5 Filesystem [ 79.298091][ T4393] EXT4-fs (loop4): Remounting filesystem read-only [ 79.314002][ T4389] XFS (loop0): Ending clean mount [ 79.364568][ T4389] XFS (loop0): Quotacheck needed: Please wait. [ 79.379754][ T4409] loop1: detected capacity change from 0 to 512 [ 79.442275][ T4409] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 79.477426][ T4389] XFS (loop0): Quotacheck: Done. [ 79.521863][ T7] usb 4-1: USB disconnect, device number 2 [ 79.620260][ T4409] EXT4-fs (loop1): 1 truncate cleaned up [ 79.625966][ T4409] EXT4-fs (loop1): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none. [ 79.723783][ T4398] loop2: detected capacity change from 0 to 32768 [ 80.105959][ T4409] EXT4-fs error (device loop1): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.1.19: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 80.136039][ T4409] EXT4-fs (loop1): Remounting filesystem read-only [ 80.144651][ T4409] EXT4-fs error (device loop1) in ext4_delete_entry:2800: Corrupt filesystem [ 80.161788][ T4409] EXT4-fs (loop1): Remounting filesystem read-only [ 80.172043][ T4409] EXT4-fs warning (device loop1): ext4_rename_delete:3792: inode #2: comm syz.1.19: Deleting old file: nlink 5, error=-117 [ 80.314984][ T4182] XFS (loop0): Unmounting Filesystem [ 80.316786][ T4421] libceph: resolve 'cc' (ret=-3): failed [ 80.336182][ T4421] ieee802154 phy0 wpan0: encryption failed: -22 [ 80.345595][ T4421] loop3: detected capacity change from 0 to 64 [ 80.356309][ T4409] netem: incorrect gi model size [ 80.372819][ T4409] netem: change failed [ 80.450098][ T4429] process 'syz.4.24' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 80.472450][ T4398] XFS (loop2): Mounting V5 Filesystem [ 80.827490][ T4398] XFS (loop2): Ending clean mount [ 80.837070][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 80.904925][ T4398] XFS (loop2): Quotacheck needed: Please wait. [ 80.992126][ T4439] loop3: detected capacity change from 0 to 128 [ 81.030964][ T4398] XFS (loop2): Quotacheck: Done. [ 81.107005][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 81.206262][ T4440] loop4: detected capacity change from 0 to 8192 [ 81.238687][ T7] usb 2-1: config 1 interface 0 altsetting 111 endpoint 0x81 has an invalid bInterval 247, changing to 11 [ 81.338981][ T4440] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 81.364444][ T7] usb 2-1: config 1 interface 0 has no altsetting 0 [ 81.365176][ T4440] REISERFS (device loop4): using ordered data mode [ 81.419080][ T4440] reiserfs: using flush barriers [ 81.695205][ T4444] loop0: detected capacity change from 0 to 32768 [ 81.902637][ T4440] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 81.969412][ T4440] REISERFS (device loop4): checking transaction log (loop4) [ 82.027567][ T4444] JBD2: Ignoring recovery information on journal [ 82.078421][ T7] usb 2-1: New USB device found, idVendor=05ac, idProduct=024d, bcdDevice= 0.40 [ 82.101683][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.112111][ T4444] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 82.127048][ T7] usb 2-1: Product: syz [ 82.131373][ T7] usb 2-1: Manufacturer: syz [ 82.138562][ T7] usb 2-1: SerialNumber: syz [ 82.166437][ T4183] XFS (loop2): Unmounting Filesystem [ 82.193337][ T4449] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 82.437333][ T4440] REISERFS (device loop4): Using tea hash to sort names [ 82.457567][ T4440] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 82.511299][ T7] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input7 [ 82.579383][ T3546] bcm5974 2-1:1.0: could not read from device [ 82.666181][ T7] usb 2-1: USB disconnect, device number 3 [ 82.672702][ T3546] bcm5974 2-1:1.0: could not read from device [ 82.747292][ T1326] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 82.920312][ T4461] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 82.934752][ T4461] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 82.978651][ T4463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.32'. [ 83.017367][ T1326] usb 1-1: Using ep0 maxpacket: 8 [ 83.029737][ T4463] device hsr0 entered promiscuous mode [ 83.052413][ T4463] device macvlan2 entered promiscuous mode [ 83.083342][ T4463] Zero length message leads to an empty skb [ 83.412740][ T1326] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 83.444129][ T1326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.477372][ T1326] usb 1-1: Product: syz [ 83.481962][ T1326] usb 1-1: Manufacturer: syz [ 83.497227][ T1326] usb 1-1: SerialNumber: syz [ 83.668894][ T1326] usb 1-1: config 0 descriptor?? [ 83.693182][ T4476] Option 'Óƒd»xÇñõìýM–Aäùy?ø›ƒÿN£~u‚Z@ý: s®ðÌÏ;gû‰' to dns_resolver key: bad/missing value [ 84.247192][ T23] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 84.457020][ T1326] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 84.498774][ T4453] loop3: detected capacity change from 0 to 40427 [ 84.517862][ T4453] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 84.549798][ T4453] F2FS-fs (loop3): invalid crc value [ 84.568117][ T4484] libceph: resolve 'cc' (ret=-3): failed [ 84.577660][ T4453] F2FS-fs (loop3): Found nat_bits in checkpoint [ 84.657421][ T23] usb 3-1: config 6 has an invalid interface number: 2 but max is 0 [ 84.676395][ T23] usb 3-1: config 6 has no interface number 0 [ 84.695840][ T23] usb 3-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 84.746515][ T23] usb 3-1: config 6 interface 2 altsetting 0 has an invalid endpoint with address 0x37, skipping [ 84.753105][ T4467] loop1: detected capacity change from 0 to 32768 [ 84.764095][ T4453] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 84.809516][ T26] audit: type=1800 audit(1764922695.613:4): pid=4453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.29" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 84.850900][ T4453] F2FS-fs (loop3) : inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xbf9/0x1720 [ 84.908756][ T4453] attempt to access beyond end of device [ 84.908756][ T4453] loop3: rw=2049, want=77904, limit=40427 [ 84.953817][ T4467] XFS (loop1): Mounting V5 Filesystem [ 84.967157][ T1326] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 84.967578][ T23] usb 3-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 84.978561][ T1326] usb 1-1: USB disconnect, device number 4 [ 85.021044][ T4467] XFS (loop1): Ending clean mount [ 85.029223][ T4467] XFS (loop1): Quotacheck needed: Please wait. [ 85.087025][ T23] usb 3-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 85.133679][ T23] usb 3-1: Product: syz [ 85.147715][ T23] usb 3-1: Manufacturer: syz [ 85.171289][ T23] usb 3-1: SerialNumber: syz [ 85.228498][ T23] hso 3-1:6.2: Failed to find INT IN ep [ 85.272943][ T4467] XFS (loop1): Quotacheck: Done. [ 85.498587][ T4477] capability: warning: `syz.2.35' uses deprecated v2 capabilities in a way that may be insecure [ 85.510172][ T4477] ucma_write: process 24 (syz.2.35) changed security contexts after opening file descriptor, this is not allowed. [ 85.572157][ T4504] FAULT_INJECTION: forcing a failure. [ 85.572157][ T4504] name failslab, interval 1, probability 0, space 0, times 1 [ 85.585289][ T4504] CPU: 1 PID: 4504 Comm: syz.1.34 Not tainted syzkaller #0 [ 85.592621][ T4504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 85.602704][ T4504] Call Trace: [ 85.605997][ T4504] [ 85.608949][ T4504] dump_stack_lvl+0x168/0x230 [ 85.613656][ T4504] ? show_regs_print_info+0x20/0x20 [ 85.618874][ T4504] ? load_image+0x3b0/0x3b0 [ 85.623405][ T4504] ? __might_sleep+0xf0/0xf0 [ 85.628008][ T4504] ? __lock_acquire+0x7c60/0x7c60 [ 85.633055][ T4504] should_fail+0x38c/0x4c0 [ 85.637499][ T4504] should_failslab+0x5/0x20 [ 85.642027][ T4504] slab_pre_alloc_hook+0x51/0xc0 [ 85.646980][ T4504] ? getname_flags+0xb5/0x500 [ 85.651758][ T4504] kmem_cache_alloc+0x3d/0x290 [ 85.656541][ T4504] getname_flags+0xb5/0x500 [ 85.661064][ T4504] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 85.667075][ T4504] __se_sys_quotactl+0x1f7/0x6c0 [ 85.672045][ T4504] ? __x64_sys_quotactl+0xa0/0xa0 [ 85.677090][ T4504] ? lockdep_hardirqs_on+0x94/0x140 [ 85.682305][ T4504] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 85.687965][ T4504] ? syscall_enter_from_user_mode+0x2a/0x70 [ 85.693886][ T4504] do_syscall_64+0x4c/0xa0 [ 85.698316][ T4504] ? clear_bhb_loop+0x30/0x80 [ 85.703012][ T4504] ? clear_bhb_loop+0x30/0x80 [ 85.707709][ T4504] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.713636][ T4504] RIP: 0033:0x7fe879545749 [ 85.718069][ T4504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.737690][ T4504] RSP: 002b:00007fe87776a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000b3 [ 85.746136][ T4504] RAX: ffffffffffffffda RBX: 00007fe87979c180 RCX: 00007fe879545749 [ 85.754139][ T4504] RDX: 000000000000ee01 RSI: 00002000000000c0 RDI: ffffffff80000801 [ 85.762151][ T4504] RBP: 00007fe87776a090 R08: 0000000000000000 R09: 0000000000000000 [ 85.770140][ T4504] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 85.778127][ T4504] R13: 00007fe87979c218 R14: 00007fe87979c180 R15: 00007ffc03c46778 [ 85.786132][ T4504] [ 85.984096][ T4182] ocfs2: Unmounting device (7,0) on (node local) [ 86.039462][ T4198] XFS (loop1): Unmounting Filesystem [ 86.072689][ T4492] loop4: detected capacity change from 0 to 32768 [ 86.190095][ T4492] XFS (loop4): Mounting V5 Filesystem [ 86.285358][ T4517] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 86.286177][ T4492] XFS (loop4): Ending clean mount [ 86.490934][ T4492] XFS (loop4): Quotacheck needed: Please wait. [ 86.639846][ T1326] usb 3-1: USB disconnect, device number 2 [ 86.646333][ T4492] XFS (loop4): Quotacheck: Done. [ 86.660840][ T13] cfg80211: failed to load regulatory.db [ 86.852241][ T4530] loop1: detected capacity change from 0 to 4096 [ 86.896106][ T4507] loop3: detected capacity change from 0 to 32768 [ 86.933171][ T4530] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 86.975930][ T4530] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 87.007049][ T4530] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 87.021098][ T4530] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 87.058473][ T4530] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 87.287274][ T4530] ntfs: volume version 3.1. [ 87.374991][ T4507] XFS (loop3): Mounting V5 Filesystem [ 87.383308][ T4530] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 87.528919][ T4530] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 87.547288][ T4533] loop2: detected capacity change from 0 to 8192 [ 87.584813][ T4530] ntfs: (device loop1): ntfs_read_locked_inode(): $INDEX_ALLOCATION attribute name is placed after the mapping pairs array. [ 87.599179][ T4193] XFS (loop4): Unmounting Filesystem [ 87.607388][ T4530] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x5 as bad. Run chkdsk. [ 87.619178][ T4507] XFS (loop3): Ending clean mount [ 87.684417][ T4507] XFS (loop3): Quotacheck needed: Please wait. [ 87.737711][ T4533] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 87.823090][ T4533] REISERFS (device loop2): using ordered data mode [ 87.839791][ T4507] XFS (loop3): Quotacheck: Done. [ 87.864986][ T4533] reiserfs: using flush barriers [ 87.897214][ T4533] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 87.915890][ T4533] REISERFS (device loop2): checking transaction log (loop2) [ 88.017908][ T4241] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 88.078988][ T4185] XFS (loop3): Unmounting Filesystem [ 88.183208][ T4533] REISERFS (device loop2): Using tea hash to sort names [ 88.217312][ T4533] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 88.266893][ T4554] loop4: detected capacity change from 0 to 8 [ 88.427303][ T4241] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.507816][ T4241] usb 1-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 88.529066][ T4554] SQUASHFS error: Failed to read block 0x6a4: -5 [ 88.535748][ T4554] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 88.560024][ T4555] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 88.571739][ T4241] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.582902][ T4555] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 88.603682][ T4554] SQUASHFS error: Unable to read inode 0x87 [ 88.628833][ T4241] usb 1-1: config 0 descriptor?? [ 88.923845][ T4559] loop3: detected capacity change from 0 to 32768 [ 89.000317][ T4552] loop1: detected capacity change from 0 to 40427 [ 89.090582][ T4559] JBD2: Ignoring recovery information on journal [ 89.109005][ T4241] cherry 0003:046A:0023.0002: bogus close delimiter [ 89.121661][ T4552] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 89.138916][ T4559] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 89.143223][ T4241] cherry 0003:046A:0023.0002: item 0 1 2 10 parsing failed [ 89.153643][ T4552] F2FS-fs (loop1): invalid crc value [ 89.161156][ T4570] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 89.247907][ T4241] cherry: probe of 0003:046A:0023.0002 failed with error -22 [ 89.255458][ T4552] F2FS-fs (loop1): Found nat_bits in checkpoint [ 89.358524][ T13] usb 1-1: USB disconnect, device number 5 [ 89.368021][ T4552] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 89.432937][ T4552] F2FS-fs (loop1) : inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xbf9/0x1720 [ 89.438550][ T4574] loop2: detected capacity change from 0 to 4096 [ 89.465155][ T4552] attempt to access beyond end of device [ 89.465155][ T4552] loop1: rw=2049, want=77904, limit=40427 [ 89.503161][ T4574] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 89.630940][ T1326] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 89.948551][ T1326] usb 5-1: Using ep0 maxpacket: 16 [ 90.067351][ T1326] usb 5-1: config 0 has an invalid interface number: 216 but max is 0 [ 90.085917][ T1326] usb 5-1: config 0 has no interface number 0 [ 90.116427][ T1326] usb 5-1: config 0 interface 216 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 90.166967][ T1326] usb 5-1: config 0 interface 216 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 90.206955][ T1326] usb 5-1: config 0 interface 216 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 90.334053][ T4183] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 90.357052][ T23] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 90.448634][ T1326] usb 5-1: New USB device found, idVendor=c877, idProduct=d477, bcdDevice=ca.74 [ 90.463474][ T1326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.473926][ T1326] usb 5-1: Product: syz [ 90.484203][ T1326] usb 5-1: Manufacturer: syz [ 90.489579][ T1326] usb 5-1: SerialNumber: syz [ 90.512276][ T1326] usb 5-1: config 0 descriptor?? [ 90.537418][ T4569] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 90.544474][ T4581] loop0: detected capacity change from 0 to 32768 [ 90.546078][ T4569] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 90.569698][ T4581] XFS (loop0): Mounting V5 Filesystem [ 90.579049][ T1326] usb-storage 5-1:0.216: USB Mass Storage device detected [ 90.597144][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 90.609792][ T1326] scsi host1: usb-storage 5-1:0.216 [ 90.658821][ T4581] XFS (loop0): Ending clean mount [ 90.668027][ T4241] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 90.670799][ T4581] XFS (loop0): Quotacheck needed: Please wait. [ 90.706067][ T4581] XFS (loop0): Quotacheck: Done. [ 90.771006][ T4481] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 90.814989][ T4234] usb 5-1: USB disconnect, device number 2 [ 90.887512][ T23] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 90.912443][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.931149][ T23] usb 4-1: Product: syz [ 90.934746][ T4603] loop4: detected capacity change from 0 to 1024 [ 90.935633][ T23] usb 4-1: Manufacturer: syz [ 90.946669][ T23] usb 4-1: SerialNumber: syz [ 90.958513][ T23] usb 4-1: config 0 descriptor?? [ 91.057204][ T4481] usb 3-1: Using ep0 maxpacket: 8 [ 91.187302][ T4481] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.207176][ T23] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 91.245132][ T4481] usb 3-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 91.295869][ T4481] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.316041][ T4603] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 91.355322][ T4481] usb 3-1: config 0 descriptor?? [ 91.503149][ T4182] XFS (loop0): Unmounting Filesystem [ 91.562483][ T4241] usb 2-1: Using ep0 maxpacket: 32 [ 91.607714][ T4233] usb 3-1: USB disconnect, device number 3 [ 91.744536][ T4241] usb 2-1: unable to get BOS descriptor or descriptor too short [ 91.787348][ T23] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 91.827212][ T4241] usb 2-1: config 7 has an invalid interface number: 187 but max is 0 [ 91.828100][ T23] usb 4-1: USB disconnect, device number 3 [ 91.866616][ T4241] usb 2-1: config 7 has no interface number 0 [ 91.892572][ T4241] usb 2-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 91.909576][ T4241] usb 2-1: config 7 interface 187 has no altsetting 0 [ 92.073616][ T4607] loop4: detected capacity change from 0 to 32768 [ 92.087111][ T4241] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 92.104940][ T4241] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.115757][ T4241] usb 2-1: Product: syz [ 92.123687][ T4241] usb 2-1: Manufacturer: syz [ 92.131117][ T4241] usb 2-1: SerialNumber: syz [ 92.190141][ T4607] XFS (loop4): Mounting V5 Filesystem [ 92.303000][ T4607] XFS (loop4): Ending clean mount [ 92.322092][ T4607] XFS (loop4): Quotacheck needed: Please wait. [ 92.392959][ T4607] XFS (loop4): Quotacheck: Done. [ 92.466570][ T4185] ocfs2: Unmounting device (7,3) on (node local) [ 92.481849][ T4193] XFS (loop4): Unmounting Filesystem [ 92.503994][ T4241] usb 2-1: Unknown endpoint type found, address 0x07 [ 92.521397][ T4241] usb 2-1: Unknown endpoint type found, address 0x03 [ 92.537073][ T4241] usb 2-1: Not enough endpoints found in device, aborting! [ 92.538043][ T4615] loop0: detected capacity change from 0 to 32768 [ 92.608462][ T4615] xfs: Bad value for 'allocsize' [ 92.867464][ T13] usb 2-1: USB disconnect, device number 4 [ 92.930227][ T4617] loop2: detected capacity change from 0 to 32768 [ 93.368752][ T4617] XFS (loop2): Mounting V5 Filesystem [ 93.560517][ T4617] XFS (loop2): Ending clean mount [ 93.574832][ T4631] loop3: detected capacity change from 0 to 8192 [ 93.628120][ T4645] loop1: detected capacity change from 0 to 2048 [ 93.711493][ T4631] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 93.758408][ T4631] REISERFS (device loop3): using ordered data mode [ 93.817094][ T4631] reiserfs: using flush barriers [ 94.093943][ T4631] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 94.154239][ T4651] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 94.300259][ T4631] REISERFS (device loop3): checking transaction log (loop3) [ 94.377494][ T4640] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.517811][ T4183] XFS (loop2): Unmounting Filesystem [ 95.085219][ T4631] REISERFS (device loop3): Using tea hash to sort names [ 95.108305][ T4631] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 95.458775][ T4663] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 95.472621][ T4663] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 95.705610][ T4647] loop0: detected capacity change from 0 to 40427 [ 95.834455][ T4647] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1ffff [ 95.879019][ T4647] F2FS-fs (loop0): invalid crc value [ 95.916792][ T4647] F2FS-fs (loop0): Found nat_bits in checkpoint [ 96.064618][ T4234] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 96.082447][ T1108] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 96.102843][ T4647] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 96.163387][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 96.163401][ T26] audit: type=1800 audit(1764922706.963:6): pid=4647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.66" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 96.221241][ T4692] loop3: detected capacity change from 0 to 1024 [ 96.273812][ T4692] hfsplus: uid requires an argument [ 96.282008][ T4692] hfsplus: unable to parse mount options [ 96.294347][ T4182] attempt to access beyond end of device [ 96.294347][ T4182] loop0: rw=2049, want=45104, limit=40427 [ 96.467135][ T4234] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.483655][ T1108] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 96.563563][ T1108] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.571888][ T4234] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 96.581997][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.591276][ T1108] usb 2-1: config 0 descriptor?? [ 96.604180][ T4234] usb 3-1: config 0 descriptor?? [ 96.629407][ T1108] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 96.700144][ T4684] loop4: detected capacity change from 0 to 32768 [ 96.807647][ T4684] XFS (loop4): Mounting V5 Filesystem [ 96.985392][ T4684] XFS (loop4): Ending clean mount [ 96.999680][ T4684] XFS (loop4): Quotacheck needed: Please wait. [ 97.038921][ T4684] XFS (loop4): Quotacheck: Done. [ 97.201140][ T1108] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 97.210775][ T4234] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 97.218833][ T21] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 97.226453][ T4234] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 97.233949][ T4234] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 97.241694][ T4234] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 97.249211][ T4234] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 97.256625][ T4234] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 97.264970][ T4234] hid-picolcd 0003:04D8:C002.0003: unknown main item tag 0x0 [ 97.555307][ T4716] loop2: detected capacity change from 0 to 512 [ 97.592421][ T4716] EXT4-fs (loop2): Ignoring removed nobh option [ 97.650042][ T4716] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 97.693378][ T4716] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 97.721677][ T4716] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.76: Corrupt directory, running e2fsck is recommended [ 97.777348][ T4716] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 97.804849][ T4716] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2229: inode #15: comm syz.2.76: corrupted in-inode xattr [ 97.825025][ T4193] XFS (loop4): Unmounting Filesystem [ 97.837122][ T1108] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 97.844710][ T4716] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.76: couldn't read orphan inode 15 (err -117) [ 97.877181][ T4234] hid-picolcd 0003:04D8:C002.0003: No report with id 0x11 found [ 97.903952][ T4716] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,auto_da_alloc=0x0000000000000006,jqfmt=vfsold,auto_da_alloc,grpjquota=.usrjquota=,barrier=0x0000000000000008,nobh,grpid,,,errors=continue. Quota mode: writeback. [ 97.954932][ T4234] usb 3-1: USB disconnect, device number 4 [ 97.960974][ T4256] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 98.029367][ T4716] syz.2.76 uses obsolete (PF_INET,SOCK_PACKET) [ 98.040631][ T4241] usb 2-1: USB disconnect, device number 5 [ 98.047402][ T21] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 98.051851][ T4716] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 98.067183][ T21] usb 4-1: config 0 has no interface number 0 [ 98.067221][ T21] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.067764][ T21] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 98.092674][ T4716] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 98.118384][ T4716] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.76: Corrupt directory, running e2fsck is recommended [ 98.142016][ T4716] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.76: path /13/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 98.151266][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.203232][ T4716] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 4: comm syz.2.76: path /13/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=131071, rec_len=65535, size=1024 fake=0 [ 98.235114][ T21] usb 4-1: config 0 descriptor?? [ 98.247290][ T4256] usb 1-1: Using ep0 maxpacket: 8 [ 98.367205][ T4256] usb 1-1: config 0 has an invalid interface number: 25 but max is 0 [ 98.387113][ T4256] usb 1-1: config 0 has no interface number 0 [ 98.393269][ T4256] usb 1-1: config 0 interface 25 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 98.577213][ T4256] usb 1-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice= f.2b [ 98.586317][ T4256] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.635067][ T4256] usb 1-1: Product: syz [ 98.647029][ T4256] usb 1-1: Manufacturer: syz [ 98.655368][ T4256] usb 1-1: SerialNumber: syz [ 98.685115][ T4256] usb 1-1: config 0 descriptor?? [ 98.786699][ T21] uclogic 0003:256C:006D.0004: unknown main item tag 0x0 [ 98.797471][ T21] uclogic 0003:256C:006D.0004: unknown main item tag 0x0 [ 98.804733][ T21] uclogic 0003:256C:006D.0004: unknown main item tag 0x0 [ 98.824255][ T21] uclogic 0003:256C:006D.0004: unknown main item tag 0x0 [ 98.833690][ T21] uclogic 0003:256C:006D.0004: unknown main item tag 0x0 [ 98.847901][ T21] uclogic 0003:256C:006D.0004: No inputs registered, leaving [ 98.883210][ T21] uclogic 0003:256C:006D.0004: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input1 [ 99.567885][ T4726] loop3: detected capacity change from 0 to 32768 [ 99.687107][ T4241] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 99.768652][ T4726] XFS (loop3): Mounting V5 Filesystem [ 99.798258][ T4256] kobil_sct 1-1:0.25: KOBIL USB smart card terminal converter detected [ 99.819786][ T4256] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 99.831069][ T4256] usb 1-1: USB disconnect, device number 6 [ 99.841685][ T4256] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 99.852049][ T4256] kobil_sct 1-1:0.25: device disconnected [ 99.927273][ T4719] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.76: path /13/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 100.043125][ T4726] XFS (loop3): Ending clean mount [ 100.051939][ T4726] XFS (loop3): Quotacheck needed: Please wait. [ 100.071275][ T4719] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 4: comm syz.2.76: path /13/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=131071, rec_len=65535, size=1024 fake=0 [ 100.091182][ T4241] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 100.161640][ T4241] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 100.196463][ T4241] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 100.213995][ T4241] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.231568][ T4726] XFS (loop3): Quotacheck: Done. [ 100.291824][ T4241] usb 5-1: config 0 descriptor?? [ 100.307949][ T4256] usb 4-1: USB disconnect, device number 4 [ 100.385113][ T4752] loop0: detected capacity change from 0 to 8192 [ 100.417903][ T4732] loop1: detected capacity change from 0 to 32768 [ 100.479424][ T4732] XFS (loop1): Mounting V5 Filesystem [ 100.508076][ T4752] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 100.582562][ T4752] REISERFS (device loop0): using ordered data mode [ 100.610990][ T4732] XFS (loop1): Ending clean mount [ 100.627482][ T4752] reiserfs: using flush barriers [ 100.636188][ T4732] XFS (loop1): Quotacheck needed: Please wait. [ 100.644375][ T4752] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 100.667302][ T4241] usb 5-1: string descriptor 0 read error: -71 [ 100.729790][ T4732] XFS (loop1): Quotacheck: Done. [ 100.747480][ T4241] usb 5-1: USB disconnect, device number 3 [ 100.773570][ T4752] REISERFS (device loop0): checking transaction log (loop0) [ 100.958983][ T4185] XFS (loop3): Unmounting Filesystem [ 101.090100][ T4344] udevd[4344]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 101.432182][ T4198] XFS (loop1): Unmounting Filesystem [ 101.577506][ T4752] REISERFS (device loop0): Using tea hash to sort names [ 101.584825][ T4752] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 102.063012][ T4766] loop4: detected capacity change from 0 to 40427 [ 102.105842][ T4771] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 102.120275][ T4771] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 102.420947][ T4773] libceph: resolve 'cc' (ret=-3): failed [ 102.696319][ T4766] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 102.730790][ T4766] F2FS-fs (loop4): invalid crc value [ 102.787758][ T4306] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 102.806366][ T4766] F2FS-fs (loop4): Found nat_bits in checkpoint [ 102.992457][ T4766] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 103.033498][ T26] audit: type=1800 audit(1764922713.833:7): pid=4766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.84" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 103.089228][ T4306] usb 3-1: Using ep0 maxpacket: 32 [ 103.231884][ T4766] F2FS-fs (loop4) : inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xbf9/0x1720 [ 103.248166][ T4766] attempt to access beyond end of device [ 103.248166][ T4766] loop4: rw=2049, want=77904, limit=40427 [ 103.260157][ T4306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.285562][ T4306] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.371026][ T4306] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 103.394188][ T4306] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.468718][ T4306] usb 3-1: config 0 descriptor?? [ 103.563403][ T4306] hub 3-1:0.0: USB hub found [ 103.595113][ T4778] loop3: detected capacity change from 0 to 32768 [ 103.716405][ T4804] loop1: detected capacity change from 0 to 2048 [ 103.767340][ T4306] hub 3-1:0.0: 1 port detected [ 103.797156][ T4804] NILFS (loop1): unrecognized mount option "ÿ00000000000000000000000" [ 103.810193][ T4778] XFS (loop3): Mounting V5 Filesystem [ 103.926249][ T4778] XFS (loop3): Ending clean mount [ 104.019927][ T4816] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.056859][ T4778] XFS (loop3): Quotacheck needed: Please wait. [ 104.176321][ T4778] XFS (loop3): Quotacheck: Done. [ 104.334766][ T4823] loop1: detected capacity change from 0 to 32768 [ 104.424499][ T4823] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.95 (4823) [ 104.477922][ T4306] usb 3-1: USB disconnect, device number 5 [ 104.782884][ T4829] libceph: resolve 'cc' (ret=-3): failed [ 104.962480][ T4834] loop0: detected capacity change from 0 to 512 [ 105.002018][ T4823] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 105.011193][ T4823] BTRFS info (device loop1): using free space tree [ 105.017816][ T4823] BTRFS info (device loop1): has skinny extents [ 105.063330][ T4185] XFS (loop3): Unmounting Filesystem [ 105.113079][ T4834] EXT4-fs (loop0): inline encryption not supported [ 105.208766][ T4826] loop4: detected capacity change from 0 to 32768 [ 105.222207][ T9] BTRFS warning (device loop1): checksum verify failed on 1052672 wanted 0x241313e5e22152213429419a4fa60bdedb0d9d2e9150d3150eb32f4ce752aa44 found 0x70f269823c80048036a719f2acb3b462c694547c40c5ab9004c5dfbfbe2eb71f level 0 [ 105.267964][ T4823] BTRFS error (device loop1): failed to read chunk root [ 105.287496][ T4823] BTRFS error (device loop1): open_ctree failed: -22 [ 105.382703][ T4834] EXT4-fs (loop0): mounted filesystem without journal. Opts: inlinecrypt,delalloc,bsdgroups,,errors=continue. Quota mode: writeback. [ 105.427311][ T4834] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 105.509895][ T4834] EXT4-fs (loop0): shut down requested (1) [ 105.585484][ T4826] XFS (loop4): Mounting V5 Filesystem [ 105.606423][ T4823] netlink: 32 bytes leftover after parsing attributes in process `syz.1.95'. [ 105.726452][ T4826] XFS (loop4): Ending clean mount [ 105.734775][ T4826] XFS (loop4): Quotacheck needed: Please wait. [ 105.908495][ T4826] XFS (loop4): Quotacheck: Done. [ 106.997969][ T4193] XFS (loop4): Unmounting Filesystem [ 107.204803][ T4882] loop3: detected capacity change from 0 to 8192 [ 107.331866][ T4882] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 107.347246][ T4882] REISERFS (device loop3): using ordered data mode [ 107.353806][ T4882] reiserfs: using flush barriers [ 107.423628][ T4882] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 107.507580][ T4882] REISERFS (device loop3): checking transaction log (loop3) [ 107.764467][ T4882] REISERFS (device loop3): Using tea hash to sort names [ 107.774007][ T4889] loop0: detected capacity change from 0 to 2048 [ 107.797374][ T4882] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 107.843934][ T4874] loop1: detected capacity change from 0 to 40427 [ 107.860616][ T4891] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 107.974277][ T4896] netlink: 96 bytes leftover after parsing attributes in process `syz.4.103'. [ 108.055099][ T4874] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 108.072629][ T4886] loop2: detected capacity change from 0 to 40427 [ 108.104381][ T4874] F2FS-fs (loop1): invalid crc value [ 108.121554][ T4874] F2FS-fs (loop1): Found nat_bits in checkpoint [ 108.227251][ T4903] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 108.241774][ T4903] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 108.531225][ T4886] F2FS-fs (loop2): invalid crc value [ 108.770214][ T4907] loop0: detected capacity change from 0 to 4096 [ 108.807738][ T4886] F2FS-fs (loop2): Found nat_bits in checkpoint [ 108.876456][ T4909] libceph: resolve 'cc' (ret=-3): failed [ 108.950650][ T4907] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 108.978643][ T4886] F2FS-fs (loop2): recover fsync data on readonly fs [ 109.021993][ T4907] ntfs3: loop0: Failed to load $Extend. [ 109.036298][ T4886] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 109.077694][ T4886] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 109.244955][ T4914] loop4: detected capacity change from 0 to 1024 [ 109.414647][ T26] audit: type=1800 audit(1764922720.213:8): pid=4914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.111" name="file2" dev="loop4" ino=3 res=0 errno=0 [ 109.533555][ T144] hfsplus: b-tree write err: -5, ino 3 [ 109.567097][ T4867] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 109.977714][ T4867] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.022276][ T4867] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 110.196267][ T4867] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 110.234773][ T4867] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 110.263359][ T4867] usb 4-1: SerialNumber: syz [ 110.289194][ T4928] netlink: 64 bytes leftover after parsing attributes in process `syz.4.115'. [ 110.322293][ T4912] loop1: detected capacity change from 0 to 32768 [ 110.438064][ T4912] XFS (loop1): Mounting V5 Filesystem [ 110.458798][ T4938] loop4: detected capacity change from 0 to 512 [ 110.491352][ T4938] EXT4-fs (loop4): Ignoring removed nobh option [ 110.518691][ T4938] EXT4-fs (loop4): Unrecognized mount option "journal_async_commit.." or missing value [ 110.557793][ T4912] XFS (loop1): Ending clean mount [ 110.588542][ T4912] XFS (loop1): Quotacheck needed: Please wait. [ 110.620437][ T4923] loop0: detected capacity change from 0 to 32768 [ 110.647030][ T4868] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 110.722643][ T4912] XFS (loop1): Quotacheck: Done. [ 110.736747][ T4923] XFS (loop0): Mounting V5 Filesystem [ 110.972564][ T4923] XFS (loop0): Ending clean mount [ 110.992923][ T4923] XFS (loop0): Quotacheck needed: Please wait. [ 111.264942][ T4923] XFS (loop0): Quotacheck: Done. [ 111.488176][ T4182] XFS (loop0): Unmounting Filesystem [ 111.575675][ T4198] XFS (loop1): Unmounting Filesystem [ 111.580740][ T4949] loop4: detected capacity change from 0 to 32768 [ 111.646308][ T4949] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.117 (4949) [ 111.703181][ T4949] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 111.713727][ T4949] BTRFS info (device loop4): turning on sync discard [ 111.720720][ T4949] BTRFS info (device loop4): enabling ssd optimizations [ 111.729247][ T4949] BTRFS info (device loop4): using spread ssd allocation scheme [ 111.752713][ T4949] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 111.767025][ T4949] BTRFS info (device loop4): trying to use backup root at mount time [ 111.775209][ T4949] BTRFS info (device loop4): metadata ratio 6 [ 111.790998][ T4868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 111.847138][ T4949] BTRFS info (device loop4): enabling auto defrag [ 111.853631][ T4949] BTRFS info (device loop4): enabling disk space caching [ 111.877591][ T4949] BTRFS info (device loop4): max_inline at 0 [ 111.883753][ T4949] BTRFS error (device loop4): unrecognized mount option 'fsmagic=0x0000000000000008' [ 111.935868][ T4949] BTRFS error (device loop4): cannot disable free space tree [ 111.972464][ T4949] BTRFS error (device loop4): open_ctree failed: -22 [ 112.017268][ T4868] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 112.026484][ T4868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.064280][ T4868] usb 3-1: Product: syz [ 112.068974][ T4868] usb 3-1: Manufacturer: syz [ 112.073605][ T4868] usb 3-1: SerialNumber: syz [ 112.099832][ T4965] netlink: 12 bytes leftover after parsing attributes in process `syz.0.118'. [ 112.140550][ T4868] usb 3-1: config 0 descriptor?? [ 112.212503][ T4867] usb 4-1: 0:2 : does not exist [ 112.266684][ T4867] usb 4-1: USB disconnect, device number 5 [ 112.349878][ T4344] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (4344) [ 112.392189][ T4973] libceph: resolve 'cc' (ret=-3): failed [ 112.433947][ T4970] loop1: detected capacity change from 0 to 8192 [ 112.445683][ T4965] bridge1: port 1(vlan2) entered blocking state [ 112.475907][ T4965] bridge1: port 1(vlan2) entered disabled state [ 112.501509][ T4965] device vlan2 entered promiscuous mode [ 112.539471][ T4970] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 112.554531][ T4965] device veth0_to_bond entered promiscuous mode [ 112.557195][ T4970] REISERFS (device loop1): using ordered data mode [ 112.587183][ T4184] udevd[4184]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 112.627778][ T4868] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 112.634682][ T4868] dvb_usb_af9035: probe of 3-1:0.0 failed with error -8 [ 112.645194][ T4970] reiserfs: using flush barriers [ 112.660200][ T4970] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 112.682909][ T4970] REISERFS (device loop1): checking transaction log (loop1) [ 112.740377][ T4868] usb 3-1: USB disconnect, device number 6 [ 112.876635][ T4987] netlink: 'syz.0.124': attribute type 10 has an invalid length. [ 112.915239][ T4987] netlink: 40 bytes leftover after parsing attributes in process `syz.0.124'. [ 112.916686][ T4970] REISERFS (device loop1): Using tea hash to sort names [ 112.939055][ T4970] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 113.242597][ T4987] team0: Port device geneve0 added [ 114.149394][ T5009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'. [ 114.169701][ T5009] loop2: detected capacity change from 0 to 128 [ 114.205261][ T4972] loop4: detected capacity change from 0 to 40427 [ 114.285714][ T4972] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 114.300766][ T5009] EXT4-fs (loop2): can't mount with journal_async_commit, fs mounted w/o journal [ 114.302001][ T5016] netlink: 4 bytes leftover after parsing attributes in process `syz.3.132'. [ 114.338870][ T4972] F2FS-fs (loop4): invalid crc value [ 114.398996][ T5020] loop3: detected capacity change from 0 to 8 [ 114.408104][ T4972] F2FS-fs (loop4): Found nat_bits in checkpoint [ 114.543043][ T5020] squashfs: Unknown parameter 'threads' [ 114.606685][ T4972] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 114.701526][ T26] audit: type=1800 audit(1764922725.503:9): pid=4972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.120" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 114.734220][ T4972] F2FS-fs (loop4) : inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xbf9/0x1720 [ 114.777822][ T4972] attempt to access beyond end of device [ 114.777822][ T4972] loop4: rw=2049, want=77904, limit=40427 [ 114.998190][ T5034] loop2: detected capacity change from 0 to 4096 [ 115.050547][ T5034] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 115.062574][ T5034] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 115.077004][ T5034] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 115.088464][ T5034] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 115.101587][ T5034] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 115.115253][ T5034] ntfs: volume version 3.1. [ 115.121953][ T5034] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 115.134215][ T5034] ntfs: (device loop2): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 115.148243][ T5034] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 115.159358][ T5034] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 115.290657][ T5037] libceph: resolve 'cc' (ret=-3): failed [ 115.326067][ T5015] loop0: detected capacity change from 0 to 32768 [ 115.432527][ T5015] XFS (loop0): Mounting V5 Filesystem [ 115.481869][ T5023] loop1: detected capacity change from 0 to 32768 [ 115.547518][ T5052] udc-core: couldn't find an available UDC or it's busy [ 115.555048][ T5052] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 115.581469][ T5015] XFS (loop0): Ending clean mount [ 115.597238][ T5023] XFS (loop1): Mounting V5 Filesystem [ 115.613316][ T5015] XFS (loop0): Quotacheck needed: Please wait. [ 115.749760][ T5015] XFS (loop0): Quotacheck: Done. [ 115.764264][ T5023] XFS (loop1): Ending clean mount [ 115.816886][ T5023] XFS (loop1): Quotacheck needed: Please wait. [ 115.824756][ T4868] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 115.952949][ T5023] XFS (loop1): Quotacheck: Done. [ 116.777942][ T4198] XFS (loop1): Unmounting Filesystem [ 116.809607][ T4868] usb 5-1: Using ep0 maxpacket: 32 [ 117.047792][ T4868] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 117.079159][ T4868] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 40 [ 117.113656][ T4182] XFS (loop0): Unmounting Filesystem [ 117.287917][ T4868] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 117.315355][ T4868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.369149][ T4868] usb 5-1: Product: syz [ 117.395485][ T4868] usb 5-1: Manufacturer: syz [ 117.433749][ T4868] usb 5-1: SerialNumber: syz [ 117.700931][ T5069] loop3: detected capacity change from 0 to 8192 [ 117.715157][ T5071] loop1: detected capacity change from 0 to 2048 [ 117.787461][ T4868] cdc_ncm 5-1:1.0: bind() failure [ 117.803650][ T5069] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 117.803986][ T4868] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 117.815927][ T5071] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.827187][ T5069] REISERFS (device loop3): using ordered data mode [ 117.835741][ T5069] reiserfs: using flush barriers [ 117.852577][ T5069] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 117.869408][ T5069] REISERFS (device loop3): checking transaction log (loop3) [ 117.930130][ T5075] loop0: detected capacity change from 0 to 16 [ 117.957062][ T4868] cdc_ncm 5-1:1.1: bind() failure [ 117.994904][ T5075] erofs: (device loop0): mounted with root inode @ nid 36. [ 118.018994][ T4868] usb 5-1: USB disconnect, device number 4 [ 118.102823][ T5075] udc-core: couldn't find an available UDC or it's busy [ 118.148774][ T5075] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 118.260913][ T5069] REISERFS (device loop3): Using tea hash to sort names [ 118.275943][ T5069] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 118.367016][ T4241] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 118.655146][ T5085] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 118.670287][ T5085] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 119.377437][ T4241] usb 1-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 119.413573][ T4241] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.454949][ T4241] usb 1-1: config 0 descriptor?? [ 119.529386][ T4241] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 119.541857][ T5081] loop2: detected capacity change from 0 to 32768 [ 119.541952][ T5080] loop1: detected capacity change from 0 to 40427 [ 119.579659][ T5080] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 119.588384][ T5080] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 119.596810][ T5080] F2FS-fs (loop1): Unrecognized mount option "" or missing value [ 119.678636][ T5081] XFS (loop2): Mounting V5 Filesystem [ 119.720254][ T5094] libceph: resolve 'cc' (ret=-3): failed [ 119.737107][ T4241] gspca_sunplus: reg_w_riv err -71 [ 119.742351][ T4241] sunplus: probe of 1-1:0.0 failed with error -71 [ 119.768135][ T4241] usb 1-1: USB disconnect, device number 7 [ 119.807677][ T5081] XFS (loop2): Ending clean mount [ 119.823459][ T5081] XFS (loop2): Quotacheck needed: Please wait. [ 119.848531][ T1108] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 119.850883][ T5084] loop4: detected capacity change from 0 to 40427 [ 119.913814][ T5084] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 119.929995][ T5084] F2FS-fs (loop4): invalid crc value [ 119.938702][ T5084] F2FS-fs (loop4): Found nat_bits in checkpoint [ 119.972331][ T5081] XFS (loop2): Quotacheck: Done. [ 120.037116][ T1108] usb 4-1: device descriptor read/64, error -71 [ 120.067259][ T5084] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 120.106766][ T26] kauditd_printk_skb: 9 callbacks suppressed [ 120.106782][ T26] audit: type=1800 audit(1764922730.903:10): pid=5084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.144" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 120.163195][ T5084] F2FS-fs (loop4) : inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xbf9/0x1720 [ 120.209819][ T5084] attempt to access beyond end of device [ 120.209819][ T5084] loop4: rw=2049, want=77904, limit=40427 [ 120.216554][ T5108] udc-core: couldn't find an available UDC or it's busy [ 120.259275][ T5108] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 120.305236][ T4183] XFS (loop2): Unmounting Filesystem [ 120.432248][ T1108] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 120.587047][ T4234] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 120.637111][ T1108] usb 4-1: device descriptor read/64, error -71 [ 120.757202][ T1108] usb usb4-port1: attempt power cycle [ 121.167303][ T1108] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 121.237168][ T23] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 121.257577][ T1108] usb 4-1: device descriptor read/8, error -71 [ 121.291288][ T5112] loop0: detected capacity change from 0 to 32768 [ 121.541685][ T5112] XFS (loop0): Mounting V5 Filesystem [ 121.587459][ T1108] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 121.607299][ T23] usb 3-1: config 0 has an invalid interface number: 152 but max is 0 [ 121.615513][ T23] usb 3-1: config 0 has no interface number 0 [ 121.671529][ T23] usb 3-1: config 0 interface 152 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 121.683697][ T1108] usb 4-1: device descriptor read/8, error -71 [ 121.684438][ T5112] XFS (loop0): Ending clean mount [ 121.691118][ T5132] fuse: Bad value for 'fd' [ 121.717029][ T23] usb 3-1: config 0 interface 152 altsetting 0 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 121.727278][ T5112] XFS (loop0): Quotacheck needed: Please wait. [ 121.749808][ T5115] loop1: detected capacity change from 0 to 32768 [ 121.817564][ T1108] usb usb4-port1: unable to enumerate USB device [ 121.838274][ T5112] XFS (loop0): Quotacheck: Done. [ 121.923785][ T5115] XFS (loop1): Mounting V5 Filesystem [ 121.929714][ T23] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=af.e0 [ 121.963867][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.003048][ T23] usb 3-1: Product: syz [ 122.033511][ T23] usb 3-1: Manufacturer: syz [ 122.044712][ T23] usb 3-1: SerialNumber: syz [ 122.053973][ T5115] XFS (loop1): Ending clean mount [ 122.076133][ T23] usb 3-1: config 0 descriptor?? [ 122.155335][ T5118] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 122.172044][ T5115] XFS (loop1): Quotacheck needed: Please wait. [ 122.435113][ T23] usb 3-1: USB disconnect, device number 7 [ 122.495482][ T5115] XFS (loop1): Quotacheck: Done. [ 122.746033][ T4182] XFS (loop0): Unmounting Filesystem [ 123.308126][ T5151] libceph: resolve 'cc' (ret=-3): failed [ 123.328379][ T4198] XFS (loop1): Unmounting Filesystem [ 123.462962][ T4868] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 123.614757][ T5157] loop0: detected capacity change from 0 to 8192 [ 123.644684][ T5157] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 123.654165][ T4241] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 123.657268][ T5157] REISERFS (device loop0): using ordered data mode [ 123.690781][ T5157] reiserfs: using flush barriers [ 123.697384][ T5157] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 123.767630][ T5157] REISERFS (device loop0): checking transaction log (loop0) [ 123.864602][ T5157] REISERFS (device loop0): Using tea hash to sort names [ 123.877201][ T4868] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.877226][ T5157] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 123.895562][ T4868] usb 5-1: config 0 interface 0 has no altsetting 0 [ 123.897818][ T23] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 123.918443][ T4241] usb 3-1: Using ep0 maxpacket: 32 [ 124.062346][ T4241] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 124.080886][ T4241] usb 3-1: config 0 has no interface number 0 [ 124.091247][ T4868] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 124.104919][ T4241] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 124.126653][ T4868] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.149506][ T4868] usb 5-1: Product: syz [ 124.153761][ T4868] usb 5-1: Manufacturer: syz [ 124.166172][ T4241] usb 3-1: config 0 interface 85 has no altsetting 0 [ 124.175921][ T4868] usb 5-1: SerialNumber: syz [ 124.198919][ T4868] usb 5-1: config 0 descriptor?? [ 124.283608][ T5173] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 124.298359][ T5173] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 124.324152][ T23] usb 4-1: Using ep0 maxpacket: 16 [ 124.753516][ T23] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 124.773118][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.801828][ T23] usb 4-1: Product: syz [ 124.806487][ T23] usb 4-1: Manufacturer: syz [ 124.821905][ T23] usb 4-1: SerialNumber: syz [ 124.837963][ T4868] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 124.852973][ T23] usb 4-1: config 0 descriptor?? [ 124.856183][ T4868] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 124.887778][ T4868] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 124.907194][ T4241] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 124.916738][ T4241] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.931387][ T4868] usb 5-1: media controller created [ 124.938339][ T4241] usb 3-1: Product: syz [ 124.952660][ T4241] usb 3-1: Manufacturer: syz [ 124.964612][ T4241] usb 3-1: SerialNumber: syz [ 124.978724][ T4868] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 124.995760][ T4241] usb 3-1: config 0 descriptor?? [ 125.114636][ T4868] DVB: Unable to find symbol tda10046_attach() [ 125.122217][ T4868] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 125.134119][ T4868] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 125.269459][ T23] usb_8dev 4-1:0.0 can0: sending command message failed [ 125.277023][ T23] usb_8dev 4-1:0.0 can0: can't get firmware version [ 125.412457][ T5154] loop2: detected capacity change from 0 to 2048 [ 125.427865][ T4868] dvb_usb_m920x: probe of 5-1:0.0 failed with error -71 [ 125.468826][ T23] usb_8dev: probe of 4-1:0.0 failed with error -22 [ 125.475447][ T4868] usb 5-1: USB disconnect, device number 5 [ 125.483497][ T23] usb 4-1: USB disconnect, device number 10 [ 125.729992][ T5182] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 125.771323][ T5184] netlink: 20 bytes leftover after parsing attributes in process `syz.0.164'. [ 125.785776][ T5154] NILFS error (device loop2): nilfs_dotdot: directory #12 missing '..' [ 125.804929][ T5175] loop1: detected capacity change from 0 to 40427 [ 125.845423][ T5175] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 125.856130][ T5154] Remounting filesystem read-only [ 125.939953][ T5175] F2FS-fs (loop1): invalid crc value [ 125.981819][ T5175] F2FS-fs (loop1): Found nat_bits in checkpoint [ 126.127076][ T5175] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 126.203332][ T26] audit: type=1800 audit(1764922737.003:11): pid=5175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.162" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 126.234733][ T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 126.244792][ T5175] F2FS-fs (loop1) : inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xbf9/0x1720 [ 126.279053][ T5175] attempt to access beyond end of device [ 126.279053][ T5175] loop1: rw=2049, want=77904, limit=40427 [ 126.297394][ T4241] appletouch 3-1:0.85: Geyser mode initialized. [ 126.301466][ T4241] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input8 [ 126.498045][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 126.538773][ T4241] usb 3-1: USB disconnect, device number 8 [ 126.622358][ T4241] appletouch 3-1:0.85: input: appletouch disconnected [ 126.697845][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.747490][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.768237][ T23] usb 1-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 126.827078][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.864274][ T23] usb 1-1: config 0 descriptor?? [ 126.866002][ T5201] loop4: detected capacity change from 0 to 1024 [ 126.926671][ T5204] libceph: resolve 'cc' (ret=-3): failed [ 126.946268][ T5201] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 126.997025][ T5201] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869) [ 127.017888][ T5201] EXT4-fs error (device loop4): ext4_get_journal_inode:5160: comm syz.4.169: inode #1: comm syz.4.169: iget: illegal inode # [ 127.085116][ T5201] EXT4-fs (loop4): no journal found [ 127.143993][ T5192] loop3: detected capacity change from 0 to 7 [ 127.186111][ T5201] loop4: detected capacity change from 0 to 512 [ 127.232874][ T5192] loop3: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 127.255978][ T5192] loop3: partition table partially beyond EOD, truncated [ 127.288984][ T5192] loop3: p1 size 3016769088 extends beyond EOD, truncated [ 127.304524][ T5192] loop3: p2 start 669336480 is beyond EOD, truncated [ 127.411026][ T5218] loop1: detected capacity change from 0 to 512 [ 127.440088][ T23] uclogic 0003:5543:0003.0005: item fetching failed at offset 0/3 [ 127.460824][ T5218] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 127.477565][ T23] uclogic 0003:5543:0003.0005: parse failed [ 127.499906][ T23] uclogic: probe of 0003:5543:0003.0005 failed with error -22 [ 127.507111][ T5218] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 127.519506][ T5201] EXT4-fs (loop4): Test dummy encryption mode enabled [ 127.526336][ T5201] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 127.591052][ T5218] EXT4-fs error (device loop1): __ext4_get_inode_loc:4327: comm syz.1.168: Invalid inode table block 1 in block_group 0 [ 127.607235][ T5201] EXT4-fs error (device loop4): ext4_orphan_get:1427: comm syz.4.169: bad orphan inode 131083 [ 127.641821][ T5201] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,data_err=abort,noload,,errors=continue. Quota mode: none. [ 127.659470][ T5218] EXT4-fs (loop1): get root inode failed [ 127.678988][ T5218] EXT4-fs (loop1): mount failed [ 127.747407][ T7] usb 1-1: USB disconnect, device number 8 [ 128.277094][ T5236] loop2: detected capacity change from 0 to 736 [ 128.320170][ T5201] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 128.446861][ T5242] netlink: 'syz.1.168': attribute type 1 has an invalid length. [ 128.455476][ T5242] netlink: 'syz.1.168': attribute type 2 has an invalid length. [ 128.463331][ T5242] netlink: 'syz.1.168': attribute type 2 has an invalid length. [ 128.471067][ T5242] netlink: 'syz.1.168': attribute type 2 has an invalid length. [ 128.478785][ T5242] netlink: 12 bytes leftover after parsing attributes in process `syz.1.168'. [ 128.496546][ T4256] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 128.751169][ T5231] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.169: iget: bad extra_isize 1312 (inode size 256) [ 128.827630][ T23] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 128.927445][ T4256] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 128.990347][ T5236] rock: directory entry would overflow storage [ 129.013931][ T4256] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 129.071053][ T5236] rock: sig=0x3b10, size=4, remaining=3 [ 129.098290][ T4256] usb 4-1: config 1 interface 0 has no altsetting 0 [ 129.327424][ T4256] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 129.347287][ T4256] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.367313][ T4256] usb 4-1: Product: syz [ 129.371537][ T4256] usb 4-1: Manufacturer: syz [ 129.376158][ T4256] usb 4-1: SerialNumber: syz [ 129.437411][ T5233] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 129.444550][ T5233] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 129.449290][ T5258] libceph: resolve 'cc' (ret=-3): failed [ 129.458466][ T5259] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 129.507268][ T23] usb 2-1: string descriptor 0 read error: -22 [ 129.513933][ T23] usb 2-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 129.546971][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.573000][ T23] usb 2-1: config 0 descriptor?? [ 129.638833][ T23] usbtest 2-1:0.0: FX2 device [ 129.643578][ T23] usbtest 2-1:0.0: low-speed {control intr-in intr-out} tests (+alt) [ 129.690155][ T5259] loop2: detected capacity change from 0 to 8192 [ 129.756360][ T26] audit: type=1326 audit(1764922740.553:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5263 comm="syz.0.184" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f42742f8749 code=0x0 [ 129.921885][ T5252] loop4: detected capacity change from 0 to 40427 [ 129.962751][ T5252] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 129.995087][ T5252] F2FS-fs (loop4): invalid crc value [ 130.095531][ T5252] F2FS-fs (loop4): Found nat_bits in checkpoint [ 130.161707][ T4869] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 130.550042][ T5252] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 130.572308][ T5233] udc-core: couldn't find an available UDC or it's busy [ 130.585267][ T5233] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 130.601765][ T26] audit: type=1800 audit(1764922741.403:13): pid=5252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.178" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 130.621245][ T5252] F2FS-fs (loop4) : inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xbf9/0x1720 [ 130.652828][ T5252] attempt to access beyond end of device [ 130.652828][ T5252] loop4: rw=2049, want=77904, limit=40427 [ 130.677144][ T4869] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.807586][ T4869] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 130.828353][ T4869] usb 3-1: New USB device strings: Mfr=32, Product=0, SerialNumber=9 [ 130.853618][ T4869] usb 3-1: Manufacturer: syz [ 130.865500][ T4869] usb 3-1: SerialNumber: syz [ 130.891767][ T4869] usb 3-1: config 0 descriptor?? [ 130.939470][ T4869] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 130.954283][ T4267] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 130.962639][ T21] usb 2-1: USB disconnect, device number 7 [ 131.013718][ T4869] usb 3-1: No valid video chain found. [ 131.159866][ T5267] netlink: 'syz.2.185': attribute type 2 has an invalid length. [ 131.221574][ T4869] usb 3-1: USB disconnect, device number 9 [ 131.257205][ T4267] usb 1-1: Using ep0 maxpacket: 32 [ 131.258134][ T5286] loop1: detected capacity change from 0 to 512 [ 131.325343][ T5286] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 131.377310][ T4267] usb 1-1: config 0 has an invalid interface number: 202 but max is 0 [ 131.417829][ T4267] usb 1-1: config 0 has no interface number 0 [ 131.424335][ T4267] usb 1-1: config 0 interface 202 altsetting 0 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 131.446756][ T5286] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1147: group 0, block bitmap and bg descriptor inconsistent: 18 vs 41 free clusters [ 131.458375][ T5288] loop3: detected capacity change from 0 to 4096 [ 131.466616][ T5286] Quota error (device loop1): write_blk: dquota write failed [ 131.475770][ T5286] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 131.485701][ T5286] EXT4-fs error (device loop1): ext4_acquire_dquot:6209: comm syz.1.189: Failed to acquire dquot type 0 [ 131.511025][ T5286] EXT4-fs (loop1): 1 truncate cleaned up [ 131.516724][ T5286] EXT4-fs (loop1): mounted filesystem without journal. Opts: lazytime,noblock_validity,inode_readahead_blks=0x0000000000001000,barrier=0x0000000000000000,journal_dev=0x0000000000000005,dioread_lock,data_err=ignore,noinit_itable,resgid=0x000000000000ee002,errors=continue. Quota mode: writeback. [ 131.717336][ T4267] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 131.739247][ T4267] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.762802][ T4267] usb 1-1: Product: syz [ 131.772891][ T4267] usb 1-1: Manufacturer: syz [ 131.782957][ T4267] usb 1-1: SerialNumber: syz [ 131.812612][ T4267] usb 1-1: config 0 descriptor?? [ 131.817768][ T21] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 131.973727][ T5299] loop2: detected capacity change from 0 to 256 [ 131.998686][ T4267] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 132.062474][ T5303] loop3: detected capacity change from 0 to 2048 [ 132.136410][ T5303] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.207928][ T21] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 132.216175][ T21] usb 5-1: config 0 has no interface number 0 [ 132.248316][ T21] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 132.261080][ T5299] FAT-fs (loop2): Directory bread(block 64) failed [ 132.275183][ T5299] FAT-fs (loop2): Directory bread(block 65) failed [ 132.287003][ T21] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 132.307137][ T5299] FAT-fs (loop2): Directory bread(block 66) failed [ 132.317298][ T4277] usb 1-1: Failed to submit usb control message: -71 [ 132.317316][ T5299] FAT-fs (loop2): Directory bread(block 67) failed [ 132.324169][ T21] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 132.358360][ T5299] FAT-fs (loop2): Directory bread(block 68) failed [ 132.375158][ T4277] usb 1-1: unable to send the bmi data to the device: -71 [ 132.384129][ T5299] FAT-fs (loop2): Directory bread(block 69) failed [ 132.391065][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.407107][ T4277] usb 1-1: unable to get target info from device [ 132.413526][ T4277] usb 1-1: could not get target info (-71) [ 132.419798][ T5299] FAT-fs (loop2): Directory bread(block 70) failed [ 132.426365][ T5299] FAT-fs (loop2): Directory bread(block 71) failed [ 132.436640][ T23] usb 1-1: USB disconnect, device number 9 [ 132.452298][ T21] usb 5-1: config 0 descriptor?? [ 132.469704][ T4277] usb 1-1: could not probe fw (-71) [ 132.520984][ T21] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input9 [ 132.528155][ T5317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.195'. [ 132.537135][ T5299] FAT-fs (loop2): Directory bread(block 72) failed [ 132.574125][ T5299] FAT-fs (loop2): Directory bread(block 73) failed [ 132.599466][ T5317] loop1: detected capacity change from 0 to 256 [ 132.611348][ T5316] libceph: resolve 'cc' (ret=-3): failed [ 132.675040][ T5317] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 132.726827][ T21] usb 5-1: USB disconnect, device number 6 [ 132.750901][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.757750][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.037141][ T4256] rtl8150 4-1:1.0: couldn't reset the device [ 133.043345][ T4256] rtl8150: probe of 4-1:1.0 failed with error -5 [ 133.079688][ T4256] usb 4-1: USB disconnect, device number 11 [ 133.136698][ T5317] could not allocate digest TFM handle sha512-ce [ 133.181155][ T5328] loop2: detected capacity change from 0 to 128 [ 133.223533][ T5328] EXT4-fs (loop2): Unrecognized mount option "obj_type=:" or missing value [ 133.441039][ T5328] loop2: detected capacity change from 0 to 512 [ 133.503812][ T5328] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 133.571749][ T5328] EXT4-fs (loop2): 1 orphan inode deleted [ 133.578906][ T5328] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.130019][ T5331] loop3: detected capacity change from 0 to 32768 [ 134.194215][ T4868] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 134.232272][ T5346] loop1: detected capacity change from 0 to 512 [ 134.254818][ T5331] XFS (loop3): Mounting V5 Filesystem [ 134.305818][ T5331] XFS (loop3): Ending clean mount [ 134.313191][ T5331] XFS (loop3): Quotacheck needed: Please wait. [ 134.383495][ T5329] loop0: detected capacity change from 0 to 40427 [ 134.403415][ T5337] loop4: detected capacity change from 0 to 32768 [ 134.407668][ T4868] usb 3-1: device descriptor read/64, error -71 [ 134.464110][ T5329] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1ffff [ 134.476868][ T5331] XFS (loop3): Quotacheck: Done. [ 134.499040][ T5346] netlink: 16 bytes leftover after parsing attributes in process `syz.1.203'. [ 134.562972][ T5337] XFS (loop4): Mounting V5 Filesystem [ 134.576040][ T5329] F2FS-fs (loop0): invalid crc value [ 134.584101][ T5346] openvswitch: netlink: EtherType 0 is less than min 600 [ 134.717275][ T5329] F2FS-fs (loop0): Found nat_bits in checkpoint [ 135.031135][ T5329] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 135.048484][ T5337] XFS (loop4): Ending clean mount [ 135.068122][ T5337] XFS (loop4): Quotacheck needed: Please wait. [ 135.223800][ T26] audit: type=1800 audit(1764922745.973:14): pid=5329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.198" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 135.258352][ T5329] F2FS-fs (loop0) : inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xbf9/0x1720 [ 135.276732][ T5337] XFS (loop4): Quotacheck: Done. [ 135.327916][ T5329] attempt to access beyond end of device [ 135.327916][ T5329] loop0: rw=2049, want=77904, limit=40427 [ 135.345302][ T4185] XFS (loop3): Unmounting Filesystem [ 135.505756][ T4868] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 135.625298][ T5371] netlink: 4 bytes leftover after parsing attributes in process `syz.4.201'. [ 136.046016][ T5373] loop1: detected capacity change from 0 to 8192 [ 136.086589][ T5373] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 136.105423][ T5373] REISERFS (device loop1): using ordered data mode [ 136.107968][ T4193] XFS (loop4): Unmounting Filesystem [ 136.137850][ T5373] reiserfs: using flush barriers [ 136.167119][ T4868] usb 3-1: device descriptor read/64, error -71 [ 136.249687][ T5373] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 136.291051][ T5373] REISERFS (device loop1): checking transaction log (loop1) [ 136.298378][ T4868] usb usb3-port1: attempt power cycle [ 136.463397][ T5378] loop0: detected capacity change from 0 to 8 [ 136.596323][ T5373] REISERFS (device loop1): Using tea hash to sort names [ 136.621501][ T5378] SQUASHFS error: lzo decompression failed, data probably corrupt [ 136.644663][ T5373] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 136.695922][ T5378] SQUASHFS error: Failed to read block 0x91: -5 [ 136.708234][ T4868] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 136.734504][ T5378] SQUASHFS error: Unable to read metadata cache entry [8f] [ 136.744053][ T5378] SQUASHFS error: Unable to read inode 0x11f [ 136.797251][ T4868] usb 3-1: device descriptor read/8, error -71 [ 137.057106][ T5386] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 137.072892][ T5386] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 137.350205][ T5385] libceph: resolve 'cc' (ret=-3): failed [ 137.360864][ T5384] loop2: detected capacity change from 0 to 8192 [ 137.381035][ T5385] binder_alloc: 5382: binder_alloc_buf, no vma [ 137.458768][ T5384] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 137.495652][ T5384] REISERFS (device loop2): using ordered data mode [ 137.546374][ T5384] reiserfs: using flush barriers [ 137.581555][ T5384] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 137.657430][ T5384] REISERFS (device loop2): checking transaction log (loop2) [ 137.883813][ T5384] REISERFS (device loop2): Using tea hash to sort names [ 137.921433][ T5384] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 138.029543][ T5380] loop3: detected capacity change from 0 to 32768 [ 138.126436][ T4192] Bluetooth: hci4: link tx timeout [ 138.132054][ T4192] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.197911][ T4192] Bluetooth: hci4: link tx timeout [ 138.203115][ T4192] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.216014][ T4192] Bluetooth: hci4: link tx timeout [ 138.222117][ T4192] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.230461][ T4192] Bluetooth: hci4: link tx timeout [ 138.235624][ T4192] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.244254][ T4192] Bluetooth: hci4: link tx timeout [ 138.249444][ T4192] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.257852][ T4192] Bluetooth: hci4: link tx timeout [ 138.263012][ T4192] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.307001][ T4192] Bluetooth: hci4: link tx timeout [ 138.312174][ T4192] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 138.377297][ T4256] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 138.474280][ T5417] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 138.488981][ T5417] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 138.575683][ T5380] XFS (loop3): Mounting V5 Filesystem [ 139.308937][ T5380] XFS (loop3): Ending clean mount [ 139.316246][ T5380] XFS (loop3): Quotacheck needed: Please wait. [ 139.349826][ T5428] netlink: 36 bytes leftover after parsing attributes in process `syz.4.214'. [ 139.410207][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 139.420831][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 139.507144][ T4256] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 139.516398][ T4256] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.548426][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 139.558606][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 139.649999][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 139.669123][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!! [ 139.678565][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #92!!! [ 139.687688][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #92!!! [ 139.696804][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #92!!! [ 139.705928][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #92!!! [ 139.717047][ T4867] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 139.833223][ T5380] XFS (loop3): Quotacheck: Done. [ 139.997168][ T4867] usb 2-1: Using ep0 maxpacket: 16 [ 140.117787][ T4867] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.244033][ T4867] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 140.410916][ T4867] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.686189][ T4867] usb 2-1: config 0 descriptor?? [ 140.940604][ T7] Bluetooth: hci4: command 0x0406 tx timeout [ 141.333510][ T4185] XFS (loop3): Unmounting Filesystem [ 141.346544][ T4256] usb 1-1: config 0 descriptor?? [ 141.360412][ T4867] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 141.377806][ T4256] usb 1-1: can't set config #0, error -71 [ 141.386355][ T4256] usb 1-1: USB disconnect, device number 10 [ 141.460810][ T5437] loop0: detected capacity change from 0 to 256 [ 141.581277][ T5437] FAT-fs (loop0): Directory bread(block 64) failed [ 141.604932][ T5429] device syzkaller0 entered promiscuous mode [ 141.630572][ T5429] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 141.647270][ T5437] FAT-fs (loop0): Directory bread(block 65) failed [ 141.653928][ T5437] FAT-fs (loop0): Directory bread(block 66) failed [ 141.707004][ T5437] FAT-fs (loop0): Directory bread(block 67) failed [ 141.713679][ T5437] FAT-fs (loop0): Directory bread(block 68) failed [ 141.737192][ T5437] FAT-fs (loop0): Directory bread(block 69) failed [ 141.759509][ T5437] FAT-fs (loop0): Directory bread(block 70) failed [ 141.766118][ T5437] FAT-fs (loop0): Directory bread(block 71) failed [ 141.784321][ T5438] loop4: detected capacity change from 0 to 8192 [ 141.852013][ T5438] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 141.884505][ T5437] FAT-fs (loop0): Directory bread(block 72) failed [ 141.895847][ T5438] REISERFS (device loop4): using ordered data mode [ 141.914756][ T5437] FAT-fs (loop0): Directory bread(block 73) failed [ 141.938422][ T5435] loop2: detected capacity change from 0 to 40427 [ 141.942277][ T4294] usb 2-1: USB disconnect, device number 8 [ 141.959260][ T5435] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff [ 141.969695][ T5438] reiserfs: using flush barriers [ 141.986390][ T5435] F2FS-fs (loop2): invalid crc value [ 142.021385][ T5438] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 142.037827][ T5435] F2FS-fs (loop2): Found nat_bits in checkpoint [ 142.071627][ T5438] REISERFS (device loop4): checking transaction log (loop4) [ 142.287227][ T5435] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 142.327528][ T5444] libceph: resolve 'cc' (ret=-3): failed [ 142.358892][ T26] audit: type=1800 audit(1764922753.163:15): pid=5435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.215" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 142.386020][ T5444] binder_alloc: 5443: binder_alloc_buf, no vma [ 142.398369][ T5435] F2FS-fs (loop2) : inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xbf9/0x1720 [ 142.426237][ T5438] REISERFS (device loop4): Using tea hash to sort names [ 142.440662][ T5435] attempt to access beyond end of device [ 142.440662][ T5435] loop2: rw=2049, want=77904, limit=40427 [ 142.504947][ T5438] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 142.506172][ T5448] loop3: detected capacity change from 0 to 64 [ 142.574326][ T5452] loop0: detected capacity change from 0 to 8 [ 142.689306][ T5452] SQUASHFS error: zlib decompression failed, data probably corrupt [ 142.757184][ T5452] SQUASHFS error: Failed to read block 0x9b: -5 [ 142.763522][ T5452] SQUASHFS error: Unable to read metadata cache entry [99] [ 142.835321][ T5452] SQUASHFS error: Unable to read inode 0x104 [ 142.967067][ T5456] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 142.981648][ T5456] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 143.557707][ T5455] loop1: detected capacity change from 0 to 40427 [ 143.652193][ T5455] F2FS-fs (loop1): Unrecognized mount option "bbckgroundc" or missing value [ 144.102805][ T5463] loop4: detected capacity change from 0 to 1024 [ 144.157621][ T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 144.246156][ T5465] 9pnet: Insufficient options for proto=fd [ 144.278439][ T5463] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 144.322937][ T5463] EXT4-fs error (device loop4): ext4_get_journal_inode:5160: inode #32: comm syz.4.225: iget: special inode unallocated [ 144.397972][ T5463] EXT4-fs (loop4): no journal found [ 144.563702][ T5465] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 144.568605][ T5468] loop0: detected capacity change from 0 to 4096 [ 144.590233][ T5465] CIFS mount error: No usable UNC path provided in device string! [ 144.590233][ T5465] [ 144.606871][ T5465] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 144.719795][ T5448] loop3: detected capacity change from 0 to 32768 [ 144.777152][ T7] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 144.787153][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.810911][ T5471] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 144.834964][ T7] usb 2-1: Product: syz [ 144.860704][ T7] usb 2-1: Manufacturer: syz [ 144.891329][ T7] usb 2-1: SerialNumber: syz [ 144.958800][ T5473] loop4: detected capacity change from 0 to 512 [ 144.969149][ T7] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 145.137561][ T5473] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 145.247910][ T5473] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.291307][ T5479] netlink: 'syz.0.230': attribute type 2 has an invalid length. [ 145.339219][ T5479] netlink: 40 bytes leftover after parsing attributes in process `syz.0.230'. [ 145.548649][ T5484] libceph: resolve 'cc' (ret=-3): failed [ 145.652864][ T5479] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 145.682887][ T5479] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 145.827176][ T7] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 145.836557][ T4867] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 146.035190][ T5493] loop0: detected capacity change from 0 to 8192 [ 146.088476][ T5493] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 146.124711][ T5493] REISERFS (device loop0): using ordered data mode [ 146.177378][ T5493] reiserfs: using flush barriers [ 146.227021][ T5493] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 146.262778][ T4869] usb 2-1: USB disconnect, device number 9 [ 146.273479][ T4867] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 146.281680][ T4867] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 146.307549][ T4867] usb 3-1: config 0 interface 0 has no altsetting 0 [ 146.327442][ T5493] REISERFS (device loop0): checking transaction log (loop0) [ 146.507314][ T4867] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 146.527011][ T4867] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 146.555820][ T4867] usb 3-1: Product: syz [ 146.561983][ T5493] REISERFS (device loop0): Using tea hash to sort names [ 146.566054][ T4867] usb 3-1: Manufacturer: syz [ 146.586406][ T4867] usb 3-1: SerialNumber: syz [ 146.592093][ T5493] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 146.602804][ T4867] usb 3-1: config 0 descriptor?? [ 146.643564][ T5489] loop3: detected capacity change from 0 to 40427 [ 146.668447][ T4867] hub 3-1:0.0: bad descriptor, ignoring hub [ 146.684694][ T4867] hub: probe of 3-1:0.0 failed with error -5 [ 146.697769][ T4867] usb 3-1: selecting invalid altsetting 0 [ 146.732814][ T5489] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff [ 146.830909][ T5491] loop4: detected capacity change from 0 to 40427 [ 146.855386][ T5489] F2FS-fs (loop3): invalid crc value [ 146.897204][ T7] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 146.904629][ T7] ath9k_htc: Failed to initialize the device [ 147.047699][ T5503] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 147.063609][ T5503] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 147.156602][ T5491] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1ffff [ 147.312197][ T5489] F2FS-fs (loop3): Found nat_bits in checkpoint [ 147.407871][ T5491] F2FS-fs (loop4): invalid crc value [ 147.512550][ T5491] F2FS-fs (loop4): Found nat_bits in checkpoint [ 147.578139][ T4867] usb 3-1: USB disconnect, device number 14 [ 147.588468][ T4869] usb 2-1: ath9k_htc: USB layer deinitialized [ 147.715443][ T5489] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 147.745728][ T26] audit: type=1800 audit(1764922758.543:16): pid=5489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.233" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 147.747224][ T5491] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 147.813651][ T5489] F2FS-fs (loop3) : inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xbf9/0x1720 [ 147.838849][ T5489] attempt to access beyond end of device [ 147.838849][ T5489] loop3: rw=2049, want=77904, limit=40427 [ 147.840847][ T5512] FAULT_INJECTION: forcing a failure. [ 147.840847][ T5512] name failslab, interval 1, probability 0, space 0, times 0 [ 148.021580][ T26] audit: type=1800 audit(1764922758.823:17): pid=5491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.234" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 148.076187][ T5491] F2FS-fs (loop4) : inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xbf9/0x1720 [ 148.082494][ T5512] CPU: 1 PID: 5512 Comm: syz.3.233 Not tainted syzkaller #0 [ 148.094943][ T5512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 148.105034][ T5512] Call Trace: [ 148.108336][ T5512] [ 148.111300][ T5512] dump_stack_lvl+0x168/0x230 [ 148.116017][ T5512] ? show_regs_print_info+0x20/0x20 [ 148.121257][ T5512] ? load_image+0x3b0/0x3b0 [ 148.125802][ T5512] ? __might_sleep+0xf0/0xf0 [ 148.130423][ T5512] ? __lock_acquire+0x7c60/0x7c60 [ 148.135495][ T5512] should_fail+0x38c/0x4c0 [ 148.139954][ T5512] should_failslab+0x5/0x20 [ 148.144503][ T5512] slab_pre_alloc_hook+0x51/0xc0 [ 148.149472][ T5512] ? getname_flags+0xb5/0x500 [ 148.154180][ T5512] kmem_cache_alloc+0x3d/0x290 [ 148.158982][ T5512] getname_flags+0xb5/0x500 [ 148.163521][ T5512] user_path_at_empty+0x2a/0x190 [ 148.168504][ T5512] path_setxattr+0xae/0x280 [ 148.173028][ T5512] ? simple_xattr_list_add+0xf0/0xf0 [ 148.178324][ T5512] ? lock_chain_count+0x20/0x20 [ 148.183197][ T5512] ? vtime_user_exit+0x2dc/0x400 [ 148.188165][ T5512] __x64_sys_lsetxattr+0xb4/0xd0 [ 148.193122][ T5512] do_syscall_64+0x4c/0xa0 [ 148.197554][ T5512] ? clear_bhb_loop+0x30/0x80 [ 148.202240][ T5512] ? clear_bhb_loop+0x30/0x80 [ 148.206935][ T5512] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 148.212853][ T5512] RIP: 0033:0x7fb125645749 [ 148.217288][ T5512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.236908][ T5512] RSP: 002b:00007fb12388b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 148.245351][ T5512] RAX: ffffffffffffffda RBX: 00007fb12589c090 RCX: 00007fb125645749 [ 148.253368][ T5512] RDX: 00002000000000c0 RSI: 0000200000002440 RDI: 0000200000000400 [ 148.261358][ T5512] RBP: 00007fb12388b090 R08: 0000000000000000 R09: 0000000000000000 [ 148.269346][ T5512] R10: 000000000000005c R11: 0000000000000246 R12: 0000000000000001 [ 148.277334][ T5512] R13: 00007fb12589c128 R14: 00007fb12589c090 R15: 00007fffd0609278 [ 148.285411][ T5512] [ 148.295870][ T5491] attempt to access beyond end of device [ 148.295870][ T5491] loop4: rw=2049, want=77904, limit=40427 [ 148.418921][ T5518] loop0: detected capacity change from 0 to 4096 [ 148.495896][ T5501] loop1: detected capacity change from 0 to 32768 [ 148.585449][ T5520] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 148.688281][ T5507] syz.2.237 (5507): drop_caches: 2 [ 148.756535][ T5501] ERROR: (device loop1): diAllocBit: iag inconsistent [ 148.756535][ T5501] [ 148.826473][ T5501] ialloc: diAlloc returned -5! [ 149.159411][ T5522] loop2: detected capacity change from 0 to 8192 [ 149.246097][ T5522] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 149.276001][ T5522] REISERFS (device loop2): using ordered data mode [ 149.287177][ T5522] reiserfs: using flush barriers [ 149.308285][ T5522] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 149.356387][ T5529] loop1: detected capacity change from 0 to 256 [ 149.367785][ T5522] REISERFS (device loop2): checking transaction log (loop2) [ 149.389306][ T5529] FAT-fs (loop1): Unrecognized mount option "nonUmtail=0" or missing value [ 149.638401][ T5522] REISERFS (device loop2): Using tea hash to sort names [ 149.656411][ T5522] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 149.837090][ T4869] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 150.140165][ T5529] loop1: detected capacity change from 0 to 32768 [ 150.160681][ T4869] usb 4-1: Using ep0 maxpacket: 8 [ 150.248773][ T5541] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 150.263184][ T5541] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 151.060009][ T5529] XFS (loop1): Mounting V5 Filesystem [ 151.147306][ T4869] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 151.154964][ T5529] XFS (loop1): Ending clean mount [ 151.163559][ T5529] XFS (loop1): Quotacheck needed: Please wait. [ 151.210850][ T5529] XFS (loop1): Quotacheck: Done. [ 151.337362][ T4869] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 151.367066][ T4869] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 151.375209][ T4869] usb 4-1: Product: syz [ 151.410957][ T5538] loop4: detected capacity change from 0 to 32768 [ 151.441907][ T5555] loop2: detected capacity change from 0 to 512 [ 151.458985][ T4869] usb 4-1: Manufacturer: syz [ 151.476324][ T4869] usb 4-1: SerialNumber: syz [ 151.808661][ T5538] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.243'. [ 151.896748][ T5538] openvswitch: netlink: IP tunnel attribute has 3064 unknown bytes. [ 151.954651][ T5539] udc-core: couldn't find an available UDC or it's busy [ 151.979236][ T5555] EXT4-fs (loop2): Unrecognized mount option "fsname=stripe" or missing value [ 152.029292][ T5539] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 152.039552][ T5539] netlink: 'syz.3.244': attribute type 1 has an invalid length. [ 152.045028][ T4198] XFS (loop1): Unmounting Filesystem [ 152.102503][ T4869] usb 4-1: palm_os_3_probe - error -110 getting connection information [ 152.142850][ T4869] visor: probe of 4-1:1.0 failed with error -110 [ 152.153090][ T5539] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.243188][ T5563] bond1: (slave gretap1): making interface the new active one [ 152.257888][ T5563] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 152.266764][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 152.315414][ T21] usb 4-1: USB disconnect, device number 12 [ 152.561032][ T5570] loop4: detected capacity change from 0 to 2048 [ 152.587294][ T4868] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 153.697139][ T5581] loop1: detected capacity change from 0 to 512 [ 153.790127][ T5581] EXT4-fs (loop1): Ignoring removed nobh option [ 153.796444][ T5581] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 153.853407][ T4868] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 153.884231][ T4868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.897436][ T4868] usb 3-1: config 0 descriptor?? [ 153.905905][ T5581] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.254: iget: bad i_size value: 38620345925642 [ 153.992961][ T5581] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.254: couldn't read orphan inode 15 (err -117) [ 154.122615][ T5581] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,jqfmt=vfsv0,data_err=ignore,,errors=continue. Quota mode: writeback. [ 154.214205][ T5581] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.254: invalid indirect mapped block 3973251072 (level 0) [ 154.298570][ T5581] EXT4-fs error (device loop1): ext4_lookup:1858: inode #15: comm syz.1.254: iget: bad i_size value: 38620345925642 [ 154.503330][ T5611] netlink: 'syz.1.263': attribute type 29 has an invalid length. [ 154.518618][ T5587] loop0: detected capacity change from 0 to 32768 [ 154.524228][ T5611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.263'. [ 154.536709][ T5611] netlink: 'syz.1.263': attribute type 29 has an invalid length. [ 154.565771][ T5611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.263'. [ 154.578784][ T5587] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 154.588245][ T5568] udc-core: couldn't find an available UDC or it's busy [ 154.604323][ T5568] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 154.615462][ T5587] BTRFS info (device loop0): metadata ratio 2 [ 154.632538][ T5587] BTRFS info (device loop0): setting nodatasum [ 154.652424][ T5587] BTRFS info (device loop0): force zlib compression, level 3 [ 154.667103][ T4868] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 154.686348][ T4868] asix: probe of 3-1:0.0 failed with error -71 [ 154.697414][ T5587] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 154.756620][ T4868] usb 3-1: USB disconnect, device number 15 [ 154.770938][ T5587] BTRFS info (device loop0): use zstd compression, level 3 [ 154.804375][ T5587] BTRFS info (device loop0): force clearing of disk cache [ 154.831234][ T5587] BTRFS info (device loop0): turning on flush-on-commit [ 154.877080][ T5587] BTRFS info (device loop0): enabling ssd optimizations [ 154.884087][ T5587] BTRFS info (device loop0): using spread ssd allocation scheme [ 154.901222][ T5587] BTRFS info (device loop0): using free space tree [ 154.927145][ T5587] BTRFS info (device loop0): has skinny extents [ 155.309832][ T5587] BTRFS info (device loop0): clearing free space tree [ 155.329314][ T5587] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 155.376784][ T5649] tipc: Started in network mode [ 155.399481][ T5649] tipc: Node identity d6ea7b21b827, cluster identity 4711 [ 155.407910][ T5587] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 155.418590][ T5649] tipc: Enabled bearer , priority 0 [ 155.439813][ T5651] device syzkaller0 entered promiscuous mode [ 155.489277][ T5650] tipc: Started in network mode [ 155.494284][ T5650] tipc: Node identity f609d6387b35, cluster identity 4711 [ 155.521797][ T5650] tipc: Enabled bearer , priority 0 [ 155.564430][ T5654] device syzkaller0 entered promiscuous mode [ 155.568369][ T5587] BTRFS info (device loop0): creating free space tree [ 155.586743][ T5587] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 155.600267][ T5587] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 155.621244][ T5651] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 155.658101][ T5650] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 155.678733][ T5660] netlink: 'syz.3.272': attribute type 10 has an invalid length. [ 155.692275][ T26] audit: type=1800 audit(1764922766.493:18): pid=5587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.252" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 155.697735][ T5587] netlink: 44 bytes leftover after parsing attributes in process `syz.0.252'. [ 155.794127][ T5660] team0: Port device dummy0 added [ 155.811455][ T5661] tipc: Resetting bearer [ 155.834886][ T5650] tipc: Resetting bearer [ 155.857330][ T5664] netlink: 'syz.3.272': attribute type 10 has an invalid length. [ 155.929597][ T5664] team0: Port device dummy0 removed [ 155.942383][ T5664] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 156.178464][ T5647] tipc: Resetting bearer [ 156.228042][ T5647] tipc: Disabling bearer [ 156.246204][ T5648] tipc: Resetting bearer [ 156.266767][ T5648] tipc: Disabling bearer [ 156.382777][ T5681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.276'. [ 156.604422][ T5692] netlink: 8 bytes leftover after parsing attributes in process `syz.1.281'. [ 156.694981][ T5694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.282'. [ 156.731463][ T5694] netlink: 'syz.3.282': attribute type 11 has an invalid length. [ 156.798900][ T5694] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.808471][ T5694] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.817547][ T5694] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.826278][ T5694] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 156.899393][ T5694] netlink: 4 bytes leftover after parsing attributes in process `syz.3.282'. [ 156.967962][ T5694] netlink: 'syz.3.282': attribute type 11 has an invalid length. [ 157.018119][ T5716] netlink: 'syz.4.288': attribute type 1 has an invalid length. [ 157.076070][ T5716] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.181686][ T5720] bond1: (slave geneve2): making interface the new active one [ 157.230978][ T5720] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 157.244557][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 157.269094][ T5733] af_packet: tpacket_rcv: packet too big, clamped from 64 to 4294967272. macoff=96 [ 157.433179][ T154] rds_connect_path_complete: Cannot transition to state UP, current state is 5 [ 157.639930][ T5745] netlink: 104 bytes leftover after parsing attributes in process `syz.3.295'. [ 157.765532][ T5765] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.833784][ T5767] netlink: 20 bytes leftover after parsing attributes in process `syz.4.297'. [ 157.885283][ T5767] netlink: 20 bytes leftover after parsing attributes in process `syz.4.297'. [ 158.141932][ T5781] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 158.333649][ T5783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.303'. [ 158.898005][ T5801] netlink: 44 bytes leftover after parsing attributes in process `syz.3.308'. [ 159.011397][ T5803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.307'. [ 159.683569][ T5831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.904929][ T5848] netlink: 16 bytes leftover after parsing attributes in process `syz.2.330'. [ 160.614726][ T5880] ip6t_REJECT: ECHOREPLY is not supported [ 161.026563][ T5905] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 161.034438][ T5905] IPv6: NLM_F_CREATE should be set when creating new route [ 161.063160][ T5913] netlink: 40 bytes leftover after parsing attributes in process `syz.2.354'. [ 161.210507][ T5918] device syzkaller0 entered promiscuous mode [ 161.273108][ T5921] tipc: Enabled bearer , priority 0 [ 161.422350][ T5921] device syzkaller0 entered promiscuous mode [ 161.507560][ T5919] tipc: Resetting bearer [ 161.589785][ T5943] raw_sendmsg: syz.4.362 forgot to set AF_INET. Fix it! [ 161.601642][ T5919] tipc: Disabling bearer [ 161.902236][ T5952] device syzkaller0 entered promiscuous mode [ 162.158570][ T5975] netlink: 224 bytes leftover after parsing attributes in process `syz.3.375'. [ 162.474409][ T5999] netlink: 16 bytes leftover after parsing attributes in process `syz.3.383'. [ 162.495368][ T6000] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 162.556312][ T6000] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 162.561689][ T6004] x_tables: unsorted underflow at hook 3 [ 163.736152][ T6064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.413'. [ 163.868894][ T6070] device syzkaller0 entered promiscuous mode [ 164.088560][ T6079] tipc: Enabled bearer , priority 0 [ 164.126795][ T6079] device syzkaller0 entered promiscuous mode [ 164.165183][ T6087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.422'. [ 164.186135][ T6087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.422'. [ 164.247629][ T6088] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 164.308078][ T6079] tipc: Resetting bearer [ 164.363541][ T6078] tipc: Resetting bearer [ 164.433561][ T6078] tipc: Disabling bearer [ 165.291792][ T6142] device syzkaller0 entered promiscuous mode [ 165.312473][ T6142] tipc: Started in network mode [ 165.332893][ T6142] tipc: Node identity 9edb87f4b6c7, cluster identity 4711 [ 165.364988][ T6142] tipc: Enabled bearer , priority 0 [ 165.418466][ T6150] netlink: 28 bytes leftover after parsing attributes in process `syz.3.446'. [ 165.427888][ T6140] tipc: Resetting bearer [ 165.507674][ T6140] tipc: Disabling bearer [ 165.550015][ T6154] netlink: 24 bytes leftover after parsing attributes in process `syz.4.449'. [ 165.674236][ T6160] device syzkaller0 entered promiscuous mode [ 165.729146][ T6167] netlink: 104 bytes leftover after parsing attributes in process `syz.4.455'. [ 165.746438][ T6160] [ 165.749371][ T6160] ============================= [ 165.754242][ T6160] WARNING: suspicious RCU usage [ 165.759168][ T6160] syzkaller #0 Not tainted [ 165.763624][ T6160] ----------------------------- [ 165.768549][ T6160] net/sched/sch_api.c:304 suspicious rcu_dereference_protected() usage! [ 165.776935][ T6160] [ 165.776935][ T6160] other info that might help us debug this: [ 165.776935][ T6160] [ 165.787259][ T6160] [ 165.787259][ T6160] rcu_scheduler_active = 2, debug_locks = 1 [ 165.795376][ T6160] 5 locks held by syz.0.451/6160: [ 165.800507][ T6160] #0: ffffffff8c11c7c0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 165.810177][ T6160] #1: ffffffff8c11c7c0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 165.819861][ T6160] #2: ffff88807395b108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xb8a/0x2ed0 [ 165.829540][ T6160] #3: ffff88807395b148 (dev->qdisc_running_key ?: &qdisc_running_key){+...}-{0:0}, at: ip_finish_output2+0xca1/0x1080 [ 165.842087][ T6160] #4: ffffffff8c11c760 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 165.851506][ T6160] [ 165.851506][ T6160] stack backtrace: [ 165.857454][ T6160] CPU: 1 PID: 6160 Comm: syz.0.451 Not tainted syzkaller #0 [ 165.864942][ T6160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 165.875168][ T6160] Call Trace: [ 165.878477][ T6160] [ 165.881447][ T6160] dump_stack_lvl+0x168/0x230 [ 165.886187][ T6160] ? show_regs_print_info+0x20/0x20 [ 165.891450][ T6160] ? lockdep_rcu_suspicious+0x110/0x180 [ 165.897048][ T6160] qdisc_lookup+0xa6/0x650 [ 165.901520][ T6160] qdisc_tree_reduce_backlog+0x190/0x430 [ 165.907199][ T6160] sfq_enqueue+0x148e/0x2260 [ 165.911820][ T6160] ? ktime_get+0x7b/0x270 [ 165.916201][ T6160] ? decrement_one_qlen+0x550/0x550 [ 165.921439][ T6160] ? ktime_get+0x247/0x270 [ 165.925985][ T6160] netem_dequeue+0xd39/0x1400 [ 165.930778][ T6160] ? netem_enqueue+0x3720/0x3720 [ 165.935770][ T6160] __qdisc_run+0x237/0x1480 [ 165.940341][ T6160] __dev_queue_xmit+0xeb9/0x2ed0 [ 165.945352][ T6160] ? dev_queue_xmit+0x20/0x20 [ 165.950063][ T6160] ? eth_header+0x117/0x200 [ 165.950234][ T6174] loop3: detected capacity change from 0 to 512 [ 165.954587][ T6160] ? llc_sysctl_exit+0x60/0x60 [ 165.965680][ T6160] ? neigh_resolve_output+0x5d7/0x6a0 [ 165.971119][ T6160] ip_finish_output2+0xca1/0x1080 [ 165.976248][ T6160] ? ip_mc_finish_output+0x250/0x250 [ 165.981596][ T6160] ? nf_hook+0x350/0x350 [ 165.985896][ T6160] ? ip_fragment+0x210/0x210 [ 165.990528][ T6160] ? ip_skb_dst_mtu+0x584/0x9b0 [ 165.995422][ T6160] ? ip_finish_output+0x3e8/0x4b0 [ 166.000489][ T6160] ip_send_skb+0x129/0x1c0 [ 166.004961][ T6160] udp_send_skb+0x94a/0x1330 [ 166.009867][ T6160] udp_sendmsg+0x1aaa/0x2340 [ 166.014524][ T6160] ? ip_skb_dst_mtu+0x9b0/0x9b0 [ 166.019602][ T6160] ? udp_cmsg_send+0x350/0x350 [ 166.024414][ T6160] ? __lock_acquire+0x12d9/0x7c60 [ 166.029475][ T6160] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 166.035922][ T6160] udpv6_sendmsg+0x92f/0x2320 [ 166.040620][ T6160] ? release_sock+0x2b/0x1b0 [ 166.045221][ T6160] ? reacquire_held_locks+0x2f9/0x590 [ 166.050616][ T6160] ? udp_v6_early_demux+0xe90/0xe90 [ 166.055848][ T6160] ? lockdep_hardirqs_on_prepare+0x760/0x760 [ 166.061957][ T6160] ? __local_bh_enable_ip+0x12a/0x1b0 [ 166.067346][ T6160] ? lockdep_hardirqs_on+0x94/0x140 [ 166.072553][ T6160] ? __local_bh_enable_ip+0x12a/0x1b0 [ 166.077933][ T6160] ? _local_bh_enable+0xa0/0xa0 [ 166.082804][ T6160] ? ip6_datagram_release_cb+0x37e/0x4f0 [ 166.088449][ T6160] ? do_raw_spin_unlock+0x11d/0x230 [ 166.093665][ T6160] ? inet_send_prepare+0x1af/0x260 [ 166.098786][ T6160] ? inet_send_prepare+0x1af/0x260 [ 166.103990][ T6160] ? inet6_compat_ioctl+0x380/0x380 [ 166.109213][ T6160] ? inet6_sendmsg+0x5b/0xd0 [ 166.113817][ T6160] ? inet6_compat_ioctl+0x380/0x380 [ 166.119038][ T6160] ____sys_sendmsg+0x5a2/0x8c0 [ 166.123824][ T6160] ? __sys_sendmsg_sock+0x30/0x30 [ 166.128865][ T6160] ? preempt_schedule+0xa7/0xb0 [ 166.133729][ T6160] ? import_iovec+0x6f/0xa0 [ 166.138247][ T6160] ___sys_sendmsg+0x1f0/0x260 [ 166.142945][ T6160] ? __sys_sendmsg+0x250/0x250 [ 166.147735][ T6160] ? futex_wake+0x49f/0x530 [ 166.152265][ T6160] ? __fdget+0x18b/0x210 [ 166.156520][ T6160] __sys_sendmmsg+0x27c/0x4a0 [ 166.161216][ T6160] ? __ia32_sys_sendmsg+0x80/0x80 [ 166.166258][ T6160] ? __context_tracking_exit+0x4c/0x80 [ 166.171736][ T6160] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 166.177733][ T6160] ? lock_chain_count+0x20/0x20 [ 166.182602][ T6160] ? vtime_user_exit+0x2dc/0x400 [ 166.187554][ T6160] __x64_sys_sendmmsg+0x9c/0xb0 [ 166.192421][ T6160] do_syscall_64+0x4c/0xa0 [ 166.196840][ T6160] ? clear_bhb_loop+0x30/0x80 [ 166.201523][ T6160] ? clear_bhb_loop+0x30/0x80 [ 166.206209][ T6160] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 166.212115][ T6160] RIP: 0033:0x7f42742f8749 [ 166.216548][ T6160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.238381][ T6160] RSP: 002b:00007f427255f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 166.246843][ T6160] RAX: ffffffffffffffda RBX: 00007f427454efa0 RCX: 00007f42742f8749 [ 166.254831][ T6160] RDX: 0000000000000001 RSI: 00002000000017c0 RDI: 0000000000000003 [ 166.262812][ T6160] RBP: 00007f427437cf91 R08: 0000000000000000 R09: 0000000000000000 [ 166.270791][ T6160] R10: 0000000008000004 R11: 0000000000000246 R12: 0000000000000000 [ 166.278801][ T6160] R13: 00007f427454f038 R14: 00007f427454efa0 R15: 00007fff76cec0b8 [ 166.286815][ T6160] [ 166.297280][ T6165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.454'. [ 166.315360][ T6165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.454'. [ 166.345176][ T6174] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 166.435001][ T6174] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (45506!=33349) [ 166.494995][ T6174] EXT4-fs error (device loop3): __ext4_get_inode_loc:4327: comm syz.3.458: Invalid inode table block 1 in block_group 0 [ 166.526703][ T6176] loop4: detected capacity change from 0 to 8192 [ 166.565180][ T6174] EXT4-fs (loop3): get root inode failed [ 166.576130][ T6174] EXT4-fs (loop3): mount failed [ 166.612358][ T6176] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 166.637359][ T6176] REISERFS (device loop4): using ordered data mode [ 166.643949][ T6176] reiserfs: using flush barriers [ 166.658816][ T6176] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 166.687733][ T6176] REISERFS (device loop4): checking transaction log (loop4) [ 166.967997][ T6171] loop2: detected capacity change from 0 to 40427 [ 167.113724][ T6181] netlink: 'syz.3.458': attribute type 1 has an invalid length. [ 167.121577][ T6181] netlink: 'syz.3.458': attribute type 2 has an invalid length. [ 167.129435][ T6181] netlink: 'syz.3.458': attribute type 2 has an invalid length. [ 167.137153][ T6181] netlink: 'syz.3.458': attribute type 2 has an invalid length. [ 167.247018][ T6171] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x1ffff [ 167.349810][ T6176] REISERFS (device loop4): Using tea hash to sort names [ 167.437459][ T4234] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 167.499061][ T6176] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 167.581287][ T6171] F2FS-fs (loop2): invalid crc value [ 167.699949][ T6171] F2FS-fs (loop2): Found nat_bits in checkpoint [ 167.772082][ T6171] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 167.829307][ T6171] F2FS-fs (loop2) : inject checkpoint error in f2fs_balance_fs of f2fs_write_single_data_page+0xbf9/0x1720 [ 167.841062][ T6171] attempt to access beyond end of device [ 167.841062][ T6171] loop2: rw=2049, want=77904, limit=40427 [ 167.867682][ T26] audit: type=1800 audit(1764922778.623:19): pid=6171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.457" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 168.133179][ T6188] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 168.147761][ T6188] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 168.882865][ T4234] usb 4-1: string descriptor 0 read error: -22 [ 168.889572][ T4234] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f [ 168.906671][ T4234] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.039069][ T4234] usb 4-1: config 0 descriptor?? [ 169.058755][ T4234] usb 4-1: can't set config #0, error -71 [ 169.071675][ T4234] usb 4-1: USB disconnect, device number 13