last executing test programs: 51.665441976s ago: executing program 1 (id=546): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000007c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000880)={0x24, 0x0, 0x0, &(0x7f00000008c0)={0x0, 0x22, 0x18, {[@global=@item_4={0x3, 0x1, 0x1, "dee23ffc"}, @main=@item_012={0x2, 0x0, 0x9, '>4'}, @main=@item_012={0x2, 0x0, 0xa, '7\\'}, @local=@item_4={0x3, 0x2, 0x0, "bdbccabe"}, @global=@item_4={0x3, 0x1, 0x2, "f0f38be2"}, @main=@item_012={0x1, 0x0, 0x12f2efdcca373ff7, "bf"}, @global]}}, 0x0}, 0x0) syz_emit_ethernet(0x4e, 0x0, 0x0) 49.674053021s ago: executing program 1 (id=568): mkdir(&(0x7f00000004c0)='./myproc\x00', 0x91) mount(0x0, &(0x7f0000000500)='./myproc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./myproc/scsi/device_info\x00', 0x1, 0x3) write(r0, &(0x7f00000005c0)='\"', 0x1) 49.302039399s ago: executing program 1 (id=571): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1c0000000000000, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffd000/0x3000)=nil) 48.132482869s ago: executing program 1 (id=585): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x1c5) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) setxattr$trusted_overlay_origin(&(0x7f0000000480)='./file0/file1\x00', &(0x7f00000004c0), 0x0, 0x0, 0x3) 47.064135479s ago: executing program 1 (id=597): r0 = socket(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f00000003c0)=@buf={0x0, &(0x7f0000000300)}) connect$unix(r0, &(0x7f00000003c0)=@abs={0xa}, 0x6e) getsockname$unix(r0, 0x0, &(0x7f0000000340)) 46.239785794s ago: executing program 1 (id=603): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'ipvlan0\x00', 0x0}) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000400)={&(0x7f0000000440)=@xdp={0x2c, 0x8, r1, 0x24}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000500)="59ed0eaa6afb0999a69fe28a0fd6", 0xe}, {&(0x7f0000000000)="4f59001494d8", 0x6}], 0x2}, 0x0) 45.659534884s ago: executing program 32 (id=603): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'ipvlan0\x00', 0x0}) r2 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000400)={&(0x7f0000000440)=@xdp={0x2c, 0x8, r1, 0x24}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000500)="59ed0eaa6afb0999a69fe28a0fd6", 0xe}, {&(0x7f0000000000)="4f59001494d8", 0x6}], 0x2}, 0x0) 44.769923495s ago: executing program 3 (id=617): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="201853000000b2de14353cf9a410ecd1e77ffe64370cc8117d2881c42725fbecf4a8c3d5e58c93f0cd31aea8cea09725d43404af0a696f841214a9906a73736041bbc6971a208558b6b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 42.866972931s ago: executing program 3 (id=632): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000006c0)={0x5c, r1, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0xfd}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "2c8b55f2ea618520999dba9ca1d6d893202b979f9fbbd33e6d02064f9886cb99"}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "000600000000000000090a0b0c0d0e0f"}]}, 0x5c}}, 0x0) 42.495127259s ago: executing program 3 (id=635): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f0000000080)=0x40049, 0x4) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 42.149525205s ago: executing program 3 (id=637): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$eJzs281vFOUfAPDvTLvl11/BVsQ38KWKRuJLSwGVgwc1mnjAxEQPevDQtAtBFjC0JkJIBGPwZIyJd+PRf8GTXozxZOJV74aEGC6CpzWzO9PuLrtLt+x2kf18koHnmZc+3+/OPLvPzLMbwMiazf5JIrZHxO8RMV2vNu8wW//v2tXzS9evnl9Kolp9+6+ktt/fV88vFbsWx03llX1pRPpZEnvatLty9tyJxUqlfCavz6+e/HB+5ey5546fXDxWPlY+deDw4UMHF1584cDzfclzKtK89MZ7X7155Ium/Fvy6JPZbhufrFb73Nxw7WgoJ+NDDISejEVEdrpKtf4/HWOxfvKm4/VPhxocMFDVarU61XnzhSpwB0uiua7Lw6goPuiz+99iaR0EvDy44cfQXXmlfgOU5X0tX+pbxteeGJRa7m/7aTYi3r3wzzfZEoN5DgEA0OSHbPzzbDbaaR3/pXFfw3535XNDMxFxd0TsjIh74lTsioh7I2r73h8RD/TYfuskyY3jn/TyphLboGz891I+t9U8/itGfzEzltd21PIvJUePV8r766/J+/kwurzQpY0fX/vty07bGsd/2ZK1X4wF8zguj29rPmZ5cXXxVnJudOVixO7xdvknazMBSUQ8GBG7N9nG8ae/e6jTtpvn30Uf5pmq30Y8VT//F6Il/0LSfX5y/n9RKe+fL66KG/3y66W3OrV/S/n3QXb+/9/2+l/LfyZpnK9d6b2NS3983vGeZrPX/0TyTq08ka/7eHF19cxCxERypB504/oD68cW9WL/LP99e9v3/52x/krsiYjsIn44Ih6JiEfz2B+LiMcjYm+X/H9+9YkPWtdNbjj/wcryX+7p/K8XJqJ1TfvC2Imfvm9qdGa9mOd/vfv5P1Qr7cvXbOT9byNxbe5qBgAAgP+eNCK2R5LOrZXTdG6u/h3+XRFp5fTK6jNHT390arn+G4GZKKXFk67phuehC/ltfb1+MSLqXy0oth/Mnxt/PTZZq88tna4sDzt5GHFTHfp/VvlzbNjRAQPn91owunrq/8ng4gC2ns9/GF299f9tA4sD2Gqldv1/chiRAFuv3ef/J0OIA9h6Lf3ftB+MEM//YHTp/zC69H8YSSuTcfMfyXctFH9pk4ffsYUo3RZhDKwQ6W0RhsKACsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EBbjLA==") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x1c5) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) setxattr$trusted_overlay_origin(&(0x7f0000000480)='./file0/file1\x00', &(0x7f00000004c0), 0x0, 0x0, 0x3) 41.310464711s ago: executing program 3 (id=639): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000380)={[{@grpquota}, {@nogrpid}, {@quota}, {@nobh}]}, 0x1, 0x511, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000540)={@id={0x2, 0x0, @c}}) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000004c0)={0x1, 0xbb8}) 40.176560958s ago: executing program 4 (id=644): setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x42020054, &(0x7f0000000200)="0100000000000000000000000000000000000000dc050000000000000000000000000000000000000100000000000000000000000000000000000000dc0500000000000000000000000000000000000005000000", 0x54) bind(r0, &(0x7f0000000300)=@generic={0x8, "fefffffffeffffff00"}, 0xc) 39.86564743s ago: executing program 4 (id=646): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000280), &(0x7f00000002c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "7af9c2add30c3b0d788d9a94b0731ab8d4a8502c36822594c41a3a588f9ea10f4ea91dff6ece7b715bd30d67c5da8c5c4dada466bf73ee60295d1d133135d5c7", 0x18}, 0x48, 0xfffffffffffffffe) keyctl$set_timeout(0xf, r1, 0x10001) read$FUSE(r0, &(0x7f0000000d00)={0x2020}, 0x2020) 39.644068233s ago: executing program 4 (id=659): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x1, 0x138, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x3, 0x20, 0x5, 'ip6gretap0\x00', 'dvmrp0\x00', '\x00', 'veth1\x00', @remote, [0xff, 0x0, 0x0, 0x0, 0xff, 0xff], @multicast, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x0, 0x70, 0x70, 0xa8, [], [], @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xfffffffffffffffd}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}]}, 0x1b0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) 38.50040257s ago: executing program 4 (id=650): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$eJzs281vFOUfAPDvTLvl11/BVsQ38KWKRuJLSwGVgwc1mnjAxEQPevDQtAtBFjC0JkJIBGPwZIyJd+PRf8GTXozxZOJV74aEGC6CpzWzO9PuLrtLt+x2kf18koHnmZc+3+/OPLvPzLMbwMiazf5JIrZHxO8RMV2vNu8wW//v2tXzS9evnl9Kolp9+6+ktt/fV88vFbsWx03llX1pRPpZEnvatLty9tyJxUqlfCavz6+e/HB+5ey5546fXDxWPlY+deDw4UMHF1584cDzfclzKtK89MZ7X7155Ium/Fvy6JPZbhufrFb73Nxw7WgoJ+NDDISejEVEdrpKtf4/HWOxfvKm4/VPhxocMFDVarU61XnzhSpwB0uiua7Lw6goPuiz+99iaR0EvDy44cfQXXmlfgOU5X0tX+pbxteeGJRa7m/7aTYi3r3wzzfZEoN5DgEA0OSHbPzzbDbaaR3/pXFfw3535XNDMxFxd0TsjIh74lTsioh7I2r73h8RD/TYfuskyY3jn/TyphLboGz891I+t9U8/itGfzEzltd21PIvJUePV8r766/J+/kwurzQpY0fX/vty07bGsd/2ZK1X4wF8zguj29rPmZ5cXXxVnJudOVixO7xdvknazMBSUQ8GBG7N9nG8ae/e6jTtpvn30Uf5pmq30Y8VT//F6Il/0LSfX5y/n9RKe+fL66KG/3y66W3OrV/S/n3QXb+/9/2+l/LfyZpnK9d6b2NS3983vGeZrPX/0TyTq08ka/7eHF19cxCxERypB504/oD68cW9WL/LP99e9v3/52x/krsiYjsIn44Ih6JiEfz2B+LiMcjYm+X/H9+9YkPWtdNbjj/wcryX+7p/K8XJqJ1TfvC2Imfvm9qdGa9mOd/vfv5P1Qr7cvXbOT9byNxbe5qBgAAgP+eNCK2R5LOrZXTdG6u/h3+XRFp5fTK6jNHT390arn+G4GZKKXFk67phuehC/ltfb1+MSLqXy0oth/Mnxt/PTZZq88tna4sDzt5GHFTHfp/VvlzbNjRAQPn91owunrq/8ng4gC2ns9/GF299f9tA4sD2Gqldv1/chiRAFuv3ef/J0OIA9h6Lf3ftB+MEM//YHTp/zC69H8YSSuTcfMfyXctFH9pk4ffsYUo3RZhDKwQ6W0RhsKACsN9XwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOiXfwMAAP//EBbjLA==") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x1c5) mount$overlay(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) setxattr$trusted_overlay_origin(&(0x7f0000000480)='./file0/file1\x00', &(0x7f00000004c0), 0x0, 0x0, 0x3) 38.173918144s ago: executing program 3 (id=653): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='\\x01000000 2000000000 0 0 k', 0x1d) 37.394937254s ago: executing program 33 (id=653): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='\\x01000000 2000000000 0 0 k', 0x1d) 37.382074266s ago: executing program 4 (id=665): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000100)={0x34, &(0x7f0000000240)={0x0, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x5b24, 0x0) 37.107836483s ago: executing program 4 (id=660): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000000)={0x1d, r2}, 0x10) 36.701652035s ago: executing program 34 (id=660): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000000)={0x1d, r2}, 0x10) 2.929456149s ago: executing program 2 (id=794): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x2000010, &(0x7f0000000080)=ANY=[], 0x4, 0x6ea, &(0x7f0000000a00)="$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") symlink(&(0x7f0000001100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000001340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x70) mknod$loop(&(0x7f0000001480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) 2.898977493s ago: executing program 7 (id=795): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setresuid(0x0, 0x0, 0xee01) 2.356606088s ago: executing program 2 (id=807): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000b80), 0xffffffffffffff02, 0xa242) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000bc0)=0x3) dup3(r0, r1, 0x0) 2.206586224s ago: executing program 5 (id=799): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r1, 0x5608) 2.04768129s ago: executing program 5 (id=800): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mnt_trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) readv(r0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000240)=""/61, 0x3d}], 0x2) 2.04747806s ago: executing program 2 (id=801): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000005, 0x20031, 0xffffffffffffffff, 0xb9ddd000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mbind(&(0x7f0000ff5000/0xb000)=nil, 0xb000, 0x3, &(0x7f0000000180)=0x9, 0x9, 0x1) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) 1.808808414s ago: executing program 2 (id=804): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200182f00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa35f088be"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7000000}, 0x48) 1.748598101s ago: executing program 5 (id=806): mkdir(&(0x7f0000000000)='./myproc\x00', 0x103) mount(0x0, &(0x7f0000000040)='./myproc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./myproc/scsi/device_info\x00', 0x0, 0x4c) preadv(r0, &(0x7f0000002300)=[{&(0x7f0000002340)=""/4096, 0x1f}], 0x1, 0x1f, 0x24) 1.571832799s ago: executing program 6 (id=809): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf250c00000008000300", @ANYRES32=r2, @ANYBLOB="0800376b7157790004000b00050008"], 0x30}, 0x1, 0x0, 0x0, 0x20048090}, 0x489c) 1.415197935s ago: executing program 5 (id=810): r0 = msgget$private(0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0x0, 0x0) msgrcv(r0, 0x0, 0x0, 0xda72ed5a9dc29567, 0x2000) msgsnd(r0, &(0x7f0000000000)={0x3}, 0x8, 0x800) 1.356725391s ago: executing program 6 (id=811): openat$mice(0xffffffffffffff9c, &(0x7f0000000880), 0x41) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x804, 0x6}, 0x3d, [0x6, 0xc95b, 0x9, 0x8, 0x81, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0x0, 0x5f, 0x200a, 0x0, 0xffff2d37, 0xd1, 0x6, 0x4, 0x100, 0x7, 0x7, 0x7, 0x3, 0x3c47, 0x1, 0x24, 0x2adc, 0x800, 0x1f461e2c, 0x3, 0xe660, 0x4, 0x1000007, 0x3, 0x8001, 0x4c74, 0x8000, 0x642, 0x3, 0xa, 0x0, 0x71, 0x1, 0xe, 0x103, 0x0, 0x5, 0x3d, 0x8f, 0x6, 0x1, 0x4, 0x5, 0x4, 0x9, 0x0, 0x80, 0x2000, 0x4, 0x6, 0x8c0, 0x4, 0x1, 0x40], [0x10080007, 0xffff, 0x12b, 0x8000, 0x10, 0xfffffff3, 0x129432e6, 0x3, 0xf9, 0x2d, 0x2bf, 0x6c9, 0x1ff, 0x0, 0x3, 0x0, 0x7, 0x2, 0x1c, 0xe, 0x313, 0x77, 0xea4, 0xa, 0x4, 0x4, 0xd, 0x4, 0x410, 0x1, 0x6, 0x400401, 0xff, 0x1005, 0x7ff, 0x5f31, 0xc, 0x101, 0x6, 0x1000004, 0x9, 0x4, 0x9, 0xfffffffa, 0x9, 0x7, 0x5, 0x0, 0x10003, 0x7, 0x5e0176bd, 0x2, 0x7f, 0x10000009, 0x8, 0x3, 0x4, 0x1, 0x8, 0x6, 0x9, 0x48c93690, 0x2, 0xff], [0x5, 0x1, 0x5, 0x64e, 0xfffffdfa, 0x7fffffff, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x5, 0x5, 0x0, 0x4001ef, 0x9, 0x8, 0x88, 0x3, 0x10000009, 0x3e6, 0xb, 0x5, 0x2, 0x60202, 0xf, 0x7, 0x84, 0x6d01, 0x5, 0x3b, 0x2, 0x200, 0x80, 0x3, 0x4, 0x2, 0xffffffff, 0xa5, 0x7, 0x6, 0x8, 0x4, 0x54fe12da, 0x5, 0x5, 0x3, 0x400000, 0xfff7fff9, 0x10000000, 0x1, 0x5, 0x8, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0xbb31, 0x6, 0xfffffffc, 0x5, 0x938, 0x6, 0x6, 0x4051bf, 0x5, 0xce7, 0x1ff, 0x6, 0x87, 0x5, 0x7, 0x104, 0x80000000, 0x1, 0x7fff, 0x8ffff, 0xa61c, 0x2, 0x0, 0x1, 0xfffffff4, 0x8000014c, 0x60a7, 0x6, 0x2, 0xfffffffe, 0x80000003, 0x405, 0x8, 0xff, 0x103, 0xfffffff1, 0x10002, 0xa, 0x8, 0x100, 0x9602, 0xb, 0x2, 0x800, 0x6, 0x101, 0x10000, 0x1, 0x8, 0xfffff801, 0xffffffff, 0x8, 0x9, 0x1, 0x6c0b, 0x83a0, 0x1, 0x5, 0xb1c, 0x1, 0x8, 0xfff, 0xffffffff]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 1.312095136s ago: executing program 0 (id=812): r0 = socket$kcm(0x2, 0x2, 0x73) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e1c, @multicast1}, 0x10) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x4e25, @multicast1}, 0x10) 1.252812512s ago: executing program 7 (id=813): syz_clone3(&(0x7f0000000000)={0x180801400, &(0x7f0000000140)=0xffffffffffffffff, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) pidfd_send_signal(r0, 0x21, 0x0, 0x0) io_getevents(0x0, 0x4, 0x0, &(0x7f00000000c0), 0x0) pidfd_getfd(r0, r0, 0x0) 1.155556412s ago: executing program 0 (id=814): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='bRequestType=0 bRequest=6 wValue=12544 wIndex=0 wLength=0', 0x39) 992.512918ms ago: executing program 7 (id=815): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, 0x0) 937.102654ms ago: executing program 0 (id=816): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x2c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x20004840) 666.780142ms ago: executing program 2 (id=817): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x40, r1, 0x1, 0xfffffffc, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}]]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) 666.433182ms ago: executing program 6 (id=818): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) write$snapshot(r0, &(0x7f00000003c0)="1e8f194d159d122deda87e732f5230186340f285c3bc819ae828b3a3e683e1271659246bb75cec9618213a820802b2c6666d9ff2b6e361e2d167bb814e76ba24ccfb7c93be2adaab2b210259d38c86825b67fb4a3167519ad8326318d37d154f88462b3b5be83232f6d5b2770430894f388b969241e2d21c296fe3846061e2bdb1", 0x81) 595.805309ms ago: executing program 7 (id=819): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x6) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, @any, 0x6}, 0xa) close(r0) 533.710596ms ago: executing program 0 (id=820): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xfff3}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4094) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e"], 0x50}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064000000140001800800010064000000080003"], 0x2c}}, 0x0) 499.438939ms ago: executing program 6 (id=821): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000003b80)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)=""/148, 0x94}, {&(0x7f0000003c00)=""/4109, 0x100d}, {&(0x7f00000001c0)=""/113, 0x71}, {&(0x7f0000002a00)=""/15, 0xf}], 0x4}, 0xec}], 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000006ad873"], 0x14}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) 438.535166ms ago: executing program 5 (id=822): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./tracing\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='stacktrace', 0xa) 418.097748ms ago: executing program 2 (id=823): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002840)='net/sctp\x00') fchdir(r0) exit(0x9) pivot_root(&(0x7f0000002880)='.\x00', &(0x7f00000028c0)='.\x00') 375.176092ms ago: executing program 7 (id=824): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/status\x00', 0x1, 0x0) write$6lowpan_enable(r0, &(0x7f0000000140)='0', 0x1) 268.690013ms ago: executing program 0 (id=825): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000011c0)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0xffffffffffffff2d, &(0x7f0000001240)={&(0x7f0000001280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006040)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r1, {0x0, 0x3}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @local}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20005891}, 0x0) 249.619445ms ago: executing program 6 (id=826): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) 208.683629ms ago: executing program 7 (id=827): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000000240)='./file0\x00', 0x804, &(0x7f0000001240)={[{@iocharset={'iocharset', 0x3d, 'cp949'}}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@fat=@dos1xfloppy}, {@shortname_mixed}, {@shortname_mixed}, {@rodir}, {@utf8}, {@rodir}, {@fat=@codepage={'codepage', 0x3d, '936'}}, {@uni_xlate}, {@uni_xlateno}, {@utf8}, {@fat=@discard}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp855'}}]}, 0x1, 0x28e, &(0x7f0000001500)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 127.482847ms ago: executing program 5 (id=828): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./mnt\x00', &(0x7f00000003c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/trace_marker\x00', 0x1, 0x5a) write(r0, &(0x7f0000000440)="2d25c873c6", 0x5) 57.544975ms ago: executing program 0 (id=829): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_mount_image$iso9660(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', 0x3800813, &(0x7f0000001140)={[{@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@utf8}, {@overriderock}, {@nojoliet}, {@nojoliet}, {@overriderock}, {@dmode={'dmode', 0x3d, 0x3}}, {@dmode={'dmode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x80}}, {@hide}, {@block={'block', 0x3d, 0x200}}, {@map_acorn}, {@overriderock}, {@check_relaxed}, {@gid}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@check_relaxed}, {@sbsector={'sbsector', 0x3d, 0x7}}, {@block={'block', 0x3d, 0xe00}}]}, 0x5, 0xa51, &(0x7f0000001780)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000001100)=ANY=[@ANYBLOB="20000000020000001d"], 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x408c00, 0x0) 0s ago: executing program 6 (id=830): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): ddresses unique to avoid problems! [ 89.291204][ T4286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.299762][ T4294] device veth1_macvtap entered promiscuous mode [ 89.324885][ T4278] device veth0_macvtap entered promiscuous mode [ 89.333722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.342140][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.351911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.361402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.370873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.379833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.395825][ T4286] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.405267][ T4286] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.418827][ T4286] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.429096][ T4286] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.458223][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.470999][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.481573][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.492292][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.504645][ T4294] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.516003][ T4278] device veth1_macvtap entered promiscuous mode [ 89.546201][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.561923][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.572476][ T4294] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.589004][ T4294] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.601312][ T4294] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.609848][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 89.618992][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 89.628383][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.636495][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.645792][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.656026][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.664937][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.705081][ T4294] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.721956][ T4294] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.732310][ T4294] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.741242][ T4294] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.781469][ T4279] device veth0_macvtap entered promiscuous mode [ 89.795589][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.807698][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.818550][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.830763][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.840963][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.852044][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.863930][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.882209][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.898306][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.914084][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.924367][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.942046][ T4279] device veth1_macvtap entered promiscuous mode [ 89.972164][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.000102][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.024357][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.043470][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.054948][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.064945][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.075829][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.096166][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.122475][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.135544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.147698][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.164550][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.183211][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.194512][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.211200][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.223072][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.234451][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.245761][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.258116][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.281863][ T4278] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.292592][ T4278] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.301892][ T4278] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.311249][ T4278] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.331890][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.342771][ T4409] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7'. [ 90.353993][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.360789][ T4409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7'. [ 90.381747][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.395987][ T4409] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7'. [ 90.405734][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.415872][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.427713][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.437974][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.456835][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.467386][ T4279] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.478141][ T4279] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.490699][ T4279] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.513605][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.522505][ T4384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.532676][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.536505][ T4384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.573564][ T4279] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.586043][ T4279] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.595516][ T4279] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.605311][ T4279] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.622620][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.676885][ T4384] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.684817][ T4384] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.725644][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.753403][ T4384] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.765392][ T4384] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.802526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.874261][ T4373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.882947][ T4373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.910078][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.918212][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.929311][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.941641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.013543][ T4373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.024292][ T4373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.088633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.128111][ T4373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.134440][ T4415] tun0: tun_chr_ioctl cmd 1074025676 [ 91.135975][ T4373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.150353][ T4415] tun0: owner set to 0 [ 91.167647][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.175563][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.209317][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.238500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.424577][ T4423] loop1: detected capacity change from 0 to 33280 [ 91.450404][ T4423] ======================================================= [ 91.450404][ T4423] WARNING: The mand mount option has been deprecated and [ 91.450404][ T4423] and is ignored by this kernel. Remove the mand [ 91.450404][ T4423] option from the mount to silence this warning. [ 91.450404][ T4423] ======================================================= [ 91.604230][ T4423] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 91.630100][ T4423] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 91.682994][ T4423] EXT4-fs error (device loop1): ext4_do_update_inode:5312: inode #2: comm syz.1.2: corrupted inode contents [ 91.709193][ T4358] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.735732][ T4423] EXT4-fs (loop1): Remounting filesystem read-only [ 91.767121][ T4423] EXT4-fs error (device loop1): ext4_dirty_inode:6199: inode #2: comm syz.1.2: mark_inode_dirty error [ 91.789648][ T130] cfg80211: failed to load regulatory.db [ 91.822362][ T4423] EXT4-fs (loop1): Remounting filesystem read-only [ 91.850366][ T4423] EXT4-fs error (device loop1): ext4_do_update_inode:5312: inode #2: comm syz.1.2: corrupted inode contents [ 91.891626][ T4423] EXT4-fs (loop1): Remounting filesystem read-only [ 91.906363][ T4358] usb 4-1: Using ep0 maxpacket: 16 [ 91.917121][ T4358] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.932579][ T4437] EXT4-fs error (device loop1): ext4_do_update_inode:5312: inode #2: comm syz.1.2: corrupted inode contents [ 91.942964][ T4358] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.984028][ T4358] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 92.014893][ T4358] usb 4-1: config 0 interface 0 has no altsetting 0 [ 92.027835][ T4358] usb 4-1: New USB device found, idVendor=056a, idProduct=5200, bcdDevice= 0.00 [ 92.041452][ T4358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.046997][ T4437] EXT4-fs (loop1): Remounting filesystem read-only [ 92.067317][ T4437] EXT4-fs error (device loop1): ext4_dirty_inode:6199: inode #2: comm syz.1.2: mark_inode_dirty error [ 92.092209][ T4358] usb 4-1: config 0 descriptor?? [ 92.098008][ T4437] EXT4-fs (loop1): Remounting filesystem read-only [ 92.113051][ T4437] EXT4-fs error (device loop1): ext4_do_update_inode:5312: inode #2: comm syz.1.2: corrupted inode contents [ 92.147362][ T4437] EXT4-fs (loop1): Remounting filesystem read-only [ 92.159967][ T4437] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.2: mark_inode_dirty error [ 92.186231][ T4437] EXT4-fs (loop1): Remounting filesystem read-only [ 92.203482][ T4442] loop0: detected capacity change from 0 to 2048 [ 92.213211][ T4437] EXT4-fs error (device loop1): ext4_do_update_inode:5312: inode #2: comm syz.1.2: corrupted inode contents [ 92.257056][ T4437] EXT4-fs (loop1): Remounting filesystem read-only [ 92.263807][ T4437] EXT4-fs error (device loop1): ext4_dirty_inode:6199: inode #2: comm syz.1.2: mark_inode_dirty error [ 92.302033][ T4437] EXT4-fs (loop1): Remounting filesystem read-only [ 92.339156][ T4443] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.399597][ T4423] EXT4-fs error (device loop1): ext4_do_update_inode:5312: inode #2: comm syz.1.2: corrupted inode contents [ 92.446391][ T4445] loop4: detected capacity change from 0 to 8 [ 92.537930][ T4358] wacom 0003:056A:5200.0001: unknown main item tag 0x0 [ 92.545088][ T4358] wacom 0003:056A:5200.0001: unknown main item tag 0x0 [ 92.558753][ T4358] wacom 0003:056A:5200.0001: unknown main item tag 0x0 [ 92.571043][ T4358] wacom 0003:056A:5200.0001: unknown main item tag 0x0 [ 92.588835][ T4358] wacom 0003:056A:5200.0001: unknown main item tag 0x0 [ 92.629705][ T4358] wacom 0003:056A:5200.0001: unknown main item tag 0x0 [ 92.655492][ T4358] wacom 0003:056A:5200.0001: unknown main item tag 0x0 [ 92.679001][ T4358] wacom 0003:056A:5200.0001: unknown main item tag 0x0 [ 92.693743][ T4358] wacom 0003:056A:5200.0001: unknown main item tag 0x0 [ 92.703498][ T4358] wacom 0003:056A:5200.0001: unknown main item tag 0x0 [ 92.715848][ T4358] wacom 0003:056A:5200.0001: Unknown device_type for 'HID 056a:5200'. Ignoring. [ 92.783437][ T4358] usb 4-1: USB disconnect, device number 2 [ 93.045381][ T4440] loop2: detected capacity change from 0 to 40427 [ 93.074631][ T4440] F2FS-fs (loop2): Invalid SB checksum offset: 0 [ 93.090884][ T4440] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 93.104944][ T4440] F2FS-fs (loop2): invalid crc value [ 93.131623][ T4440] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 93.175869][ T4460] capability: warning: `syz.4.20' uses deprecated v2 capabilities in a way that may be insecure [ 93.263526][ T4440] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 93.270955][ T14] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 93.280406][ T4440] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 93.454196][ T4288] syz-executor: attempt to access beyond end of device [ 93.454196][ T4288] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 93.473234][ T14] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.503184][ T14] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.524645][ T14] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 93.542500][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 93.579997][ T14] usb 2-1: SerialNumber: syz [ 93.744436][ T4470] futex_wake_op: syz.4.25 tries to shift op by -1; fix this program [ 93.813267][ T14] usb 2-1: 0:2 : does not exist [ 93.894542][ T14] usb 2-1: USB disconnect, device number 2 [ 93.975253][ T3605] rxe_eth0 speed is unknown, defaulting to 1000 [ 94.228775][ T4472] udevd[4472]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.152517][ T4511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.37'. [ 95.162774][ T4514] loop1: detected capacity change from 0 to 128 [ 95.663840][ T4526] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.952655][ T4515] loop3: detected capacity change from 0 to 32768 [ 96.057191][ T4515] JBD2: Ignoring recovery information on journal [ 96.225807][ T4515] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 96.413545][ T4544] loop2: detected capacity change from 0 to 34816 [ 96.435905][ T4546] input: syz0 as /devices/virtual/input/input8 [ 96.467412][ T4544] EXT4-fs: Ignoring removed nobh option [ 96.597803][ T4544] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 96.643240][ T4544] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 96.678587][ T4544] EXT4-fs (loop2): Remounting filesystem read-only [ 96.788842][ T4286] ocfs2: Unmounting device (7,3) on (node local) [ 96.824913][ T4288] EXT4-fs (loop2): unmounting filesystem. [ 97.497575][ T4574] kAFS: bad VL server IP address [ 98.137616][ T4588] loop0: detected capacity change from 0 to 4096 [ 98.246594][ T4588] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 98.714371][ T4586] loop4: detected capacity change from 0 to 131072 [ 98.768196][ T4586] F2FS-fs (loop4): Test dummy encryption mode enabled [ 98.772255][ T4588] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 98.788713][ T4586] F2FS-fs (loop4): invalid crc value [ 98.842712][ T4586] F2FS-fs (loop4): Found nat_bits in checkpoint [ 98.881401][ T4586] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 98.900070][ T4586] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 98.908954][ T4586] F2FS-fs (loop4): Start checkpoint disabled! [ 98.962125][ T4586] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 99.210108][ T3605] kernel write not supported for file /slabinfo (pid: 3605 comm: kworker/1:4) [ 99.484876][ T4595] loop1: detected capacity change from 0 to 32768 [ 99.557245][ T4595] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.70 (4595) [ 99.570642][ T4623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.78'. [ 99.701525][ T4595] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 99.732683][ T4595] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 99.751882][ T4595] BTRFS info (device loop1): enabling auto defrag [ 99.771191][ T4595] BTRFS info (device loop1): use no compression [ 99.792321][ T4595] BTRFS info (device loop1): force clearing of disk cache [ 99.824264][ T4595] BTRFS info (device loop1): max_inline at 4096 [ 99.845275][ T4595] BTRFS info (device loop1): disabling free space tree [ 99.856381][ T4358] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 99.909724][ T3604] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 100.059802][ T4358] usb 4-1: Using ep0 maxpacket: 8 [ 100.071931][ T4358] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 100.073749][ T4595] BTRFS info (device loop1): enabling ssd optimizations [ 100.100067][ T4595] BTRFS info (device loop1): rebuilding free space tree [ 100.118424][ T3604] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 100.127361][ T4358] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 100.137162][ T3604] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 100.137188][ T3604] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 100.137226][ T3604] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 100.137254][ T3604] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 100.141730][ T3604] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 100.232473][ T3604] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 100.256299][ T4358] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 100.261668][ T3604] usb 3-1: Product: syz [ 100.292310][ T3604] usb 3-1: Manufacturer: syz [ 100.296572][ T4358] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 100.322117][ T4595] BTRFS info (device loop1): disabling free space tree [ 100.336380][ T4358] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.356849][ T3604] cdc_wdm 3-1:1.0: skipping garbage [ 100.360482][ T4595] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 100.380421][ T3604] cdc_wdm 3-1:1.0: skipping garbage [ 100.386568][ T4595] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 100.393262][ T4358] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 100.436695][ T4358] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.448851][ T3604] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 100.473632][ T3604] cdc_wdm 3-1:1.0: Unknown control protocol [ 100.668385][ T3604] usb 3-1: USB disconnect, device number 2 [ 100.701811][ T4358] usb 4-1: GET_CAPABILITIES returned 0 [ 100.715701][ T4358] usbtmc 4-1:16.0: can't read capabilities [ 100.964240][ T4358] usb 4-1: USB disconnect, device number 3 [ 101.055727][ T4595] syz.1.70 (4595) used greatest stack depth: 20720 bytes left [ 101.256631][ T4279] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 101.680351][ T4688] loop4: detected capacity change from 0 to 1024 [ 101.815997][ T4693] loop3: detected capacity change from 0 to 2048 [ 101.929205][ T4693] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.064346][ T4688] hfsplus: catalog searching failed [ 102.268452][ T48] hfsplus: bad catalog file entry [ 102.273901][ T48] hfsplus: b-tree write err: -5, ino 3 [ 102.401872][ T4707] Bluetooth: MGMT ver 1.22 [ 102.439004][ T4710] MTRR 1 not used [ 102.814567][ T4702] loop2: detected capacity change from 0 to 32768 [ 102.831095][ T4702] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.98 (4702) [ 102.851393][ T4702] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 102.862238][ T4702] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 102.875024][ T4702] BTRFS info (device loop2): use zlib compression, level 3 [ 102.887870][ T4702] BTRFS info (device loop2): using free space tree [ 102.896873][ T4683] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 102.957010][ T4702] BTRFS info (device loop2): enabling ssd optimizations [ 103.086332][ T4683] usb 4-1: Using ep0 maxpacket: 8 [ 103.093770][ T4683] usb 4-1: config 0 has no interfaces? [ 103.104169][ T4683] usb 4-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 103.116045][ T4683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.124331][ T4683] usb 4-1: Product: syz [ 103.136722][ T4683] usb 4-1: Manufacturer: syz [ 103.147823][ T4683] usb 4-1: SerialNumber: syz [ 103.163053][ T4683] usb 4-1: config 0 descriptor?? [ 103.170621][ T4288] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 103.392874][ T4683] usb 4-1: USB disconnect, device number 4 [ 103.655739][ T4755] device dummy0 entered promiscuous mode [ 103.676789][ T4755] device dummy0 left promiscuous mode [ 103.967506][ T4763] netlink: 36 bytes leftover after parsing attributes in process `syz.0.115'. [ 103.999757][ T4765] loop1: detected capacity change from 0 to 128 [ 104.681824][ T4783] loop1: detected capacity change from 0 to 164 [ 105.051207][ T4793] loop1: detected capacity change from 0 to 128 [ 105.096523][ T4683] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 105.125614][ T4793] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 105.203594][ T4793] hpfs: filesystem error: improperly stopped [ 105.229046][ T4793] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 105.266743][ T4793] hpfs: You really don't want any checks? You are crazy... [ 105.274111][ T4793] hpfs: Code page directory magic doesn't match (magic = 7b3184b5) [ 105.286338][ T4683] usb 4-1: Using ep0 maxpacket: 16 [ 105.295030][ T4683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.312453][ T4793] hpfs: code page support is disabled [ 105.327540][ T4793] hpfs: hpfs_map_4sectors(): unaligned read [ 105.333747][ T4793] hpfs: hpfs_map_4sectors(): unaligned read [ 105.344656][ T4683] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.354653][ T4793] hpfs: filesystem error: unable to find root dir [ 105.385112][ T4683] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 105.417810][ T4683] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 105.428465][ T4793] hpfs: hpfs_map_4sectors(): unaligned read [ 105.445882][ T4793] hpfs: hpfs_map_sector(): read error [ 105.447803][ T4683] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.488834][ T4683] usb 4-1: config 0 descriptor?? [ 105.735577][ T4788] loop4: detected capacity change from 0 to 40427 [ 105.773906][ T4788] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 105.805470][ T4788] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 105.864085][ T4788] F2FS-fs (loop4): invalid crc value [ 105.932456][ T4683] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 105.940106][ T4788] F2FS-fs (loop4): Found nat_bits in checkpoint [ 105.973692][ T4683] microsoft 0003:045E:07DA.0002: unsupported Resolution Multiplier 0 [ 106.000302][ T4683] microsoft 0003:045E:07DA.0002: implement() called with n (152) > 32! (kworker/1:12) [ 106.131503][ T4683] microsoft 0003:045E:07DA.0002: unsupported Resolution Multiplier 0 [ 106.141044][ T4788] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 106.153815][ T4683] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 106.166439][ T4788] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 106.208345][ T4683] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 106.256235][ T4683] microsoft 0003:045E:07DA.0002: no inputs found [ 106.278618][ T4683] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 106.442449][ T4683] usb 4-1: USB disconnect, device number 5 [ 106.525508][ T4827] loop1: detected capacity change from 0 to 33280 [ 106.711298][ T4825] fido_id[4825]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 106.733754][ T4827] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 106.807585][ T4827] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 106.914815][ T4827] EXT4-fs error (device loop1): ext4_do_update_inode:5312: inode #2: comm syz.1.140: corrupted inode contents [ 106.994981][ T4827] EXT4-fs (loop1): Remounting filesystem read-only [ 107.046358][ T4827] EXT4-fs error (device loop1): ext4_dirty_inode:6199: inode #2: comm syz.1.140: mark_inode_dirty error [ 107.077975][ T4827] EXT4-fs (loop1): Remounting filesystem read-only [ 107.084898][ T4827] EXT4-fs error (device loop1): ext4_do_update_inode:5312: inode #2: comm syz.1.140: corrupted inode contents [ 107.166495][ T4827] EXT4-fs (loop1): Remounting filesystem read-only [ 107.184292][ T4850] Illegal XDP return value 4294967294 on prog (id 14) dev N/A, expect packet loss! [ 107.208110][ T4844] EXT4-fs error (device loop1): ext4_do_update_inode:5312: inode #2: comm syz.1.140: corrupted inode contents [ 107.284758][ T4844] EXT4-fs (loop1): Remounting filesystem read-only [ 107.300027][ T4844] EXT4-fs error (device loop1): ext4_dirty_inode:6199: inode #2: comm syz.1.140: mark_inode_dirty error [ 107.337484][ T4844] EXT4-fs (loop1): Remounting filesystem read-only [ 107.356537][ T4844] EXT4-fs error (device loop1): ext4_do_update_inode:5312: inode #2: comm syz.1.140: corrupted inode contents [ 107.399873][ T4844] EXT4-fs (loop1): Remounting filesystem read-only [ 107.427590][ T4844] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.140: mark_inode_dirty error [ 107.490955][ T4844] EXT4-fs (loop1): Remounting filesystem read-only [ 107.515843][ T4844] EXT4-fs error (device loop1): ext4_do_update_inode:5312: inode #2: comm syz.1.140: corrupted inode contents [ 107.586526][ T4844] EXT4-fs (loop1): Remounting filesystem read-only [ 107.593122][ T4844] EXT4-fs error (device loop1): ext4_dirty_inode:6199: inode #2: comm syz.1.140: mark_inode_dirty error [ 107.660788][ T4844] EXT4-fs (loop1): Remounting filesystem read-only [ 107.718051][ T4827] EXT4-fs error (device loop1): ext4_do_update_inode:5312: inode #2: comm syz.1.140: corrupted inode contents [ 107.924334][ T4859] loop3: detected capacity change from 0 to 49152 [ 107.962520][ T4859] EXT4-fs (loop3): Using encoding defined by superblock: utf8-12.1.0 with flags 0x0 [ 108.091855][ T4859] EXT4-fs (loop3): mounted filesystem with ordered data mode. Quota mode: none. [ 108.111703][ T4859] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.136182][ T4853] loop4: detected capacity change from 0 to 32768 [ 108.222273][ T4853] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 scanned by syz.4.148 (4853) [ 108.266480][ T4355] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 108.281145][ T4853] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 108.322429][ T4853] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 108.363296][ T4853] BTRFS info (device loop4): using free space tree [ 108.466493][ T4355] usb 2-1: Using ep0 maxpacket: 16 [ 108.478678][ T4355] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.492634][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 108.500213][ T4355] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.526178][ T4355] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.546362][ T4355] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 108.583651][ T4355] usb 2-1: config 0 interface 0 has no altsetting 0 [ 108.606558][ T4355] usb 2-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 108.615671][ T4355] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.646637][ T4355] usb 2-1: config 0 descriptor?? [ 108.716164][ T4853] BTRFS info (device loop4): enabling ssd optimizations [ 108.794184][ T4853] BTRFS error (device loop4): balance: mixed groups data and metadata options must be the same [ 108.938450][ T4278] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 109.089299][ T4355] logitech-djreceiver 0003:046D:C53A.0003: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.1-1/input0 [ 109.322402][ T4913] usb 2-1: USB disconnect, device number 3 [ 109.639759][ T4915] fido_id[4915]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 109.979989][ T4934] loop4: detected capacity change from 0 to 256 [ 110.070745][ T27] audit: type=1807 audit(1794555408.960:2): action=measure func=F res=0 [ 110.086578][ T4937] ima: policy update failed [ 110.106412][ T27] audit: type=1802 audit(1794555408.960:3): pid=4938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.180" res=0 errno=0 [ 110.175200][ T27] audit: type=1802 audit(1794555408.980:4): pid=4937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.180" res=0 errno=0 [ 110.487671][ T4954] netlink: 'syz.2.188': attribute type 11 has an invalid length. [ 111.126762][ T4749] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 111.342068][ T4749] usb 5-1: unable to get BOS descriptor or descriptor too short [ 111.375620][ T4749] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.465078][ T4749] usb 5-1: string descriptor 0 read error: -22 [ 111.509181][ T4749] usb 5-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 111.601363][ T4749] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.869608][ T4979] loop0: detected capacity change from 0 to 2048 [ 111.935292][ T4979] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.075452][ T4981] loop3: detected capacity change from 0 to 1024 [ 112.121067][ T4983] loop2: detected capacity change from 0 to 256 [ 112.257081][ T4984] hfsplus: request for non-existent node 62977 in B*Tree [ 112.264573][ T4984] hfsplus: request for non-existent node 62977 in B*Tree [ 112.287628][ T4983] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 112.317300][ T4749] usb 5-1: 1:1: cannot get freq at ep 0x1 [ 112.382937][ T27] audit: type=1800 audit(1794555411.270:5): pid=4983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.200" name="file2" dev="loop2" ino=1048632 res=0 errno=0 [ 112.431434][ T4983] exFAT-fs (loop2): hint_cluster is invalid (17) [ 112.461190][ T4983] exFAT-fs (loop2): error, invalid access to FAT (entry 0xffffffff) [ 112.488294][ T4983] exFAT-fs (loop2): Filesystem has been set read-only [ 112.500757][ T4749] usb 5-1: USB disconnect, device number 2 [ 112.571646][ T4986] exFAT-fs (loop2): error, broken FAT chain. [ 112.608896][ T4986] exFAT-fs (loop2): error, failed to bmap (inode : ffff8880564607e0 iblock : 24, err : -5) [ 112.633795][ T66] hfsplus: b-tree write err: -5, ino 3 [ 112.881305][ T4401] udevd[4401]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 113.155755][ T5002] loop4: detected capacity change from 0 to 33792 [ 113.217368][ T5002] EXT4-fs: Ignoring removed orlov option [ 113.339522][ T5002] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 113.457519][ T5013] vivid-000: disconnect [ 113.467393][ T5012] vivid-000: reconnect [ 113.504881][ T5015] loop3: detected capacity change from 0 to 33280 [ 113.618555][ T5015] EXT4-fs (loop3): 1 truncate cleaned up [ 113.625362][ T5015] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 113.649855][ T5015] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.213: bg 0: block 465: padding at end of block bitmap is not set [ 113.679156][ T5015] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 64 with error 28 [ 113.700470][ T5015] EXT4-fs (loop3): This should not happen!! Data will be lost [ 113.700470][ T5015] [ 113.716726][ T5015] EXT4-fs (loop3): Total free blocks count 0 [ 113.727318][ T5015] EXT4-fs (loop3): Free/Dirty block details [ 113.733422][ T5015] EXT4-fs (loop3): free_blocks=0 [ 113.741300][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 113.752591][ T5015] EXT4-fs (loop3): dirty_blocks=64 [ 113.782329][ T5015] EXT4-fs (loop3): Block reservation details [ 113.807929][ T5015] EXT4-fs (loop3): i_reserved_data_blocks=64 [ 113.988756][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 114.415740][ T5042] process 'syz.4.224' launched '/dev/fd/3' with NULL argv: empty string added [ 114.739945][ T5054] block device autoloading is deprecated and will be removed. [ 114.945937][ T5065] sctp: [Deprecated]: syz.4.233 (pid 5065) Use of struct sctp_assoc_value in delayed_ack socket option. [ 114.945937][ T5065] Use struct sctp_sack_info instead [ 116.145842][ T5106] netlink: 8 bytes leftover after parsing attributes in process `syz.0.251'. [ 116.163795][ T27] audit: type=1400 audit(1794555415.050:6): apparmor="STATUS" info="failed to unpack policydb" error=-71 profile="unconfined" name="p" pid=5104 comm="syz.4.252" name="p" offset=92 [ 116.841797][ T5139] loop1: detected capacity change from 0 to 8 [ 116.913276][ T5143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.269'. [ 117.393650][ T5164] loop4: detected capacity change from 0 to 164 [ 117.441223][ T5164] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 117.453235][ T5167] syz.2.279[5167] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.453340][ T5167] syz.2.279[5167] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.619771][ T4278] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 117.724927][ T4278] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 117.907698][ T5183] loop1: detected capacity change from 0 to 33280 [ 117.945871][ T27] audit: type=1400 audit(1794555416.830:7): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=5184 comm="syz.3.287" name="unknown" offset=28 [ 118.023770][ T5183] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 118.072181][ T5183] EXT4-fs error (device loop1): ext4_iget_extra_inode:4766: inode #15: comm syz.1.288: corrupted in-inode xattr [ 118.166528][ T5183] EXT4-fs error (device loop1): ext4_orphan_get:1414: comm syz.1.288: couldn't read orphan inode 15 (err -117) [ 118.243703][ T5183] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 118.444111][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 118.622901][ T5214] device-mapper: verity: sha512 using implementation "sha512-avx2" [ 118.635536][ T5212] scsi_dev_info_list_add_str: bad dev info string 'Ö' '(null)' '(null)' [ 118.643089][ T5214] device-mapper: table: 248:2: verity: Invalid salt (-EINVAL) [ 118.664757][ T5214] device-mapper: ioctl: error adding target to table [ 118.821309][ T5222] TCP: tcp_parse_options: Illegal window scaling value 170 > 14 received [ 118.830269][ T5222] TCP: tcp_parse_options: Illegal window scaling value 215 > 14 received [ 118.881133][ T5224] netlink: 56 bytes leftover after parsing attributes in process `syz.0.303'. [ 118.937181][ T5226] loop1: detected capacity change from 0 to 128 [ 119.073477][ T5232] loop3: detected capacity change from 0 to 256 [ 119.133524][ T5232] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 119.161972][ T27] audit: type=1800 audit(1794555418.050:8): pid=5232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.308" name="file1" dev="loop3" ino=1048634 res=0 errno=0 [ 119.203549][ T5236] netlink: 16 bytes leftover after parsing attributes in process `syz.0.310'. [ 119.261171][ T27] audit: type=1800 audit(1794555418.080:9): pid=5232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.308" name="file1" dev="loop3" ino=1048634 res=0 errno=0 [ 119.284595][ T5240] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 119.321275][ T5240] FAT-fs (loop3): Filesystem has been set read-only [ 119.345940][ T5238] loop2: detected capacity change from 0 to 33792 [ 119.361071][ T5238] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 119.399052][ T5240] FAT-fs (loop3): error, corrupted file size (i_pos 196, 16779008) [ 119.441415][ T5238] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 119.554914][ T5238] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 119.618764][ T4288] EXT4-fs (loop2): unmounting filesystem. [ 120.008569][ T5255] loop0: detected capacity change from 0 to 33280 [ 120.055525][ T5255] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 120.092713][ T5255] EXT4-fs (loop0): 1 truncate cleaned up [ 120.116615][ T5255] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 120.167122][ T5259] loop1: detected capacity change from 0 to 256 [ 120.268639][ T5259] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 120.326378][ T27] audit: type=1800 audit(1794555419.210:10): pid=5259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.319" name="file1" dev="loop1" ino=1048635 res=0 errno=0 [ 120.399232][ T4294] EXT4-fs (loop0): unmounting filesystem. [ 120.877773][ T5276] netlink: 128 bytes leftover after parsing attributes in process `syz.0.327'. [ 121.369041][ T5299] loop1: detected capacity change from 0 to 33792 [ 121.456213][ T5299] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 121.552671][ T5307] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 121.656422][ T5312] netlink: 'syz.4.341': attribute type 11 has an invalid length. [ 121.855226][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 122.484952][ T5332] capability: warning: `syz.3.349' uses 32-bit capabilities (legacy support in use) [ 122.549285][ T5332] program syz.3.349 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.686515][ T5326] device-mapper: table: 248:3: crypt: Error decoding and setting key (-EINVAL) [ 122.706125][ T5326] device-mapper: ioctl: error adding target to table [ 122.744167][ T5338] synth uevent: /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:00: unknown uevent action string [ 122.783004][ T5338] acpi device:00: uevent: failed to send synthetic uevent: -22 [ 123.037269][ T5349] Zero length message leads to an empty skb [ 123.263673][ T5357] netlink: 27 bytes leftover after parsing attributes in process `syz.2.358'. [ 123.301843][ T5363] netlink: 40 bytes leftover after parsing attributes in process `syz.0.361'. [ 123.532199][ T5373] loop0: detected capacity change from 0 to 33792 [ 123.570089][ T5373] EXT4-fs: Ignoring removed nomblk_io_submit option [ 123.591250][ T5373] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 123.624873][ T5373] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 123.654816][ T5373] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 123.679412][ T5373] System zones: 0-1, 3-36 [ 123.699150][ T5373] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 123.934530][ T4294] EXT4-fs (loop0): unmounting filesystem. [ 124.006875][ T5387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.371'. [ 124.015757][ T5387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.371'. [ 124.112031][ T5394] ip_tables: iptables: counters copy to user failed while replacing table [ 124.351542][ T5402] phram: illegal start address [ 124.826084][ T5425] loop1: detected capacity change from 0 to 33792 [ 124.834572][ T5425] EXT4-fs: Ignoring removed nomblk_io_submit option [ 124.842373][ T5425] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 124.855259][ T5425] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 124.895822][ T5425] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 124.916167][ T5425] System zones: 0-1, 3-36 [ 124.963666][ T5425] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 125.090683][ T27] audit: type=1326 audit(1794555423.980:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5435 comm="syz.3.395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ddfa94d9 code=0x7ffc0000 [ 125.091181][ T5436] netlink: 'syz.0.394': attribute type 32 has an invalid length. [ 125.126151][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 125.157370][ T27] audit: type=1326 audit(1794555424.020:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5435 comm="syz.3.395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7fb9ddfa94d9 code=0x7ffc0000 [ 125.167212][ T5436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.394'. [ 125.192796][ T5436] (unnamed net_device) (uninitialized): option coupled_control: invalid value (28) [ 125.202989][ T27] audit: type=1326 audit(1794555424.020:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5435 comm="syz.3.395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ddfa94d9 code=0x7ffc0000 [ 125.239935][ T27] audit: type=1326 audit(1794555424.020:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5435 comm="syz.3.395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ddfa94d9 code=0x7ffc0000 [ 125.299782][ T27] audit: type=1326 audit(1794555424.020:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5435 comm="syz.3.395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb9ddfa94d9 code=0x7ffc0000 [ 125.329533][ T27] audit: type=1326 audit(1794555424.040:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5435 comm="syz.3.395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ddfa94d9 code=0x7ffc0000 [ 125.405488][ T27] audit: type=1326 audit(1794555424.050:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5435 comm="syz.3.395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7fb9ddfa94d9 code=0x7ffc0000 [ 125.464897][ T27] audit: type=1326 audit(1794555424.050:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5435 comm="syz.3.395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ddfa94d9 code=0x7ffc0000 [ 125.571634][ T27] audit: type=1326 audit(1794555424.080:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5435 comm="syz.3.395" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb9ddfa94d9 code=0x7ffc0000 [ 125.650219][ T5446] loop0: detected capacity change from 0 to 33792 [ 125.691703][ T5446] EXT4-fs: Ignoring removed nomblk_io_submit option [ 125.761289][ T5446] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 125.778430][ T5450] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4288] was attempted by ""[5450] [ 125.822375][ T5454] netlink: 12 bytes leftover after parsing attributes in process `syz.1.402'. [ 126.075845][ T4294] EXT4-fs (loop0): unmounting filesystem. [ 126.112949][ T5463] loop1: detected capacity change from 0 to 256 [ 126.194435][ T5463] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 126.238658][ T27] audit: type=1800 audit(1794555425.130:20): pid=5463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.408" name="file1" dev="loop1" ino=1048636 res=0 errno=0 [ 126.293757][ T5466] loop3: detected capacity change from 0 to 33792 [ 126.316899][ T5471] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 126.328328][ T5466] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.377403][ T5466] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 126.384783][ T5471] FAT-fs (loop1): Filesystem has been set read-only [ 126.431499][ T5471] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 126.444079][ T5466] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 126.491605][ T5466] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 126.506980][ T5466] System zones: 0-1, 3-36 [ 126.532267][ T5466] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 126.581519][ T5476] loop2: detected capacity change from 0 to 1764 [ 126.752604][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 127.311245][ T5500] binder: BC_ACQUIRE_RESULT not supported [ 127.335617][ T5500] binder: 5498:5500 ioctl c0306201 200000000500 returned -22 [ 127.353733][ T5495] loop4: detected capacity change from 0 to 33792 [ 127.402345][ T5495] EXT4-fs (loop4): bad geometry: first data block is 0 with a 1k block and cluster size [ 127.810981][ T5512] loop1: detected capacity change from 0 to 512 [ 127.904842][ T5512] FAT-fs (loop1): error, corrupted file size (i_pos 0, 8960) [ 127.937848][ T5512] FAT-fs (loop1): error, corrupted file size (i_pos 0, 8960) [ 128.140065][ T5524] loop0: detected capacity change from 0 to 256 [ 128.193504][ T5524] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.352115][ T5531] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 128.384529][ T5531] FAT-fs (loop0): Filesystem has been set read-only [ 128.434144][ T5531] FAT-fs (loop0): error, corrupted file size (i_pos 196, 16779008) [ 128.581719][ T4357] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 128.654453][ T5540] loop4: detected capacity change from 0 to 64 [ 128.771765][ T5540] syz.4.442: attempt to access beyond end of device [ 128.771765][ T5540] loop4: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 128.789433][ T4357] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 128.815379][ T5540] Buffer I/O error on dev loop4, logical block 512, async page read [ 128.826550][ T4357] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 128.854451][ T5540] syz.4.442: attempt to access beyond end of device [ 128.854451][ T5540] loop4: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 128.876487][ T4357] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 128.896066][ T5540] Buffer I/O error on dev loop4, logical block 56576, async page read [ 128.905622][ T4357] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 128.929405][ T5542] syz.2.443 (5542) used greatest stack depth: 20512 bytes left [ 128.952451][ T4357] usb 4-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 128.968509][ T4357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.981592][ T4357] usb 4-1: Product: syz [ 128.985821][ T4357] usb 4-1: Manufacturer: syz [ 128.993841][ T4357] usb 4-1: SerialNumber: syz [ 129.005417][ T5528] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 129.040657][ T5528] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 129.072498][ T4357] oti6858 4-1:1.0: oti6858 converter detected [ 129.094127][ T4357] usb 4-1: oti6858 converter now attached to ttyUSB0 [ 129.572363][ T4357] usb 4-1: USB disconnect, device number 6 [ 129.607836][ T4357] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 129.634154][ T4357] oti6858 4-1:1.0: device disconnected [ 129.754278][ T5565] udc dummy_udc.0: soft-connect without a gadget driver [ 129.935170][ T5573] loop2: detected capacity change from 0 to 256 [ 129.945247][ T5571] loop1: detected capacity change from 0 to 1024 [ 129.961065][ T5573] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 129.993402][ T5553] loop4: detected capacity change from 0 to 32768 [ 130.132351][ T5579] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 130.179889][ T5553] XFS (loop4): Mounting V5 Filesystem [ 130.227608][ T5579] FAT-fs (loop2): Filesystem has been set read-only [ 130.257585][ T5579] FAT-fs (loop2): error, corrupted file size (i_pos 196, 16779008) [ 130.291765][ T5553] XFS (loop4): Ending clean mount [ 130.339622][ T5586] loop0: detected capacity change from 0 to 32896 [ 130.445874][ T5586] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 130.473517][ T5586] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.665238][ T4278] XFS (loop4): Unmounting Filesystem [ 130.834145][ T4294] EXT4-fs (loop0): unmounting filesystem. [ 131.080310][ T5599] input: syz0 as /devices/virtual/input/input15 [ 131.248396][ T5603] device bond0 entered promiscuous mode [ 131.254039][ T5603] device bond_slave_0 entered promiscuous mode [ 131.280041][ T5604] loop2: detected capacity change from 0 to 34816 [ 131.293691][ T5603] device bond_slave_1 entered promiscuous mode [ 131.328874][ T5604] EXT4-fs: Ignoring removed oldalloc option [ 131.389619][ T5604] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 131.431256][ T5604] EXT4-fs (loop2): shut down requested (2) [ 131.480091][ T4288] EXT4-fs (loop2): unmounting filesystem. [ 131.940337][ T5631] loop3: detected capacity change from 0 to 8 [ 132.164793][ T5640] netlink: 'syz.1.482': attribute type 8 has an invalid length. [ 132.339894][ T5646] netlink: 4 bytes leftover after parsing attributes in process `syz.1.483'. [ 132.494787][ T5649] loop4: detected capacity change from 0 to 33280 [ 132.505310][ T5650] loop1: detected capacity change from 0 to 32896 [ 132.544232][ T5650] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 132.583446][ T5649] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 132.598150][ T5649] EXT4-fs (loop4): shut down requested (0) [ 132.715045][ T5650] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 132.744151][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 132.752800][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.759951][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.905391][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 133.114631][ T5642] loop3: detected capacity change from 0 to 32768 [ 133.332233][ T5639] F2FS-fs (loop2): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 133.372862][ T5639] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 133.422925][ T5639] F2FS-fs (loop2): invalid crc value [ 133.488063][ T5639] F2FS-fs (loop2): Found nat_bits in checkpoint [ 133.690126][ T5639] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 133.701067][ T5639] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 133.799770][ T5672] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 133.931248][ T4288] syz-executor: attempt to access beyond end of device [ 133.931248][ T4288] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 134.184555][ T5684] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 134.760469][ T5702] set_capacity_and_notify: 1 callbacks suppressed [ 134.760486][ T5702] loop2: detected capacity change from 0 to 34816 [ 134.823658][ T5702] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 134.878755][ T5708] loop0: detected capacity change from 0 to 33280 [ 134.907181][ T5708] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 134.971277][ T5708] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 135.019147][ T4288] EXT4-fs (loop2): unmounting filesystem. [ 135.045205][ T5708] EXT4-fs (loop0): 1 truncate cleaned up [ 135.103210][ T5708] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 135.247817][ T27] kauditd_printk_skb: 22 callbacks suppressed [ 135.247832][ T27] audit: type=1400 audit(1794555434.140:43): apparmor="STATUS" info="failed to unpack profile" error=-71 profile="unconfined" name="unknown" pid=5713 comm="syz.2.511" name="unknown" offset=16 [ 135.427731][ T4294] EXT4-fs (loop0): unmounting filesystem. [ 135.585276][ T5719] loop1: detected capacity change from 0 to 4096 [ 135.604014][ T5725] No such timeout policy "syz1" [ 135.613795][ T5719] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 136.581446][ T5754] tun0: tun_chr_ioctl cmd 1074812117 [ 136.973250][ T5768] loop1: detected capacity change from 0 to 256 [ 137.012823][ T5770] ip_tables: iptables: counters copy to user failed while replacing table [ 137.025580][ T5770] netlink: 4 bytes leftover after parsing attributes in process `syz.3.534'. [ 137.090005][ T5768] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 137.148887][ T27] audit: type=1800 audit(1794555436.040:44): pid=5768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.533" name="file2" dev="loop1" ino=1048642 res=0 errno=0 [ 137.170043][ T22] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 137.369003][ T22] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 137.391548][ T22] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.432905][ T5784] loop1: detected capacity change from 0 to 16 [ 137.513000][ T5784] erofs: (device loop1): mounted with root inode @ nid 36. [ 137.755996][ T27] audit: type=1400 audit(1794555436.640:45): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="p" pid=5789 comm="syz.1.544" name="p" offset=48 [ 137.991013][ T5778] loop3: detected capacity change from 0 to 40427 [ 138.007695][ T5778] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 138.025588][ T5778] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 138.067401][ T5778] F2FS-fs (loop3): Found nat_bits in checkpoint [ 138.136445][ T4357] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 138.215649][ T5778] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 138.225297][ T5778] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 138.236844][ T22] usb 1-1: Cannot set autoneg [ 138.245560][ T22] MOSCHIP usb-ethernet driver: probe of 1-1:7.0 failed with error -71 [ 138.274261][ T22] usb 1-1: USB disconnect, device number 2 [ 138.328356][ T4357] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.346363][ T4357] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 138.372033][ T4357] usb 2-1: config 0 interface 0 has no altsetting 0 [ 138.385507][ T4357] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 138.426726][ T4357] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.457310][ T4357] usb 2-1: config 0 descriptor?? [ 138.834156][ T5819] netlink: 116 bytes leftover after parsing attributes in process `syz.2.556'. [ 138.879947][ T4357] hid_parser_main: 3 callbacks suppressed [ 138.879968][ T4357] hid-multitouch 0003:0EEF:72C4.0004: unknown main item tag 0x7 [ 138.906650][ T4357] hid-multitouch 0003:0EEF:72C4.0004: unbalanced collection at end of report description [ 138.938636][ T4357] hid-multitouch: probe of 0003:0EEF:72C4.0004 failed with error -22 [ 139.121662][ T4749] usb 2-1: USB disconnect, device number 4 [ 139.968777][ T5827] loop3: detected capacity change from 0 to 131072 [ 139.985479][ T5827] F2FS-fs (loop3): invalid crc value [ 140.001330][ T5827] F2FS-fs (loop3): Found nat_bits in checkpoint [ 140.036264][ C1] sched: RT throttling activated [ 140.061079][ T5827] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 140.071582][ T5827] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 140.089275][ T5827] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 140.235064][ T5854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.569'. [ 140.429867][ T5857] loop2: detected capacity change from 0 to 33280 [ 140.512795][ T5857] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 140.547576][ T5857] EXT4-fs error (device loop2): ext4_iget_extra_inode:4766: inode #15: comm syz.2.573: corrupted in-inode xattr [ 140.578592][ T5857] EXT4-fs error (device loop2): ext4_orphan_get:1414: comm syz.2.573: couldn't read orphan inode 15 (err -117) [ 140.631574][ T5857] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 140.865535][ T4288] EXT4-fs (loop2): unmounting filesystem. [ 141.488895][ T5888] loop1: detected capacity change from 0 to 33280 [ 141.588348][ T5888] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 141.651625][ T5888] EXT4-fs error (device loop1): ext4_orphan_get:1435: comm syz.1.585: bad orphan inode 131083 [ 141.722733][ T5897] netlink: 52 bytes leftover after parsing attributes in process `syz.0.588'. [ 141.752904][ T5898] loop4: detected capacity change from 0 to 8192 [ 141.784468][ T5888] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 141.797988][ T9] wlan1: Trigger new scan to find an IBSS to join [ 141.831710][ T5897] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 141.832463][ T5898] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 141.932853][ T5898] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 141.997730][ T5898] REISERFS (device loop4): using ordered data mode [ 142.004312][ T5898] reiserfs: using flush barriers [ 142.044972][ T5898] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 142.098806][ T5888] EXT4-fs error (device loop1): ext4_find_dest_de:2117: inode #12: block 7: comm syz.1.585: bad entry in directory: rec_len % 4 != 0 - offset=16, inode=1560281102, rec_len=65535, size=56 fake=0 [ 142.119072][ T5898] REISERFS (device loop4): checking transaction log (loop4) [ 142.194978][ T5906] loop0: detected capacity change from 0 to 33280 [ 142.224114][ T5906] EXT4-fs: Ignoring removed nobh option [ 142.317248][ T5906] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 142.380730][ T5906] ext4 filesystem being mounted at /127/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 142.381490][ T4279] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 142.405530][ T5906] EXT4-fs (loop0): shut down requested (2) [ 142.506468][ T4296] Bluetooth: hci0: command 0x0409 tx timeout [ 142.571285][ T4294] EXT4-fs (loop0): unmounting filesystem. [ 142.593782][ T5898] REISERFS (device loop4): Using tea hash to sort names [ 142.648046][ T5898] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 142.768808][ T4296] Bluetooth: unknown link type 85 [ 142.773937][ T4296] Bluetooth: hci3: connection err: -111 [ 142.812893][ T5916] loop2: detected capacity change from 0 to 33280 [ 142.882073][ T5898] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 2) not found (pos 4) [ 142.923948][ T5916] EXT4-fs (loop2): bad s_min_extra_isize: 65535 [ 143.033162][ T5922] loop0: detected capacity change from 0 to 16 [ 143.059048][ T5922] erofs: (device loop0): mounted with root inode @ nid 36. [ 143.121301][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 143.392958][ T48] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.557088][ T48] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.740073][ T48] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.901337][ T48] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.068423][ T5938] loop0: detected capacity change from 0 to 16 [ 144.140299][ T5938] erofs: Unknown parameter 'ÿ' [ 144.554233][ T5948] loop0: detected capacity change from 0 to 764 [ 144.867493][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 144.896526][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 144.905149][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 144.919451][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 144.927084][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 144.934533][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 145.066784][ T4357] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 145.116177][ T5961] rxe_eth0 speed is unknown, defaulting to 1000 [ 145.258746][ T4357] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 145.275958][ T4357] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.329245][ T4357] usb 4-1: config 0 descriptor?? [ 145.348873][ T4357] cp210x 4-1:0.0: cp210x converter detected [ 145.757321][ T4357] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 145.812706][ T4357] usb 4-1: cp210x converter now attached to ttyUSB0 [ 145.865304][ T5992] loop4: detected capacity change from 0 to 33280 [ 145.923293][ T5992] EXT4-fs: Ignoring removed nobh option [ 145.980061][ T4358] usb 4-1: USB disconnect, device number 7 [ 146.049169][ T5992] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 146.066505][ T5992] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 146.099960][ T4358] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 146.116571][ T5961] chnl_net:caif_netlink_parms(): no params data found [ 146.146824][ T4358] cp210x 4-1:0.0: device disconnected [ 146.168720][ T6001] netlink: 12 bytes leftover after parsing attributes in process `syz.0.628'. [ 146.208840][ T5992] EXT4-fs (loop4): shut down requested (2) [ 146.354385][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 146.669317][ T5961] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.716743][ T5961] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.742274][ T5961] device bridge_slave_0 entered promiscuous mode [ 146.787511][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.807362][ T5961] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.828298][ T58] wlan1: Trigger new scan to find an IBSS to join [ 146.846204][ T5961] device bridge_slave_1 entered promiscuous mode [ 146.986535][ T4281] Bluetooth: hci1: command 0x0409 tx timeout [ 147.055527][ T6020] loop2: detected capacity change from 0 to 8192 [ 147.106046][ T6020] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 147.179142][ T5961] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.227420][ T6020] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 147.249106][ T6020] REISERFS (device loop2): using ordered data mode [ 147.255845][ T6020] reiserfs: using flush barriers [ 147.274615][ T6020] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 147.299981][ T5961] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.373126][ T48] device hsr_slave_0 left promiscuous mode [ 147.397225][ T48] device hsr_slave_1 left promiscuous mode [ 147.406853][ T6020] REISERFS (device loop2): checking transaction log (loop2) [ 147.445613][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 147.474246][ T6030] loop3: detected capacity change from 0 to 33280 [ 147.495394][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.534215][ T6030] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 147.558944][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.589465][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.608330][ T6030] EXT4-fs error (device loop3): ext4_orphan_get:1435: comm syz.3.637: bad orphan inode 131083 [ 147.621236][ T6022] loop0: detected capacity change from 0 to 32768 [ 147.637738][ T6022] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.634 (6022) [ 147.677234][ T48] device bridge_slave_1 left promiscuous mode [ 147.707049][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.781229][ T48] device bridge_slave_0 left promiscuous mode [ 147.793455][ T6022] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 147.793787][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.812743][ T6030] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 147.821614][ T33] wlan1: Creating new IBSS network, BSSID 5e:da:49:8a:50:e8 [ 147.897402][ T6022] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 147.924066][ T6020] REISERFS (device loop2): Using tea hash to sort names [ 147.942097][ T6030] EXT4-fs error (device loop3): ext4_find_dest_de:2117: inode #12: block 7: comm syz.3.637: bad entry in directory: rec_len % 4 != 0 - offset=16, inode=1560281102, rec_len=65535, size=56 fake=0 [ 147.956509][ T6022] BTRFS info (device loop0): use zlib compression, level 3 [ 147.978281][ T6020] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 148.036310][ T6022] BTRFS info (device loop0): using free space tree [ 148.067905][ T48] device veth1_macvtap left promiscuous mode [ 148.074773][ T48] device veth0_macvtap left promiscuous mode [ 148.101777][ T48] device veth1_vlan left promiscuous mode [ 148.132345][ T48] device veth0_vlan left promiscuous mode [ 148.165748][ T4286] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 148.282914][ T6020] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 2) not found (pos 4) [ 148.329016][ T6054] loop4: detected capacity change from 0 to 2048 [ 148.346484][ T6022] BTRFS info (device loop0): enabling ssd optimizations [ 148.470106][ T6054] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.737901][ T4294] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 148.978363][ T6061] loop4: detected capacity change from 0 to 16 [ 148.997375][ T6061] erofs: (device loop4): mounted with root inode @ nid 36. [ 149.066457][ T4281] Bluetooth: hci1: command 0x041b tx timeout [ 150.320171][ T48] team0 (unregistering): Port device team_slave_1 removed [ 150.373356][ T48] team0 (unregistering): Port device team_slave_0 removed [ 150.417138][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.462956][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.798933][ T48] bond0 (unregistering): Released all slaves [ 150.934778][ T5961] team0: Port device team_slave_0 added [ 150.978822][ T5961] team0: Port device team_slave_1 added [ 151.073153][ T6095] loop4: detected capacity change from 0 to 33280 [ 151.082394][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.090687][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.122811][ T4286] EXT4-fs (loop3): unmounting filesystem. [ 151.130058][ T5961] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.153878][ T6095] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 151.157483][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 151.175290][ T6096] loop2: detected capacity change from 0 to 1024 [ 151.185955][ T5961] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.193178][ T5961] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.226377][ T5961] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.276938][ T6095] EXT4-fs error (device loop4): ext4_orphan_get:1435: comm syz.4.650: bad orphan inode 131083 [ 151.310969][ T6096] hfsplus: catalog searching failed [ 151.399809][ T6095] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 151.499556][ T5961] device hsr_slave_0 entered promiscuous mode [ 151.535063][ T6095] EXT4-fs error (device loop4): ext4_find_dest_de:2117: inode #12: block 7: comm syz.4.650: bad entry in directory: rec_len % 4 != 0 - offset=16, inode=1560281102, rec_len=65535, size=56 fake=0 [ 151.564542][ T5961] device hsr_slave_1 entered promiscuous mode [ 151.593666][ T5961] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.606094][ T4373] hfsplus: bad catalog file entry [ 151.616342][ T4373] hfsplus: b-tree write err: -5, ino 3 [ 151.626515][ T5961] Cannot create hsr debugfs directory [ 151.801157][ T4278] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 152.300330][ T5499] EXT4-fs (loop4): unmounting filesystem. [ 152.478940][ T5961] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 152.590023][ T5961] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 152.614869][ T5961] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 152.640658][ T5961] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 152.770930][ T48] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.841861][ T4358] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 152.921569][ T48] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.025382][ T48] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.026464][ T4358] usb 3-1: Using ep0 maxpacket: 8 [ 153.054210][ T4358] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 153.075388][ T4358] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 153.094673][ T4358] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 153.118385][ T4358] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 153.141105][ T4358] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.179366][ T4296] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.180740][ T4358] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 153.197082][ T4293] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.206531][ T4293] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.215886][ T4293] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.223722][ T4293] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.234662][ T4293] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.238169][ T4296] Bluetooth: hci1: command 0x0419 tx timeout [ 153.262028][ T4358] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.318529][ T48] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.392638][ T5961] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.459772][ T6126] rxe_eth0 speed is unknown, defaulting to 1000 [ 153.483027][ T4358] usb 3-1: GET_CAPABILITIES returned 0 [ 153.488857][ T4358] usbtmc 3-1:16.0: can't read capabilities [ 153.510988][ T5961] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.522053][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.532501][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.561440][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.593699][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.623668][ T4384] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.630915][ T4384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.648117][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.663095][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.672806][ T4384] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.680111][ T4384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.717840][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.735595][ T3604] usb 3-1: USB disconnect, device number 3 [ 153.772389][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.785323][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.872038][ T4296] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 153.883923][ T4296] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 153.892662][ T4296] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 153.900009][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.909972][ T4296] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 153.920934][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.921278][ T4296] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 153.937640][ T4296] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 153.948234][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 153.957639][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 153.966979][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 153.984194][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 153.992888][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.053617][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.071487][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.084437][ T5961] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.170799][ T48] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.213529][ T6129] rxe_eth0 speed is unknown, defaulting to 1000 [ 154.323172][ T48] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.447671][ T6143] netlink: 8 bytes leftover after parsing attributes in process `syz.2.663'. [ 154.551433][ T48] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.674180][ T48] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.023261][ T6141] loop0: detected capacity change from 0 to 32768 [ 155.058511][ T6141] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.672 (6141) [ 155.098774][ T6126] chnl_net:caif_netlink_parms(): no params data found [ 155.197520][ T6141] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 155.224375][ T6141] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 155.261149][ T6141] BTRFS info (device loop0): enabling auto defrag [ 155.286522][ T6141] BTRFS info (device loop0): use no compression [ 155.292862][ T6141] BTRFS info (device loop0): force clearing of disk cache [ 155.306628][ T4296] Bluetooth: hci0: command 0x0409 tx timeout [ 155.326840][ T6141] BTRFS info (device loop0): max_inline at 4096 [ 155.333186][ T6141] BTRFS info (device loop0): disabling free space tree [ 155.520116][ T6141] BTRFS info (device loop0): enabling ssd optimizations [ 155.546085][ T6141] BTRFS info (device loop0): rebuilding free space tree [ 155.616422][ T6141] BTRFS info (device loop0): disabling free space tree [ 155.626751][ T6141] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 155.640557][ T6141] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 155.660161][ T6129] chnl_net:caif_netlink_parms(): no params data found [ 155.682510][ T6126] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.692898][ T6126] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.702228][ T6126] device bridge_slave_0 entered promiscuous mode [ 155.715202][ T6126] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.723120][ T6126] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.732143][ T6126] device bridge_slave_1 entered promiscuous mode [ 155.910008][ T4294] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 155.980818][ T6126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.014238][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 156.027402][ T4296] Bluetooth: hci2: command 0x0409 tx timeout [ 156.047127][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 156.105970][ T4629] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 12 /dev/loop0 scanned by udevd (4629) [ 156.314716][ T4358] kernel write not supported for file /slabinfo (pid: 4358 comm: kworker/0:3) [ 156.323862][ T5961] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.355451][ T6126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.648281][ T6126] team0: Port device team_slave_0 added [ 156.799189][ T6126] team0: Port device team_slave_1 added [ 156.828785][ T6129] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.838081][ T6129] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.865757][ T6129] device bridge_slave_0 entered promiscuous mode [ 156.915009][ T6199] loop2: detected capacity change from 0 to 4096 [ 156.925928][ T6129] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.937085][ T6129] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.965868][ T6129] device bridge_slave_1 entered promiscuous mode [ 156.985134][ T6199] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 157.073857][ T6199] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 157.106995][ T6126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.114057][ T6126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.140883][ T6126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.275250][ T6126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.292643][ T6126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.345670][ T6126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.386535][ T4296] Bluetooth: hci0: command 0x041b tx timeout [ 157.470545][ T6129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.520418][ T6129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.707872][ T6126] device hsr_slave_0 entered promiscuous mode [ 157.732158][ T6126] device hsr_slave_1 entered promiscuous mode [ 157.747455][ T6126] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 157.755078][ T6126] Cannot create hsr debugfs directory [ 157.900748][ T6129] team0: Port device team_slave_0 added [ 157.964330][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 157.973523][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 157.994404][ T6129] team0: Port device team_slave_1 added [ 158.049717][ T130] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 158.107554][ T4296] Bluetooth: hci2: command 0x041b tx timeout [ 158.114978][ T6129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.136834][ T6129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.166172][ T6129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.246475][ T130] usb 1-1: Using ep0 maxpacket: 8 [ 158.253505][ T130] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 158.272299][ T130] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 158.283049][ T6129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.290729][ T6129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.317375][ T130] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 158.327601][ T130] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 158.339198][ T130] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.354862][ T6129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.371120][ T130] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 158.380617][ T130] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.429253][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 158.444918][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 158.470740][ T5961] device veth0_vlan entered promiscuous mode [ 158.550478][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 158.559007][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 158.595225][ T6129] device hsr_slave_0 entered promiscuous mode [ 158.602406][ T6129] device hsr_slave_1 entered promiscuous mode [ 158.609552][ T6129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.619414][ T130] usb 1-1: GET_CAPABILITIES returned 0 [ 158.624959][ T130] usbtmc 1-1:16.0: can't read capabilities [ 158.627390][ T6129] Cannot create hsr debugfs directory [ 158.682472][ T5961] device veth1_vlan entered promiscuous mode [ 158.847765][ T22] usb 1-1: USB disconnect, device number 3 [ 159.009729][ T48] device hsr_slave_0 left promiscuous mode [ 159.027328][ T48] device hsr_slave_1 left promiscuous mode [ 159.033854][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.042061][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.051978][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.059777][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.067031][ T4296] Bluetooth: hci4: command 0x0409 tx timeout [ 159.075288][ T48] device bridge_slave_1 left promiscuous mode [ 159.089923][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.111580][ T48] device bridge_slave_0 left promiscuous mode [ 159.122566][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.140003][ T48] device hsr_slave_0 left promiscuous mode [ 159.153054][ T48] device hsr_slave_1 left promiscuous mode [ 159.165843][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.175710][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.193516][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.204485][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.217010][ T48] device bridge_slave_1 left promiscuous mode [ 159.223278][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.245118][ T48] device bridge_slave_0 left promiscuous mode [ 159.254669][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.354280][ T48] device veth1_macvtap left promiscuous mode [ 159.365552][ T48] device veth0_macvtap left promiscuous mode [ 159.376449][ T48] device veth1_vlan left promiscuous mode [ 159.382346][ T48] device veth0_vlan left promiscuous mode [ 159.424060][ T48] device veth1_macvtap left promiscuous mode [ 159.433522][ T48] device veth0_macvtap left promiscuous mode [ 159.453306][ T48] device veth1_vlan left promiscuous mode [ 159.459902][ T48] device veth0_vlan left promiscuous mode [ 159.466865][ T4293] Bluetooth: hci0: command 0x040f tx timeout [ 160.190375][ T4293] Bluetooth: hci2: command 0x040f tx timeout [ 160.514362][ T48] team0 (unregistering): Port device team_slave_1 removed [ 160.560931][ T48] team0 (unregistering): Port device team_slave_0 removed [ 160.606477][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.651525][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.000209][ T48] bond0 (unregistering): Released all slaves [ 161.536427][ T48] team0 (unregistering): Port device team_slave_1 removed [ 161.546918][ T4293] Bluetooth: hci0: command 0x0419 tx timeout [ 161.588190][ T48] team0 (unregistering): Port device team_slave_0 removed [ 161.632062][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.677053][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.980964][ T48] bond0 (unregistering): Released all slaves [ 162.092128][ T5961] device veth0_macvtap entered promiscuous mode [ 162.135261][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 162.173436][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 162.199067][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 162.228438][ T6126] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 162.266370][ T4293] Bluetooth: hci2: command 0x0419 tx timeout [ 162.276070][ T5961] device veth1_macvtap entered promiscuous mode [ 162.326449][ T6126] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 162.345394][ T6126] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 162.475280][ T6126] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 162.513806][ T6129] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 162.559117][ T6129] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 162.600236][ T6129] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 162.960241][ T6126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.048202][ T6126] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.124581][ T6249] loop2: detected capacity change from 0 to 32768 [ 163.172183][ T6249] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 12 [ 163.207351][ T6126] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 163.260932][ T6126] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 163.571414][ T6253] loop0: detected capacity change from 0 to 131072 [ 163.594720][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.605310][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.615319][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.628505][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.645972][ T6253] F2FS-fs (loop0): Test dummy encryption mode enabled [ 163.653766][ T4629] I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 163.667248][ T6253] F2FS-fs (loop0): invalid crc value [ 163.678366][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.699584][ T6253] F2FS-fs (loop0): Found nat_bits in checkpoint [ 163.758741][ T6253] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 163.776158][ T6253] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0 [ 163.788635][ T6253] F2FS-fs (loop0): Start checkpoint disabled! [ 163.805828][ T6129] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 163.814995][ T6253] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 163.865818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 163.897408][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.935985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 163.959306][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 163.999472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.038068][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.045257][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.079248][ T6253] fscrypt (loop0, inode 4): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 164.145588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.237860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.276528][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.283683][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.336767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.376886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.386117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 164.407633][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.419360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 164.437402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.475882][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.507214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.537531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 164.547352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 164.577810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 164.608300][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 164.634471][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.655597][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.676711][ T5961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.704395][ T5961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.736628][ T5961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.767763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.776671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 164.803810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 164.819816][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 164.860700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 164.919474][ T5961] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.946302][ T5961] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.955078][ T5961] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.016385][ T5961] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.115234][ T6288] kAFS: bad VL server IP address [ 165.327199][ T6129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.377564][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.385461][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.476417][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 165.484201][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.499204][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.516960][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 165.546121][ T6129] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.585677][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.594574][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.607651][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.615161][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.702129][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.713177][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.757305][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.764493][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.824175][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.844820][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.868340][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.875510][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.887003][ T6126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 165.896208][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.930739][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.948074][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.986444][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.032016][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.080457][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.103400][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.127634][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.146723][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.166557][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.192513][ T6129] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.237483][ T6129] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 166.258462][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.268357][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.314252][ T6314] loop2: detected capacity change from 0 to 131072 [ 167.326617][ T6314] F2FS-fs (loop2): Test dummy encryption mode enabled [ 167.341418][ T6314] F2FS-fs (loop2): invalid crc value [ 167.383230][ T6314] F2FS-fs (loop2): Found nat_bits in checkpoint [ 167.422353][ T6314] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 167.461176][ T6314] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 167.471598][ T6314] F2FS-fs (loop2): Start checkpoint disabled! [ 167.499362][ T6314] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 167.735996][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.755775][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.768166][ T6314] fscrypt (loop2, inode 4): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 167.843422][ T6129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.196478][ T6354] input: syz0 as /devices/virtual/input/input17 [ 168.307573][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 168.326996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 168.420454][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 168.458127][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 168.480011][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 168.520454][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 168.562349][ T6126] device veth0_vlan entered promiscuous mode [ 168.580261][ T6331] loop5: detected capacity change from 0 to 32768 [ 168.651125][ T6331] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 12 [ 168.681996][ T6126] device veth1_vlan entered promiscuous mode [ 168.755174][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 168.777635][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 168.847400][ T6366] netlink: 8 bytes leftover after parsing attributes in process `syz.2.701'. [ 168.902856][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.912709][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.988346][ T6126] device veth0_macvtap entered promiscuous mode [ 169.018748][ T6126] device veth1_macvtap entered promiscuous mode [ 169.119594][ T6126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.147197][ T6126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.164195][ T4446] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 12 [ 169.183612][ T6375] futex_wake_op: syz.2.705 tries to shift op by -1; fix this program [ 169.195839][ T6126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.224430][ T6126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.256696][ T6126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.294295][ T6126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.339054][ T6126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.355659][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 169.380491][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 169.441625][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 169.467962][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 169.512926][ T6126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.546886][ T6126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.591257][ T6126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.640370][ T6126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.680783][ T6126] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.715188][ T6126] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.755430][ T6126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.789871][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 169.808334][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.858791][ T6126] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.882545][ T6126] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.926341][ T6126] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.949381][ T6126] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.045997][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 170.091278][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 170.205659][ T6129] device veth0_vlan entered promiscuous mode [ 170.257059][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 170.275832][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 170.306148][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 170.342551][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 170.410613][ T6129] device veth1_vlan entered promiscuous mode [ 170.439257][ T3604] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 170.475901][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.490418][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.534663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan0: link becomes ready [ 170.550671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 170.579667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 170.597345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 170.630410][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.649605][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.658741][ T6129] device veth0_macvtap entered promiscuous mode [ 170.660199][ T3604] usb 3-1: Using ep0 maxpacket: 16 [ 170.679103][ T3604] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.710793][ T3604] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.726862][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): ipvlan1: link becomes ready [ 170.736339][ T3604] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.757212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 170.794174][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 170.802289][ T3604] usb 3-1: config 0 interface 0 has no altsetting 0 [ 170.813259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.821394][ T3604] usb 3-1: New USB device found, idVendor=056a, idProduct=5200, bcdDevice= 0.00 [ 170.837343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 170.844995][ T3604] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.867915][ T6129] device veth1_macvtap entered promiscuous mode [ 170.882449][ T3604] usb 3-1: config 0 descriptor?? [ 170.937978][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.968892][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.986480][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.014143][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.039565][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.075157][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.095351][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.106056][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.139002][ T6129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.175026][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 171.188409][ T6273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.203111][ T6392] loop0: detected capacity change from 0 to 40427 [ 171.219243][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.235018][ T6392] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 171.247592][ T6392] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 171.262054][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.280670][ T6392] F2FS-fs (loop0): invalid crc value [ 171.286470][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.320249][ T6392] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 171.322960][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.362860][ T3604] wacom 0003:056A:5200.0005: unknown main item tag 0x0 [ 171.372304][ T3604] wacom 0003:056A:5200.0005: unknown main item tag 0x0 [ 171.383067][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.397079][ T3604] wacom 0003:056A:5200.0005: unknown main item tag 0x0 [ 171.404135][ T3604] wacom 0003:056A:5200.0005: unknown main item tag 0x0 [ 171.412578][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.423580][ T3604] wacom 0003:056A:5200.0005: unknown main item tag 0x0 [ 171.430813][ T3604] wacom 0003:056A:5200.0005: unknown main item tag 0x0 [ 171.440052][ T6129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.455976][ T3604] wacom 0003:056A:5200.0005: unknown main item tag 0x0 [ 171.465148][ T6129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.484007][ T3604] wacom 0003:056A:5200.0005: unknown main item tag 0x0 [ 171.493235][ T3604] wacom 0003:056A:5200.0005: unknown main item tag 0x0 [ 171.507855][ T6129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.515515][ T3604] wacom 0003:056A:5200.0005: unknown main item tag 0x0 [ 171.530199][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 171.545519][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 171.569022][ T3604] wacom 0003:056A:5200.0005: Unknown device_type for 'HID 056a:5200'. Ignoring. [ 171.589767][ T3604] usb 3-1: USB disconnect, device number 4 [ 171.600648][ T6129] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.628226][ T6129] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.672698][ T6129] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.682075][ T6392] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 171.697176][ T6392] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 171.706044][ T6129] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.887926][ T4373] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.895819][ T4373] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.915456][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 171.933119][ T4294] syz-executor: attempt to access beyond end of device [ 171.933119][ T4294] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 171.990861][ T4373] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.005607][ T4373] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.023358][ T58] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 172.291242][ T6420] device bond0 entered promiscuous mode [ 172.297085][ T6420] device bond_slave_0 entered promiscuous mode [ 172.303535][ T6420] device bond_slave_1 entered promiscuous mode [ 172.336415][ T4680] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 172.487394][ T4358] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 172.542719][ T4680] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 172.566195][ T4680] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 172.599042][ T4680] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 102, changing to 10 [ 172.610761][ T4680] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 24624, setting to 1024 [ 172.630421][ T4680] usb 6-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 172.668924][ T4680] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.688027][ T4358] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 172.711957][ T4680] usb 6-1: Product: syz [ 172.716193][ T4680] usb 6-1: Manufacturer: syz [ 172.716677][ T4358] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 172.731850][ T4680] usb 6-1: SerialNumber: syz [ 172.751740][ T4358] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 172.782233][ T4358] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 172.806612][ T6413] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 172.823746][ T4358] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 172.824707][ T6413] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 172.854186][ T4680] oti6858 6-1:1.0: oti6858 converter detected [ 172.864600][ T4680] usb 6-1: oti6858 converter now attached to ttyUSB0 [ 172.897279][ T4358] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 172.949697][ T4358] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 172.976340][ T4358] usb 8-1: Product: syz [ 172.989229][ T4358] usb 8-1: Manufacturer: syz [ 173.023120][ T4358] cdc_wdm 8-1:1.0: skipping garbage [ 173.037490][ T4358] cdc_wdm 8-1:1.0: skipping garbage [ 173.055170][ T6438] 9pnet_fd: Insufficient options for proto=fd [ 173.085662][ T4358] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 173.103023][ T4358] cdc_wdm 8-1:1.0: Unknown control protocol [ 173.271799][ T4680] usb 8-1: USB disconnect, device number 2 [ 173.331709][ T4358] usb 6-1: USB disconnect, device number 2 [ 173.345752][ T6441] input: syz1 as /devices/virtual/input/input21 [ 173.412600][ T4358] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 173.440381][ T4358] oti6858 6-1:1.0: device disconnected [ 173.538700][ T6430] loop2: detected capacity change from 0 to 32768 [ 173.585916][ T6430] JBD2: Ignoring recovery information on journal [ 173.656457][ T6430] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 173.727315][ T6451] i2c i2c-0: delete_device: Can't find device in list [ 173.955262][ T4288] ocfs2: Unmounting device (7,2) on (node local) [ 174.074010][ T6458] loop6: detected capacity change from 0 to 256 [ 174.432190][ T6470] loop0: detected capacity change from 0 to 33792 [ 174.462993][ T6469] netlink: 16 bytes leftover after parsing attributes in process `syz.5.730'. [ 174.528889][ T6476] netlink: 12 bytes leftover after parsing attributes in process `syz.5.730'. [ 174.551372][ T6470] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 174.586434][ T6470] ext4 filesystem being mounted at /176/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.376340][ T4680] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 175.582637][ T4680] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 175.601603][ T4680] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 175.633744][ T4384] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: comm kworker/u4:7: lblock 0 mapped to illegal pblock 0 (length 6) [ 175.660008][ T4680] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 175.690412][ T4680] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 175.716034][ T4384] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117 [ 175.726411][ T4680] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 175.766362][ T4384] EXT4-fs (loop0): This should not happen!! Data will be lost [ 175.766362][ T4384] [ 175.794510][ T4680] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 175.802771][ T58] EXT4-fs error (device loop0): ext4_map_blocks:747: inode #15: block 8: comm kworker/u4:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 175.843019][ T4680] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 175.850231][ T58] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 175.881977][ T4680] usb 7-1: Product: syz [ 175.896839][ T4680] usb 7-1: Manufacturer: syz [ 175.896860][ T58] EXT4-fs (loop0): This should not happen!! Data will be lost [ 175.896860][ T58] [ 175.928139][ T4680] cdc_wdm 7-1:1.0: skipping garbage [ 175.966299][ T4680] cdc_wdm 7-1:1.0: skipping garbage [ 175.986836][ T4680] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 175.992816][ T4680] cdc_wdm 7-1:1.0: Unknown control protocol [ 176.003207][ T6495] loop5: detected capacity change from 0 to 32768 [ 176.053822][ T6493] loop2: detected capacity change from 0 to 32768 [ 176.094862][ T6495] JBD2: Ignoring recovery information on journal [ 176.123351][ T6493] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.738 (6493) [ 176.209261][ T6493] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 176.225973][ T6493] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 176.254033][ T6495] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 176.269506][ T4680] usb 7-1: USB disconnect, device number 2 [ 176.305933][ T6493] BTRFS info (device loop2): using free space tree [ 176.360455][ T4294] EXT4-fs (loop0): unmounting filesystem. [ 176.461662][ T6511] loop7: detected capacity change from 0 to 256 [ 176.593147][ T5961] ocfs2: Unmounting device (7,5) on (node local) [ 176.626429][ T6524] loop0: detected capacity change from 0 to 512 [ 176.658142][ T6524] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 176.665983][ T6524] UDF-fs: Scanning with blocksize 512 failed [ 176.687432][ T6493] BTRFS info (device loop2): enabling ssd optimizations [ 176.746043][ T6524] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 176.815721][ T6524] UDF-fs: Scanning with blocksize 1024 failed [ 176.848090][ T6524] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 176.855542][ T6524] UDF-fs: Scanning with blocksize 2048 failed [ 176.983563][ T6529] loop5: detected capacity change from 0 to 33280 [ 176.986896][ T6524] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 177.071487][ T6524] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.109510][ T6535] loop6: detected capacity change from 0 to 33280 [ 177.113120][ T6529] EXT4-fs error (device loop5): ext4_orphan_get:1409: inode #15: comm syz.5.741: iget: bad i_size value: 38620345925642 [ 177.175796][ T6529] EXT4-fs error (device loop5): ext4_orphan_get:1414: comm syz.5.741: couldn't read orphan inode 15 (err -117) [ 177.272759][ T6535] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 177.286710][ T6535] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 177.348291][ T6529] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 177.501356][ T6535] EXT4-fs error (device loop6): ext4_get_first_dir_block:3607: inode #12: comm syz.6.743: directory missing '..' [ 177.564054][ T6541] program syz.7.744 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.657553][ T5961] EXT4-fs (loop5): unmounting filesystem. [ 177.690068][ T6126] EXT4-fs (loop6): unmounting filesystem. [ 177.741402][ T27] audit: type=1400 audit(1794555476.630:46): apparmor="STATUS" info="failed to unpack profile flags" error=-71 profile="unconfined" name="//o" pid=6542 comm="syz.0.746" name="//o" offset=45 [ 177.890922][ T58] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 177.943199][ T4288] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 177.964069][ T6549] loop6: detected capacity change from 0 to 64 [ 178.252831][ T27] audit: type=1800 audit(1794555477.140:47): pid=6549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.748" name="file1" dev="loop6" ino=21 res=0 errno=0 [ 178.571862][ T6559] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 178.805294][ T6559] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.851955][ T6559] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 178.887366][ T6559] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.938805][ T6559] usb 6-1: config 0 descriptor?? [ 179.156038][ T6559] usbhid 6-1:0.0: can't add hid device: -71 [ 179.177902][ T6559] usbhid: probe of 6-1:0.0 failed with error -71 [ 179.197007][ T6559] usb 6-1: USB disconnect, device number 3 [ 179.305997][ T6554] loop0: detected capacity change from 0 to 32768 [ 179.441176][ T6554] XFS (loop0): Mounting V5 Filesystem [ 179.480942][ T6567] loop7: detected capacity change from 0 to 32768 [ 179.522701][ T6554] XFS (loop0): Ending clean mount [ 179.586088][ T6567] JBD2: Ignoring recovery information on journal [ 179.797764][ T6559] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 179.805661][ T4294] XFS (loop0): Unmounting Filesystem [ 179.813091][ T6567] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 179.990446][ T6559] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.026287][ T6559] usb 6-1: New USB device found, idVendor=0c98, idProduct=1140, bcdDevice= 1.00 [ 180.056339][ T6559] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.077829][ T6559] usb 6-1: config 0 descriptor?? [ 180.121703][ T6129] ocfs2: Unmounting device (7,7) on (node local) [ 180.357694][ T6559] pcwd_usb: Card did not acknowledge disable attempt [ 180.863698][ T6580] loop2: detected capacity change from 0 to 40427 [ 180.904806][ T6580] F2FS-fs (loop2): invalid crc value [ 180.977450][ T6580] F2FS-fs (loop2): Found nat_bits in checkpoint [ 181.135820][ T6559] pcwd_usb: Found card (Firmware: ) with temp option [ 181.202754][ T6580] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 181.271672][ T6580] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 181.886958][ T6597] loop6: detected capacity change from 0 to 40427 [ 181.895968][ T4288] syz-executor: attempt to access beyond end of device [ 181.895968][ T4288] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 181.896094][ T6559] pcwd_usb: Option switches (0x00): Temperature Reset Enable=OFF, Power On Delay=OFF [ 181.935136][ T6597] F2FS-fs (loop6): Invalid SB checksum offset: 0 [ 181.964825][ T6597] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 182.040385][ T6597] F2FS-fs (loop6): invalid crc value [ 182.122005][ T6597] F2FS-fs (loop6): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 182.575061][ T6602] loop7: detected capacity change from 0 to 32768 [ 182.700897][ T6602] XFS (loop7): Mounting V5 Filesystem [ 182.710448][ T6597] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 182.731028][ T6597] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 182.860037][ T6602] XFS (loop7): Ending clean mount [ 182.910478][ T6559] pcwd_usb: initialized. heartbeat=5 sec (nowayout=0) [ 182.980877][ T6559] usb 6-1: USB disconnect, device number 4 [ 182.980930][ C1] pcwd_usb: can't resubmit intr, usb_submit_urb failed with result -19 [ 183.377769][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.5.766'. [ 183.488725][ T6559] pcwd_usb: Card did not acknowledge disable attempt [ 183.514006][ T6559] pcwd_usb: USB PC Watchdog disconnected [ 183.570919][ T6126] syz-executor: attempt to access beyond end of device [ 183.570919][ T6126] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 183.736949][ T6129] XFS (loop7): Unmounting Filesystem [ 184.360849][ T6665] loop0: detected capacity change from 0 to 33792 [ 184.434340][ T6665] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 184.533452][ T6665] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 184.551511][ T6665] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 184.698288][ T6682] binder: 6681:6682 ioctl 400c620e 200000000240 returned -22 [ 184.848193][ T4294] EXT4-fs (loop0): unmounting filesystem. [ 185.111571][ T6700] loop7: detected capacity change from 0 to 33792 [ 185.170741][ T6700] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback. [ 185.434047][ T6129] EXT4-fs (loop7): unmounting filesystem. [ 185.841663][ T6725] netlink: 'syz.2.789': attribute type 11 has an invalid length. [ 186.232630][ T6733] loop7: detected capacity change from 0 to 2048 [ 186.328119][ T6733] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 186.710283][ T6741] loop2: detected capacity change from 0 to 1024 [ 186.885418][ T6741] hfsplus: request for non-existent node 62977 in B*Tree [ 186.913069][ T6741] hfsplus: request for non-existent node 62977 in B*Tree [ 187.055035][ T4373] hfsplus: b-tree write err: -5, ino 3 [ 189.424459][ T6843] loop7: detected capacity change from 0 to 256 [ 189.475679][ T6844] ------------[ cut here ]------------ [ 189.482568][ T6844] WARNING: CPU: 1 PID: 6844 at kernel/trace/ring_buffer.c:3525 check_buffer+0x88a/0x930 [ 189.492459][ T6844] Modules linked in: [ 189.496481][ T6844] CPU: 1 PID: 6844 Comm: syz.5.828 Not tainted syzkaller #0 [ 189.503807][ T6844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 189.514022][ T6844] RIP: 0010:check_buffer+0x88a/0x930 [ 189.519423][ T6844] Code: 4c 89 ee e8 48 b3 a6 08 48 c7 c7 20 34 cb 97 be 04 00 00 00 e8 57 50 4e 00 f0 ff 0d 60 b6 45 16 e9 91 fe ff ff e8 d6 ea fc ff <0f> 0b e9 e2 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 20 f8 ff [ 189.539201][ T6844] RSP: 0018:ffffc900033479d0 EFLAGS: 00010283 [ 189.545330][ T6844] RAX: ffffffff81857dca RBX: 0000000000000003 RCX: 0000000000080000 [ 189.553585][ T6844] RDX: ffffc90003f19000 RSI: 0000000000000044 RDI: 0000000000000045 [ 189.561660][ T6844] RBP: ffffc90003347b88 R08: ffff888019218007 R09: 1ffff11003243000 [ 189.569723][ T6844] R10: dffffc0000000000 R11: ffffed1003243001 R12: 0000001bf233e515 [ 189.577799][ T6844] R13: 0000000000000060 R14: ffff888019218000 R15: dffffc0000000000 [ 189.585819][ T6844] FS: 00007fe49cd826c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 189.594874][ T6844] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 189.601542][ T6844] CR2: 00007f2907b53000 CR3: 000000003057c000 CR4: 00000000003506e0 [ 189.609621][ T6844] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 189.617678][ T6844] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 189.625708][ T6844] Call Trace: [ 189.629060][ T6844] [ 189.632042][ T6844] __rb_reserve_next+0x4d9/0xd00 [ 189.637113][ T6844] ring_buffer_lock_reserve+0xafa/0xf10 [ 189.642714][ T6844] ? aa_file_perm+0x3ea/0xf00 [ 189.647530][ T6844] tracing_mark_write+0x1f6/0x840 [ 189.652616][ T6844] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 189.657993][ T6844] ? tracing_free_buffer_release+0x1d0/0x1d0 [ 189.664024][ T6844] ? common_file_perm+0x171/0x1c0 [ 189.669284][ T6844] ? tracing_free_buffer_release+0x1d0/0x1d0 [ 189.675326][ T6844] vfs_write+0x2dc/0x9a0 [ 189.679671][ T6844] ? file_end_write+0x250/0x250 [ 189.684579][ T6844] ? __fget_files+0x28/0x460 [ 189.689287][ T6844] ? __fget_files+0x3fc/0x460 [ 189.694036][ T6844] ? __fdget_pos+0x1d4/0x360 [ 189.698743][ T6844] ? ksys_write+0x70/0x260 [ 189.703217][ T6844] ksys_write+0x14d/0x260 [ 189.707634][ T6844] ? __ia32_sys_read+0x80/0x80 [ 189.712450][ T6844] ? lockdep_hardirqs_on+0x94/0x140 [ 189.717742][ T6844] do_syscall_64+0x4c/0xa0 [ 189.722217][ T6844] ? clear_bhb_loop+0x60/0xb0 [ 189.727024][ T6844] ? clear_bhb_loop+0x60/0xb0 [ 189.731768][ T6844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 189.737756][ T6844] RIP: 0033:0x7fe49bfa94d9 [ 189.742263][ T6844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.761958][ T6844] RSP: 002b:00007fe49cd82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 189.770502][ T6844] RAX: ffffffffffffffda RBX: 00007fe49c225fa0 RCX: 00007fe49bfa94d9 [ 189.778557][ T6844] RDX: 0000000000000005 RSI: 0000200000000440 RDI: 0000000000000003 [ 189.786619][ T6844] RBP: 00007fe49c03804e R08: 0000000000000000 R09: 0000000000000000 [ 189.794661][ T6844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 189.802722][ T6844] R13: 00007fe49c226038 R14: 00007fe49c225fa0 R15: 00007ffccf0c9518 [ 189.810795][ T6844] [ 189.813875][ T6844] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 189.821210][ T6844] CPU: 1 PID: 6844 Comm: syz.5.828 Not tainted syzkaller #0 [ 189.828521][ T6844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 189.838605][ T6844] Call Trace: [ 189.841903][ T6844] [ 189.844854][ T6844] dump_stack_lvl+0x188/0x24e [ 189.849569][ T6844] ? memcpy+0x3c/0x60 [ 189.853581][ T6844] ? show_regs_print_info+0x12/0x12 [ 189.858816][ T6844] ? load_image+0x410/0x410 [ 189.863356][ T6844] panic+0x2d3/0x710 [ 189.867306][ T6844] ? bpf_jit_dump+0xd0/0xd0 [ 189.871845][ T6844] __warn+0x2f8/0x4f0 [ 189.875847][ T6844] ? check_buffer+0x88a/0x930 [ 189.880567][ T6844] ? check_buffer+0x88a/0x930 [ 189.885268][ T6844] report_bug+0x2ba/0x4f0 [ 189.889631][ T6844] ? check_buffer+0x88a/0x930 [ 189.894342][ T6844] handle_bug+0x3a/0x70 [ 189.898539][ T6844] exc_invalid_op+0x16/0x40 [ 189.903066][ T6844] asm_exc_invalid_op+0x16/0x20 [ 189.907952][ T6844] RIP: 0010:check_buffer+0x88a/0x930 [ 189.913256][ T6844] Code: 4c 89 ee e8 48 b3 a6 08 48 c7 c7 20 34 cb 97 be 04 00 00 00 e8 57 50 4e 00 f0 ff 0d 60 b6 45 16 e9 91 fe ff ff e8 d6 ea fc ff <0f> 0b e9 e2 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 20 f8 ff [ 189.932880][ T6844] RSP: 0018:ffffc900033479d0 EFLAGS: 00010283 [ 189.939495][ T6844] RAX: ffffffff81857dca RBX: 0000000000000003 RCX: 0000000000080000 [ 189.947485][ T6844] RDX: ffffc90003f19000 RSI: 0000000000000044 RDI: 0000000000000045 [ 189.955504][ T6844] RBP: ffffc90003347b88 R08: ffff888019218007 R09: 1ffff11003243000 [ 189.963503][ T6844] R10: dffffc0000000000 R11: ffffed1003243001 R12: 0000001bf233e515 [ 189.971508][ T6844] R13: 0000000000000060 R14: ffff888019218000 R15: dffffc0000000000 [ 189.979941][ T6844] ? check_buffer+0x88a/0x930 [ 189.984659][ T6844] __rb_reserve_next+0x4d9/0xd00 [ 189.989630][ T6844] ring_buffer_lock_reserve+0xafa/0xf10 [ 189.995202][ T6844] ? aa_file_perm+0x3ea/0xf00 [ 189.999937][ T6844] tracing_mark_write+0x1f6/0x840 [ 190.004986][ T6844] ? rcu_read_lock_bh_held+0xf0/0xf0 [ 190.010305][ T6844] ? tracing_free_buffer_release+0x1d0/0x1d0 [ 190.016311][ T6844] ? common_file_perm+0x171/0x1c0 [ 190.021384][ T6844] ? tracing_free_buffer_release+0x1d0/0x1d0 [ 190.027385][ T6844] vfs_write+0x2dc/0x9a0 [ 190.031659][ T6844] ? file_end_write+0x250/0x250 [ 190.036535][ T6844] ? __fget_files+0x28/0x460 [ 190.041241][ T6844] ? __fget_files+0x3fc/0x460 [ 190.045974][ T6844] ? __fdget_pos+0x1d4/0x360 [ 190.050590][ T6844] ? ksys_write+0x70/0x260 [ 190.055026][ T6844] ksys_write+0x14d/0x260 [ 190.059387][ T6844] ? __ia32_sys_read+0x80/0x80 [ 190.064176][ T6844] ? lockdep_hardirqs_on+0x94/0x140 [ 190.069407][ T6844] do_syscall_64+0x4c/0xa0 [ 190.073853][ T6844] ? clear_bhb_loop+0x60/0xb0 [ 190.078561][ T6844] ? clear_bhb_loop+0x60/0xb0 [ 190.083268][ T6844] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 190.089188][ T6844] RIP: 0033:0x7fe49bfa94d9 [ 190.093622][ T6844] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 190.113255][ T6844] RSP: 002b:00007fe49cd82028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 190.121692][ T6844] RAX: ffffffffffffffda RBX: 00007fe49c225fa0 RCX: 00007fe49bfa94d9 [ 190.129686][ T6844] RDX: 0000000000000005 RSI: 0000200000000440 RDI: 0000000000000003 [ 190.137696][ T6844] RBP: 00007fe49c03804e R08: 0000000000000000 R09: 0000000000000000 [ 190.145687][ T6844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.153679][ T6844] R13: 00007fe49c226038 R14: 00007fe49c225fa0 R15: 00007ffccf0c9518 [ 190.161683][ T6844] [ 190.165293][ T6844] Kernel Offset: disabled [ 190.169711][ T6844] Rebooting in 86400 seconds..