last executing test programs: 5.072029085s ago: executing program 3 (id=492): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000340), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000007c0)={0x58, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x15}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x58}}, 0x80) 4.781445372s ago: executing program 3 (id=496): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000f00)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x58, 0x0, r0, 0x0, 0x0, 0x0, 0x40000000}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) 4.408077061s ago: executing program 2 (id=499): r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000440)=ANY=[@ANYBLOB="12010003000000103d100001400001020301090285000301d8100c080b0102010130020904000000010130000a2401100a000700000009040100000102300009040101010102300009f3000920010000030a2525ffffff7f0c8001090402000001023000090402010101023000172401060080000007000200000000000000064a0900100905820920"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000500)={0x14, &(0x7f00000002c0)={0x20, 0xa, 0x6, {0x6, 0xc, "460f2085"}}, 0x0}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000100)={0x14, &(0x7f00000001c0)=ANY=[], 0x0}, 0x0) 3.733106388s ago: executing program 0 (id=502): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000400)='./file0\x00', 0x402, &(0x7f0000001a40)=ANY=[@ANYBLOB='iocharset=macinuit,umask=00000000000000000000354,errors=continue,gid=', @ANYRESHEX=r1, @ANYBLOB=',iocharset=koi8-r,discard,allow_utime=00000000000000000000010,discard,allow_utime=00000000000000000000004,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYRES64=0x0], 0x1, 0x1535, &(0x7f0000003bc0)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 3.63118416s ago: executing program 3 (id=504): r0 = memfd_create(&(0x7f0000000080)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r1 = dup(r0) r2 = fanotify_init(0x1, 0x101000) fanotify_mark(r2, 0x1, 0x800103a, r1, 0x0) fallocate(r1, 0x0, 0x1ff, 0x7) 3.394684587s ago: executing program 3 (id=505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575", 0xe}, {&(0x7f0000000100)="31020002", 0x4}], 0x2) 3.26639966s ago: executing program 0 (id=507): socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x80800) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r0, @ANYRES64=r1], 0x0) 2.895418279s ago: executing program 3 (id=511): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RGETLOCK(r2, &(0x7f00000000c0)=ANY=[], 0xffffff6a) splice(r1, 0x0, r0, 0x0, 0x40010003, 0x0) 2.693921604s ago: executing program 1 (id=512): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000480)={0x20, r1, 0x1, 0x4000, 0x25df9bfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x90) 2.662038225s ago: executing program 3 (id=513): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 2.473432529s ago: executing program 1 (id=515): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000000)="a5ce", 0xfed0) r2 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r0, 0x0, r2, 0x0, 0xcea5, 0x6) 2.232065775s ago: executing program 1 (id=517): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x85b, 0x0, 0x3, 0x0, r2}, 0x10) 2.164631617s ago: executing program 2 (id=518): write$cgroup_int(0xffffffffffffffff, &(0x7f0000000080)=0xffff, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='c 75:'], 0x5d) 2.070994139s ago: executing program 1 (id=519): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19008, &(0x7f0000000080), 0x0, 0x4b5, &(0x7f00000004c0)="$eJzs3M9vFGUfAPDvbH/Q8qt9eXl5BUEraCT+aGlB5eABjSaaaGKiBzzWtiCyUENrAqTRYgweDYl349HEv8CbF6Me1MSrJh4NCdFeKJ7WzO4M3W532y60Xeh+Psl2n2dnZp/nO/M8s8/MdCaAtjWQ/kkitkfEbxHRV8kunmGg8jY/NzN2a25mLIlS6c2/kvJ8N+dmxvJZ8+W2ZZnDhYjCJ0mcSJaWO7X18tnRYnHiQpYfmj73/tDUpctPnzk3enri9MT5kePHjx0dfu7ZkWfWJM40rpv7Ppzcv/eVt6+9Pnby2js/fJ1Wa8+ByvTqOFZ0q05AdQyka+3vUlnttMeaqPv9YEdVOulsYUVoSkdEpJurq9z/+6IjFjZeX7z8cUsrB6yr9LdpS+PJsyVgE0ui1TUAWiP/oU+Pf/PXBg097gk3XojoztLzczNj87fj74xC9nnXOpY/EBEnZ//5In1Fs+chAADuQHls81S98V8h9pTfK9c6dmbXUPoj4j8RsSsi/hsRuyPifxHlef8fEQ9UFi71rbL8gZr80vFP4XrdOq+RdPz3fNXYb74q/uytvyPL7SjH35WcOlOcOJKtk8PRtSXNDy9Txrcv/fpZo2nV47/0lZafjwWzClzvrDlBNz46PbpWK+HGlYh9nfXiT25fCUhbwN6I2NfcV+/ME2ee+Gp/o5lWjn8Za3CdqfRlxOOV7T8bNfHnkuWvTw71RHHiyFDeKpb68ZerbzQq/67iXwM3Dj5YSSxs/5o5qhpasThxYapm8s8rl3H1908bHtPUif9mqVRasf13J2+V++RP71Y+uzg6PX1hOKI7ea2cz4/pyp+PLCx7cXS6N83n86ft//Ch+v1/V7ZMuv3TtZQ24gMR8VBEPJzV/ZGIOBgRh5aJ//sXH31vmfiTSKJ12/9KxHjd/d/t9t+fpqYuZdfr7yDRcfa7bxpdMV/d/u9YzJb3tRXl/d8KVlvBu1x9AAAAcF8oRMT2SAqDlfTA9igUBgcr/8O/O7YWipNT00+emvzg/HjlHoH+6CrkZ7r6qs6HDiez2TdW8iPZueJ8+tHsvPHnHb3l/ODYZHG8xbFDu9u2uP9H3v9Tf3a0unbAunO/FrSv2v5faFE9gI23mt9/xwKwOS3u/z3pn95W1QXYWI7/oX3V6/8f1eSN/2FzWtr//6jzyDpgMzL+h/al/0P70v+hLTVzO3+caDSpJyKaeSxAfrPAnT9VoGfVd/i3SyJ/4sV6ltUbl892Z59EoUWRdjTZ2BYnXo2Ie2J7NZdIe8zGFrrwDBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID72b8BAAD//00+3vc=") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) setxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', 0x0, 0x0, 0x0) llistxattr(&(0x7f0000002300)='./file0\x00', 0x0, 0xfffffdf3) 1.796122556s ago: executing program 2 (id=520): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)={0x64, r1, 0x407, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x4, 0x7, 0x9]}, @NL80211_ATTR_FRAME={0x3c, 0x33, @probe_request={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x7}, @device_b, @device_a, @random="8ce168ac4934", {0x4, 0xf}, @value=@ver_80211n={0x0, 0x2, 0x1, 0x2, 0x0, 0x3, 0x1}}, @void, @void, @void, @val={0x2d, 0x1a, {0x20, 0x3, 0x7, 0x0, {0x7, 0x4, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x800, 0x1, 0x5e}}, @void}}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x100) 1.718586548s ago: executing program 0 (id=522): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/2, 0x2}], 0x1, 0xffffffff, 0x10000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 1.668071149s ago: executing program 1 (id=523): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$tun(r1, &(0x7f0000000300)={@void, @val={0x0, 0x0, 0x6, 0x3, 0xfff9, 0x1}, @ipv4=@tcp={{0x5, 0x4, 0x1, 0x9, 0x2b, 0x68, 0x0, 0x6, 0x6, 0x0, @broadcast, @empty}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x2, 0x8000, 0x0, 0x278}, {"02d08a"}}}}, 0x35) 1.509846143s ago: executing program 2 (id=524): sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="0066ba2987e387d9109966025b0ef23d229bd867c8baa959a7d6e584adbe331c482973697f6e54f846cf0d7155cf51c09e2dd8508cc12e844262047404e00ca0d45f88bd4de3d2418ce2c0ea173f85b811de96047712125537b6c3e0", 0x5c, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a310000000014000480080002403cb140bb0800014000000003080005400000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a5c000000030a010800000000000000000a0000070900010073797a31000000000c0002400000000000000002040004801800048014000300"], 0x84}, 0x1, 0x0, 0x0, 0x40080a5}, 0x20008040) 1.280025729s ago: executing program 4 (id=526): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}]}, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18010000fc"], 0x0, 0x2, 0x0, 0x0, 0x1e00, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) 1.279770219s ago: executing program 0 (id=527): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x48, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\r\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1.262613789s ago: executing program 1 (id=528): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f00000007c0)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@thread_pool={'thread_pool', 0x3d, 0xd}}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = open(&(0x7f0000000240)='./file1\x00', 0x84242, 0x1df2a23c5997fa5f) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000200), 0x2, 0x1}}, 0x20) write$char_usb(r0, &(0x7f0000001e00)="34e1abca4f65e974236282bd09919308ad56ef30a95b727006cbd936a5f1a715d2bf57fcafb891614849dc1401355bdf65d61c5132904fa729e0b6648774556551fa9b0f7edcae32d5ef72fdb84e90541efe344f8e77ade24f6e12780ecaf8e09e0bcf1e67976b9f758c53d8c69d", 0x6e) 1.2193428s ago: executing program 2 (id=529): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, 0x0) mlockall(0x2) r0 = shmget$private(0x0, 0x400000, 0x184, &(0x7f0000c00000/0x400000)=nil) shmat(r0, &(0x7f0000000000/0x3000)=nil, 0x4000) 1.064118624s ago: executing program 4 (id=530): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TDLS_OPER(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x24, r1, 0xfd39e943ccf1163b, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x50) 1.016356245s ago: executing program 0 (id=531): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 934.209387ms ago: executing program 4 (id=532): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000e00)={@in6={{0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0x4a, 0x0, "e541bd3d3aa6a2bf75e9671e8abcb31c134f3a9db8f52e7300fe6e079f35ac63186c7244fc3b3801e79f15ced9fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db00"}, 0xd8) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x8000}, 0x1c) listen(r0, 0x7c2) syz_emit_ethernet(0x4e, &(0x7f0000002280)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x28, 0x40, 0x4000, 0x0, 0x1d, 0x6, 0x0, @empty, @empty}, {{0x4e21, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0xf5b439e5fa041319, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @generic={0x2, 0x11, "75eb5752e7b32b4e6decebb7f6483a"}]}}}}}}}, 0x0) 752.037032ms ago: executing program 0 (id=533): r0 = gettid() rt_sigtimedwait(&(0x7f00000000c0)={[0xe]}, 0x0, 0x0, 0x8) tkill(r0, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000) remap_file_pages(&(0x7f00003f1000/0x4000)=nil, 0x4000, 0x0, 0x2, 0x10000) 723.211702ms ago: executing program 4 (id=534): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 276.780233ms ago: executing program 4 (id=535): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000580)=r2) 146.75µs ago: executing program 2 (id=536): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000000)=0x7, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x7, 0x11, 0x0, @empty=0x18, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @empty=0xe0000001}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 0s ago: executing program 4 (id=537): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @remote, 0xb}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000240)=0x1, 0x4) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) kernel console output (not intermixed with test programs): on device team0 [ 83.298445][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.313218][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.323063][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.330507][ T4300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.340314][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.352226][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.361052][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.368230][ T4300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.379226][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.387854][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.397389][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.406342][ T4300] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.413562][ T4300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.427245][ T4272] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.454498][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.462795][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.473116][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.489826][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.499801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.509106][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.516334][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.530655][ T4272] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.554601][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.566776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.584719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.594977][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.603999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.612840][ T4272] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.633208][ T4277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.652376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.662693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.672023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.682208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.691589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.701064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.712599][ T4272] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.744224][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.760272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.776624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.787027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.799080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.821899][ T4274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.832611][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.849859][ T4278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.866368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.878409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.889949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.899378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.909151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.941689][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.954076][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.966783][ T4277] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.004473][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.029010][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.049610][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.056870][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.063785][ T4289] Bluetooth: hci2: command 0x041b tx timeout [ 84.070148][ T4289] Bluetooth: hci0: command 0x041b tx timeout [ 84.099611][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.134516][ T4289] Bluetooth: hci4: command 0x041b tx timeout [ 84.134873][ T4286] Bluetooth: hci1: command 0x041b tx timeout [ 84.140614][ T4289] Bluetooth: hci3: command 0x041b tx timeout [ 84.165263][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.184735][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.222696][ T4300] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.229935][ T4300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.280216][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.301665][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.333273][ T4273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.358176][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.376714][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.390796][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.402207][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.453382][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.471504][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.482443][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.498736][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.508913][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.527670][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.569553][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.601040][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.621610][ T4273] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.642282][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.672863][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.690534][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.713133][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.754276][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.761919][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 84.778700][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 84.789864][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.807601][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.819069][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.827772][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.844942][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.861027][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.871325][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.878564][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.894488][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.902377][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.942784][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.968445][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 84.979043][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.993154][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.010131][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.017666][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.034276][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 85.043359][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 85.058134][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.065368][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.083942][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.093101][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.103942][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 85.154966][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 85.171757][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.183249][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.199099][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.210517][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.226256][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 85.240691][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 85.251391][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 85.269641][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 85.286037][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 85.298509][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.310153][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.350153][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.362919][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.393826][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.402541][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 85.412026][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 85.425944][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 85.435982][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.447359][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.457345][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.466876][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 85.477423][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 85.487410][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 85.499846][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.579565][ T4274] device veth0_vlan entered promiscuous mode [ 85.619095][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 85.650435][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 85.684750][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.692375][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.732612][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.771238][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 85.794384][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 85.852581][ T4274] device veth1_vlan entered promiscuous mode [ 85.927994][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.937794][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.954990][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 85.975862][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.052885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.073248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.093227][ T4274] device veth0_macvtap entered promiscuous mode [ 86.115403][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.135244][ T4289] Bluetooth: hci0: command 0x040f tx timeout [ 86.135258][ T4290] Bluetooth: hci2: command 0x040f tx timeout [ 86.154347][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.174381][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.213996][ T4286] Bluetooth: hci4: command 0x040f tx timeout [ 86.214021][ T4290] Bluetooth: hci3: command 0x040f tx timeout [ 86.214054][ T4290] Bluetooth: hci1: command 0x040f tx timeout [ 86.233740][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.242145][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.285984][ T4274] device veth1_macvtap entered promiscuous mode [ 86.344306][ T4277] device veth0_vlan entered promiscuous mode [ 86.360521][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.400774][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.420162][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.443207][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.483848][ T4277] device veth1_vlan entered promiscuous mode [ 86.498376][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.515900][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.525218][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.535670][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.549209][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.560054][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.576513][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.593040][ T4274] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.603228][ T4274] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.614129][ T4274] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.622922][ T4274] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.636525][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.648208][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.738968][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.748434][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.759081][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.767933][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.779055][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.788734][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.798115][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.806732][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.831140][ T4278] device veth0_vlan entered promiscuous mode [ 86.843930][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.852734][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.884686][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.893167][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.919498][ T4277] device veth0_macvtap entered promiscuous mode [ 86.938040][ T4272] device veth0_vlan entered promiscuous mode [ 86.961554][ T4272] device veth1_vlan entered promiscuous mode [ 86.979475][ T4278] device veth1_vlan entered promiscuous mode [ 86.990266][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.999939][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.009271][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.019521][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.039771][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 87.058893][ T4277] device veth1_macvtap entered promiscuous mode [ 87.070816][ T4273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.208212][ T4272] device veth0_macvtap entered promiscuous mode [ 87.224416][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.252955][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.276008][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.293173][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.302229][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.317677][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 87.329254][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.344663][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.363406][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 87.372694][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 87.411652][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.426301][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.446396][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.469666][ T4272] device veth1_macvtap entered promiscuous mode [ 87.483981][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.493212][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 87.512235][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.529699][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.544264][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 87.553356][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 87.568213][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 87.588861][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 87.609342][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.640709][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.662538][ T4277] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.672646][ T4277] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.687893][ T4277] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.700926][ T4277] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.722971][ T4278] device veth0_macvtap entered promiscuous mode [ 87.744028][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 87.752502][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.780875][ T4273] device veth0_vlan entered promiscuous mode [ 87.803022][ T4278] device veth1_macvtap entered promiscuous mode [ 87.842387][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 87.851901][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 87.866896][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 87.876651][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 87.885671][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.897224][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.907771][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.919301][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.931363][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.942085][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.954911][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.965248][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.979745][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.995443][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.019521][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.030310][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.044507][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.057181][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.069192][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.080484][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.092393][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.102436][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.116795][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.126260][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.138817][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.159092][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.168501][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.189107][ T4273] device veth1_vlan entered promiscuous mode [ 88.207205][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.211149][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.215573][ T4290] Bluetooth: hci2: command 0x0419 tx timeout [ 88.229257][ T4289] Bluetooth: hci0: command 0x0419 tx timeout [ 88.244703][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.254674][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.265455][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.273831][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.276520][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.293543][ T4289] Bluetooth: hci1: command 0x0419 tx timeout [ 88.300258][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.311201][ T4289] Bluetooth: hci4: command 0x0419 tx timeout [ 88.311227][ T4286] Bluetooth: hci3: command 0x0419 tx timeout [ 88.324561][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.346427][ T4272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.362835][ T4272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.372196][ T4272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.381508][ T4272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.394461][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.407103][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 88.415409][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.429030][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.457646][ T4278] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.466697][ T4278] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.476176][ T4278] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.485617][ T4278] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.580271][ T4273] device veth0_macvtap entered promiscuous mode [ 88.609262][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.621554][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.637667][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.648247][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.662086][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.682445][ T4273] device veth1_macvtap entered promiscuous mode [ 88.690192][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.743799][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.752073][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 88.840437][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.857894][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.869725][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.880784][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.894972][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.905817][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.916612][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.928300][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.955574][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.973281][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.994639][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.042149][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.056455][ T4329] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.075713][ T4329] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.096462][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.107333][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.118841][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.128967][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.144519][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.154784][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.177143][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.195190][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.222255][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.232156][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.242972][ T4329] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.256292][ T4273] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.271172][ T4273] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.281448][ T4273] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.290887][ T4273] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.304602][ T4329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.312501][ T4329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.352557][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.391379][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.400165][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.414153][ T4352] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.445230][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.520894][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.532876][ T4300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.554201][ T4300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.558860][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.586430][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.597461][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.637343][ T4352] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 89.646480][ T4352] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 89.657846][ T4352] usb 2-1: config 0 interface 0 has no altsetting 0 [ 89.669687][ T4352] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 89.687782][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.696003][ T4352] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 89.704639][ T4352] usb 2-1: Product: syz [ 89.713257][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.731678][ T4352] usb 2-1: Manufacturer: syz [ 89.738400][ T4352] usb 2-1: SerialNumber: syz [ 89.749226][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.789461][ T4352] usb 2-1: config 0 descriptor?? [ 89.814705][ T4284] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.822971][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.846110][ T4352] hub 2-1:0.0: bad descriptor, ignoring hub [ 89.852279][ T4352] hub: probe of 2-1:0.0 failed with error -5 [ 89.853046][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.878103][ T4352] usb 2-1: selecting invalid altsetting 0 [ 89.881278][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.016047][ T4284] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.063616][ T4284] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.105187][ T4284] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 90.134608][ T4284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 90.162233][ T4284] usb 4-1: SerialNumber: syz [ 90.412872][ T4284] usb 4-1: 0:2 : does not exist [ 90.481950][ T4284] usb 4-1: USB disconnect, device number 2 [ 90.514311][ T4335] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.633985][ T4320] usb 2-1: USB disconnect, device number 2 [ 90.646146][ T4371] loop4: detected capacity change from 0 to 32768 [ 90.733299][ T4371] JBD2: Ignoring recovery information on journal [ 90.743903][ T4335] usb 1-1: Using ep0 maxpacket: 32 [ 90.751567][ T4335] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 90.760232][ T4335] usb 1-1: config 0 has no interface number 0 [ 90.767001][ T4335] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.772411][ T4373] udevd[4373]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 90.785355][ T4335] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.805472][ T4335] usb 1-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 90.814859][ T4335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.830510][ T4335] usb 1-1: config 0 descriptor?? [ 90.937270][ T4371] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 91.213071][ T4278] ocfs2: Unmounting device (7,4) on (node local) [ 91.341117][ T4384] loop3: detected capacity change from 0 to 2048 [ 91.360902][ T4384] ======================================================= [ 91.360902][ T4384] WARNING: The mand mount option has been deprecated and [ 91.360902][ T4384] and is ignored by this kernel. Remove the mand [ 91.360902][ T4384] option from the mount to silence this warning. [ 91.360902][ T4384] ======================================================= [ 91.479302][ T4335] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/0003:28BD:0094.0001/input/input5 [ 91.612313][ T4384] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.711695][ T4384] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 91.742779][ T4335] uclogic 0003:28BD:0094.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.0-1/input1 [ 91.825397][ T4335] usb 1-1: USB disconnect, device number 2 [ 91.922938][ T4395] loop1: detected capacity change from 0 to 1024 [ 91.985343][ T14] cfg80211: failed to load regulatory.db [ 92.074046][ T4284] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 92.266065][ T4398] fido_id[4398]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 92.295217][ T4284] usb 4-1: Using ep0 maxpacket: 8 [ 92.304266][ T4284] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.363318][ T4284] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 92.420058][ T4284] usb 4-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 92.449644][ T4284] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.490647][ T4284] usb 4-1: config 0 descriptor?? [ 92.565832][ T4403] loop4: detected capacity change from 0 to 1024 [ 92.644507][ T4403] EXT4-fs: Ignoring removed bh option [ 92.669506][ T4407] loop0: detected capacity change from 0 to 512 [ 92.743241][ T4407] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 92.785227][ T4403] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 92.791752][ T4407] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 92.851383][ T4411] device dummy0 entered promiscuous mode [ 92.871417][ T4407] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002] [ 92.881405][ T4411] device netdevsim0 entered promiscuous mode [ 92.911389][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 92.926704][ T4407] System zones: 1-12 [ 92.942021][ T4284] hid (null): unknown global tag 0xa3 [ 92.947875][ T4284] hid (null): unknown global tag 0xc [ 92.953227][ T4284] hid (null): unknown global tag 0xd [ 92.961949][ T4407] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 92.986657][ T4284] uclogic 0003:5543:0005.0002: unexpected long global item [ 93.013792][ T4393] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 93.034641][ T4407] EXT4-fs (loop0): 1 truncate cleaned up [ 93.051231][ T4284] uclogic 0003:5543:0005.0002: parse failed [ 93.071275][ T4407] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 93.088276][ T4393] EXT4-fs (loop3): Remounting filesystem read-only [ 93.104476][ T4284] uclogic: probe of 0003:5543:0005.0002 failed with error -22 [ 93.151502][ T4284] usb 4-1: USB disconnect, device number 3 [ 93.198194][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 93.326791][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 93.392027][ T4418] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.448237][ T4419] loop4: detected capacity change from 0 to 256 [ 93.564148][ T4373] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 93.773556][ T4320] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 93.835919][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 93.925684][ T4431] loop2: detected capacity change from 0 to 512 [ 93.953772][ T4320] usb 1-1: Using ep0 maxpacket: 32 [ 93.961115][ T4320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.975192][ T4431] EXT4-fs: Ignoring removed bh option [ 94.013146][ T4320] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.061964][ T4431] EXT4-fs error (device loop2): ext4_iget_extra_inode:4763: inode #15: comm syz.2.26: corrupted in-inode xattr [ 94.100559][ T4320] usb 1-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 94.178213][ T4440] loop4: detected capacity change from 0 to 1024 [ 94.184176][ T4320] usb 1-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 94.223654][ T4431] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.26: couldn't read orphan inode 15 (err -117) [ 94.244805][ T4320] usb 1-1: Product: syz [ 94.245866][ T4440] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 94.257995][ T4320] usb 1-1: Manufacturer: syz [ 94.270468][ T4431] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 94.282764][ T4320] usb 1-1: config 0 descriptor?? [ 94.321259][ T4444] pimreg: tun_chr_ioctl cmd 1077974060 [ 94.359157][ T4444] pimreg: tun_chr_ioctl cmd 1074812117 [ 94.433913][ T27] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 94.487934][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 94.562390][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 94.623962][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 94.638614][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.690821][ T27] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 94.739737][ T4320] hid-generic 0003:25DD:F3D2.0003: hiddev0,hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.0-1/input0 [ 94.752199][ T27] usb 4-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 94.772252][ T27] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.784288][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.792377][ T27] usb 4-1: Product: syz [ 94.798504][ T27] usb 4-1: Manufacturer: syz [ 94.803236][ T27] usb 4-1: SerialNumber: syz [ 94.844775][ T4450] input: syz0 as /devices/virtual/input/input6 [ 94.860663][ T27] cdc_ncm 4-1:1.0: skipping garbage [ 95.055421][ T4320] usb 1-1: USB disconnect, device number 3 [ 95.081040][ T4452] fido_id[4452]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 95.270186][ T4286] Bluetooth: hci2: unexpected cc 0x206e length: 9 > 3 [ 95.433142][ T4462] loop1: detected capacity change from 0 to 512 [ 95.492462][ T4462] EXT4-fs (loop1): 1 truncate cleaned up [ 95.510604][ T4462] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 95.609507][ T26] audit: type=1800 audit(1785160675.436:2): pid=4462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.37" name="file1" dev="loop1" ino=13 res=0 errno=0 [ 95.708993][ T4462] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.37: bg 0: block 465: padding at end of block bitmap is not set [ 95.769278][ T4462] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 95.784368][ T4455] loop2: detected capacity change from 0 to 40427 [ 95.792468][ T4462] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.37: invalid indirect mapped block 234881024 (level 0) [ 95.822928][ T4466] Zero length message leads to an empty skb [ 95.845202][ T4455] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 95.875286][ T4455] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 95.928410][ T27] cdc_ncm 4-1:1.0: bind() failure [ 95.942655][ T4455] F2FS-fs (loop2): invalid crc value [ 95.949766][ T27] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 95.957712][ T27] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 95.994453][ T27] usbtest: probe of 4-1:1.1 failed with error -71 [ 96.005539][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 96.024009][ T4455] F2FS-fs (loop2): Found nat_bits in checkpoint [ 96.053951][ T27] usb 4-1: USB disconnect, device number 4 [ 96.219294][ T4455] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 96.283034][ T4455] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 96.430872][ T4455] F2FS-fs (loop2): access invalid blkaddr:3 [ 96.443254][ T4455] CPU: 0 PID: 4455 Comm: syz.2.34 Not tainted syzkaller #0 [ 96.450554][ T4455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 96.460685][ T4455] Call Trace: [ 96.464021][ T4455] [ 96.467028][ T4455] dump_stack_lvl+0x188/0x24e [ 96.471788][ T4455] ? show_regs_print_info+0x12/0x12 [ 96.477059][ T4455] ? __lock_acquire+0x1465/0x7c40 [ 96.482167][ T4455] ? f2fs_get_next_page_offset+0x6a0/0x6a0 [ 96.488122][ T4455] f2fs_is_valid_blkaddr+0xc4a/0x1260 [ 96.493590][ T4455] f2fs_map_blocks+0xba8/0x36a0 [ 96.498810][ T4455] ? f2fs_get_block+0x140/0x140 [ 96.503740][ T4455] ? clear_nonspinnable+0x60/0x60 [ 96.508961][ T4455] f2fs_precache_extents+0x190/0x260 [ 96.514347][ T4455] ? f2fs_pin_file_control+0x1a0/0x1a0 [ 96.520001][ T4455] ? ____kasan_slab_free+0x126/0x1f0 [ 96.525453][ T4455] ? slab_free_freelist_hook+0x133/0x1b0 [ 96.531268][ T4455] ? __kmem_cache_free+0xb6/0x200 [ 96.536364][ T4455] ? tomoyo_path_number_perm+0x4fb/0x650 [ 96.542260][ T4455] ? __se_sys_ioctl+0x48/0x170 [ 96.547110][ T4455] ? do_syscall_64+0x4c/0xa0 [ 96.551825][ T4455] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.558029][ T4455] __f2fs_ioctl+0x1066/0xbef0 [ 96.562965][ T4455] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 96.569033][ T4455] ? do_vfs_ioctl+0x1be3/0x1d40 [ 96.573977][ T4455] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 96.579796][ T4455] ? tomoyo_path_number_perm+0x205/0x650 [ 96.585508][ T4455] ? __lock_acquire+0x7c40/0x7c40 [ 96.590627][ T4455] ? slab_free_freelist_hook+0x133/0x1b0 [ 96.596383][ T4455] ? f2fs_ioctl+0x1d0/0x1d0 [ 96.601008][ T4455] ? tomoyo_path_number_perm+0x4fb/0x650 [ 96.606785][ T4455] ? __kmem_cache_free+0xb6/0x200 [ 96.611878][ T4455] ? tomoyo_path_number_perm+0x205/0x650 [ 96.617583][ T4455] ? tomoyo_path_number_perm+0x5a4/0x650 [ 96.623308][ T4455] ? tomoyo_path_number_perm+0x205/0x650 [ 96.629035][ T4455] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 96.634601][ T4455] ? __fget_files+0x28/0x460 [ 96.639283][ T4455] ? f2fs_ioctl+0x131/0x1d0 [ 96.644048][ T4455] ? f2fs_precache_extents+0x260/0x260 [ 96.649576][ T4455] __se_sys_ioctl+0xfa/0x170 [ 96.654241][ T4455] do_syscall_64+0x4c/0xa0 [ 96.658737][ T4455] ? clear_bhb_loop+0x60/0xb0 [ 96.663513][ T4455] ? clear_bhb_loop+0x60/0xb0 [ 96.668269][ T4455] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.674267][ T4455] RIP: 0033:0x7fe80179de99 [ 96.678761][ T4455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.698435][ T4455] RSP: 002b:00007fe802598028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.706922][ T4455] RAX: ffffffffffffffda RBX: 00007fe801a25fa0 RCX: 00007fe80179de99 [ 96.714955][ T4455] RDX: 0000000000000000 RSI: 000000000000f50f RDI: 0000000000000004 [ 96.722990][ T4455] RBP: 00007fe801833eaf R08: 0000000000000000 R09: 0000000000000000 [ 96.731062][ T4455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 96.739121][ T4455] R13: 00007fe801a26038 R14: 00007fe801a25fa0 R15: 00007fffc711cd48 [ 96.747175][ T4455] [ 96.914041][ T4483] loop1: detected capacity change from 0 to 16 [ 96.971995][ T4483] erofs: (device loop1): mounted with root inode @ nid 36. [ 97.231193][ T4487] Bluetooth: MGMT ver 1.22 [ 97.313328][ T4493] netlink: 4 bytes leftover after parsing attributes in process `syz.4.49'. [ 97.659732][ T4493] team0: Port device team_slave_0 removed [ 98.233445][ C1] sched: RT throttling activated [ 98.300235][ T4272] syz-executor: attempt to access beyond end of device [ 98.300235][ T4272] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 98.329157][ T4491] loop3: detected capacity change from 0 to 131072 [ 98.338741][ T4491] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 98.347262][ T4491] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 98.361980][ T4491] F2FS-fs (loop3): invalid crc value [ 98.378291][ T4491] F2FS-fs (loop3): Found nat_bits in checkpoint [ 98.441732][ T4491] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 98.449302][ T4491] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 98.655930][ T4509] loop0: detected capacity change from 0 to 4096 [ 98.701376][ T4509] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 98.876895][ T4509] ntfs: volume version 3.1. [ 99.795920][ T4503] loop4: detected capacity change from 0 to 32768 [ 99.977911][ T4503] XFS (loop4): Mounting V5 Filesystem [ 100.129815][ T4503] XFS (loop4): Ending clean mount [ 100.161958][ T4503] XFS (loop4): Quotacheck needed: Please wait. [ 100.308413][ T4503] XFS (loop4): Quotacheck: Done. [ 100.402376][ T4261] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 100.470258][ T4261] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 100.533793][ T14] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 100.733604][ T14] usb 2-1: Using ep0 maxpacket: 8 [ 100.739723][ T4278] XFS (loop4): Unmounting Filesystem [ 100.748137][ T14] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 100.777665][ T14] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.814741][ T14] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 100.856636][ T14] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.882554][ T14] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.920931][ T14] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 100.967834][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.988316][ T4261] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 101.162678][ T4548] ceph: No mds server is up or the cluster is laggy [ 101.268166][ T14] usb 2-1: usb_control_msg returned -32 [ 101.284466][ T14] usbtmc 2-1:16.0: can't read capabilities [ 101.699320][ T4571] usbtmc 2-1:16.0: usb_bulk_msg returned -71 [ 101.900459][ T4335] usb 2-1: USB disconnect, device number 3 [ 102.069408][ T4569] loop0: detected capacity change from 0 to 40427 [ 102.090494][ T4569] F2FS-fs (loop0): invalid crc value [ 102.120358][ T4569] F2FS-fs (loop0): Found nat_bits in checkpoint [ 102.260164][ T4569] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 102.297395][ T4569] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 102.485111][ T4569] syz.0.75: attempt to access beyond end of device [ 102.485111][ T4569] loop0: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 102.966561][ T4591] syz.3.83 uses obsolete (PF_INET,SOCK_PACKET) [ 103.134085][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 103.193632][ T14] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.211104][ T4595] loop3: detected capacity change from 0 to 16 [ 103.230531][ T4595] erofs: (device loop3): mounted with root inode @ nid 36. [ 103.280994][ T4595] erofs: (device loop3): z_erofs_readahead: readahead error at page 3 @ nid 89 [ 103.311851][ T4595] erofs: (device loop3): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 103.335105][ T4286] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -35 in[4096, 0] out[8192] [ 103.352780][ T4595] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -35 in[4096, 0] out[4096] [ 103.366268][ T27] usb 3-1: Using ep0 maxpacket: 32 [ 103.387040][ T27] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 103.403618][ T26] audit: type=1800 audit(1785160683.236:3): pid=4595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.84" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 103.423454][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 103.432894][ T27] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 103.438738][ T14] usb 5-1: config 0 interface 0 has no altsetting 0 [ 103.453131][ T14] usb 5-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00 [ 103.462729][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.483235][ T14] usb 5-1: config 0 descriptor?? [ 103.488373][ T27] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 103.534114][ T27] usb 3-1: Product: syz [ 103.538517][ T27] usb 3-1: Manufacturer: syz [ 103.558422][ T27] usb 3-1: SerialNumber: syz [ 103.589996][ T27] usb 3-1: config 0 descriptor?? [ 103.603668][ T4588] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 103.914284][ T4261] usb 3-1: USB disconnect, device number 2 [ 103.922040][ T14] hid (null): unknown global tag 0xc [ 103.937625][ T14] lg-g15 0003:046D:C225.0004: unknown main item tag 0x1 [ 103.951141][ T14] lg-g15 0003:046D:C225.0004: unknown main item tag 0x6 [ 103.960775][ T14] lg-g15 0003:046D:C225.0004: unknown global tag 0xc [ 103.968107][ T14] lg-g15 0003:046D:C225.0004: item 0 1 1 12 parsing failed [ 103.976880][ T14] lg-g15: probe of 0003:046D:C225.0004 failed with error -22 [ 103.979379][ T4595] syz.3.84 (4595) used greatest stack depth: 19696 bytes left [ 104.018517][ T27] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 104.049025][ T27] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 104.057066][ T4335] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 104.160423][ T14] usb 5-1: USB disconnect, device number 2 [ 104.257609][ T4335] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 104.275796][ T4335] usb 1-1: config 179 has no interface number 0 [ 104.292455][ T4335] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 104.323568][ T4335] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 104.341814][ T4335] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 104.353544][ T4335] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 104.365555][ T4335] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 104.379258][ T4335] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 104.388476][ T4335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.422407][ T4602] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 104.431901][ T4602] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 104.503775][ T27] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 104.610986][ T4610] loop2: detected capacity change from 0 to 128 [ 104.703634][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 104.711203][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 104.753205][ T27] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 104.804177][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.863279][ T27] usb 4-1: config 0 descriptor?? [ 104.905836][ T4355] usb 1-1: USB disconnect, device number 4 [ 104.905928][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 104.920132][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 104.953692][ T4614] loop9: detected capacity change from 0 to 7 [ 104.973145][ T4614] Dev loop9: unable to read RDB block 7 [ 104.981814][ T4614] loop9: unable to read partition table [ 104.994235][ T4614] loop9: partition table beyond EOD, truncated [ 105.000560][ T4614] loop_reread_partitions: partition scan of loop9 (þ被xü—ŸÑà– ) failed (rc=-5) [ 105.099627][ T27] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 105.297675][ T4619] netlink: 'syz.4.92': attribute type 4 has an invalid length. [ 105.323700][ C1] iowarrior 4-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 105.332887][ T4355] usb 4-1: USB disconnect, device number 5 [ 105.439579][ T4621] loop1: detected capacity change from 0 to 2048 [ 105.477796][ T4621] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 105.515809][ T4621] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.760908][ T4630] loop4: detected capacity change from 0 to 256 [ 105.860639][ T4630] exfat: Deprecated parameter 'utf8' [ 105.898406][ T4630] exfat: Deprecated parameter 'utf8' [ 105.925717][ T4630] exfat: Deprecated parameter 'namecase' [ 105.931533][ T4630] exfat: Deprecated parameter 'namecase' [ 106.046874][ T4630] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 106.225056][ T26] audit: type=1800 audit(1785160686.056:4): pid=4630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.96" name="file1" dev="loop4" ino=1048596 res=0 errno=0 [ 106.415933][ T4645] loop0: detected capacity change from 0 to 1024 [ 106.550242][ T4645] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 106.563755][ T4645] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.610731][ T4653] loop2: detected capacity change from 0 to 64 [ 106.652793][ T4645] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: comm syz.0.101: lblock 0 mapped to illegal pblock 0 (length 1) [ 106.685564][ T4645] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 106.772060][ T4645] EXT4-fs (loop0): This should not happen!! Data will be lost [ 106.772060][ T4645] [ 106.844759][ T26] audit: type=1800 audit(1785160686.676:5): pid=4653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.105" name="file1" dev="loop2" ino=21 res=0 errno=0 [ 106.991848][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 107.743661][ T4261] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 107.959319][ T4261] usb 5-1: Using ep0 maxpacket: 8 [ 107.969128][ T4261] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 108.008472][ T4261] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 108.048453][ T4261] usb 5-1: Product: syz [ 108.067887][ T4261] usb 5-1: Manufacturer: syz [ 108.085276][ T4261] usb 5-1: SerialNumber: syz [ 108.105868][ T4261] usb 5-1: config 0 descriptor?? [ 108.139511][ T4261] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 108.663320][ T4680] loop0: detected capacity change from 0 to 32768 [ 108.729354][ T4680] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.117 (4680) [ 108.741959][ T4261] input: gspca_zc3xx as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 108.777192][ T4677] loop2: detected capacity change from 0 to 32768 [ 108.923810][ T4680] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 108.965627][ T4680] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 108.978379][ T27] usb 5-1: USB disconnect, device number 3 [ 109.011779][ T26] audit: type=1800 audit(1785160688.836:6): pid=4677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.114" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 109.029456][ T4680] BTRFS info (device loop0): using free space tree [ 109.441062][ T4680] BTRFS info (device loop0): enabling ssd optimizations [ 109.928836][ T4727] loop4: detected capacity change from 0 to 2048 [ 110.012827][ T4727] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.435229][ T4273] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 110.967669][ T4746] loop3: detected capacity change from 0 to 512 [ 111.014683][ T4746] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.110746][ T4721] loop1: detected capacity change from 0 to 32768 [ 111.158463][ T4746] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 111.340797][ T4721] XFS (loop1): Mounting V5 Filesystem [ 111.405411][ T4746] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 111.522727][ T4746] ext4 filesystem being mounted at /22/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.558468][ T4721] XFS (loop1): Ending clean mount [ 111.653820][ T4721] XFS (loop1): User initiated shutdown received. [ 111.701560][ T4721] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 111.727160][ T4746] EXT4-fs (loop3): shut down requested (0) [ 111.751068][ T4721] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 111.913300][ T4772] loop4: detected capacity change from 0 to 1024 [ 112.006579][ T4274] XFS (loop1): Unmounting Filesystem [ 112.199641][ T4778] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 112.216659][ T4778] hfsplus: xattr search failed [ 112.262119][ T4778] syz.4.134: attempt to access beyond end of device [ 112.262119][ T4778] loop4: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 112.262298][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 112.341766][ T4778] Buffer I/O error on dev loop4, logical block 458752, async page read [ 112.407573][ T4778] hfsplus: unable to mark blocks free: error -5 [ 112.476651][ T4778] hfsplus: can't free extent [ 112.532148][ T4780] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 113.152791][ T4790] loop3: detected capacity change from 0 to 2048 [ 113.182647][ T4796] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.144'. [ 113.220647][ T4796] netlink: zone id is out of range [ 113.245118][ T4796] netlink: zone id is out of range [ 113.247172][ T4790] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.278066][ T4796] netlink: zone id is out of range [ 113.296911][ T4796] netlink: zone id is out of range [ 113.382444][ T4798] loop0: detected capacity change from 0 to 512 [ 113.391023][ T4796] netlink: zone id is out of range [ 113.429336][ T4796] netlink: zone id is out of range [ 113.441880][ T4798] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.145: missing EA_INODE flag [ 113.483757][ T4796] netlink: zone id is out of range [ 113.508215][ T4802] loop4: detected capacity change from 0 to 512 [ 113.520227][ T4796] netlink: zone id is out of range [ 113.531312][ T4798] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.145: error while reading EA inode 2 err=-117 [ 113.552855][ T4785] infiniband syz0: set down [ 113.553095][ T4796] netlink: zone id is out of range [ 113.583730][ T4802] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 113.594840][ T4798] EXT4-fs (loop0): 1 orphan inode deleted [ 113.607627][ T4796] netlink: zone id is out of range [ 113.616463][ T4798] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 113.628477][ T4802] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.662104][ T4798] EXT4-fs warning (device loop0): ext4_empty_dir:3147: inode #2: comm syz.0.145: directory missing '.' [ 113.693579][ T4785] infiniband syz0: added ipvlan0 [ 113.702157][ T4785] rdma_rxe: unable to create cq [ 113.789963][ T4802] EXT4-fs error (device loop4): ext4_xattr_block_get:543: inode #15: comm syz.4.146: corrupted xattr block 33 [ 113.812903][ T4785] infiniband syz0: Couldn't create ib_mad CQ [ 113.825915][ T4785] infiniband syz0: Couldn't open port 1 [ 113.926410][ T4785] RDS/IB: syz0: added [ 113.931380][ T4785] smc: adding ib device syz0 with port count 1 [ 113.953847][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 114.033721][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 114.040493][ T4785] smc: ib device syz0 port 1 has pnetid [ 114.307470][ T4749] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 114.494959][ T4749] usb 3-1: Using ep0 maxpacket: 8 [ 114.512457][ T4749] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 114.549121][ T4749] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 114.573479][ T4749] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 114.599898][ T4749] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.645083][ T4749] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 114.679006][ T4749] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.900468][ T4749] usb 3-1: GET_CAPABILITIES returned 0 [ 114.907353][ T4749] usbtmc 3-1:16.0: can't read capabilities [ 115.121974][ T27] usb 3-1: USB disconnect, device number 3 [ 115.493970][ T4284] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 115.696165][ T4284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.723544][ T4838] capability: warning: `syz.3.160' uses deprecated v2 capabilities in a way that may be insecure [ 115.728049][ T4284] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.767422][ T4838] loop3: detected capacity change from 0 to 256 [ 115.804017][ T4284] usb 5-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 115.813296][ T4284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.843935][ T4284] usb 5-1: config 0 descriptor?? [ 115.857914][ T4838] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 115.900271][ T4840] loop2: detected capacity change from 0 to 1024 [ 115.954199][ T4840] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended. mounting read-only. [ 116.070705][ T4828] process 'syz.4.157' launched './file0' with NULL argv: empty string added [ 116.386766][ T4284] usbhid 5-1:0.0: can't add hid device: -71 [ 116.392913][ T4284] usbhid: probe of 5-1:0.0 failed with error -71 [ 116.424037][ T4284] usb 5-1: USB disconnect, device number 4 [ 116.712753][ T4852] loop0: detected capacity change from 0 to 4096 [ 116.962155][ T26] audit: type=1800 audit(1785160696.786:7): pid=4859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.167" name="file1" dev="loop0" ino=33 res=0 errno=0 [ 117.108704][ T4861] loop2: detected capacity change from 0 to 512 [ 117.159127][ T4861] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 117.223636][ T4284] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 117.448614][ T4284] usb 4-1: unable to get BOS descriptor or descriptor too short [ 117.473636][ T4284] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 117.510937][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 117.556300][ T4284] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 117.599567][ T4284] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.631577][ T4284] usb 4-1: Product: syz [ 117.643686][ T4284] usb 4-1: Manufacturer: syz [ 117.649500][ T4284] usb 4-1: SerialNumber: syz [ 117.891602][ T4284] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 118.083674][ T4284] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 118.100161][ T4284] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 118.486808][ T4284] usb 4-1: invalid uac2 rates [ 118.491796][ T4284] usb 4-1: invalid uac2 rates [ 118.515912][ T4284] usb 4-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 118.545287][ T4284] usb 4-1: found format II with max.bitrate = 4, frame size=7372 [ 118.632714][ T4886] loop4: detected capacity change from 0 to 128 [ 118.686397][ T4284] usb 4-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 118.732527][ T4886] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 118.762777][ T4284] usb 4-1: USB disconnect, device number 6 [ 118.841078][ T4889] loop1: detected capacity change from 0 to 256 [ 118.849732][ T4889] exfat: Deprecated parameter 'utf8' [ 118.857643][ T4886] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 118.915653][ T4889] exfat: Deprecated parameter 'namecase' [ 119.003892][ T4400] udevd[4400]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.081732][ T4889] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0x8b2134a9, utbl_chksum : 0xe619d30d) [ 119.284955][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 119.683912][ T14] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 119.883665][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 119.893748][ T14] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 119.925654][ T14] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 119.955292][ T14] usb 1-1: Product: syz [ 119.969815][ T14] usb 1-1: Manufacturer: syz [ 119.977793][ T14] usb 1-1: SerialNumber: syz [ 120.019541][ T14] usb 1-1: config 0 descriptor?? [ 120.052015][ T14] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 120.641131][ T14] input: gspca_zc3xx as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 120.862210][ T14] usb 1-1: USB disconnect, device number 5 [ 121.188835][ T4938] loop2: detected capacity change from 0 to 256 [ 121.240977][ T4938] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 121.307088][ T4938] exFAT-fs (loop2): error, invalid access to FAT free cluster (entry 0x00000008) [ 121.471575][ T4924] loop3: detected capacity change from 0 to 32768 [ 121.549548][ T4924] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.193 (4924) [ 121.602594][ T4924] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 121.648732][ T4924] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 121.688084][ T4924] BTRFS info (device loop3): using free space tree [ 121.773565][ T4355] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 121.968486][ T4355] usb 3-1: unable to get BOS descriptor or descriptor too short [ 121.990893][ T4355] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 122.090711][ T4924] BTRFS info (device loop3): enabling ssd optimizations [ 122.100193][ T4355] usb 3-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 122.143657][ T4355] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.172196][ T4355] usb 3-1: Product: syz [ 122.181329][ T4355] usb 3-1: Manufacturer: syz [ 122.191458][ T4355] usb 3-1: SerialNumber: syz [ 122.748871][ T4277] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 123.436893][ T4355] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 123.446806][ T4355] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 123.489854][ T4973] loop0: detected capacity change from 0 to 131072 [ 123.499834][ T4355] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 123.511424][ T4973] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 123.520241][ T4973] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 123.543934][ T4973] F2FS-fs (loop0): invalid crc value [ 123.561313][ T4355] usb 3-1: invalid uac2 rates [ 123.583389][ T4355] usb 3-1: invalid uac2 rates [ 123.589002][ T4355] usb 3-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 123.597947][ T4355] usb 3-1: found format II with max.bitrate = 4, frame size=7372 [ 123.609340][ T4973] F2FS-fs (loop0): Found nat_bits in checkpoint [ 123.673746][ T4973] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 123.680979][ T4973] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 123.756974][ T4355] usb 3-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 123.845034][ T4355] usb 3-1: USB disconnect, device number 4 [ 124.166923][ T4400] udevd[4400]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.198931][ T4994] tcpci: probe of 0-0050 failed with error -5 [ 124.267644][ T4994] i2c i2c-0: new_device: Instantiated device tcpci at 0x50 [ 124.289460][ T4998] loop3: detected capacity change from 0 to 1024 [ 124.329601][ T4995] i2c i2c-0: new_device: Can't parse I2C address [ 124.335921][ T4998] EXT4-fs: inline encryption not supported [ 124.455483][ T4998] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 124.772401][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 125.239482][ T5020] block nbd4: shutting down sockets [ 125.918968][ T5040] loop2: detected capacity change from 0 to 512 [ 125.971305][ T5040] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 126.259036][ T5045] loop4: detected capacity change from 0 to 128 [ 126.369263][ T5045] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 126.421562][ T5045] hpfs: filesystem error: improperly stopped [ 126.431196][ T5045] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 126.467875][ T5045] hpfs: You really don't want any checks? You are crazy... [ 126.505978][ T5045] hpfs: hpfs_map_sector(): read error [ 126.511507][ T5045] hpfs: code page support is disabled [ 126.547189][ T5045] hpfs: hpfs_map_4sectors(): unaligned read [ 126.594318][ T5045] hpfs: hpfs_map_4sectors(): unaligned read [ 126.600553][ T5045] hpfs: filesystem error: unable to find root dir [ 126.849437][ T5037] loop3: detected capacity change from 0 to 40427 [ 126.895625][ T5037] F2FS-fs (loop3): invalid crc value [ 126.927006][ T5037] F2FS-fs (loop3): Found nat_bits in checkpoint [ 127.085790][ T5037] F2FS-fs (loop3): Start checkpoint disabled! [ 127.152723][ T5037] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 127.280601][ T5047] loop1: detected capacity change from 0 to 32768 [ 127.323659][ T5047] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop1 scanned by syz.1.228 (5047) [ 127.473827][ T5047] BTRFS info (device loop1): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 127.523952][ T5047] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 127.558836][ T5047] BTRFS info (device loop1): using free space tree [ 127.942680][ T5085] loop4: detected capacity change from 0 to 512 [ 128.013760][ T5047] BTRFS info (device loop1): enabling ssd optimizations [ 128.041528][ T5085] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 128.101311][ T26] audit: type=1800 audit(1785160707.926:8): pid=5047 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.228" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 128.147647][ T5085] EXT4-fs (loop4): 1 truncate cleaned up [ 128.153816][ T9] kworker/u4:0: attempt to access beyond end of device [ 128.153816][ T9] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 128.170354][ T5085] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 128.278031][ T5085] EXT4-fs error (device loop4): ext4_check_dx_root:2266: inode #2: comm syz.4.240: Corrupt dir, invalid name for '..', running e2fsck is recommended [ 128.545531][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 128.657443][ T4274] BTRFS info (device loop1): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 129.116831][ T5090] loop2: detected capacity change from 0 to 32768 [ 129.299835][ T5090] XFS (loop2): Mounting V5 Filesystem [ 129.416136][ T5090] XFS (loop2): Ending clean mount [ 129.734413][ T5109] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 129.931367][ T4272] XFS (loop2): Unmounting Filesystem [ 129.943821][ T5109] usb 1-1: Using ep0 maxpacket: 16 [ 129.952639][ T5109] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.993534][ T5109] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.025450][ T5123] loop1: detected capacity change from 0 to 1024 [ 130.042279][ T5109] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 130.081428][ T5108] loop3: detected capacity change from 0 to 131072 [ 130.094363][ T5108] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 130.103476][ T5108] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 130.112605][ T5123] EXT4-fs: inline encryption not supported [ 130.127086][ T5108] F2FS-fs (loop3): invalid crc value [ 130.166148][ T5108] F2FS-fs (loop3): Found nat_bits in checkpoint [ 130.173802][ T5109] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 130.219329][ T5109] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.234572][ T5108] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 130.241692][ T5108] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 130.264597][ T5123] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 130.300371][ T5109] usb 1-1: config 0 descriptor?? [ 130.506594][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 130.748763][ T5109] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0006/input/input9 [ 130.776438][ T5133] loop1: detected capacity change from 0 to 2048 [ 130.815009][ T5109] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 130.881729][ T5133] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 130.987434][ T26] audit: type=1800 audit(1785160710.816:9): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.250" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 131.059286][ T26] audit: type=1804 audit(1785160710.886:10): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.250" name="/newroot/48/file1/file1" dev="loop1" ino=15 res=1 errno=0 [ 131.089524][ T4284] usb 1-1: USB disconnect, device number 6 [ 131.141595][ T26] audit: type=1800 audit(1785160710.916:11): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.250" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 131.374603][ T5138] fido_id[5138]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 131.603326][ T5139] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 131.843596][ T5139] EXT4-fs (loop1): Remounting filesystem read-only [ 132.156057][ T5154] loop0: detected capacity change from 0 to 512 [ 132.220692][ T5156] loop2: detected capacity change from 0 to 8 [ 132.227596][ T5154] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #2: comm syz.0.256: missing EA_INODE flag [ 132.239661][ T5135] loop3: detected capacity change from 0 to 32768 [ 132.253941][ T5154] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.256: error while reading EA inode 2 err=-117 [ 132.278787][ T5135] XFS (loop3): Mounting V5 Filesystem [ 132.292398][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 132.310291][ T5154] EXT4-fs (loop0): 1 orphan inode deleted [ 132.316529][ T5154] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 132.445590][ T5135] XFS (loop3): Ending clean mount [ 132.499667][ T5135] XFS (loop3): Quotacheck needed: Please wait. [ 132.653336][ T5135] XFS (loop3): Quotacheck: Done. [ 132.726943][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 132.773686][ T4355] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 132.937121][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.944419][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.991082][ T4355] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 133.018371][ T4355] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 133.048769][ T4355] usb 2-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 133.080431][ T4355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.119057][ T4355] usb 2-1: config 0 descriptor?? [ 133.138685][ T4277] XFS (loop3): Unmounting Filesystem [ 133.560430][ T4355] hid-led 0003:1294:1320.0007: unknown main item tag 0xd [ 133.588565][ T4355] hid-led 0003:1294:1320.0007: unknown main item tag 0xe [ 133.622373][ T4355] hid-led 0003:1294:1320.0007: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.1-1/input0 [ 133.670789][ T4355] hid-led 0003:1294:1320.0007: Riso Kagaku Webmail Notifier initialized [ 133.843072][ T4355] usb 2-1: USB disconnect, device number 4 [ 133.850114][ T5188] loop3: detected capacity change from 0 to 128 [ 133.891615][ T5109] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38) [ 133.911270][ T5109] leds riso_kagaku0:green: Setting an LED's brightness failed (-38) [ 133.925166][ T5109] leds riso_kagaku0:red: Setting an LED's brightness failed (-38) [ 134.057853][ T5186] fido_id[5186]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 134.273626][ T5109] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 134.356449][ T5198] loop2: detected capacity change from 0 to 128 [ 134.431727][ T5198] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 134.475449][ T5109] usb 4-1: config 1 has an invalid descriptor of length 151, skipping remainder of the config [ 134.496136][ T5198] hpfs: filesystem error: improperly stopped [ 134.502314][ T5198] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 134.521939][ T5109] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 134.533751][ T5109] usb 4-1: config 1 has no interface number 0 [ 134.540052][ T5109] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 134.551625][ T5198] hpfs: You really don't want any checks? You are crazy... [ 134.560149][ T5198] hpfs: hpfs_map_sector(): read error [ 134.566245][ T5109] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 134.577921][ T5198] hpfs: code page support is disabled [ 134.584160][ T5198] hpfs: hpfs_map_4sectors(): unaligned read [ 134.590859][ T5109] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 134.601188][ T5198] hpfs: hpfs_map_4sectors(): unaligned read [ 134.608348][ T5109] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 134.622533][ T5198] hpfs: filesystem error: unable to find root dir [ 134.634760][ T5109] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.644270][ T5109] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.652507][ T5109] usb 4-1: Product: syz [ 134.665010][ T5109] usb 4-1: Manufacturer: syz [ 134.675377][ T5109] usb 4-1: SerialNumber: syz [ 134.689661][ T5188] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 134.790549][ T5205] loop0: detected capacity change from 0 to 1024 [ 134.831372][ T5205] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 134.852555][ T5205] System zones: 0-1, 3-36 [ 134.867588][ T5205] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.273: bad orphan inode 134217728 [ 134.937379][ T5205] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 134.974978][ T26] audit: type=1800 audit(1785160714.806:12): pid=5205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.273" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 135.010280][ T26] audit: type=1804 audit(1785160714.836:13): pid=5205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.273" name="/newroot/60/bus/bus" dev="loop0" ino=18 res=1 errno=0 [ 135.111277][ T5209] loop1: detected capacity change from 0 to 4096 [ 135.298808][ T26] audit: type=1800 audit(1785160715.126:14): pid=5209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.274" name="file2" dev="loop1" ino=33 res=0 errno=0 [ 135.319163][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.333214][ T5188] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 135.444278][ T26] audit: type=1800 audit(1785160715.156:15): pid=5209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.274" name="file2" dev="loop1" ino=33 res=0 errno=0 [ 135.563265][ T5109] cdc_ncm 4-1:1.1: failed GET_NTB_PARAMETERS [ 135.570779][ T5109] cdc_ncm 4-1:1.1: bind() failure [ 135.633333][ T5109] usb 4-1: USB disconnect, device number 7 [ 135.884886][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 135.931591][ T5219] loop4: detected capacity change from 0 to 8192 [ 135.976147][ T5219] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 136.103113][ T5219] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 136.117724][ T5219] REISERFS (device loop4): using ordered data mode [ 136.124685][ T5219] reiserfs: using flush barriers [ 136.152713][ T5219] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 136.177538][ T5219] REISERFS (device loop4): checking transaction log (loop4) [ 136.244546][ T5219] REISERFS (device loop4): Using r5 hash to sort names [ 136.259227][ T5219] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 136.876256][ T5242] loop2: detected capacity change from 0 to 4096 [ 137.073637][ T26] audit: type=1800 audit(1785160716.896:16): pid=5242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.289" name="file2" dev="loop2" ino=33 res=0 errno=0 [ 137.123683][ T4355] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 137.134716][ T26] audit: type=1800 audit(1785160716.926:17): pid=5242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.289" name="file2" dev="loop2" ino=33 res=0 errno=0 [ 137.344273][ T4355] usb 2-1: Using ep0 maxpacket: 16 [ 137.351345][ T4355] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 137.388582][ T4355] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.428897][ T4355] usb 2-1: config 0 has no interface number 0 [ 137.443157][ T4355] usb 2-1: config 0 interface 1 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.492323][ T5235] loop0: detected capacity change from 0 to 32768 [ 137.504274][ T4355] usb 2-1: config 0 interface 1 has no altsetting 0 [ 137.511035][ T4355] usb 2-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 137.546965][ T5235] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop0 scanned by syz.0.287 (5235) [ 137.561473][ T4355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.600714][ T5238] loop3: detected capacity change from 0 to 32768 [ 137.617036][ T4355] usb 2-1: config 0 descriptor?? [ 137.644669][ T5235] BTRFS info (device loop0): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 137.673682][ T5235] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 137.701008][ T5235] BTRFS info (device loop0): using free space tree [ 137.877885][ T5235] BTRFS info (device loop0): enabling ssd optimizations [ 137.979407][ T26] audit: type=1800 audit(1785160717.806:18): pid=5235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.287" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 137.999826][ C0] vkms_vblank_simulate: vblank timer overrun [ 138.049284][ T4355] uclogic 0003:28BD:0933.0008: interface is invalid, ignoring [ 138.309104][ T5104] usb 2-1: USB disconnect, device number 5 [ 138.415047][ T4273] BTRFS info (device loop0): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 138.655131][ T5280] netlink: 'syz.2.299': attribute type 1 has an invalid length. [ 139.554198][ T5297] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 139.563765][ T4747] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 139.608611][ T5297] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 139.649224][ T5297] net_ratelimit: 13 callbacks suppressed [ 139.649236][ T5297] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 139.773544][ T4747] usb 3-1: Using ep0 maxpacket: 32 [ 139.781835][ T4747] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 139.820727][ T4747] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 139.845683][ T5281] loop3: detected capacity change from 0 to 32768 [ 139.853520][ T4747] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 139.862579][ T4747] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 139.922747][ T4747] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 139.940870][ T4747] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 139.954275][ T4747] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 139.963867][ T4747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.994343][ T5281] XFS (loop3): Mounting V5 Filesystem [ 140.027852][ T4747] usb 3-1: config 0 descriptor?? [ 140.043390][ T5281] XFS (loop3): Ending clean mount [ 140.269721][ T4747] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 140.295909][ T4277] XFS (loop3): Unmounting Filesystem [ 140.524557][ T4355] usb 3-1: USB disconnect, device number 5 [ 140.552939][ T4355] usblp0: removed [ 141.053597][ T4747] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 141.122679][ T5331] loop1: detected capacity change from 0 to 32768 [ 141.145639][ T5331] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.319 (5331) [ 141.189029][ T5331] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 141.221383][ T5331] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 141.241990][ T5331] BTRFS info (device loop1): setting nodatasum [ 141.254628][ T4747] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 141.283802][ T4747] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 141.298541][ T5331] BTRFS info (device loop1): force zlib compression, level 3 [ 141.313611][ T4355] kernel write not supported for file /vcs (pid: 4355 comm: kworker/1:8) [ 141.313754][ T4747] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 141.313800][ T4747] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 141.349459][ T5331] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 141.378787][ T5331] BTRFS info (device loop1): use lzo compression, level 0 [ 141.395164][ T4747] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 141.400239][ T5331] BTRFS info (device loop1): turning on flush-on-commit [ 141.440571][ T4747] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 141.460824][ T4747] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 141.464114][ T5331] BTRFS info (device loop1): enabling auto defrag [ 141.481942][ T4747] usb 5-1: Product: syz [ 141.496650][ T4747] usb 5-1: Manufacturer: syz [ 141.521143][ T5331] BTRFS info (device loop1): max_inline at 4096 [ 141.553611][ T5331] BTRFS info (device loop1): using free space tree [ 141.570741][ T4747] cdc_wdm 5-1:1.0: skipping garbage [ 141.596622][ T4747] cdc_wdm 5-1:1.0: skipping garbage [ 141.615870][ T4747] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 141.631320][ T4747] cdc_wdm 5-1:1.0: Unknown control protocol [ 141.782464][ T5331] BTRFS info (device loop1): enabling ssd optimizations [ 141.832403][ T26] audit: type=1800 audit(1785160721.656:19): pid=5331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.319" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 141.923566][ T5337] loop3: detected capacity change from 0 to 32768 [ 142.087868][ T5337] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 142.169291][ T4747] usb 5-1: USB disconnect, device number 5 [ 142.438310][ T4274] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 142.603984][ T14] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 142.624390][ T4400] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop1 scanned by udevd (4400) [ 142.823797][ T4277] ocfs2: Unmounting device (7,3) on (node local) [ 142.836838][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.884519][ T14] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.932229][ T14] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 142.967258][ T14] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 142.993796][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.060046][ T5377] loop0: detected capacity change from 0 to 32768 [ 143.067976][ T14] usb 3-1: config 0 descriptor?? [ 143.189561][ T5377] XFS (loop0): Mounting V5 Filesystem [ 143.304879][ T5377] XFS (loop0): Ending clean mount [ 143.523248][ T14] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 143.556761][ T14] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 143.624124][ T4273] XFS (loop0): Unmounting Filesystem [ 143.763585][ T4748] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 143.963746][ T4748] usb 4-1: Using ep0 maxpacket: 8 [ 143.971774][ T4748] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 144.015393][ T4748] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 144.052651][ T4748] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 144.097617][ T4748] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 144.146111][ T4748] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 144.178914][ T4748] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.410597][ T5413] loop1: detected capacity change from 0 to 256 [ 144.433770][ T4748] usb 4-1: GET_CAPABILITIES returned 0 [ 144.440524][ T4748] usbtmc 4-1:16.0: can't read capabilities [ 144.486694][ T5403] loop4: detected capacity change from 0 to 32768 [ 144.529801][ T5413] FAT-fs (loop1): Unrecognized mount option "nosots" or missing value [ 144.579059][ T5403] XFS (loop4): Mounting V5 Filesystem [ 144.675791][ T5403] XFS (loop4): Ending clean mount [ 144.757251][ T5387] usb 4-1: USB disconnect, device number 8 [ 144.808910][ T26] audit: type=1800 audit(1785160724.636:20): pid=5403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.334" name="file1" dev="loop4" ino=6150 res=0 errno=0 [ 145.165267][ T4278] XFS (loop4): Unmounting Filesystem [ 145.201857][ T14] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 145.396245][ T14] usb 2-1: config 0 has no interfaces? [ 145.403157][ T14] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 145.439182][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 145.457749][ T14] usb 2-1: SerialNumber: syz [ 145.477446][ T14] usb 2-1: config 0 descriptor?? [ 145.483112][ T4355] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 145.535474][ T4355] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 145.610544][ T5384] usb 3-1: USB disconnect, device number 6 [ 145.645995][ T5429] loop2: detected capacity change from 0 to 4096 [ 145.694607][ T5429] EXT4-fs: Ignoring removed nobh option [ 145.898683][ T5384] usb 2-1: USB disconnect, device number 6 [ 145.946586][ T5437] loop4: detected capacity change from 0 to 1024 [ 146.243078][ T5429] EXT4-fs (loop2): Test dummy encryption mode enabled [ 146.258061][ T11] hfsplus: found bad thread record in catalog [ 146.315068][ T5429] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 146.340765][ T5446] loop0: detected capacity change from 0 to 128 [ 146.357154][ T5429] System zones: 0-5 [ 146.377799][ T5446] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 146.391518][ T5446] hpfs: filesystem error: improperly stopped [ 146.399579][ T5446] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 146.408465][ T5446] hpfs: You really don't want any checks? You are crazy... [ 146.422665][ T5429] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 146.424947][ T5446] hpfs: Code page index out of array [ 146.437520][ T5446] hpfs: code page support is disabled [ 146.443126][ T5446] hpfs: hpfs_map_4sectors(): unaligned read [ 146.449828][ T5446] hpfs: hpfs_map_4sectors(): unaligned read [ 146.457016][ T5446] hpfs: filesystem error: unable to find root dir [ 146.534491][ T26] audit: type=1800 audit(1785160726.366:21): pid=5429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.340" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 146.636495][ T26] audit: type=1800 audit(1785160726.386:22): pid=5429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.340" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 146.864685][ T4272] EXT4-fs (loop2): unmounting filesystem. [ 147.091933][ T5461] loop1: detected capacity change from 0 to 128 [ 147.199235][ T5461] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 147.269326][ T5461] ext4 filesystem being mounted at /67/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 147.545820][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 147.693726][ T5472] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'. [ 147.928748][ T5477] netlink: 28 bytes leftover after parsing attributes in process `syz.4.356'. [ 147.964591][ T5477] netlink: 2 bytes leftover after parsing attributes in process `syz.4.356'. [ 147.990121][ T5478] device syzkaller1 entered promiscuous mode [ 148.420131][ T5468] loop3: detected capacity change from 0 to 32768 [ 148.483704][ T5468] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 148.850261][ T5495] device syzkaller1 entered promiscuous mode [ 148.978027][ T4400] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 149.036503][ T5475] loop0: detected capacity change from 0 to 32768 [ 149.151100][ T5475] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 149.714325][ T5475] syz.0.355 (5475) used greatest stack depth: 18688 bytes left [ 149.769617][ T4273] ocfs2: Unmounting device (7,0) on (node local) [ 149.837255][ T5489] loop4: detected capacity change from 0 to 32768 [ 149.926771][ T5489] XFS (loop4): Mounting V5 Filesystem [ 150.052083][ T5489] XFS (loop4): Ending clean mount [ 150.255941][ T5524] netlink: 64535 bytes leftover after parsing attributes in process `syz.2.373'. [ 150.307461][ T4278] XFS (loop4): Unmounting Filesystem [ 151.033700][ T4747] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 151.235540][ T4747] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.269569][ T4747] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.303533][ T4747] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 151.312776][ T4747] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.359741][ T4747] usb 5-1: config 0 descriptor?? [ 151.701507][ T5542] loop0: detected capacity change from 0 to 32768 [ 151.808574][ T4747] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 151.832459][ T4747] cm6533_jd 0003:0D8C:0022.000B: unknown main item tag 0x0 [ 151.870906][ T4747] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.000B/input/input10 [ 151.957764][ T4747] cm6533_jd 0003:0D8C:0022.000B: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 152.056189][ T4747] usb 5-1: USB disconnect, device number 6 [ 152.289811][ T5556] loop2: detected capacity change from 0 to 8192 [ 152.377287][ T5557] fido_id[5557]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 153.237726][ T5571] i2c i2c-0: delete_device: Can't find device in list [ 153.362353][ T5559] loop3: detected capacity change from 0 to 32768 [ 153.397690][ T5559] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop3 scanned by syz.3.385 (5559) [ 153.472354][ T5559] BTRFS info (device loop3): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 153.517654][ T5559] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 153.545508][ T5576] netlink: 27 bytes leftover after parsing attributes in process `syz.2.394'. [ 153.572290][ T5559] BTRFS info (device loop3): using free space tree [ 153.812022][ T5559] BTRFS info (device loop3): enabling ssd optimizations [ 153.847602][ T5565] loop0: detected capacity change from 0 to 32768 [ 153.867590][ T5565] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.388 (5565) [ 153.888748][ T5565] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 153.899504][ T5565] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 153.910460][ T26] audit: type=1800 audit(1785160733.736:23): pid=5559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.385" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 153.916406][ T5565] BTRFS info (device loop0): using free space tree [ 154.081246][ T5603] input: syz1 as /devices/virtual/input/input11 [ 154.250846][ T5565] BTRFS info (device loop0): enabling ssd optimizations [ 155.347622][ T5657] netlink: 148 bytes leftover after parsing attributes in process `syz.4.398'. [ 155.785860][ T4277] BTRFS info (device loop3): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 156.641190][ T4273] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 156.953042][ T5725] loop4: detected capacity change from 0 to 512 [ 157.124797][ T5725] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 157.189394][ T5629] loop1: detected capacity change from 0 to 32768 [ 157.211000][ T5386] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 157.241811][ T5386] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 157.347409][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 157.503524][ T4748] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 157.650963][ T5720] loop2: detected capacity change from 0 to 32768 [ 157.703534][ T4748] usb 4-1: Using ep0 maxpacket: 8 [ 157.713189][ T4748] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 157.757654][ T4748] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 157.767124][ T26] audit: type=1800 audit(1785160737.596:24): pid=5720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.400" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 157.828199][ T4748] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.880105][ T4748] usb 4-1: config 0 descriptor?? [ 158.148393][ T4748] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 158.388778][ T14] usb 4-1: USB disconnect, device number 9 [ 159.088249][ T5760] loop3: detected capacity change from 0 to 128 [ 159.621467][ T5752] loop2: detected capacity change from 0 to 32768 [ 159.663749][ T5752] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop2 scanned by syz.2.408 (5752) [ 159.695515][ T5747] loop1: detected capacity change from 0 to 40427 [ 159.735492][ T5752] BTRFS info (device loop2): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 159.751268][ T5747] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64) [ 159.775206][ T5752] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 159.793815][ T5747] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 159.827363][ T5752] BTRFS info (device loop2): using free space tree [ 159.837437][ T5747] F2FS-fs (loop1): invalid crc value [ 159.864584][ T5747] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 160.113557][ T955] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 160.123747][ T5747] F2FS-fs (loop1): Start checkpoint disabled! [ 160.229219][ T5747] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 160.249714][ T5747] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 160.263316][ T5752] BTRFS info (device loop2): enabling ssd optimizations [ 160.313359][ T955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 160.353057][ T26] audit: type=1800 audit(1785160740.176:25): pid=5752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.408" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 160.379250][ T955] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.402906][ T955] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 160.498095][ T955] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.552027][ T955] usb 1-1: config 0 descriptor?? [ 160.827246][ T4272] BTRFS info (device loop2): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 160.995890][ T955] savu 0003:1E7D:2D5A.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 161.033703][ T5387] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 161.235556][ T5387] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 161.281583][ T5387] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.321999][ T5387] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.362152][ T5387] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 161.415330][ T955] usb 1-1: USB disconnect, device number 7 [ 161.452190][ T5387] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 161.482113][ T5387] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 161.512520][ T5387] usb 4-1: Manufacturer: syz [ 161.538886][ T5387] usb 4-1: config 0 descriptor?? [ 161.825825][ T5803] Driver unsupported XDP return value 0 on prog (id 29) dev N/A, expect packet loss! [ 161.963159][ T5809] loop0: detected capacity change from 0 to 256 [ 161.972584][ T5387] appleir 0003:05AC:8243.000E: unknown main item tag 0x0 [ 161.992010][ T5387] appleir 0003:05AC:8243.000E: No inputs registered, leaving [ 162.040581][ T5809] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xd67973f8, utbl_chksum : 0xe619d30d) [ 162.062233][ T5387] appleir 0003:05AC:8243.000E: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 162.207917][ T5809] exFAT-fs (loop0): error, found bogus dentry(12) beyond unused empty group(11) (start_clu : 5, cur_clu : 5) [ 162.227976][ T5809] exFAT-fs (loop0): Filesystem has been set read-only [ 162.249552][ T14] usb 4-1: USB disconnect, device number 10 [ 162.323967][ T5812] fido_id[5812]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 162.393624][ T5387] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 162.536212][ T5820] loop1: detected capacity change from 0 to 128 [ 162.558465][ T5820] FAT-fs (loop1): bogus number of reserved sectors [ 162.567495][ T5820] FAT-fs (loop1): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 162.579506][ T5820] FAT-fs (loop1): Can't find a valid FAT filesystem [ 162.596293][ T5387] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 162.607834][ T5387] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.644849][ T5387] usb 3-1: config 0 descriptor?? [ 162.695360][ T5387] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 162.900905][ T5824] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 162.947183][ T5826] netlink: 324 bytes leftover after parsing attributes in process `syz.3.432'. [ 162.979399][ T5826] netlink: 16 bytes leftover after parsing attributes in process `syz.3.432'. [ 163.221598][ T5831] input: syz0 as /devices/virtual/input/input12 [ 163.430237][ T5818] loop4: detected capacity change from 0 to 32768 [ 163.460539][ T5387] gspca_stv06xx: I2C: Read error writing address: -71 [ 163.468736][ T5818] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop4 scanned by syz.4.429 (5818) [ 163.510759][ T5387] usb 3-1: USB disconnect, device number 7 [ 163.540552][ T5818] BTRFS info (device loop4): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 163.588670][ T5818] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 163.622446][ T5818] BTRFS info (device loop4): using free space tree [ 163.998259][ T5818] BTRFS info (device loop4): enabling ssd optimizations [ 164.044925][ T26] audit: type=1800 audit(1785160743.876:26): pid=5818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.429" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 164.241532][ T4751] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 164.318608][ T4751] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 164.723840][ T4278] BTRFS info (device loop4): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 165.052638][ T5871] loop1: detected capacity change from 0 to 8192 [ 165.157846][ T5871] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 165.188283][ T4400] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 10 /dev/loop4 scanned by udevd (4400) [ 165.220534][ T5871] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 165.236613][ T5871] REISERFS (device loop1): using ordered data mode [ 165.293634][ T5871] reiserfs: using flush barriers [ 165.307678][ T5871] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 165.336952][ T5871] REISERFS (device loop1): checking transaction log (loop1) [ 165.547776][ T5871] REISERFS (device loop1): Using tea hash to sort names [ 165.555247][ T4321] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 165.576950][ T5871] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 165.755325][ T4321] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 165.803554][ T4321] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 165.866732][ T4321] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 165.923529][ T4321] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 165.986569][ T4321] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 166.025654][ T5893] loop2: detected capacity change from 0 to 65 [ 166.072657][ T4321] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 166.101849][ T5893] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 166.123549][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 166.154106][ T5895] loop3: detected capacity change from 0 to 2048 [ 166.162629][ T4321] usb 1-1: Product: syz [ 166.172754][ T4321] usb 1-1: Manufacturer: syz [ 166.207124][ T5895] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.219960][ T4321] cdc_wdm 1-1:1.0: skipping garbage [ 166.249261][ T4321] cdc_wdm 1-1:1.0: skipping garbage [ 166.293788][ T4321] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 166.323856][ T4321] cdc_wdm 1-1:1.0: Unknown control protocol [ 166.333336][ T5897] loop4: detected capacity change from 0 to 512 [ 166.404937][ T14] usb 1-1: USB disconnect, device number 8 [ 166.513633][ T5897] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.451: Unrecognised inode hash code 255 [ 166.610615][ T5903] loop3: detected capacity change from 0 to 512 [ 166.620839][ T5897] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.451: Corrupt directory, running e2fsck is recommended [ 166.659337][ T5903] EXT4-fs (loop3): Test dummy encryption mode enabled [ 166.667153][ T5897] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 166.681265][ T5903] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 166.705965][ T5897] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.451: corrupted in-inode xattr [ 166.737655][ T5897] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.451: couldn't read orphan inode 15 (err -117) [ 166.756108][ T5903] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.452: bad orphan inode 131083 [ 166.788100][ T5897] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 166.809744][ T5903] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 166.858803][ T5897] EXT4-fs warning (device loop4): dx_probe:833: inode #2: comm syz.4.451: Unrecognised inode hash code 255 [ 166.921271][ T5897] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.451: Corrupt directory, running e2fsck is recommended [ 166.991931][ T5897] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 4: comm syz.4.451: path /89/file0: bad entry in directory: rec_len % 4 != 0 - offset=512, inode=4294967295, rec_len=65535, size=1024 fake=0 [ 167.122235][ T5897] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 64: comm syz.4.451: path /89/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 167.331537][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 167.469547][ T5903] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 167.615082][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 167.822679][ T5907] loop1: detected capacity change from 0 to 32768 [ 167.879761][ T5907] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 167.937094][ T5908] loop2: detected capacity change from 0 to 32768 [ 168.033778][ T5387] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 168.089241][ T5908] XFS (loop2): Mounting V5 Filesystem [ 168.233627][ T5387] usb 5-1: Using ep0 maxpacket: 32 [ 168.242791][ T5387] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 168.261407][ T5387] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.282439][ T5387] usb 5-1: config 0 descriptor?? [ 168.357561][ T4400] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 168.501761][ T5387] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 168.508806][ T5908] XFS (loop2): Ending clean mount [ 168.566342][ T5387] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 168.598297][ T5387] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 168.615695][ T5387] usb 5-1: media controller created [ 168.685789][ T5387] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 168.703855][ T5908] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x3a/0xd0, xfs_rmapbt block 0x14 [ 168.727264][ T5908] XFS (loop2): Unmount and run xfs_repair [ 168.772382][ T5908] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 168.826708][ T5908] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 168.873695][ T5908] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80 ..P............. [ 168.913677][ T5908] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 168.922781][ T5908] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 168.945529][ T5908] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 168.961464][ T5908] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 168.972024][ T5908] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 168.981725][ T5908] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 168.991853][ T5908] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1db/0x2d0" at daddr 0x14 len 4 error 74 [ 169.013315][ T5908] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x17e5/0x1ed0 (fs/xfs/libxfs/xfs_defer.c:580). Shutting down filesystem. [ 169.040484][ T5908] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 169.092454][ T4272] XFS (loop2): Unmounting Filesystem [ 169.238804][ T4751] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 169.443625][ T4751] usb 2-1: Using ep0 maxpacket: 32 [ 169.450798][ T4751] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.473609][ T4751] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.476624][ T5387] az6027: usb out operation failed. (-71) [ 169.506073][ T5387] stb0899_attach: Driver disabled by Kconfig [ 169.522652][ T5387] az6027: no front-end attached [ 169.522652][ T5387] [ 169.529622][ T4751] usb 2-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 169.550480][ T4751] usb 2-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 169.572749][ T4751] usb 2-1: Product: syz [ 169.581065][ T4751] usb 2-1: Manufacturer: syz [ 169.585329][ T5387] az6027: usb out operation failed. (-71) [ 169.603223][ T5387] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 169.621889][ T4751] usb 2-1: config 0 descriptor?? [ 169.648691][ T5387] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13 [ 169.687997][ T5954] Invalid argument reading file caps for ./file0 [ 169.712718][ T5387] dvb-usb: schedule remote query interval to 400 msecs. [ 169.722423][ T5387] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 169.752108][ T5387] usb 5-1: USB disconnect, device number 7 [ 169.860158][ T5960] loop3: detected capacity change from 0 to 512 [ 169.925571][ T5960] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.471: inode has both inline data and extents flags [ 169.946861][ T5387] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 169.961546][ T5960] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.471: couldn't read orphan inode 15 (err -117) [ 170.074845][ T5960] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 170.085783][ T4751] hid-generic 0003:25DD:F3D2.0010: hiddev0,hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.1-1/input0 [ 170.325093][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 170.363675][ T14] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 170.379855][ T5387] usb 2-1: USB disconnect, device number 7 [ 170.588333][ T14] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 170.598110][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.606523][ T14] usb 3-1: Product: syz [ 170.610901][ T14] usb 3-1: Manufacturer: syz [ 170.623651][ T14] usb 3-1: SerialNumber: syz [ 170.642205][ T14] usb 3-1: config 0 descriptor?? [ 170.664183][ T14] hub 3-1:0.0: bad descriptor, ignoring hub [ 170.670247][ T14] hub: probe of 3-1:0.0 failed with error -5 [ 170.803241][ T5979] loop4: detected capacity change from 0 to 64 [ 170.859473][ T14] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 170.893885][ T14] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 170.920992][ T14] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 170.943565][ T14] usb 3-1: media controller created [ 170.983896][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 171.129237][ T5964] i2c i2c-1: Invalid block size returned: 188 [ 171.232664][ T5985] loop4: detected capacity change from 0 to 256 [ 171.301395][ T5985] exfat: Unknown parameter '0xffffffffffffffff' [ 171.353317][ T14] DVB: Unable to find symbol dib7000p_attach() [ 171.368137][ T14] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 171.647920][ T5994] loop5: detected capacity change from 0 to 7 [ 171.680090][ T5994] Dev loop5: unable to read RDB block 7 [ 171.693660][ T14] rc_core: IR keymap rc-dib0700-rc5 not found [ 171.699847][ T14] Registered IR keymap rc-empty [ 171.715742][ T14] dvb-usb: could not initialize remote control. [ 171.722756][ T14] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 171.735824][ T5994] loop5: AHDI p1 p2 [ 171.739931][ T5994] loop5: partition table partially beyond EOD, truncated [ 171.807152][ T14] usb 3-1: USB disconnect, device number 8 [ 171.823317][ T5994] loop5: p1 size 150995456 extends beyond EOD, truncated [ 171.971504][ T14] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 172.058481][ T4400] udevd[4400]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 172.312980][ T6005] usb usb5: usbfs: interface 0 claimed by hub while 'syz.3.486' sets config #0 [ 172.837624][ T6020] loop1: detected capacity change from 0 to 2048 [ 172.897575][ T6020] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 173.351194][ T6034] loop1: detected capacity change from 0 to 512 [ 173.366798][ T6034] EXT4-fs: Ignoring removed oldalloc option [ 173.410522][ T6034] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 173.437740][ T6034] EXT4-fs (loop1): orphan cleanup on readonly fs [ 173.456055][ T6034] EXT4-fs warning (device loop1): ext4_enable_quotas:7093: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 173.471598][ T4751] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 173.495326][ T6034] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 173.520745][ T6034] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #13: comm syz.1.500: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 173.564490][ T6034] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.500: couldn't read orphan inode 13 (err -117) [ 173.585317][ T6034] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 173.650321][ T6034] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.500: deleted inode referenced: 12 [ 173.673609][ T4751] usb 3-1: Using ep0 maxpacket: 16 [ 173.687784][ T4751] usb 3-1: unable to get BOS descriptor or descriptor too short [ 173.707633][ T4751] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.757335][ T4751] usb 3-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 173.798744][ T4751] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 173.840443][ T4751] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 173.851157][ T4751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.859604][ T4751] usb 3-1: Product: syz [ 173.860907][ T4274] EXT4-fs (loop1): unmounting filesystem. [ 173.864808][ T4751] usb 3-1: Manufacturer: syz [ 173.890966][ T4751] usb 3-1: SerialNumber: syz [ 174.137068][ T4751] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 174.167351][ T4751] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 174.303651][ T6051] netlink: 24 bytes leftover after parsing attributes in process `syz.4.506'. [ 174.316204][ T6053] loop1: detected capacity change from 0 to 128 [ 174.334849][ T6051] bond0: ARP target 1.4.0.0 is already present [ 174.361985][ T6051] bond0: option arp_ip_target: invalid value (1025) [ 174.550178][ T4751] usb 3-1: 2:1 : can't get Cluster Descriptor [ 174.623631][ T14] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 174.756459][ T5387] usb 3-1: USB disconnect, device number 9 [ 174.876354][ T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 174.910217][ T14] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 174.952048][ T14] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 174.971527][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 174.980782][ T14] usb 1-1: SerialNumber: syz [ 175.203961][ T14] usb 1-1: 0:2 : does not exist [ 175.249209][ T14] usb 1-1: USB disconnect, device number 9 [ 175.399890][ T6071] loop4: detected capacity change from 0 to 4096 [ 175.537635][ T6078] loop1: detected capacity change from 0 to 512 [ 175.555180][ T4400] udevd[4400]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 176.132947][ T6090] netlink: 20 bytes leftover after parsing attributes in process `syz.2.524'. [ 176.935494][ T6110] mmap: syz.0.533 (6110) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 177.227816][ T6098] loop1: detected capacity change from 0 to 32768 [ 177.287078][ T6098] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 177.327717][ T6098] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 177.366936][ T6098] BTRFS info (device loop1): setting nodatasum [ 177.398580][ T6098] BTRFS info (device loop1): force zlib compression, level 3 [ 177.432217][ T6098] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 177.482719][ T6098] BTRFS info (device loop1): use lzo compression, level 0 [ 177.533517][ T6098] BTRFS info (device loop1): turning on flush-on-commit [ 177.540579][ T6098] BTRFS info (device loop1): enabling auto defrag [ 177.593521][ T6098] BTRFS info (device loop1): max_inline at 4096 [ 177.599924][ T6098] BTRFS info (device loop1): using free space tree [ 177.622569][ T6110] [ 177.624997][ T6110] ====================================================== [ 177.632057][ T6110] WARNING: possible circular locking dependency detected [ 177.639142][ T6110] syzkaller #0 Not tainted [ 177.643608][ T6110] ------------------------------------------------------ [ 177.650678][ T6110] syz.0.533/6110 is trying to acquire lock: [ 177.656615][ T6110] ffff8880528ea870 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: process_measurement+0x3af/0x1c40 [ 177.667450][ T6110] [ 177.667450][ T6110] but task is already holding lock: [ 177.674865][ T6110] ffff888076cbb5d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1aa/0x7b0 [ 177.684958][ T6110] [ 177.684958][ T6110] which lock already depends on the new lock. [ 177.684958][ T6110] [ 177.695411][ T6110] [ 177.695411][ T6110] the existing dependency chain (in reverse order) is: [ 177.704469][ T6110] [ 177.704469][ T6110] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 177.712108][ T6110] down_read_killable+0x4c/0x340 [ 177.717622][ T6110] mmap_read_lock_killable+0x1d/0x60 [ 177.723488][ T6110] lock_mm_and_find_vma+0x2b1/0x2f0 [ 177.729262][ T6110] do_user_addr_fault+0x2e8/0xb20 [ 177.735041][ T6110] exc_page_fault+0x60/0x100 [ 177.740211][ T6110] asm_exc_page_fault+0x22/0x30 [ 177.745642][ T6110] fault_in_readable+0x13e/0x1f0 [ 177.751162][ T6110] fault_in_iov_iter_readable+0xbf/0x2f0 [ 177.757372][ T6110] generic_perform_write+0x1f1/0x5c0 [ 177.763244][ T6110] __generic_file_write_iter+0x148/0x2a0 [ 177.769472][ T6110] generic_file_write_iter+0xab/0x2e0 [ 177.775430][ T6110] vfs_write+0x482/0x9a0 [ 177.780265][ T6110] ksys_write+0x14d/0x260 [ 177.785225][ T6110] do_syscall_64+0x4c/0xa0 [ 177.790227][ T6110] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.796701][ T6110] [ 177.796701][ T6110] -> #0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 177.805468][ T6110] __lock_acquire+0x2d18/0x7c40 [ 177.811091][ T6110] lock_acquire+0x1bb/0x4a0 [ 177.816219][ T6110] down_write+0x36/0x60 [ 177.820949][ T6110] process_measurement+0x3af/0x1c40 [ 177.826735][ T6110] ima_file_mmap+0xe9/0x140 [ 177.831918][ T6110] __se_sys_remap_file_pages+0x55a/0x7b0 [ 177.838139][ T6110] do_syscall_64+0x4c/0xa0 [ 177.843144][ T6110] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 177.849627][ T6110] [ 177.849627][ T6110] other info that might help us debug this: [ 177.849627][ T6110] [ 177.859916][ T6110] Possible unsafe locking scenario: [ 177.859916][ T6110] [ 177.867443][ T6110] CPU0 CPU1 [ 177.872882][ T6110] ---- ---- [ 177.878294][ T6110] lock(&mm->mmap_lock); [ 177.882674][ T6110] lock(&sb->s_type->i_mutex_key#13); [ 177.890718][ T6110] lock(&mm->mmap_lock); [ 177.897623][ T6110] lock(&sb->s_type->i_mutex_key#13); [ 177.903185][ T6110] [ 177.903185][ T6110] *** DEADLOCK *** [ 177.903185][ T6110] [ 177.911374][ T6110] 1 lock held by syz.0.533/6110: [ 177.916359][ T6110] #0: ffff888076cbb5d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1aa/0x7b0 [ 177.926903][ T6110] [ 177.926903][ T6110] stack backtrace: [ 177.932851][ T6110] CPU: 0 PID: 6110 Comm: syz.0.533 Not tainted syzkaller #0 [ 177.940195][ T6110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 177.950393][ T6110] Call Trace: [ 177.953710][ T6110] [ 177.956680][ T6110] dump_stack_lvl+0x188/0x24e [ 177.961463][ T6110] ? load_image+0x410/0x410 [ 177.966023][ T6110] ? show_regs_print_info+0x12/0x12 [ 177.971289][ T6110] ? print_circular_bug+0x12b/0x1a0 [ 177.976557][ T6110] check_noncircular+0x296/0x330 [ 177.981568][ T6110] ? look_up_lock_class+0x75/0x140 [ 177.986741][ T6110] ? add_chain_block+0x9b0/0x9b0 [ 177.991745][ T6110] ? lockdep_lock+0xf1/0x1f0 [ 177.996435][ T6110] ? __lock_acquire+0x1465/0x7c40 [ 178.001524][ T6110] ? _find_first_zero_bit+0xd2/0x100 [ 178.006923][ T6110] __lock_acquire+0x2d18/0x7c40 [ 178.011856][ T6110] ? ima_match_policy+0x10d/0x21b0 [ 178.017045][ T6110] ? __lock_acquire+0x7c40/0x7c40 [ 178.022135][ T6110] ? __lock_acquire+0x1465/0x7c40 [ 178.027232][ T6110] ? verify_lock_unused+0x140/0x140 [ 178.032497][ T6110] ? ima_match_policy+0x10d/0x21b0 [ 178.037676][ T6110] ? ima_match_policy+0x211c/0x21b0 [ 178.042948][ T6110] lock_acquire+0x1bb/0x4a0 [ 178.047523][ T6110] ? process_measurement+0x3af/0x1c40 [ 178.053051][ T6110] ? __might_sleep+0xd0/0xd0 [ 178.057738][ T6110] ? finish_task_switch+0x262/0x8e0 [ 178.062998][ T6110] ? read_lock_is_recursive+0x10/0x10 [ 178.068525][ T6110] ? ima_get_action+0x71/0xa0 [ 178.073273][ T6110] down_write+0x36/0x60 [ 178.077492][ T6110] ? process_measurement+0x3af/0x1c40 [ 178.082969][ T6110] process_measurement+0x3af/0x1c40 [ 178.088247][ T6110] ? ima_file_mmap+0x140/0x140 [ 178.093194][ T6110] ? aa_file_perm+0x112/0xf00 [ 178.097956][ T6110] ? mtree_load+0x100/0xa70 [ 178.102613][ T6110] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 178.108886][ T6110] ima_file_mmap+0xe9/0x140 [ 178.113469][ T6110] ? ima_file_free+0x3e0/0x3e0 [ 178.118301][ T6110] ? common_file_perm+0x171/0x1c0 [ 178.123390][ T6110] ? bpf_lsm_mmap_file+0x5/0x10 [ 178.128304][ T6110] ? security_mmap_file+0x11b/0x180 [ 178.134007][ T6110] __se_sys_remap_file_pages+0x55a/0x7b0 [ 178.139794][ T6110] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 178.145589][ T6110] ? lock_chain_count+0x20/0x20 [ 178.150513][ T6110] ? lockdep_hardirqs_on+0x94/0x140 [ 178.155758][ T6110] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 178.161518][ T6110] do_syscall_64+0x4c/0xa0 [ 178.165983][ T6110] ? clear_bhb_loop+0x60/0xb0 [ 178.170694][ T6110] ? clear_bhb_loop+0x60/0xb0 [ 178.175415][ T6110] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 178.181353][ T6110] RIP: 0033:0x7fa8fdb9de99 [ 178.185800][ T6110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 178.205451][ T6110] RSP: 002b:00007fa8fe9cf028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 178.213898][ T6110] RAX: ffffffffffffffda RBX: 00007fa8fde26090 RCX: 00007fa8fdb9de99 [ 178.221907][ T6110] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 00002000003f1000 [ 178.229931][ T6110] RBP: 00007fa8fdc33eaf R08: 0000000000010000 R09: 0000000000000000 [ 178.237941][ T6110] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 178.245940][ T6110] R13: 00007fa8fde26128 R14: 00007fa8fde26090 R15: 00007ffe0fb44898 [ 178.254467][ T6110] [ 178.257563][ C0] vkms_vblank_simulate: vblank timer overrun [ 178.438474][ T6098] BTRFS info (device loop1): enabling ssd optimizations [ 178.456415][ T26] audit: type=1800 audit(1785160758.286:27): pid=6098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.528" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 178.511946][ T4274] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 178.555896][ T4400] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop1 scanned by udevd (4400)