last executing test programs: 1m21.717340784s ago: executing program 0 (id=85): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[], 0xffc8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, 0x0, 0x0) 1m21.488879344s ago: executing program 0 (id=88): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, &(0x7f0000000140)=0x10) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) 1m20.436621647s ago: executing program 0 (id=95): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x8}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x6, r1, 0x0, &(0x7f0000000000)='\x00', 0x1, 0x7fff800000000002}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x2, r2, r1, 0x1001, 0x5, 0x8}) 1m20.36070623s ago: executing program 0 (id=96): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./bus\x00', 0x480, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c757466383d302c73686f77657865632c646973636172642c757466383d312c6e66732c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c757466383d302c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c002d43c85feaa91b9c2c7e69443d6987a2f44801578200aa8d73d6b7d88bb2056dee1336c0e6a2b0376b8bd2"], 0xfd, 0x2a1, &(0x7f00000006c0)="$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") open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000400)='./bus\x00', 0xc40, 0x0) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000080)=0x3d) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 1m20.215097377s ago: executing program 0 (id=97): syz_mount_image$hfs(&(0x7f0000020940), &(0x7f0000000000)='./file0\x00', 0x2000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="63726561746f723d618401712c706172743d3078303030303030303030303030303030332c66696c655f756d61736b3d30303030303030303030303030303030303030302c747970653d5aa3684b2c706172743d3078303030303030303030303034303430302c696f636861727365743d63703835352c636f6465706167653d6d616363656e746575726f2c00b1a13797433d4c89a6a89dbce7ef16e9b8b970d7d8bdf92cac31da6964adbb92dd1ff78a7712a7e216a68be651574bb4012d9069437eccf8497d57f77c24439113e8eadf50f64f95ecc16eb9583b93f064c64ed043637d2b6220a34306778a570afa8739f9d0dcbdb09df920482fb5e1a60b9c5d3faacbca7aefdf014bc5b202d55ed3"], 0x11, 0x2fe, &(0x7f0000001100)="$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") mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000280)=""/4096, 0x9005) 1m19.756709245s ago: executing program 0 (id=98): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="400204b0b8b82b"], 0x7) 1m19.118418722s ago: executing program 32 (id=98): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="400204b0b8b82b"], 0x7) 7.02053874s ago: executing program 4 (id=553): syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x16, &(0x7f00000002c0)={[{@nobarrier}, {@noflushoncommit}, {@nossd}, {@commit={'commit', 0x3d, 0x3f}}, {@nodatasum}, {@nodiscard}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@noacl}]}, 0x9, 0x5104, &(0x7f0000005480)="$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") unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00') rmdir(&(0x7f0000000080)='./file0\x00') r0 = creat(&(0x7f0000000600)='./file0\x00', 0xe5) write$qrtrtun(r0, &(0x7f0000001880)="9d8d64", 0x3) 5.230854084s ago: executing program 4 (id=568): r0 = memfd_create(&(0x7f0000000680)='-&:\n-\xb2];\x0f\xb2\x86NV6&\xb8=\x94Z}\xfaW~\xae\x87\x88\xea\xde\xd9=-\x01\x00\x00\x80=\x1d\x8bl\xd5\xc3DE\xbb0\x8e\xac\xf2r#TZ>\xfb\xdf\xc1\xd4\xd1\xee\x88\xebI\xab\xf6\xab}\x85\x18 \x8a\x8aG:\xacD-\x99JD/~\xd6\xb5m\xac\x8d\x1d\x1c\xe9\xe5<\xfcP)E\xc1\x8e\xeb\xc9\x158Mq\x01\xe1\xf6-\xc3\xaa\x9a\x9be\xcd\xf2\xde\xccx\x1f\x0fne\xe8C\xe4Y\xc9\vR2fY\x8e\x9d\x97 \x00\x00\x00\x00\xe8W\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe6JV\x80\xdd\x96F\xc90}SH\xe8\xd4RV\xb6\xc9h\xfb\xf3#\xcb\x14a\xab\b\x05\x7f\xaa\x92\x87#Yg\xef\xfb\x1fn.\x7f\xb1\xe26~$\xa9\v\x9b|>\xf5G\xb5\xac/\xc3n\x16\xee\xdf\xd0a', 0x0) r1 = fanotify_init(0x0, 0x1) fanotify_mark(r1, 0x1, 0x8000019, r0, 0x0) r2 = memfd_create(&(0x7f0000000040)='\\\\&\x0e\x00', 0x1) fallocate(r2, 0x0, 0x659, 0x10001) copy_file_range(r2, 0x0, r0, 0x0, 0x80000000003, 0x0) 5.037749342s ago: executing program 4 (id=573): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4e7, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x89, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000040)={0x2c, &(0x7f0000000340)={0x40, 0x33, 0x9, {0x9, 0x9, "7f07027f102bd5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 3.15238061s ago: executing program 4 (id=574): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000080)=0x9, 0x12) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4000003, 0x13, r1, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a) 3.031454505s ago: executing program 4 (id=578): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) ioctl$sock_SIOCGPGRP(r1, 0x501c4814, 0x0) 2.678511229s ago: executing program 1 (id=588): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) pause() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.510318977s ago: executing program 2 (id=582): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x400000, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000010) 2.372499082s ago: executing program 2 (id=584): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mknod(&(0x7f00000000c0)='./file1/file3\x00', 0xc000, 0x81b) r0 = landlock_create_ruleset(&(0x7f0000000440)={0x6621}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2) 2.285525396s ago: executing program 2 (id=585): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003d00)=@newtaction={0x84, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x84}}, 0x10) 2.230030848s ago: executing program 2 (id=586): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000440)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4e7, 0x30, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x89, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x80, 0x40}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000040)={0x2c, &(0x7f0000000340)={0x40, 0x33, 0x9, {0x9, 0x9, "7f07027f102bd5"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.784958667s ago: executing program 1 (id=587): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x470bd30, 0x25dfdc01, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x4, 0xff, 0x81, 0x0, 0x6080, 0xef3, 0x1}}, {0x6, 0x2, [0x5]}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x44080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) 1.639816652s ago: executing program 1 (id=590): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@loopback, 0x4e23, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, r2, 0xee01}, {0xfffffffffffffeff, 0x0, 0xfffffffffffffffc, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4d2, 0x32}, 0x2, @in6=@local, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}}, 0xe8) sendmmsg$inet6(r1, &(0x7f0000000a80)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.264770878s ago: executing program 3 (id=591): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0), 0x1, 0x560, &(0x7f00000003c0)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0XUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2btmmbdtnSmc8H7jgn96bnfnPu9+zcnIQE0LdGsn8KES9HxDdJxNGISPJ9g5HvHFk+bunxzclsS6Je//SvpHFcVm/+rebzDueVlyLit68iThc2tltdWJwplcvpXF4frc1eG60uLJ65MluaTqfTq+MTE+fenhh/7913uhbrGxf/+f6T+x+e+/rk0ne/PDx2N4nzcSTf1xrHE7jVWhmJkfw1GYrz6w4c60Jje0nS6xNgVwbyPB+KbAw4GgN51gP/f19GRB3oU4n8hz7VnAc07+27dB/83Hj0wfIN0Mb4B5ffG4kDjXujQ0vJmjuj7H53uAvtZ238+ue9u9kW3XsfAmBbt25HxNnBwcbYt791/Evy8W/3znZwzPo2jH/w7NzP5j9vtpv/FFbmP9Fm/nO4Te7uxvb5X3jYhWY2lc3/3m87/11ZtBoeyGsvNOZ8Q8nlK+U0G9tejIhTMbQ/q2+1nnNu6UF9s32t879sy9pvzgXz83g4uH/tc6ZKtdKTxNzq0e2IV9rOf5OV/k/a9H/2elzssI0T6b3XNtu3ffxPV/2niNfb9v/qilay9frkaON6GG1eFRv9fefE72sbXS32Ov6s/w9tHf9w0rpeW915Gz8e+DfdbN+a+KPz639f8lmjvC9/7EapVpsbi9iXfLzx8fHV5zbrzeOz+E+dXBN/s90tr/+DEfF5h/HfOf7zqx3F36P+n9pR/++88OCjL35YbfHADuPP+v+tRulU/siG8a/NkmWnJ9iN1xAAAAAAAAD2ikJEHImkUFwpFwrF4vLnO47HoUK5Uq2dvlyZvzoVje/KDsdQobnSfbTl8xBj+edhm/XxdfWJiDgWEd8OHGzUi5OV8lSvgwcAAAAAAAAAAAAAAAAAAIA94vAm3//P/DHQ67MDnjo/+Q39a9v878YvPQF7kv//oX/Jf+hf8h/6l/yH/iX/oX/Jf+hf8h/6l/wHAAAAAAAAAAAAAAAAAAAAAAAAAACArrp44UK21Zce35zM6lPXF+ZnKtfPTKXVmeLs/GRxsjJ3rThdqUyX0+JkZXa7v1euVK6Njcf8jdFaWq2NVhcWL81W5q/WLl2ZLU2nl9KhZxIVAAAAAAAAAAAAAAAAAAAAPF+qC4szpXI5nVNQ2FVhcG+chkKXC70emQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg1X8BAAD//x9PN28=") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000ac0)="85", 0x1}], 0x1, 0x7abff, 0x0, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000000)='2', 0x1, 0xffff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x3f00, 0x100000002}) 1.261081368s ago: executing program 1 (id=592): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0xa8, 0x2c, 0xd27, 0x70bd25, 0x2000000, {0x0, 0x0, 0x0, r2, {0x4, 0x4}, {}, {0x1, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x7c, 0x2, [@TCA_U32_ACT={0x34, 0x7, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x0, 0x1, {0x4, 0x0, 0x5, 0x6, 0x8bd, {0x2, 0x0, 0xeb, 0x4, 0x2, 0x1da}, {0x61, 0x2, 0x8, 0x2, 0xf31a, 0x8}, 0x9, 0xede0, 0x1}}, @TCA_POLICE_RESULT={0x0, 0x5, 0x7fff}, @TCA_POLICE_PEAKRATE={0x0, 0x3, [0x2, 0xd8e2, 0x9, 0x80000000, 0x8, 0xf, 0x100, 0x8, 0xb, 0x2, 0x7, 0x400, 0x8, 0xfff, 0xff, 0x6, 0x5, 0x9, 0x10000, 0x9, 0xff, 0x3, 0x5, 0x90, 0x2, 0x401, 0x2, 0x101, 0x0, 0xa1, 0x3, 0x5000, 0x7, 0x2, 0x0, 0xa04a, 0x8001, 0x5, 0x8, 0x3, 0x3, 0x81, 0x3, 0xffffffff, 0x7, 0x10001, 0x3ff, 0x6, 0x10, 0x0, 0x78cb, 0x3b, 0x8, 0x8, 0x0, 0x81, 0x0, 0xfffffffc, 0x6409, 0x7f, 0x7ff, 0x8, 0xf, 0x7fffffff, 0x1, 0x9, 0x7, 0x471, 0x80000001, 0x7, 0xd, 0x3, 0x5, 0xdd, 0x1ff, 0x8, 0x80, 0x4, 0xa27, 0xc9, 0x4, 0x7, 0x6, 0x8, 0x1ff, 0x6, 0x100, 0x7fffffff, 0x4e, 0x6, 0x7f, 0x1, 0x7fffffff, 0x1, 0xd, 0x8, 0x5, 0x2, 0x1, 0x7, 0x8, 0x5, 0x40000000, 0x939, 0xa, 0x5, 0xfffffffb, 0x6, 0x5, 0xffffffff, 0x10001, 0x421, 0x7fffffff, 0xfffffff9, 0x3, 0xa9e, 0x6, 0xfffffffa, 0x1, 0x6, 0x3, 0x62d, 0x5, 0x6, 0x9, 0x4, 0x7, 0x9, 0x4, 0x101, 0x9, 0x8, 0x7, 0x0, 0x7, 0x1000, 0xe, 0x81, 0x4, 0x7ff, 0x2, 0x0, 0x5, 0x1, 0xff, 0xfffffffc, 0xa, 0x4, 0x0, 0x354, 0x1ff, 0x0, 0x0, 0x1, 0xd13, 0x3, 0x1, 0x1, 0x8, 0xea, 0xfffffffe, 0x0, 0x4, 0xfff, 0x200000, 0x2, 0xd9bc, 0x6, 0x7, 0x6cec, 0xfffffffe, 0x1, 0x8, 0x6, 0x8, 0x7ff, 0xe34, 0x6, 0x9043, 0x6, 0xf, 0x0, 0x5, 0x1, 0x5, 0x0, 0x8000, 0x5, 0x7, 0x1, 0x9, 0x0, 0x3, 0x2, 0xd, 0x424b, 0x3, 0x2, 0x6a8f, 0x2, 0x4, 0x6, 0xbc12, 0xb, 0x32b7, 0x5, 0x9, 0x3, 0x2, 0x7, 0x1, 0x3, 0xce48, 0x80000001, 0x7, 0x310, 0xaad6, 0x8, 0x55a5, 0x14, 0xf, 0x7, 0x4, 0x8, 0x0, 0x3, 0x400, 0x2, 0x3, 0x9, 0x2, 0x7, 0x2, 0x1, 0x2, 0x80, 0x3, 0xf, 0x60, 0x2, 0x1, 0x8065, 0x9b, 0x6, 0x7, 0x7f, 0x88, 0x9, 0x6, 0x28c0, 0x7, 0x3, 0x101, 0x0, 0x8307, 0x5]}, @TCA_POLICE_RATE64={0x0, 0x8, 0x3}, @TCA_POLICE_PEAKRATE64={0x0, 0x9, 0x3}, @TCA_POLICE_RATE64, @TCA_POLICE_RESULT], [@TCA_POLICE_AVRATE={0x0, 0x4, 0xffff0001}, @TCA_POLICE_TBF={0x0, 0x1, {0x5ea, 0x5, 0x7, 0x9, 0x9, {0xfa, 0x0, 0x6, 0x9, 0xb, 0x6}, {0x7, 0x2, 0x100, 0x0, 0x7, 0x3529}, 0xe40e, 0x6, 0x7}}, @TCA_POLICE_PEAKRATE={0x0, 0x3, [0x6, 0xfffffffd, 0xbe, 0xf7a, 0x5, 0xfffffffd, 0xd5cd, 0x40, 0x40000000, 0x2, 0x4, 0x5, 0x1, 0x7, 0x0, 0x7101dc62, 0x7, 0x8df, 0x0, 0x8, 0x100, 0x1, 0x1, 0xed9b, 0x61e, 0x4, 0x2, 0xfffffffc, 0x6, 0x5, 0xcc, 0x0, 0x9, 0xd4e0, 0x5, 0x7, 0x0, 0xf38d, 0x1, 0x4, 0xffffff81, 0x7, 0xe3c, 0x8, 0x6, 0x200, 0x8, 0x8fb, 0x9, 0x9, 0xcfe2, 0x3, 0x0, 0x9, 0x9, 0x6, 0xfffff800, 0x401, 0xe, 0x2, 0x7, 0x800, 0x8, 0x1, 0x4, 0x0, 0x4, 0x3ff, 0xfffffffe, 0x9, 0xadba, 0x1, 0x9, 0x1, 0x7fffffff, 0x1, 0x5, 0x8, 0x101, 0xfffffffb, 0x2, 0x7fff, 0x1, 0x5, 0x4, 0xfff, 0x36d, 0x1, 0x8001, 0x5ea, 0x9, 0x2, 0x0, 0x7, 0xb90, 0xe000, 0x400, 0xa59, 0x7, 0x4, 0x9, 0xc06, 0xa05, 0x3, 0x7, 0x1, 0xfff, 0x4, 0x3ff, 0xe, 0x5, 0x8, 0x7f, 0x1000, 0x9, 0x80, 0x3b22, 0x1, 0x40, 0x9, 0x2, 0x6, 0x800, 0x3ff, 0x6, 0x4, 0xd98, 0x6, 0x6, 0xf, 0xffffffff, 0x6, 0x5, 0x80000000, 0x2, 0x8001, 0x4, 0xfffffffb, 0x10ac, 0x400, 0x6, 0x2, 0x0, 0x3, 0x6, 0x6, 0x1000, 0x6, 0x6, 0xe164, 0x280, 0x5, 0x0, 0x9, 0x1, 0xb9c1, 0xc15e, 0x6, 0xf, 0xa8b, 0x1000, 0xffffffff, 0x769f, 0xde, 0x3, 0x957, 0x8, 0x7fffffff, 0x2, 0x6, 0x4, 0x7, 0x2, 0x8, 0x2, 0x88, 0x9, 0x1, 0x2, 0x8, 0x9, 0x1, 0x8, 0x4, 0x908f, 0x400, 0x4, 0x4, 0x1, 0x10, 0x52, 0x80, 0x1, 0x9, 0x1, 0xfffffff9, 0x2, 0x6, 0x546, 0x7, 0x8, 0x144b, 0x0, 0x5, 0x81, 0xfffffffd, 0x9, 0x80000001, 0x7f, 0x3, 0x2, 0x5, 0x7, 0x2, 0x9721192, 0x3, 0x0, 0x2, 0xc1aa, 0x10, 0x1, 0x100, 0x6, 0x3d4, 0x1ff, 0x7, 0xfffffff8, 0x4, 0x3, 0x28a5, 0x2, 0x5, 0x0, 0xfffffff8, 0x8, 0xfffffff7, 0xf8325698, 0x0, 0xa, 0x48000000, 0xf, 0x1, 0x1, 0x3, 0x2, 0x9e, 0x1000, 0x4, 0x8, 0x4, 0x8, 0x3, 0x8, 0x6, 0x7, 0x5b49]}]]}, {0x4}, {0xc}, {0xfffffffffffffcb7, 0x8, {0x3, 0x3}}}}]}, @TCA_U32_SEL={0x44, 0x5, {0x8, 0xf, 0x3, 0x2, 0x7ae, 0xffff, 0xb11, 0x65, [{0x1, 0x2, 0x926, 0x9}, {0x0, 0x3, 0xa, 0x84}, {0x0, 0x32d, 0x2000000, 0x1}]}}]}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x20040054) 1.034463587s ago: executing program 1 (id=593): syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x16, &(0x7f00000002c0)={[{@nobarrier}, {@noflushoncommit}, {@nossd}, {@commit={'commit', 0x3d, 0x3f}}, {@nodatasum}, {@nodiscard}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@noacl}]}, 0x9, 0x5104, &(0x7f0000005480)="$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") unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00') rmdir(&(0x7f0000000080)='./file0\x00') r0 = creat(&(0x7f0000000600)='./file0\x00', 0xe5) write$qrtrtun(r0, &(0x7f0000001880)="9d8d64", 0x3) 1.034284777s ago: executing program 3 (id=594): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x4) 824.613496ms ago: executing program 3 (id=595): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") truncate(&(0x7f00000000c0)='./file1\x00', 0x8008) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x107842, 0x0) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) sendfile(r0, r0, 0x0, 0x80000000) 576.493306ms ago: executing program 3 (id=596): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x1}) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r2 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x5) close_range(r1, r2, 0x0) 455.904551ms ago: executing program 3 (id=597): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = socket$caif_seqpacket(0x25, 0x5, 0x2) sendmsg(r1, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x20048000) 370.143785ms ago: executing program 2 (id=598): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000000000)=""/35, 0x23) sendmmsg$inet6(r1, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="f6980c2ff07651343612f2e0a5adba64", 0x10}], 0x1}}], 0x1, 0x4000) 321.310967ms ago: executing program 3 (id=599): syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799c43aa4ff708dc4a00a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d500000000000000", @ANYRES32=0x0], 0xa5, 0x55a8, &(0x7f00000014c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 232.789201ms ago: executing program 2 (id=600): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 220.669931ms ago: executing program 1 (id=608): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x0, &(0x7f0000000080)={[{@barrier_val={'barrier', 0x3d, 0x7}}]}, 0xc1, 0x7b7, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x8a, 0x0, &(0x7f0000000080)) 0s ago: executing program 4 (id=601): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000000c0), 0x1, 0x560, &(0x7f00000003c0)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000ac0)="85", 0x1}], 0x1, 0x7abff, 0x0, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000000)='2', 0x1, 0xffff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x3f00, 0x100000002}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.8' (ED25519) to the list of known hosts. [ 64.303178][ T5773] cgroup: Unknown subsys name 'net' [ 64.432117][ T5773] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.792454][ T5773] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.801798][ T5790] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.810723][ T5790] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.826361][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.834842][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.841138][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.843752][ T5797] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.858048][ T5797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.858504][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.865599][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.873649][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.880188][ T5797] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.887226][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.893658][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.901429][ T5796] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.908684][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.920984][ T5796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.929232][ T5796] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.946659][ T5797] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.965697][ T5796] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.965694][ T5797] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.978266][ T5799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.987005][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.996272][ T5799] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.006678][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.432847][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 68.509604][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 68.569168][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 68.609704][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.616996][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.624332][ T5784] bridge_slave_0: entered allmulticast mode [ 68.631560][ T5784] bridge_slave_0: entered promiscuous mode [ 68.669122][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.676338][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.683448][ T5784] bridge_slave_1: entered allmulticast mode [ 68.691271][ T5784] bridge_slave_1: entered promiscuous mode [ 68.748732][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 68.796415][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.803744][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.811282][ T5783] bridge_slave_0: entered allmulticast mode [ 68.818734][ T5783] bridge_slave_0: entered promiscuous mode [ 68.829979][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.843915][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.853348][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.861329][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.868587][ T5787] bridge_slave_0: entered allmulticast mode [ 68.875377][ T5787] bridge_slave_0: entered promiscuous mode [ 68.887691][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.894789][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.902558][ T5783] bridge_slave_1: entered allmulticast mode [ 68.909831][ T5783] bridge_slave_1: entered promiscuous mode [ 68.939072][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.946938][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.954178][ T5787] bridge_slave_1: entered allmulticast mode [ 68.961081][ T5787] bridge_slave_1: entered promiscuous mode [ 68.994156][ T5784] team0: Port device team_slave_0 added [ 69.003385][ T5784] team0: Port device team_slave_1 added [ 69.047325][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.076757][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.089232][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.103997][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.114390][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.121523][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.147855][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.191053][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.198164][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.224123][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.252137][ T5787] team0: Port device team_slave_0 added [ 69.269575][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.277058][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.284228][ T5789] bridge_slave_0: entered allmulticast mode [ 69.292204][ T5789] bridge_slave_0: entered promiscuous mode [ 69.316904][ T5783] team0: Port device team_slave_0 added [ 69.325323][ T5783] team0: Port device team_slave_1 added [ 69.347067][ T5787] team0: Port device team_slave_1 added [ 69.364265][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.371809][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.379603][ T5789] bridge_slave_1: entered allmulticast mode [ 69.387240][ T5789] bridge_slave_1: entered promiscuous mode [ 69.453183][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.461087][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.487284][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.499945][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.507236][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.533942][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.548119][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.555276][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.589492][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.617078][ T5784] hsr_slave_0: entered promiscuous mode [ 69.623509][ T5784] hsr_slave_1: entered promiscuous mode [ 69.633187][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.643225][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.650480][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.676723][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.721385][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.776077][ T5783] hsr_slave_0: entered promiscuous mode [ 69.782353][ T5783] hsr_slave_1: entered promiscuous mode [ 69.789847][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.798217][ T5783] Cannot create hsr debugfs directory [ 69.807163][ T5789] team0: Port device team_slave_0 added [ 69.840704][ T5787] hsr_slave_0: entered promiscuous mode [ 69.847529][ T5787] hsr_slave_1: entered promiscuous mode [ 69.853579][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.861477][ T5787] Cannot create hsr debugfs directory [ 69.875003][ T5789] team0: Port device team_slave_1 added [ 69.981064][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.988243][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.014642][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.027836][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.034798][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.062869][ T5799] Bluetooth: hci2: command tx timeout [ 70.063004][ T51] Bluetooth: hci0: command tx timeout [ 70.068662][ T5799] Bluetooth: hci1: command tx timeout [ 70.068815][ T5799] Bluetooth: hci3: command tx timeout [ 70.079952][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.260256][ T5789] hsr_slave_0: entered promiscuous mode [ 70.267829][ T5789] hsr_slave_1: entered promiscuous mode [ 70.273923][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.281547][ T5789] Cannot create hsr debugfs directory [ 70.424066][ T5783] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 70.440684][ T5783] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 70.452291][ T5783] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 70.461889][ T5783] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 70.561190][ T5784] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.574178][ T5784] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.587186][ T5784] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.612889][ T5784] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.671080][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.682235][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.700089][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.710205][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.796650][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.804075][ T5789] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.825971][ T5789] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.835881][ T5789] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.862595][ T5789] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.874902][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.927149][ T989] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.934530][ T989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.953158][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.960313][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.052131][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.104648][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.137552][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.144730][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.156497][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.163855][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.204809][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.261327][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.320307][ T3001] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.327812][ T3001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.362848][ T3001] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.370671][ T3001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.391091][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.477468][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.488836][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.535045][ T3001] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.542261][ T3001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.589242][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.596039][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.639024][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.646340][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.713976][ T5789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.774180][ T5783] veth0_vlan: entered promiscuous mode [ 71.803923][ T5783] veth1_vlan: entered promiscuous mode [ 71.814722][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.940495][ T5787] veth0_vlan: entered promiscuous mode [ 71.983909][ T5783] veth0_macvtap: entered promiscuous mode [ 71.998383][ T5787] veth1_vlan: entered promiscuous mode [ 72.011816][ T5783] veth1_macvtap: entered promiscuous mode [ 72.024856][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.054974][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.071940][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.093826][ T5783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.103295][ T5783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.113073][ T5783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.121948][ T5783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.142089][ T5799] Bluetooth: hci3: command tx timeout [ 72.142125][ T5794] Bluetooth: hci0: command tx timeout [ 72.147603][ T5797] Bluetooth: hci1: command tx timeout [ 72.159187][ T5787] veth0_macvtap: entered promiscuous mode [ 72.165570][ T51] Bluetooth: hci2: command tx timeout [ 72.221581][ T5787] veth1_macvtap: entered promiscuous mode [ 72.273136][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.289496][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.295967][ T3479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.307401][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.322258][ T3479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.323319][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.370275][ T5784] veth0_vlan: entered promiscuous mode [ 72.385937][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.396576][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.408018][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.432027][ T5787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.441042][ T3479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.445266][ T5787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.457953][ T3479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.465679][ T5787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.474492][ T5787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.490805][ T5784] veth1_vlan: entered promiscuous mode [ 72.620116][ T5789] veth0_vlan: entered promiscuous mode [ 72.736593][ T5789] veth1_vlan: entered promiscuous mode [ 72.743881][ T3479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.760397][ T3479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.790704][ T5784] veth0_macvtap: entered promiscuous mode [ 72.826484][ T5880] syz.2.5[5880]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 72.862942][ T5784] veth1_macvtap: entered promiscuous mode [ 72.884877][ T3001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.895509][ T3001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.942594][ T5789] veth0_macvtap: entered promiscuous mode [ 72.957447][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.977203][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.987242][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.998583][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.019933][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.054226][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.067553][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.077801][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.088550][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.100090][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.113333][ T5789] veth1_macvtap: entered promiscuous mode [ 73.184887][ T5784] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.210276][ T5784] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.220154][ T5784] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.229739][ T5784] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.244172][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.257728][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.281674][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.302904][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.325830][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.331841][ T5880] loop2: detected capacity change from 0 to 32768 [ 73.361678][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.387055][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.439013][ T5888] loop0: detected capacity change from 0 to 2048 [ 73.451733][ T5880] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 73.467252][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.494963][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.507370][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.518358][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.532345][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.544359][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.555432][ T5894] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 73.569334][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.619025][ T5789] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.643529][ T5880] XFS (loop2): Ending clean mount [ 73.658017][ T5789] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.685820][ T5789] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.694893][ T5789] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.827723][ T5888] syz.0.6 (5888) used greatest stack depth: 19440 bytes left [ 73.838226][ T3001] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.869705][ T3001] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.007827][ T3479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.015541][ T5783] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 74.021950][ T3479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.043816][ T5896] loop0: detected capacity change from 0 to 256 [ 74.070431][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.110312][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.122898][ T5896] FAT-fs (loop0): Directory bread(block 1285) failed [ 74.206956][ T5896] FAT-fs (loop0): Directory bread(block 1285) failed [ 74.216725][ T51] Bluetooth: hci2: command tx timeout [ 74.222152][ T51] Bluetooth: hci3: command tx timeout [ 74.225378][ T5794] Bluetooth: hci0: command tx timeout [ 74.228480][ T5799] Bluetooth: hci1: command tx timeout [ 74.236718][ T2926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.285377][ T2926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.769759][ T5909] process 'syz.0.11' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 74.971295][ T5913] loop1: detected capacity change from 0 to 64 [ 75.024892][ T5913] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing [ 75.114654][ T5902] loop2: detected capacity change from 0 to 32768 [ 75.141092][ T5902] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.8 (5902) [ 75.227538][ T5902] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 75.249545][ T5902] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 75.263601][ T5902] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 75.276852][ T5902] BTRFS info (device loop2): use zstd compression, level 3 [ 75.285916][ T5902] BTRFS info (device loop2): using free space tree [ 75.432776][ T5911] loop3: detected capacity change from 0 to 32768 [ 75.502681][ T5902] BTRFS info (device loop2): enabling ssd optimizations [ 75.524057][ T5911] (syz.3.12,5911,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 75.539330][ T5902] BTRFS info (device loop2): auto enabling async discard [ 75.591379][ T5911] (syz.3.12,5911,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 75.712079][ T5911] JBD2: Ignoring recovery information on journal [ 75.789577][ T5911] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 75.892324][ T5941] loop1: detected capacity change from 0 to 1024 [ 75.936284][ T5941] ======================================================= [ 75.936284][ T5941] WARNING: The mand mount option has been deprecated and [ 75.936284][ T5941] and is ignored by this kernel. Remove the mand [ 75.936284][ T5941] option from the mount to silence this warning. [ 75.936284][ T5941] ======================================================= [ 76.148575][ T5941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.160935][ T5783] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 76.296160][ T51] Bluetooth: hci3: command tx timeout [ 76.301613][ T51] Bluetooth: hci0: command tx timeout [ 76.309035][ T5797] Bluetooth: hci2: command tx timeout [ 76.314513][ T5799] Bluetooth: hci1: command tx timeout [ 76.495399][ T5789] ocfs2: Unmounting device (7,3) on (node local) [ 76.955650][ T5943] loop0: detected capacity change from 0 to 40427 [ 77.006478][ T5943] F2FS-fs (loop0): heap/no_heap options were deprecated [ 77.026951][ T5943] F2FS-fs (loop0): Image doesn't support compression [ 77.033951][ T5943] F2FS-fs (loop0): heap/no_heap options were deprecated [ 77.054232][ T5943] F2FS-fs (loop0): invalid crc value [ 77.099611][ T5943] F2FS-fs (loop0): Found nat_bits in checkpoint [ 77.121272][ T5955] binder: 5950:5955 ioctl c0306201 200000000480 returned -14 [ 77.159112][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.301813][ T5943] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 77.539598][ T5787] syz-executor: attempt to access beyond end of device [ 77.539598][ T5787] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 77.572835][ T5787] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 77.785494][ T5964] loop1: detected capacity change from 0 to 1024 [ 77.851517][ T5964] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.956376][ T5968] loop2: detected capacity change from 0 to 4096 [ 77.992580][ T5968] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.018618][ T5964] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4031: comm syz.1.25: Allocating blocks 385-513 which overlap fs metadata [ 78.080575][ T5964] EXT4-fs (loop1): pa ffff888078285740: logic 16, phys. 129, len 24 [ 78.089198][ T5964] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 8 [ 78.108795][ T5972] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 747 [ 78.132758][ T5968] fs-verity: sha256 using implementation "sha256-avx2" [ 78.322010][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.343523][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.479514][ T5978] loop2: detected capacity change from 0 to 8 [ 78.628719][ T5978] SQUASHFS error: Unable to read directory block [629:26] [ 78.698547][ T5982] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.074053][ T5974] loop3: detected capacity change from 0 to 32768 [ 79.094405][ T5974] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.28 (5974) [ 79.138388][ T5974] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 79.156359][ T5974] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 79.166218][ T5974] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 79.177196][ T5974] BTRFS info (device loop3): use zstd compression, level 3 [ 79.184590][ T5974] BTRFS info (device loop3): using free space tree [ 79.245518][ T5974] BTRFS info (device loop3): enabling ssd optimizations [ 79.261629][ T5974] BTRFS info (device loop3): auto enabling async discard [ 79.414970][ T5991] loop1: detected capacity change from 0 to 32768 [ 79.441543][ T5991] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.34 (5991) [ 79.470070][ T5789] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 79.551958][ T5793] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by udevd (5793) [ 80.050040][ T6021] loop3: detected capacity change from 0 to 512 [ 80.130213][ T6023] Driver unsupported XDP return value 0 on prog (id 7) dev N/A, expect packet loss! [ 80.159896][ T6021] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2249: inode #15: comm syz.3.39: corrupted in-inode xattr: invalid ea_ino [ 80.205023][ T6021] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.39: couldn't read orphan inode 15 (err -117) [ 80.237064][ T6021] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.470946][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.459148][ T6054] loop2: detected capacity change from 0 to 1024 [ 81.487913][ T6054] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 81.508495][ T6040] loop1: detected capacity change from 0 to 32768 [ 81.540829][ T6054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.554555][ T6040] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 81.580281][ T6040] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 81.591555][ T6040] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 81.604367][ T6040] BTRFS info (device loop1): use zstd compression, level 3 [ 81.611956][ T6040] BTRFS info (device loop1): using free space tree [ 81.730099][ T6040] BTRFS info (device loop1): enabling ssd optimizations [ 81.751714][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.776437][ T6040] BTRFS info (device loop1): auto enabling async discard [ 81.842303][ T787] cfg80211: failed to load regulatory.db [ 82.031547][ T6050] loop0: detected capacity change from 0 to 32768 [ 82.120439][ T6077] loop3: detected capacity change from 0 to 512 [ 82.130138][ T6050] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 82.225636][ T5854] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 82.228406][ T6077] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.272857][ T5784] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 82.440506][ T6077] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.56: No space for directory leaf checksum. Please run e2fsck -D. [ 82.441119][ T5854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.496359][ T6077] EXT4-fs error (device loop3): ext4_readdir:223: inode #2: comm syz.3.56: path (unknown): directory fails checksum at offset 0 [ 82.541494][ T5854] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.541897][ T5787] ocfs2: Unmounting device (7,0) on (node local) [ 82.566592][ T5854] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 82.587565][ T5854] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 82.646016][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.692095][ T5854] usb 3-1: config 0 descriptor?? [ 82.741778][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.154562][ T5854] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 83.218650][ T5854] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 83.417817][ T6085] loop1: detected capacity change from 0 to 40427 [ 83.435691][ T6085] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0) [ 83.443531][ T6085] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 83.460250][ T6085] F2FS-fs (loop1): invalid crc value [ 83.466116][ T5874] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 83.483408][ T6087] loop3: detected capacity change from 0 to 32768 [ 83.492355][ T6087] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.59 (6087) [ 83.502112][ T6085] F2FS-fs (loop1): Found nat_bits in checkpoint [ 83.528991][ T6087] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 83.547715][ T6087] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 83.567687][ T6087] BTRFS info (device loop3): turning off barriers [ 83.581715][ T6087] BTRFS info (device loop3): setting nodatasum [ 83.593419][ T6087] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 83.608352][ T6087] BTRFS info (device loop3): use zstd compression, level 3 [ 83.615786][ T6087] BTRFS info (device loop3): using free space tree [ 83.651170][ T6085] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 83.669115][ T5874] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 83.671599][ T6085] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 83.682566][ T5874] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.725589][ T5874] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 83.738430][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.834066][ T6085] syz.1.57: attempt to access beyond end of device [ 83.834066][ T6085] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 83.890403][ T6085] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 83.928167][ T6085] syz.1.57: attempt to access beyond end of device [ 83.928167][ T6085] loop1: rw=2049, sector=40984, nr_sectors = 8 limit=40427 [ 83.979345][ T5874] usb 1-1: usb_control_msg returned -32 [ 83.999870][ T6085] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 84.003552][ T5874] usbtmc 1-1:16.0: can't read capabilities [ 84.092376][ T5789] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 84.457614][ C0] plantronics 0003:047F:FFFF.0001: usb_submit_urb(ctrl) failed: -1 [ 84.475692][ T5854] usb 3-1: USB disconnect, device number 2 [ 84.681125][ T6120] loop1: detected capacity change from 0 to 512 [ 84.895105][ T6117] loop3: detected capacity change from 0 to 32768 [ 84.951854][ T6117] loop3: p1 p3 < > [ 85.207655][ T787] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 85.219519][ T6132] netlink: 56 bytes leftover after parsing attributes in process `syz.2.67'. [ 85.231544][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.67'. [ 85.294407][ T5788] udevd[5788]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 85.314316][ T5793] udevd[5793]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 85.445376][ T787] usb 2-1: Using ep0 maxpacket: 32 [ 85.458741][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.479351][ T787] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 85.494405][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.506844][ T787] usb 2-1: config 0 descriptor?? [ 85.555967][ T6129] loop3: detected capacity change from 0 to 32768 [ 85.576023][ T6129] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 scanned by syz.3.66 (6129) [ 85.598321][ T6129] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 85.610800][ T6129] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 85.620888][ T6129] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 85.632481][ T6129] BTRFS info (device loop3): use zstd compression, level 3 [ 85.640151][ T6129] BTRFS info (device loop3): using free space tree [ 85.722993][ T6129] BTRFS info (device loop3): enabling ssd optimizations [ 85.744628][ T6129] BTRFS info (device loop3): auto enabling async discard [ 85.940737][ T787] uclogic 0003:28BD:0071.0002: interface is invalid, ignoring [ 86.025031][ T5789] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 86.205326][ T5788] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop3 scanned by udevd (5788) [ 86.217563][ T5854] usb 1-1: USB disconnect, device number 2 [ 86.262349][ T5874] usb 2-1: USB disconnect, device number 2 [ 86.371788][ T27] audit: type=1326 audit(1763565873.482:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6163 comm="syz.0.73" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7c5b18f749 code=0x0 [ 87.090383][ T6179] loop2: detected capacity change from 0 to 64 [ 87.890582][ T6198] loop1: detected capacity change from 0 to 1024 [ 88.078872][ T6186] loop2: detected capacity change from 0 to 32768 [ 88.095052][ T6186] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 88.142555][ T6186] overlayfs: overlapping lowerdir path [ 88.216297][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 88.250754][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 88.325572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.336681][ T6210] loop3: detected capacity change from 0 to 512 [ 88.360872][ T6210] EXT4-fs: inline encryption not supported [ 88.396217][ T5793] BTRFS error: device /dev/loop2 already registered with a higher generation, found 8 expect 10 [ 88.409024][ T6210] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 88.452744][ T6210] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 88.519011][ T6210] EXT4-fs (loop3): 1 truncate cleaned up [ 88.542979][ T6210] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.750912][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.857186][ T5874] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.034591][ T6225] loop0: detected capacity change from 0 to 128 [ 89.065623][ T5874] usb 2-1: Using ep0 maxpacket: 16 [ 89.076429][ T27] audit: type=1800 audit(1763565876.182:3): pid=6225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.96" name="bus" dev="loop0" ino=1048594 res=0 errno=0 [ 89.107488][ T5874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.124054][ T5787] Trying to write to read-only block-device loop0 [ 89.139919][ T5787] FAT-fs (loop0): error, invalid access to FAT (entry 0xffff0000) [ 89.145473][ T5874] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 89.149936][ T5787] FAT-fs (loop0): Filesystem has been set read-only [ 89.181769][ T5787] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 89.195302][ T5874] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 89.199263][ T5787] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 89.204467][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.229606][ T5874] usb 2-1: config 0 descriptor?? [ 89.661411][ T5874] HID 045e:07da: Invalid code 65791 type 1 [ 89.671140][ T6220] loop3: detected capacity change from 0 to 32768 [ 89.698234][ T5874] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0003/input/input5 [ 89.742344][ T6220] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 89.793207][ T5874] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 89.898423][ T6220] XFS (loop3): Ending clean mount [ 89.953009][ T2926] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.992617][ T6220] XFS (loop3): Quotacheck needed: Please wait. [ 90.125686][ T6220] XFS (loop3): Quotacheck: Done. [ 90.173742][ T2926] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.301135][ T2926] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.471682][ T5789] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 90.488514][ T2926] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.514842][ T5874] usb 2-1: USB disconnect, device number 3 [ 91.041577][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.053344][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.073938][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.084889][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.107990][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 91.125318][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.861834][ T6238] chnl_net:caif_netlink_parms(): no params data found [ 92.233674][ T6238] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.261300][ T6238] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.285354][ T6238] bridge_slave_0: entered allmulticast mode [ 92.292721][ T6238] bridge_slave_0: entered promiscuous mode [ 92.324028][ T6238] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.352447][ T6238] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.375699][ T6238] bridge_slave_1: entered allmulticast mode [ 92.387350][ T6238] bridge_slave_1: entered promiscuous mode [ 92.520309][ T6238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.544110][ T2926] hsr_slave_0: left promiscuous mode [ 92.552835][ T2926] hsr_slave_1: left promiscuous mode [ 92.559329][ T2926] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.567728][ T2926] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.576737][ T2926] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.584153][ T2926] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.593814][ T2926] bridge_slave_1: left allmulticast mode [ 92.599780][ T2926] bridge_slave_1: left promiscuous mode [ 92.607385][ T2926] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.629813][ T2926] bridge_slave_0: left allmulticast mode [ 92.635604][ T2926] bridge_slave_0: left promiscuous mode [ 92.641411][ T2926] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.678269][ T2926] veth1_macvtap: left promiscuous mode [ 92.684232][ T2926] veth0_macvtap: left promiscuous mode [ 92.697016][ T2926] veth1_vlan: left promiscuous mode [ 92.702735][ T2926] veth0_vlan: left promiscuous mode [ 93.177789][ T5799] Bluetooth: hci2: command tx timeout [ 93.317136][ T2926] team0 (unregistering): Port device team_slave_1 removed [ 93.353473][ T2926] team0 (unregistering): Port device team_slave_0 removed [ 93.391356][ T2926] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 93.432061][ T2926] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 93.804125][ T2926] bond0 (unregistering): Released all slaves [ 93.902676][ T6238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.940476][ T6238] team0: Port device team_slave_0 added [ 93.951495][ T6238] team0: Port device team_slave_1 added [ 94.000490][ T6238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.008766][ T6238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.035777][ T6238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.048457][ T6238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.055807][ T6238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.081859][ T6238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.164858][ T6238] hsr_slave_0: entered promiscuous mode [ 94.171436][ T6238] hsr_slave_1: entered promiscuous mode [ 94.184224][ T6238] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.191847][ T6238] Cannot create hsr debugfs directory [ 94.517707][ T6238] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.533376][ T6238] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.550196][ T6238] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.561730][ T6238] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.669129][ T6238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.714027][ T6238] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.740817][ T3001] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.748077][ T3001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.758275][ T3001] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.765441][ T3001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.032783][ T6238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.255333][ T5799] Bluetooth: hci2: command tx timeout [ 95.414726][ T6238] veth0_vlan: entered promiscuous mode [ 95.438838][ T6238] veth1_vlan: entered promiscuous mode [ 95.470999][ T6238] veth0_macvtap: entered promiscuous mode [ 95.485039][ T6238] veth1_macvtap: entered promiscuous mode [ 95.507346][ T6238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.518075][ T6238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.527990][ T6238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.538611][ T6238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.548872][ T6238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.563550][ T6238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.581584][ T6238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.600678][ T6238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.611602][ T6238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.626411][ T6238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.637536][ T6238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.647943][ T6238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.660025][ T6238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.676898][ T6238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.694731][ T6238] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.704940][ T6238] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.718650][ T6238] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.727928][ T6238] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.863295][ T2926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.887789][ T2926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.920104][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.929720][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.150237][ T6332] syz.2.108 uses obsolete (PF_INET,SOCK_PACKET) [ 97.154112][ T6365] bond0: (slave bond_slave_0): Releasing backup interface [ 97.250301][ T6341] loop4: detected capacity change from 0 to 32768 [ 97.295112][ T6341] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 97.336775][ T5799] Bluetooth: hci2: command tx timeout [ 97.359557][ T6341] overlayfs: overlapping lowerdir path [ 97.524729][ T5788] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 97.689783][ T6388] "syz.4.115" (6388) uses obsolete ecb(arc4) skcipher [ 98.306354][ T6404] Invalid ELF header len 16 [ 98.578188][ T6382] loop3: detected capacity change from 0 to 32768 [ 98.599069][ T6377] loop1: detected capacity change from 0 to 40427 [ 98.634042][ T6382] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 98.691674][ T6382] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 98.783699][ T6377] F2FS-fs (loop1): Found nat_bits in checkpoint [ 98.800800][ T12] (kworker/u4:1,12,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 99.066306][ T6377] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 99.186589][ T6382] syz.3.113 (6382) used greatest stack depth: 19248 bytes left [ 99.247430][ T5789] ocfs2: Unmounting device (7,3) on (node local) [ 99.341458][ T5784] syz-executor: attempt to access beyond end of device [ 99.341458][ T5784] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 99.417179][ T5784] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 99.419588][ T5799] Bluetooth: hci2: command tx timeout [ 99.732111][ T6446] loop3: detected capacity change from 0 to 256 [ 99.775328][ T6446] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 99.828524][ T6446] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 99.873099][ T6446] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 100.050607][ T6446] exFAT-fs (loop3): invalid start cluster (2155889475) [ 100.946807][ T6451] loop4: detected capacity change from 0 to 40427 [ 100.959839][ T6478] loop1: detected capacity change from 0 to 2048 [ 100.989187][ T6451] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 101.012825][ T6451] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 101.092135][ T6478] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.156182][ T6451] F2FS-fs (loop4): Found nat_bits in checkpoint [ 101.189807][ T6478] EXT4-fs (loop1): stripe (248) is not aligned with cluster size (16), stripe is disabled [ 101.235325][ T6478] EXT4-fs (loop1): can't enable nombcache during remount [ 101.369984][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.447419][ T6451] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 101.487409][ T6451] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 101.517251][ T6472] loop3: detected capacity change from 0 to 32768 [ 101.568587][ T6451] F2FS-fs (loop4): Stopped filesystem due to reason: 0 [ 101.592954][ T6472] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 101.640955][ T27] audit: type=1804 audit(1763565888.752:4): pid=6451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.132" name="/newroot/10/file2/file0" dev="loop4" ino=10 res=1 errno=0 [ 101.707631][ T6472] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 101.909753][ T27] audit: type=1800 audit(1763565889.012:5): pid=6472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.137" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 102.137593][ T5789] ocfs2: Unmounting device (7,3) on (node local) [ 102.819394][ T6531] loop1: detected capacity change from 0 to 512 [ 102.867303][ T6531] EXT4-fs (loop1): orphan cleanup on readonly fs [ 102.913924][ T6531] EXT4-fs error (device loop1): ext4_do_update_inode:5244: inode #15: comm syz.1.150: corrupted inode contents [ 102.970350][ T6531] EXT4-fs (loop1): Remounting filesystem read-only [ 102.987090][ T6531] EXT4-fs (loop1): 1 orphan inode deleted [ 103.011459][ T6531] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 103.147488][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.327282][ T6518] loop2: detected capacity change from 0 to 32768 [ 103.393369][ T6518] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 103.399042][ T5160] udevd[5160]: worker [5800] terminated by signal 33 (Unknown signal 33) [ 103.448833][ T6554] loop1: detected capacity change from 0 to 512 [ 103.457748][ T5160] udevd[5160]: worker [5800] failed while handling '/devices/virtual/net/cfptm1/queues/tx-0' [ 103.621320][ T6518] XFS (loop2): Ending clean mount [ 103.659303][ T6518] XFS (loop2): Quotacheck needed: Please wait. [ 103.672838][ T6554] EXT4-fs (loop1): Test dummy encryption mode enabled [ 103.702685][ T6554] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.785368][ T6518] XFS (loop2): Quotacheck: Done. [ 103.787026][ T6554] EXT4-fs error (device loop1): htree_dirblock_to_tree:1083: inode #2: comm syz.1.154: Directory hole found for htree leaf block 0 [ 103.856211][ T6554] EXT4-fs (loop1): Remounting filesystem read-only [ 103.877600][ T6561] loop8: detected capacity change from 0 to 8 [ 103.919635][ T6561] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 103.935320][ T6561] loop8: partition table partially beyond EOD, truncated [ 103.952871][ T6561] loop8: p1 size 3004527350 extends beyond EOD, truncated [ 104.006904][ T6563] netlink: 'syz.3.156': attribute type 2 has an invalid length. [ 104.038511][ T5784] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 104.039403][ T5788] udevd[5788]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 104.141963][ T5783] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 104.397653][ T6568] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.456123][ T788] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.504967][ T6574] loop2: detected capacity change from 0 to 256 [ 104.657279][ T788] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 104.666195][ T788] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 104.689598][ T788] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 104.715332][ T788] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 104.740558][ T788] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 104.757103][ T788] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 104.772121][ T788] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 104.790739][ T788] usb 5-1: Product: syz [ 104.794955][ T788] usb 5-1: Manufacturer: syz [ 104.809151][ T788] cdc_wdm 5-1:1.0: skipping garbage [ 104.825253][ T788] cdc_wdm 5-1:1.0: skipping garbage [ 104.833013][ T788] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 104.845496][ T788] cdc_wdm 5-1:1.0: Unknown control protocol [ 105.026707][ T788] usb 5-1: USB disconnect, device number 2 [ 105.364676][ T6582] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 105.648388][ T6580] loop1: detected capacity change from 0 to 40427 [ 105.676764][ T6580] F2FS-fs (loop1): invalid crc value [ 105.721561][ T6580] F2FS-fs (loop1): Found nat_bits in checkpoint [ 105.736692][ T788] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 105.836910][ T6580] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 105.958547][ T788] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 105.967626][ T788] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 105.998391][ T788] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 106.029041][ T788] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 106.070521][ T788] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 106.109589][ T788] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 106.120649][ T788] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 106.129070][ T788] usb 5-1: Product: syz [ 106.133353][ T788] usb 5-1: Manufacturer: syz [ 106.161110][ T788] cdc_wdm 5-1:1.0: skipping garbage [ 106.175249][ T788] cdc_wdm 5-1:1.0: skipping garbage [ 106.185779][ T788] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 106.201935][ T788] cdc_wdm 5-1:1.0: Unknown control protocol [ 106.369288][ T788] usb 5-1: USB disconnect, device number 3 [ 106.420838][ T6587] loop3: detected capacity change from 0 to 32768 [ 106.470312][ T6587] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 106.489494][ T6587] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 106.503762][ T6587] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 106.534111][ T6587] BTRFS info (device loop3): use zstd compression, level 3 [ 106.549947][ T6587] BTRFS info (device loop3): using free space tree [ 106.682419][ T6599] loop2: detected capacity change from 0 to 32768 [ 106.718082][ T6587] BTRFS info (device loop3): enabling ssd optimizations [ 106.725073][ T6587] BTRFS info (device loop3): auto enabling async discard [ 106.774929][ T6618] loop1: detected capacity change from 0 to 256 [ 106.793803][ T6599] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 106.858297][ T6618] netlink: 104 bytes leftover after parsing attributes in process `syz.1.171'. [ 106.897810][ T27] audit: type=1800 audit(1763565894.012:6): pid=6599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.170" name="file1" dev="loop2" ino=17058 res=0 errno=0 [ 107.201812][ T6624] loop4: detected capacity change from 0 to 1024 [ 107.239452][ T6599] syz.2.170 (6599) used greatest stack depth: 18544 bytes left [ 107.279702][ T5792] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 107.303391][ T6626] bridge_slave_0: left allmulticast mode [ 107.357723][ T6626] bridge_slave_0: left promiscuous mode [ 107.371012][ T5789] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 107.387400][ T6626] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.452424][ T6626] bridge_slave_1: left allmulticast mode [ 107.471213][ T6626] bridge_slave_1: left promiscuous mode [ 107.492727][ T6626] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.553251][ T6626] bond0: (slave bond_slave_0): Releasing backup interface [ 107.630935][ T6626] bond0: (slave bond_slave_1): Releasing backup interface [ 107.813649][ T6626] team0: Port device team_slave_0 removed [ 107.850442][ T6626] team0: Port device team_slave_1 removed [ 107.889836][ T6626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.916391][ T6626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.932483][ T6626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.940845][ T6626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.983225][ T6627] netlink: 'syz.1.173': attribute type 10 has an invalid length. [ 108.027229][ T5783] ocfs2: Unmounting device (7,2) on (node local) [ 108.040283][ T6627] netlink: 40 bytes leftover after parsing attributes in process `syz.1.173'. [ 108.104042][ T6627] batman_adv: batadv0: Adding interface: virt_wifi0 [ 108.173493][ T6627] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 108.207379][ T6627] batman_adv: batadv0: Interface activated: virt_wifi0 [ 109.084342][ T6669] loop1: detected capacity change from 0 to 512 [ 109.171356][ T6669] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.236106][ T6669] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 109.424284][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.918414][ T6692] loop4: detected capacity change from 0 to 128 [ 109.930339][ T6686] loop2: detected capacity change from 0 to 8192 [ 109.972755][ T6686] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 110.014791][ T6692] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 110.035921][ T6686] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 110.043014][ T6697] loop3: detected capacity change from 0 to 512 [ 110.091278][ T6686] REISERFS (device loop2): using journaled data mode [ 110.103938][ T6692] ext4 filesystem being mounted at /21/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 110.129467][ T6697] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 110.139131][ T6686] reiserfs: using flush barriers [ 110.217666][ T6686] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 110.228495][ T6697] EXT4-fs (loop3): 1 truncate cleaned up [ 110.270255][ T6686] REISERFS (device loop2): checking transaction log (loop2) [ 110.297784][ T6697] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.345074][ T6697] EXT4-fs error (device loop3): ext4_nfs_get_inode:1551: inode #11: comm syz.3.198: iget: bad extra_isize 46 (inode size 256) [ 110.349097][ T6686] REISERFS (device loop2): Using r5 hash to sort names [ 110.401851][ T6686] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 110.444220][ T6238] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.467536][ T6686] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 110.482667][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.761933][ T6708] loop3: detected capacity change from 0 to 2048 [ 110.820504][ T6711] vivid-003: disconnect [ 110.832163][ T6708] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 110.845026][ T6711] vivid-003: reconnect [ 110.876822][ T6708] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.572137][ T6734] loop4: detected capacity change from 0 to 1024 [ 111.839299][ T6738] loop1: detected capacity change from 0 to 128 [ 111.871858][ T6738] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 111.885753][ T6738] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.956181][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 111.976511][ T5784] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.078138][ T6742] loop1: detected capacity change from 0 to 1024 [ 112.090170][ T6742] EXT4-fs: Ignoring removed nobh option [ 112.107644][ T6742] EXT4-fs: Ignoring removed bh option [ 112.121527][ T6742] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 112.167196][ T6742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.187987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 112.200235][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.234569][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 112.277757][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 46, changing to 9 [ 112.338975][ T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 58616, setting to 1024 [ 112.372520][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.393024][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.397133][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.415809][ T9] usb 5-1: Product: syz [ 112.420377][ T9] usb 5-1: Manufacturer: syz [ 112.439238][ T9] usb 5-1: SerialNumber: syz [ 112.490561][ T6752] input: syz1 as /devices/virtual/input/input6 [ 112.609752][ T6756] loop2: detected capacity change from 0 to 512 [ 112.646781][ T6756] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.675367][ T6756] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.721019][ T6734] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 112.767514][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.977332][ T6767] loop3: detected capacity change from 0 to 512 [ 112.994312][ T6763] loop2: detected capacity change from 0 to 8192 [ 113.025125][ T6767] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.026689][ T6763] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 113.056926][ T6763] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 113.070114][ T6767] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.083060][ T6763] REISERFS (device loop2): using ordered data mode [ 113.090727][ T6763] reiserfs: using flush barriers [ 113.107573][ T6763] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 113.125016][ T6763] REISERFS (device loop2): checking transaction log (loop2) [ 113.326753][ T6763] REISERFS (device loop2): Using tea hash to sort names [ 113.363587][ T6763] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 113.387076][ T6734] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 113.431167][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.513339][ T6773] loop1: detected capacity change from 0 to 512 [ 113.550569][ T6773] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 113.603483][ T6773] EXT4-fs (loop1): 1 truncate cleaned up [ 113.630246][ T9] cdc_ncm 5-1:1.0: bind() failure [ 113.636425][ T6773] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.653514][ T9] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 113.667736][ T9] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 113.685992][ T9] usbtest: probe of 5-1:1.1 failed with error -71 [ 113.711013][ T9] usb 5-1: USB disconnect, device number 4 [ 113.808684][ T27] audit: type=1800 audit(1763565900.922:7): pid=6773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.228" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 113.866050][ T27] audit: type=1800 audit(1763565900.922:8): pid=6773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.228" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 113.937717][ T6778] loop2: detected capacity change from 0 to 4096 [ 113.945694][ T6778] EXT4-fs: Ignoring removed nobh option [ 113.967070][ T6778] EXT4-fs (loop2): Test dummy encryption mode enabled [ 114.017315][ T6778] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.068902][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.211068][ T6778] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 114.431574][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.707586][ T6799] input: syz1 as /devices/virtual/input/input7 [ 114.920780][ T6804] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 115.067987][ T6813] loop1: detected capacity change from 0 to 1024 [ 115.141493][ T6813] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.285039][ T27] audit: type=1800 audit(1763565902.382:9): pid=6813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.243" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 115.359999][ T6826] loop2: detected capacity change from 0 to 1024 [ 115.403885][ T6813] EXT4-fs error (device loop1): mb_free_blocks:1938: group 0, inode 15: block 449:freeing already freed block (bit 28); block bitmap corrupt. [ 115.457500][ T6826] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.570814][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.620128][ T6836] loop4: detected capacity change from 0 to 64 [ 116.124041][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.771182][ T6878] Bluetooth: MGMT ver 1.22 [ 120.155302][ T5855] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 120.165616][ T9] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 120.185438][ T788] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 120.231061][ T27] audit: type=1326 audit(1763565907.342:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6887 comm="syz.3.272" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe82a38f749 code=0x0 [ 120.364755][ T9] usb 2-1: config 150 has an invalid interface number: 204 but max is 1 [ 120.373829][ T5855] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 120.383260][ T9] usb 2-1: config 150 has no interface number 0 [ 120.389654][ T788] usb 3-1: Using ep0 maxpacket: 32 [ 120.399597][ T9] usb 2-1: config 150 interface 204 has no altsetting 0 [ 120.399815][ T788] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 120.406621][ T5855] usb 5-1: config 1 has no interface number 0 [ 120.406668][ T5855] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.428379][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.432847][ T9] usb 2-1: config 150 interface 1 has no altsetting 0 [ 120.449353][ T5855] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 120.461355][ T9] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 120.464991][ T788] usb 3-1: config 0 descriptor?? [ 120.470962][ T5855] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 120.486982][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.495062][ T9] usb 2-1: Product: syz [ 120.500061][ T9] usb 2-1: Manufacturer: syz [ 120.504866][ T9] usb 2-1: SerialNumber: syz [ 120.513448][ T5855] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 120.528405][ T5855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.537074][ T5855] usb 5-1: Product: syz [ 120.541939][ T5855] usb 5-1: Manufacturer: syz [ 120.547544][ T5855] usb 5-1: SerialNumber: syz [ 120.708549][ T788] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 120.724845][ T788] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 120.739874][ T788] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 120.743934][ T9] xr_serial 2-1:150.204: xr_serial converter detected [ 120.749321][ T788] usb 3-1: media controller created [ 120.789486][ T788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.847122][ T788] DVB: Unable to find symbol dib7000p_attach() [ 120.854412][ T788] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 120.938433][ T788] rc_core: IR keymap rc-dib0700-rc5 not found [ 120.944647][ T788] Registered IR keymap rc-empty [ 121.170192][ T788] dvb-usb: could not initialize remote control. [ 121.176776][ T788] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 121.376253][ T788] usb 3-1: USB disconnect, device number 3 [ 121.394644][ T5855] cdc_ncm 5-1:1.1: bind() failure [ 121.414827][ T788] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 121.555043][ T9] usb 2-1: xr_serial converter now attached to ttyUSB0 [ 121.662186][ T5855] usb 5-1: USB disconnect, device number 5 [ 121.820536][ T9] usb 2-1: USB disconnect, device number 4 [ 121.834895][ T9] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 121.849523][ T9] xr_serial 2-1:150.204: device disconnected [ 121.854858][ T6914] mmap: syz.3.282 (6914) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 122.093197][ T6918] bridge0: entered allmulticast mode [ 122.112513][ T6918] pim6reg: entered allmulticast mode [ 122.368073][ T6922] input: syz1 as /devices/virtual/input/input9 [ 122.456875][ T6924] Zero length message leads to an empty skb [ 122.730898][ T6929] loop4: detected capacity change from 0 to 512 [ 122.756229][ T6929] EXT4-fs: Ignoring removed bh option [ 122.803792][ T6929] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 122.895150][ C1] sched: RT throttling activated [ 123.125571][ T6929] EXT4-fs (loop4): 1 truncate cleaned up [ 123.148951][ T6929] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 123.481202][ T6238] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.549449][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 123.726817][ T6932] loop1: detected capacity change from 0 to 32768 [ 123.738416][ T9] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 123.758993][ T9] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 123.779032][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 123.792100][ T6932] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 123.806161][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 123.844743][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.871671][ T9] usb 3-1: config 0 descriptor?? [ 123.898014][ T6940] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 124.040183][ T5784] (syz-executor,5784,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 124.111571][ T5784] ocfs2: Unmounting device (7,1) on (node local) [ 124.123919][ T6916] loop3: detected capacity change from 0 to 262144 [ 124.136303][ T6916] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 scanned by syz.3.283 (6916) [ 124.140846][ T6940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.170702][ T6940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.182470][ T6916] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 124.193982][ T6916] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 124.203322][ T6916] BTRFS info (device loop3): using free space tree [ 124.228366][ T9] usbhid 3-1:0.0: can't add hid device: -71 [ 124.234950][ T9] usbhid: probe of 3-1:0.0 failed with error -71 [ 124.250744][ T9] usb 3-1: USB disconnect, device number 4 [ 124.326889][ T6916] BTRFS info (device loop3): enabling ssd optimizations [ 124.374920][ T6962] loop1: detected capacity change from 0 to 2048 [ 124.401171][ T6962] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 124.441993][ T6962] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 124.616500][ T5789] BTRFS info (device loop3): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 124.675465][ T6971] loop4: detected capacity change from 0 to 512 [ 124.767701][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 124.832874][ T6975] loop1: detected capacity change from 0 to 136 [ 124.929569][ T6975] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 124.985235][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 125.009373][ T23] usb 3-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 125.033061][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 125.062699][ T23] usb 3-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 125.085387][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.106472][ T23] usb 3-1: config 0 descriptor?? [ 125.113963][ T23] hub 3-1:0.0: USB hub found [ 125.285479][ T6982] netlink: 16 bytes leftover after parsing attributes in process `syz.4.305'. [ 125.311741][ T6982] bond0: entered promiscuous mode [ 125.319715][ T23] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 125.325715][ T6982] bond_slave_0: entered promiscuous mode [ 125.346768][ T6982] bond_slave_1: entered promiscuous mode [ 125.375610][ T6982] bond0: left promiscuous mode [ 125.380423][ T6982] bond_slave_0: left promiscuous mode [ 125.395639][ T6982] bond_slave_1: left promiscuous mode [ 125.432834][ T6983] netlink: 16 bytes leftover after parsing attributes in process `syz.4.305'. [ 125.461756][ T6983] bond0: entered promiscuous mode [ 125.485378][ T6983] bond_slave_0: entered promiscuous mode [ 125.506823][ T6983] bond_slave_1: entered promiscuous mode [ 125.542312][ T23] usbhid 3-1:0.0: can't add hid device: -71 [ 125.551195][ T6983] bond0: left promiscuous mode [ 125.565290][ T23] usbhid: probe of 3-1:0.0 failed with error -71 [ 125.565491][ T6983] bond_slave_0: left promiscuous mode [ 125.586496][ T6983] bond_slave_1: left promiscuous mode [ 125.613322][ T23] usb 3-1: USB disconnect, device number 5 [ 125.856464][ T6986] loop4: detected capacity change from 0 to 512 [ 125.868832][ T6986] EXT4-fs: Ignoring removed bh option [ 125.914524][ T6986] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 125.935258][ T6986] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 125.953551][ T6988] loop1: detected capacity change from 0 to 8192 [ 125.983794][ T6986] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 126.000025][ T6986] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e018, mo2=0006] [ 126.009400][ T6986] System zones: 0-2, 18-18, 34-35 [ 126.021659][ T6986] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.269589][ T6994] netlink: 'syz.2.309': attribute type 11 has an invalid length. [ 126.285630][ T6994] netlink: 56 bytes leftover after parsing attributes in process `syz.2.309'. [ 126.314004][ T6994] netlink: 'syz.2.309': attribute type 11 has an invalid length. [ 126.316950][ T6238] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.325233][ T6994] netlink: 56 bytes leftover after parsing attributes in process `syz.2.309'. [ 126.370202][ T6996] loop3: detected capacity change from 0 to 128 [ 126.372345][ T6994] netlink: 'syz.2.309': attribute type 11 has an invalid length. [ 126.391704][ T6994] netlink: 56 bytes leftover after parsing attributes in process `syz.2.309'. [ 126.573263][ T7005] loop4: detected capacity change from 0 to 128 [ 126.587072][ T7005] FAT-fs (loop4): Directory bread(block 414) failed [ 126.597910][ T7005] FAT-fs (loop4): Directory bread(block 415) failed [ 126.604658][ T7005] FAT-fs (loop4): Directory bread(block 416) failed [ 126.616331][ T7005] FAT-fs (loop4): Directory bread(block 417) failed [ 126.624139][ T7005] FAT-fs (loop4): Directory bread(block 418) failed [ 126.642571][ T7005] FAT-fs (loop4): Directory bread(block 419) failed [ 126.649664][ T7005] FAT-fs (loop4): Directory bread(block 420) failed [ 126.659052][ T7005] FAT-fs (loop4): Directory bread(block 421) failed [ 126.724573][ T7005] FAT-fs (loop4): FAT read failed (blocknr 128) [ 126.887960][ T7015] loop3: detected capacity change from 0 to 16 [ 126.907395][ T7015] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 126.958473][ T7019] loop1: detected capacity change from 0 to 128 [ 126.978459][ T7019] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 127.007632][ T7019] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 127.123932][ T5784] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 127.186214][ T23] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 127.412316][ T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.433857][ T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 127.449544][ T23] usb 5-1: config 1 has no interface number 0 [ 127.463009][ T23] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.475836][ T23] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 127.484929][ T23] usb 5-1: too many endpoints for config 1 interface 1 altsetting 1: 247, using maximum allowed: 30 [ 127.497630][ T23] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 247 [ 127.513732][ T23] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.522976][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.531240][ T23] usb 5-1: Product: syz [ 127.538760][ T23] usb 5-1: Manufacturer: syz [ 127.543349][ T23] usb 5-1: SerialNumber: syz [ 127.613358][ T7051] loop1: detected capacity change from 0 to 512 [ 127.621270][ T7051] EXT4-fs: Ignoring removed oldalloc option [ 127.628425][ T7051] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 127.647221][ T7051] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2872: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 127.662344][ T7051] EXT4-fs (loop1): 1 truncate cleaned up [ 127.669875][ T7051] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 127.725380][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 127.762678][ T7051] loop1: detected capacity change from 512 to 64 [ 127.780365][ T7054] EXT4-fs error (device loop1): mb_free_blocks:1938: group 0, inode 19: block 77:freeing already freed block (bit 76); block bitmap corrupt. [ 127.797444][ T7054] EXT4-fs (loop1): pa ffff88805b1a4740: logic 0, phys. 65, len 64 [ 127.805397][ T7054] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5372: group 0, free 64, pa_free 12 [ 127.869031][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.925367][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 127.935690][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 127.955352][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 127.968649][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.985803][ T8] usb 4-1: Product: syz [ 128.001846][ T8] usb 4-1: Manufacturer: syz [ 128.006650][ T8] usb 4-1: SerialNumber: syz [ 128.361052][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.334'. [ 128.576460][ T23] cdc_ncm 5-1:1.1: bind() failure [ 128.804967][ T23] usb 5-1: USB disconnect, device number 6 [ 129.074657][ T8] cdc_ncm 4-1:1.0: bind() failure [ 129.083547][ T8] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 129.090588][ T8] cdc_ncm 4-1:1.1: bind() failure [ 129.178954][ T7073] loop1: detected capacity change from 0 to 128 [ 129.191439][ T7073] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.204050][ T7073] ext4 filesystem being mounted at /94/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.251699][ T5784] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.332830][ T5854] usb 4-1: USB disconnect, device number 2 [ 129.586967][ T7083] loop2: detected capacity change from 0 to 2048 [ 129.604473][ T7083] EXT4-fs: Ignoring removed bh option [ 129.635648][ T7083] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.740339][ T7083] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 129.760624][ T7083] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 129.779458][ T7083] EXT4-fs (loop2): This should not happen!! Data will be lost [ 129.779458][ T7083] [ 129.801530][ T7077] loop1: detected capacity change from 0 to 40427 [ 129.812617][ T7083] EXT4-fs (loop2): Total free blocks count 0 [ 129.830804][ T7077] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 129.837682][ T7083] EXT4-fs (loop2): Free/Dirty block details [ 129.843704][ T7077] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 129.857128][ T7083] EXT4-fs (loop2): free_blocks=2415919104 [ 129.871666][ T7083] EXT4-fs (loop2): dirty_blocks=16 [ 129.887331][ T7083] EXT4-fs (loop2): Block reservation details [ 129.888032][ T7077] F2FS-fs (loop1): Found nat_bits in checkpoint [ 129.903738][ T7083] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 129.930296][ T7089] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 129.979261][ T7077] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 129.995048][ T7077] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 130.135979][ T5784] syz-executor: attempt to access beyond end of device [ 130.135979][ T5784] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 130.165524][ T5784] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 130.183306][ T5784] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 130.225238][ T5854] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 130.543155][ T7100] loop4: detected capacity change from 0 to 32768 [ 130.584066][ T7100] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 130.711677][ T7100] XFS (loop4): Ending clean mount [ 130.732127][ T7100] XFS (loop4): Quotacheck needed: Please wait. [ 130.821095][ T7100] XFS (loop4): Quotacheck: Done. [ 131.212160][ T6238] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 131.454124][ T7104] loop2: detected capacity change from 0 to 131072 [ 131.464244][ T5854] usb 4-1: Using ep0 maxpacket: 32 [ 131.480430][ T7118] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 131.480503][ T7104] F2FS-fs (loop2): invalid crc value [ 131.500516][ T5854] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 131.510214][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.520911][ T5854] usb 4-1: config 0 descriptor?? [ 131.529343][ T5854] gspca_main: sq930x-2.14.0 probing 041e:403c [ 131.558803][ T7104] F2FS-fs (loop2): Found nat_bits in checkpoint [ 131.625056][ T7104] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 131.718884][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 132.423374][ T7130] loop1: detected capacity change from 0 to 40427 [ 132.438140][ T7130] F2FS-fs (loop1): invalid crc value [ 132.447321][ T7130] F2FS-fs (loop1): Found nat_bits in checkpoint [ 132.508779][ T7130] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 132.590364][ T7130] syz.1.357: attempt to access beyond end of device [ 132.590364][ T7130] loop1: rw=2049, sector=45096, nr_sectors = 96 limit=40427 [ 132.638717][ T5784] syz-executor: attempt to access beyond end of device [ 132.638717][ T5784] loop1: rw=2049, sector=45192, nr_sectors = 8 limit=40427 [ 132.653246][ T5784] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 132.795445][ T5854] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 132.805347][ T5854] sq930x: probe of 4-1:0.0 failed with error -71 [ 132.822279][ T5854] usb 4-1: USB disconnect, device number 3 [ 133.032543][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.040820][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.074359][ T7144] loop1: detected capacity change from 0 to 1024 [ 133.114869][ T7144] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.170006][ T7142] loop2: detected capacity change from 0 to 32768 [ 133.190375][ T7142] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 133.198380][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.242759][ T7142] XFS (loop2): Ending clean mount [ 133.288146][ T8] kernel write not supported for file /230/gid_map (pid: 8 comm: kworker/0:0) [ 133.368036][ T7159] loop1: detected capacity change from 0 to 256 [ 133.398634][ T5783] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 133.735474][ T5799] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 133.793502][ T7171] vcan0: tx drop: invalid da for name 0x00000000000000f0 [ 133.829833][ T7167] loop1: detected capacity change from 0 to 8192 [ 133.841878][ T7167] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 133.856135][ T7167] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 133.865417][ T7167] REISERFS (device loop1): using ordered data mode [ 133.871941][ T7167] reiserfs: using flush barriers [ 133.882866][ T7167] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 133.899671][ T7167] REISERFS (device loop1): checking transaction log (loop1) [ 133.909863][ T7167] REISERFS (device loop1): Using r5 hash to sort names [ 133.917452][ T7167] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 134.043113][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c66b000: rx timeout, send abort [ 134.543227][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c66ac00: rx timeout, send abort [ 134.552973][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c66b000: abort rx timeout. Force session deactivation [ 134.667033][ T7184] loop1: detected capacity change from 0 to 40427 [ 134.677602][ T7184] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 134.691141][ T7184] F2FS-fs (loop1): Image doesn't support compression [ 134.698387][ T7184] F2FS-fs (loop1): heap/no_heap options were deprecated [ 134.711085][ T7184] F2FS-fs (loop1): Image doesn't support compression [ 134.720330][ T7184] F2FS-fs (loop1): heap/no_heap options were deprecated [ 134.745710][ T7184] F2FS-fs (loop1): invalid crc value [ 134.782394][ T7184] F2FS-fs (loop1): Found nat_bits in checkpoint [ 134.882226][ T7184] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 134.990347][ T7184] F2FS-fs (loop1): inject slab alloc in f2fs_alloc_inode of new_inode_pseudo+0x63/0x1d0 [ 135.051670][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802c66ac00: abort rx timeout. Force session deactivation [ 135.064586][ T5784] syz-executor: attempt to access beyond end of device [ 135.064586][ T5784] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 135.105013][ T5784] F2FS-fs (loop1): Remounting filesystem read-only [ 135.325427][ T7194] loop2: detected capacity change from 0 to 32768 [ 135.375223][ T7194] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 135.459700][ T7194] XFS (loop2): Ending clean mount [ 135.486513][ T7194] XFS (loop2): Quotacheck needed: Please wait. [ 135.578783][ T7194] XFS (loop2): Quotacheck: Done. [ 135.707533][ T7205] loop4: detected capacity change from 0 to 32768 [ 135.725577][ T7205] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.383 (7205) [ 135.767921][ T7205] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 135.791702][ T7205] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 135.810489][ T5783] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 135.821041][ T7205] BTRFS info (device loop4): turning on sync discard [ 135.832758][ T7205] BTRFS info (device loop4): setting nodatacow, compression disabled [ 135.859130][ T7205] BTRFS info (device loop4): turning off barriers [ 135.868329][ T7205] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 135.881675][ T7205] BTRFS info (device loop4): trying to use backup root at mount time [ 135.892207][ T7205] BTRFS info (device loop4): metadata ratio 32769 [ 135.899531][ T7205] BTRFS info (device loop4): max_inline at 0 [ 135.912361][ T7205] BTRFS info (device loop4): using free space tree [ 135.946226][ T12] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 135.969148][ T7205] BTRFS error (device loop4): failed to load root extent [ 135.977082][ T7205] BTRFS warning (device loop4): try to load backup roots slot 1 [ 135.985790][ T2926] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 136.045233][ T7205] BTRFS warning (device loop4): couldn't read tree root [ 136.055779][ T7205] BTRFS warning (device loop4): try to load backup roots slot 2 [ 136.088773][ T2926] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 136.125594][ T7205] BTRFS warning (device loop4): couldn't read tree root [ 136.139641][ T7240] loop2: detected capacity change from 0 to 512 [ 136.157653][ T7205] BTRFS warning (device loop4): try to load backup roots slot 3 [ 136.166689][ T7240] EXT4-fs: Ignoring removed nobh option [ 136.186370][ T7205] BTRFS info (device loop4): enabling ssd optimizations [ 136.195447][ T7205] BTRFS info (device loop4): rebuilding free space tree [ 136.210121][ T7240] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.246804][ T7240] ext4 filesystem being mounted at /96/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 136.271066][ T7205] BTRFS info (device loop4): checking UUID tree [ 136.360032][ T27] audit: type=1800 audit(1763565923.462:11): pid=7205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.383" name="file1" dev="loop4" ino=257 res=0 errno=0 [ 136.402526][ T7240] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #2: block 3: comm syz.2.388: bad entry in directory: inode out of bounds - offset=92, inode=117440528, rec_len=16, size=2048 fake=0 [ 136.553500][ T5783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.868912][ T6238] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 137.329824][ T7252] loop3: detected capacity change from 0 to 131072 [ 137.343917][ T7252] F2FS-fs (loop3): invalid crc value [ 137.370511][ T7252] F2FS-fs (loop3): Found nat_bits in checkpoint [ 137.435275][ T7252] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 137.479239][ T7258] loop2: detected capacity change from 0 to 128 [ 137.895376][ T5799] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 138.221218][ T5799] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 138.232799][ T5799] CPU: 0 PID: 5799 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 138.240384][ T5799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 138.250464][ T5799] Workqueue: hci1 hci_rx_work [ 138.255195][ T5799] Call Trace: [ 138.258492][ T5799] [ 138.261450][ T5799] dump_stack_lvl+0x16c/0x230 [ 138.266424][ T5799] ? show_regs_print_info+0x20/0x20 [ 138.272558][ T5799] ? load_image+0x3b0/0x3b0 [ 138.277558][ T5799] sysfs_create_dir_ns+0x256/0x280 [ 138.282984][ T5799] ? hci_rx_work+0x43a/0xd80 [ 138.287628][ T5799] ? sysfs_warn_dup+0xa0/0xa0 [ 138.292347][ T5799] ? do_raw_spin_unlock+0x121/0x230 [ 138.297559][ T5799] kobject_add_internal+0x6b8/0xc70 [ 138.302766][ T5799] kobject_add+0x156/0x220 [ 138.307178][ T5799] ? __rwlock_init+0x150/0x150 [ 138.312300][ T5799] ? kobject_init+0x1e0/0x1e0 [ 138.316971][ T5799] ? _raw_spin_unlock+0x28/0x40 [ 138.321913][ T5799] ? get_device_parent+0x366/0x390 [ 138.327029][ T5799] device_add+0x408/0xc20 [ 138.331369][ T5799] hci_conn_add_sysfs+0xd5/0x1e0 [ 138.336503][ T5799] le_conn_complete_evt+0xf36/0x1500 [ 138.341910][ T5799] ? hci_event_packet+0x4a7/0x1210 [ 138.347026][ T5799] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 138.353273][ T5799] ? __copy_skb_header+0xa7/0x550 [ 138.358311][ T5799] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 138.363965][ T5799] ? skb_pull_data+0xfb/0x200 [ 138.368643][ T5799] hci_le_conn_complete_evt+0x187/0x440 [ 138.374191][ T5799] ? hci_remote_host_features_evt+0x160/0x160 [ 138.380276][ T5799] hci_event_packet+0x795/0x1210 [ 138.385223][ T5799] ? bis_list+0x290/0x290 [ 138.389641][ T5799] ? lockdep_hardirqs_on+0x98/0x150 [ 138.394835][ T5799] ? hci_send_to_monitor+0xd7/0x4f0 [ 138.400043][ T5799] hci_rx_work+0x43a/0xd80 [ 138.404464][ T5799] ? process_scheduled_works+0x957/0x15b0 [ 138.410177][ T5799] process_scheduled_works+0xa45/0x15b0 [ 138.415738][ T5799] ? assign_work+0x400/0x400 [ 138.420323][ T5799] ? assign_work+0x39e/0x400 [ 138.424910][ T5799] worker_thread+0xa55/0xfc0 [ 138.429495][ T5799] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 138.435386][ T5799] ? _raw_spin_unlock+0x40/0x40 [ 138.440576][ T5799] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 138.446474][ T5799] kthread+0x2fa/0x390 [ 138.450538][ T5799] ? pr_cont_work+0x560/0x560 [ 138.455211][ T5799] ? kthread_blkcg+0xd0/0xd0 [ 138.459793][ T5799] ret_from_fork+0x48/0x80 [ 138.464203][ T5799] ? kthread_blkcg+0xd0/0xd0 [ 138.468789][ T5799] ret_from_fork_asm+0x11/0x20 [ 138.473567][ T5799] [ 138.485229][ T5799] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 138.499495][ T5799] Bluetooth: hci1: failed to register connection device [ 138.746376][ T7281] loop4: detected capacity change from 0 to 512 [ 138.845340][ T7281] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2249: inode #15: comm syz.4.400: corrupted in-inode xattr: invalid ea_ino [ 138.907555][ T7281] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.400: couldn't read orphan inode 15 (err -117) [ 138.988300][ T7281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.030254][ T7272] loop1: detected capacity change from 0 to 32768 [ 139.060497][ T7272] (syz.1.398,7272,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 139.084457][ T7272] (syz.1.398,7272,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 139.185591][ T7272] JBD2: Ignoring recovery information on journal [ 139.276683][ T6238] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.339841][ T7272] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 139.354751][ T7279] loop3: detected capacity change from 0 to 40427 [ 139.376142][ T7279] F2FS-fs (loop3): invalid crc value [ 139.423341][ T7279] F2FS-fs (loop3): Found nat_bits in checkpoint [ 139.539162][ T7279] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 139.583491][ T5784] ocfs2: Unmounting device (7,1) on (node local) [ 139.714584][ T7279] syz.3.401: attempt to access beyond end of device [ 139.714584][ T7279] loop3: rw=2049, sector=45096, nr_sectors = 96 limit=40427 [ 139.825529][ T7283] loop2: detected capacity change from 0 to 40427 [ 139.833419][ T7283] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 139.845486][ T5789] syz-executor: attempt to access beyond end of device [ 139.845486][ T5789] loop3: rw=2049, sector=45192, nr_sectors = 8 limit=40427 [ 139.846978][ T7283] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 139.881304][ T5789] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 139.911489][ T7283] F2FS-fs (loop2): Found nat_bits in checkpoint [ 140.006921][ T7283] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 140.025427][ T7283] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 140.236155][ T5783] syz-executor: attempt to access beyond end of device [ 140.236155][ T5783] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 140.262458][ T5783] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 140.275327][ T5783] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 140.674018][ T7316] loop3: detected capacity change from 0 to 8192 [ 140.702313][ T7316] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 140.719752][ T7316] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 140.730332][ T7316] REISERFS (device loop3): using ordered data mode [ 140.741327][ T7316] reiserfs: using flush barriers [ 140.749382][ T7316] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 140.795867][ T7316] REISERFS (device loop3): checking transaction log (loop3) [ 140.809140][ T7316] REISERFS (device loop3): Using r5 hash to sort names [ 140.828122][ T7316] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 140.885694][ T7308] loop4: detected capacity change from 0 to 32768 [ 140.893838][ T7308] XFS: attr2 mount option is deprecated. [ 140.914214][ T7308] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 140.934130][ T7327] loop2: detected capacity change from 0 to 128 [ 140.949648][ T7327] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 140.961010][ T7308] XFS (loop4): Ending clean mount [ 140.967914][ T7327] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 140.979264][ T7308] XFS (loop4): Quotacheck needed: Please wait. [ 141.062291][ T989] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 141.068005][ T7308] XFS (loop4): Quotacheck: Done. [ 141.250177][ T6238] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 141.365631][ T788] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 141.567230][ T788] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 141.596332][ T788] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 141.630088][ T788] usb 4-1: config 0 interface 0 has no altsetting 0 [ 141.645566][ T788] usb 4-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 141.670107][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.706910][ T788] usb 4-1: config 0 descriptor?? [ 141.722569][ T7329] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 141.965411][ T7329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.984651][ T7329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.995382][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 142.017238][ T788] usbhid 4-1:0.0: can't add hid device: -71 [ 142.022546][ T7342] loop4: detected capacity change from 0 to 40427 [ 142.023232][ T788] usbhid: probe of 4-1:0.0 failed with error -71 [ 142.041241][ T7342] F2FS-fs (loop4): invalid crc value [ 142.054774][ T788] usb 4-1: USB disconnect, device number 4 [ 142.078081][ T7342] F2FS-fs (loop4): Found nat_bits in checkpoint [ 142.140702][ T7342] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 142.195234][ T8] usb 3-1: Using ep0 maxpacket: 16 [ 142.202766][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.225217][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 142.241818][ T7342] syz.4.416: attempt to access beyond end of device [ 142.241818][ T7342] loop4: rw=2049, sector=45096, nr_sectors = 96 limit=40427 [ 142.248576][ T8] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 142.265824][ T7348] loop1: detected capacity change from 0 to 40427 [ 142.274154][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.289098][ T8] usb 3-1: config 0 descriptor?? [ 142.294181][ T7348] F2FS-fs (loop1): invalid crc value [ 142.308847][ T7348] F2FS-fs (loop1): Found nat_bits in checkpoint [ 142.327184][ T6238] syz-executor: attempt to access beyond end of device [ 142.327184][ T6238] loop4: rw=2049, sector=45192, nr_sectors = 8 limit=40427 [ 142.347244][ T6238] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 142.371166][ T7348] F2FS-fs (loop1): Start checkpoint disabled! [ 142.381510][ T7348] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 142.432077][ T7348] syz.1.424: attempt to access beyond end of device [ 142.432077][ T7348] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 142.450489][ T7348] syz.1.424: attempt to access beyond end of device [ 142.450489][ T7348] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 142.555495][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 142.583256][ T11] kworker/u4:0: attempt to access beyond end of device [ 142.583256][ T11] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 142.607713][ T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 142.614832][ T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 142.755276][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 142.764061][ T9] usb 4-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 142.796327][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 142.813267][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.00 [ 142.836447][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.859308][ T9] usb 4-1: config 0 descriptor?? [ 142.878268][ T9] hub 4-1:0.0: USB hub found [ 142.951572][ T7358] loop4: detected capacity change from 0 to 64 [ 142.995268][ T27] audit: type=1800 audit(1763565930.102:12): pid=7358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.427" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 143.073028][ T8] usbhid 3-1:0.0: can't add hid device: -71 [ 143.101299][ T8] usbhid: probe of 3-1:0.0 failed with error -71 [ 143.112475][ T9] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 143.128708][ T8] usb 3-1: USB disconnect, device number 6 [ 143.323202][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 143.332210][ T9] usbhid: probe of 4-1:0.0 failed with error -71 [ 143.377124][ T9] usb 4-1: USB disconnect, device number 5 [ 143.442846][ T7363] loop4: detected capacity change from 0 to 32768 [ 143.459751][ T7363] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 143.485858][ T7363] XFS (loop4): Ending clean mount [ 143.626865][ T6238] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 143.777303][ T7383] blktrace: Concurrent blktraces are not allowed on nullb0 [ 143.951141][ T7388] loop4: detected capacity change from 0 to 256 [ 143.952509][ T7385] loop1: detected capacity change from 0 to 512 [ 144.028402][ T7385] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.028754][ T7394] loop3: detected capacity change from 0 to 128 [ 144.049132][ T7394] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 144.075338][ T7394] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 144.090214][ T7385] EXT4-fs warning (device loop1): ext4_dirblock_csum_verify:406: inode #2: comm syz.1.436: No space for directory leaf checksum. Please run e2fsck -D. [ 144.108290][ T7385] EXT4-fs error (device loop1): ext4_readdir:223: inode #2: comm syz.1.436: path (unknown): directory fails checksum at offset 0 [ 144.142311][ T12] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 144.159155][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.221709][ T7398] loop4: detected capacity change from 0 to 64 [ 144.615564][ T5799] Bluetooth: hci1: command 0x0406 tx timeout [ 144.685315][ T5854] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 144.789990][ T7401] loop1: detected capacity change from 0 to 32768 [ 144.823294][ T7401] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 144.829177][ T7396] loop2: detected capacity change from 0 to 32768 [ 144.868362][ T7401] XFS (loop1): Ending clean mount [ 144.877824][ T7396] loop2: p1 p3 < > [ 144.905236][ T5854] usb 4-1: Using ep0 maxpacket: 16 [ 144.918127][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.939360][ T5854] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 144.965396][ T5854] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 144.975069][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.987421][ T5854] usb 4-1: config 0 descriptor?? [ 145.134789][ T5784] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 145.278229][ T7425] capability: warning: `syz.2.446' uses deprecated v2 capabilities in a way that may be insecure [ 145.774874][ T5854] usbhid 4-1:0.0: can't add hid device: -71 [ 145.794356][ T5854] usbhid: probe of 4-1:0.0 failed with error -71 [ 145.811687][ T5854] usb 4-1: USB disconnect, device number 6 [ 145.937194][ T7432] loop2: detected capacity change from 0 to 40427 [ 145.952298][ T7432] F2FS-fs (loop2): Wrong segment_count / block_count (31 > 0) [ 145.960205][ T7432] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 145.971123][ T7432] F2FS-fs (loop2): invalid crc value [ 145.979170][ T7432] F2FS-fs (loop2): Found nat_bits in checkpoint [ 146.034142][ T7432] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 146.043001][ T7432] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 146.097633][ T7432] syz.2.450: attempt to access beyond end of device [ 146.097633][ T7432] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 146.115312][ T7432] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 146.125867][ T7432] syz.2.450: attempt to access beyond end of device [ 146.125867][ T7432] loop2: rw=2049, sector=40992, nr_sectors = 8 limit=40427 [ 146.142130][ T7432] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 146.573456][ T7457] "syz.2.458" (7457) uses obsolete ecb(arc4) skcipher [ 146.710375][ T7461] netlink: 56 bytes leftover after parsing attributes in process `syz.4.460'. [ 146.720077][ T7461] netlink: 8 bytes leftover after parsing attributes in process `syz.4.460'. [ 147.069397][ T7480] "syz.3.467" (7480) uses obsolete ecb(arc4) skcipher [ 147.270794][ T7472] loop4: detected capacity change from 0 to 32768 [ 147.291469][ T7472] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 147.324614][ T7472] XFS (loop4): Ending clean mount [ 147.338054][ T7472] XFS (loop4): Quotacheck needed: Please wait. [ 147.377726][ T7472] XFS (loop4): Quotacheck: Done. [ 147.457542][ T7495] Invalid ELF header len 16 [ 147.550320][ T6238] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 148.183933][ T7501] loop2: detected capacity change from 0 to 40427 [ 148.195880][ T7501] F2FS-fs (loop2): invalid crc value [ 148.203165][ T7501] F2FS-fs (loop2): Found nat_bits in checkpoint [ 148.234742][ T7501] F2FS-fs (loop2): Start checkpoint disabled! [ 148.242426][ T7501] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 148.255370][ T5854] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 148.285593][ T7501] syz.2.473: attempt to access beyond end of device [ 148.285593][ T7501] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 148.305393][ T7501] syz.2.473: attempt to access beyond end of device [ 148.305393][ T7501] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 148.370283][ T27] audit: type=1326 audit(1763565935.482:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7515 comm="syz.4.488" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5cdc98f749 code=0x0 [ 148.396601][ T49] kworker/u4:3: attempt to access beyond end of device [ 148.396601][ T49] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 148.411635][ T49] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 148.421085][ T49] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 148.436244][ T5854] usb 4-1: Using ep0 maxpacket: 32 [ 148.443522][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.454521][ T5854] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 148.463985][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.483057][ T5854] usb 4-1: config 0 descriptor?? [ 148.901590][ T5854] uclogic 0003:28BD:0071.0004: interface is invalid, ignoring [ 149.123974][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 149.151557][ T7529] loop1: detected capacity change from 0 to 32768 [ 149.152093][ T8] usb 4-1: USB disconnect, device number 7 [ 149.169230][ T7529] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 149.204684][ T7529] XFS (loop1): Ending clean mount [ 149.216415][ T7529] XFS (loop1): Quotacheck needed: Please wait. [ 149.246105][ T7529] XFS (loop1): Quotacheck: Done. [ 149.327654][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 149.334759][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.347607][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 149.354632][ T5784] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 149.360764][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 149.378710][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.389426][ T9] usb 3-1: config 0 descriptor?? [ 149.609478][ T7541] Invalid ELF header len 16 [ 149.819876][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 149.838078][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0005/input/input10 [ 149.862487][ T9] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 149.920704][ T7545] loop1: detected capacity change from 0 to 32768 [ 149.928723][ T7545] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.485 (7545) [ 149.946400][ T7545] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 149.956747][ T7545] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 149.966479][ T7545] BTRFS info (device loop1): turning on sync discard [ 149.973185][ T7545] BTRFS info (device loop1): setting nodatacow, compression disabled [ 149.981646][ T7545] BTRFS info (device loop1): turning off barriers [ 149.988542][ T7545] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 150.000455][ T7545] BTRFS info (device loop1): trying to use backup root at mount time [ 150.008746][ T7545] BTRFS info (device loop1): metadata ratio 32769 [ 150.015392][ T7545] BTRFS info (device loop1): max_inline at 0 [ 150.021496][ T7545] BTRFS info (device loop1): using free space tree [ 150.043648][ T989] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 150.061961][ T7545] BTRFS error (device loop1): failed to load root extent [ 150.071326][ T7545] BTRFS warning (device loop1): try to load backup roots slot 1 [ 150.086430][ T12] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 150.101300][ T7545] BTRFS warning (device loop1): couldn't read tree root [ 150.108589][ T7545] BTRFS warning (device loop1): try to load backup roots slot 2 [ 150.117099][ T49] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 150.127764][ T7545] BTRFS warning (device loop1): couldn't read tree root [ 150.136324][ T7545] BTRFS warning (device loop1): try to load backup roots slot 3 [ 150.151959][ T7545] BTRFS info (device loop1): enabling ssd optimizations [ 150.160919][ T7545] BTRFS info (device loop1): rebuilding free space tree [ 150.182658][ T7545] BTRFS info (device loop1): checking UUID tree [ 150.226265][ T27] audit: type=1800 audit(1763565937.342:14): pid=7545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.485" name="file1" dev="loop1" ino=257 res=0 errno=0 [ 150.708646][ T5784] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 150.722327][ T8] usb 3-1: USB disconnect, device number 7 [ 150.825541][ T7566] bond0: (slave bond_slave_0): Releasing backup interface [ 151.240455][ T7568] loop3: detected capacity change from 0 to 40427 [ 151.252969][ T7568] F2FS-fs (loop3): Wrong segment_count / block_count (31 > 0) [ 151.261968][ T7568] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 151.278979][ T7568] F2FS-fs (loop3): invalid crc value [ 151.310239][ T7568] F2FS-fs (loop3): Found nat_bits in checkpoint [ 151.395014][ T7568] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 151.406510][ T7568] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 151.462921][ T7568] syz.3.491: attempt to access beyond end of device [ 151.462921][ T7568] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 151.478603][ T7568] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 151.486306][ T7568] syz.3.491: attempt to access beyond end of device [ 151.486306][ T7568] loop3: rw=2049, sector=40992, nr_sectors = 8 limit=40427 [ 151.501328][ T7568] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 151.586321][ T5855] kernel write not supported for file bpf-prog (pid: 5855 comm: kworker/0:5) [ 151.657298][ T7572] loop1: detected capacity change from 0 to 32768 [ 151.696307][ T7572] loop1: p1 p3 < > [ 151.875850][ T5854] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 152.075503][ T5854] usb 5-1: Using ep0 maxpacket: 16 [ 152.093323][ T5854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.112733][ T5854] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 152.144197][ T5854] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 152.163579][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.186638][ T5854] usb 5-1: config 0 descriptor?? [ 152.438313][ T7600] loop3: detected capacity change from 0 to 8192 [ 152.621453][ T5854] HID 045e:07da: Invalid code 65791 type 1 [ 152.647399][ T5854] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0006/input/input11 [ 152.673349][ T5854] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 152.775534][ T788] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 152.878854][ T7602] loop2: detected capacity change from 0 to 32768 [ 152.905579][ T7602] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.501 (7602) [ 152.941317][ T7602] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 152.952133][ T7602] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 152.961708][ T7602] BTRFS info (device loop2): turning on sync discard [ 152.968858][ T7602] BTRFS info (device loop2): setting nodatacow, compression disabled [ 152.977255][ T7602] BTRFS info (device loop2): turning off barriers [ 152.981797][ T788] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 152.983779][ T7602] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 153.013915][ T7602] BTRFS info (device loop2): trying to use backup root at mount time [ 153.022052][ T788] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.022128][ T788] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 153.022149][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.054937][ T7602] BTRFS info (device loop2): metadata ratio 32769 [ 153.061749][ T7602] BTRFS info (device loop2): max_inline at 0 [ 153.067927][ T7602] BTRFS info (device loop2): using free space tree [ 153.110613][ T3001] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 153.131273][ T7602] BTRFS error (device loop2): failed to load root extent [ 153.139639][ T7602] BTRFS warning (device loop2): try to load backup roots slot 1 [ 153.148430][ T49] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 153.162685][ T7602] BTRFS warning (device loop2): couldn't read tree root [ 153.170001][ T7602] BTRFS warning (device loop2): try to load backup roots slot 2 [ 153.182185][ T2926] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 153.193638][ T7602] BTRFS warning (device loop2): couldn't read tree root [ 153.201219][ T7602] BTRFS warning (device loop2): try to load backup roots slot 3 [ 153.226102][ T7602] BTRFS info (device loop2): enabling ssd optimizations [ 153.234223][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 153.245523][ T7602] BTRFS info (device loop2): rebuilding free space tree [ 153.272377][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 153.277159][ T788] usb 2-1: usb_control_msg returned -32 [ 153.287519][ T788] usbtmc 2-1:16.0: can't read capabilities [ 153.310535][ T7602] BTRFS info (device loop2): checking UUID tree [ 153.441414][ T27] audit: type=1800 audit(1763565940.552:15): pid=7602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.501" name="file1" dev="loop2" ino=257 res=0 errno=0 [ 153.568486][ T8] usb 5-1: USB disconnect, device number 7 [ 153.786650][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 153.802288][ T5783] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 153.885586][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 153.893896][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 154.116308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 154.549852][ T7636] loop2: detected capacity change from 0 to 128 [ 154.587390][ T7636] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 154.745620][ T7642] input: syz1 as /devices/virtual/input/input12 [ 154.774591][ T7644] loop2: detected capacity change from 0 to 2048 [ 154.786001][ T7644] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 154.802225][ T7644] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.849955][ T27] audit: type=1800 audit(1763565941.942:16): pid=7644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.515" name="file2" dev="loop2" ino=1347 res=0 errno=0 [ 155.165415][ T5855] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 155.346665][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 155.358243][ T5855] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.368082][ T5855] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 155.381062][ T5855] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 155.390267][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.400154][ T5855] usb 4-1: config 0 descriptor?? [ 155.517316][ T788] usb 2-1: USB disconnect, device number 5 [ 155.836665][ T5855] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 155.869677][ T7659] loop4: detected capacity change from 0 to 128 [ 155.880770][ T5855] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 156.225271][ T51] Bluetooth: hci2: command 0x0405 tx timeout [ 156.767813][ T7661] loop1: detected capacity change from 0 to 40427 [ 156.793955][ T7661] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 156.802122][ T7661] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 156.813948][ T7661] F2FS-fs (loop1): invalid crc value [ 156.823841][ T7661] F2FS-fs (loop1): Found nat_bits in checkpoint [ 156.871095][ T7661] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 156.878442][ T7661] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 157.148442][ C0] plantronics 0003:047F:FFFF.0007: usb_submit_urb(ctrl) failed: -1 [ 157.459398][ T7672] loop2: detected capacity change from 0 to 32768 [ 157.473278][ T7672] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.534 (7672) [ 157.503657][ T7672] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 157.520724][ T7672] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 157.530223][ T7672] BTRFS info (device loop2): turning on sync discard [ 157.542179][ T7672] BTRFS info (device loop2): setting nodatacow, compression disabled [ 157.550938][ T7672] BTRFS info (device loop2): turning off barriers [ 157.562186][ T7672] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 157.575420][ T7672] BTRFS info (device loop2): trying to use backup root at mount time [ 157.591401][ T7672] BTRFS info (device loop2): metadata ratio 32769 [ 157.602698][ T7672] BTRFS info (device loop2): max_inline at 0 [ 157.620166][ T7672] BTRFS info (device loop2): using free space tree [ 157.725718][ T49] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 157.778075][ T7672] BTRFS error (device loop2): failed to load root extent [ 157.810933][ T7672] BTRFS warning (device loop2): try to load backup roots slot 1 [ 157.833015][ T2926] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 157.861174][ T7672] BTRFS warning (device loop2): couldn't read tree root [ 157.878640][ T7672] BTRFS warning (device loop2): try to load backup roots slot 2 [ 157.896819][ T3001] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 157.909884][ T7672] BTRFS warning (device loop2): couldn't read tree root [ 157.918069][ T7672] BTRFS warning (device loop2): try to load backup roots slot 3 [ 157.955864][ T7672] BTRFS info (device loop2): enabling ssd optimizations [ 157.967629][ T7672] BTRFS info (device loop2): rebuilding free space tree [ 157.990447][ T7672] BTRFS info (device loop2): checking UUID tree [ 158.054267][ T27] audit: type=1800 audit(1763565945.162:17): pid=7672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.534" name="file1" dev="loop2" ino=257 res=0 errno=0 [ 158.284728][ T5855] usb 4-1: USB disconnect, device number 8 [ 158.328289][ T5783] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 158.481767][ T5855] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 158.676703][ T5855] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 158.686667][ T5855] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.699728][ T5855] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 158.708857][ T5855] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.880793][ T7708] loop1: detected capacity change from 0 to 128 [ 158.956154][ T5855] usb 4-1: usb_control_msg returned -32 [ 158.962075][ T5855] usbtmc 4-1:16.0: can't read capabilities [ 159.290933][ T7706] loop2: detected capacity change from 0 to 32768 [ 159.299830][ T7706] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.535 (7706) [ 159.341475][ T7706] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 159.354692][ T7706] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 159.355549][ T5855] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 159.373130][ T7706] BTRFS info (device loop2): turning off barriers [ 159.384871][ T7706] BTRFS info (device loop2): setting nodatasum [ 159.391327][ T7706] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 159.404715][ T7706] BTRFS info (device loop2): use zstd compression, level 3 [ 159.412362][ T7706] BTRFS info (device loop2): using free space tree [ 159.555314][ T5855] usb 5-1: Using ep0 maxpacket: 8 [ 159.570615][ T5855] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.588816][ T5855] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 159.598195][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.610153][ T5855] usb 5-1: config 0 descriptor?? [ 159.623541][ T5855] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 159.831239][ T5783] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 160.852382][ T5855] gspca_vc032x: reg_w err -71 [ 160.854183][ T5874] usb 4-1: USB disconnect, device number 9 [ 160.863967][ T5855] vc032x: probe of 5-1:0.0 failed with error -71 [ 160.878736][ T5855] usb 5-1: USB disconnect, device number 8 [ 161.466510][ T7737] input: syz1 as /devices/virtual/input/input13 [ 161.724451][ T7747] overlayfs: invalid origin (0000) [ 162.382347][ T7764] loop2: detected capacity change from 0 to 2048 [ 162.393610][ T7751] loop1: detected capacity change from 0 to 32768 [ 162.404483][ T7764] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 162.432294][ T7751] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 162.492267][ T7764] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.551534][ T7751] XFS (loop1): Ending clean mount [ 162.875460][ T5784] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 162.893242][ T7766] loop4: detected capacity change from 0 to 32768 [ 162.908264][ T7766] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.553 (7766) [ 162.930405][ T7766] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 162.943849][ T7766] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 162.954544][ T7766] BTRFS info (device loop4): turning off barriers [ 162.961489][ T7766] BTRFS info (device loop4): setting nodatasum [ 162.968300][ T7766] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 162.978671][ T7766] BTRFS info (device loop4): use zstd compression, level 3 [ 162.987027][ T7766] BTRFS info (device loop4): using free space tree [ 163.219655][ T6238] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 164.180809][ T7809] input: syz1 as /devices/virtual/input/input14 [ 164.657536][ T788] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 164.856622][ T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 164.868992][ T788] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.878846][ T788] usb 5-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 164.889243][ T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.899184][ T788] usb 5-1: config 0 descriptor?? [ 165.330237][ T788] elo 0003:04E7:0030.0008: item fetching failed at offset 2/3 [ 165.362512][ T788] elo 0003:04E7:0030.0008: parse failed [ 165.374550][ T788] elo: probe of 0003:04E7:0030.0008 failed with error -22 [ 165.577018][ T5874] usb 5-1: USB disconnect, device number 9 [ 165.733968][ T7823] loop3: detected capacity change from 0 to 32768 [ 165.795553][ T7823] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 165.874232][ T7823] XFS (loop3): Ending clean mount [ 166.061490][ T5789] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 166.368174][ T7852] loop1: detected capacity change from 0 to 512 [ 166.433126][ T7852] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.451869][ T7852] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.548624][ T5784] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.625330][ T5855] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 166.731131][ T7861] loop3: detected capacity change from 0 to 512 [ 166.741435][ T7861] EXT4-fs (loop3): Test dummy encryption mode enabled [ 166.766673][ T7861] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.810546][ T7861] EXT4-fs error (device loop3): htree_dirblock_to_tree:1083: inode #2: comm syz.3.580: Directory hole found for htree leaf block 0 [ 166.831214][ T5855] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 166.842259][ T7861] EXT4-fs (loop3): Remounting filesystem read-only [ 166.852208][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.873521][ T5855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.882784][ T7867] netlink: 104 bytes leftover after parsing attributes in process `syz.2.582'. [ 166.892380][ T5855] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 166.901510][ T5855] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 166.920840][ T5789] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 166.931278][ T5855] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 166.965294][ T5855] usb 5-1: Manufacturer: syz [ 166.976710][ T5855] usb 5-1: config 0 descriptor?? [ 167.026460][ T7870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.395304][ T788] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 167.409163][ T5855] appleir 0003:05AC:8243.0009: unknown main item tag 0x0 [ 167.417406][ T5855] appleir 0003:05AC:8243.0009: No inputs registered, leaving [ 167.429650][ T5855] appleir 0003:05AC:8243.0009: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 167.588082][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 167.606582][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.635320][ T788] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 167.655809][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.679678][ T788] usb 3-1: config 0 descriptor?? [ 168.059068][ T7885] loop3: detected capacity change from 0 to 1024 [ 168.087204][ T7885] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.119964][ T788] elo 0003:04E7:0030.000A: item fetching failed at offset 2/3 [ 168.129615][ T788] elo 0003:04E7:0030.000A: parse failed [ 168.135572][ T27] audit: type=1800 audit(1763565955.242:18): pid=7885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.591" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 168.141478][ T7889] netlink: 'syz.1.592': attribute type 2 has an invalid length. [ 168.164460][ T788] elo: probe of 0003:04E7:0030.000A failed with error -22 [ 168.190302][ T7885] EXT4-fs error (device loop3): mb_free_blocks:1938: group 0, inode 15: block 449:freeing already freed block (bit 28); block bitmap corrupt. [ 168.242217][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.387149][ T788] usb 3-1: USB disconnect, device number 8 [ 168.536830][ T7896] loop3: detected capacity change from 0 to 512 [ 168.544646][ T7896] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 168.563799][ T7896] EXT4-fs (loop3): 1 truncate cleaned up [ 168.572427][ T7896] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.611095][ T27] audit: type=1800 audit(1763565955.722:19): pid=7896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.595" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 168.637036][ T27] audit: type=1800 audit(1763565955.722:20): pid=7896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.595" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 168.759521][ T5789] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.764919][ T7894] loop1: detected capacity change from 0 to 32768 [ 168.778500][ T7894] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.593 (7894) [ 168.798598][ T7894] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 168.809042][ T7894] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 168.818615][ T7894] BTRFS info (device loop1): turning off barriers [ 168.825494][ T7894] BTRFS info (device loop1): setting nodatasum [ 168.832490][ T7894] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 168.843377][ T7894] BTRFS info (device loop1): use zstd compression, level 3 [ 168.850710][ T7894] BTRFS info (device loop1): using free space tree [ 169.047715][ T5784] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 169.507486][ T7927] loop4: detected capacity change from 0 to 1024 [ 169.562874][ T7927] EXT4-fs warning (device loop4): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop4. [ 169.586886][ T5855] usb 5-1: USB disconnect, device number 10 [ 170.420323][ T3001] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.552760][ T3001] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.620206][ T3001] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.714151][ T3001] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.635789][ T3001] hsr_slave_0: left promiscuous mode [ 171.642211][ T3001] hsr_slave_1: left promiscuous mode [ 171.648831][ T3001] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 171.656133][ T3001] batman_adv: batadv0: Removing interface: virt_wifi0 [ 171.673219][ T3001] veth1_macvtap: left promiscuous mode [ 171.678851][ T3001] veth0_macvtap: left promiscuous mode [ 171.686179][ T3001] veth1_vlan: left promiscuous mode [ 171.691462][ T3001] veth0_vlan: left promiscuous mode [ 172.783357][ T3001] bond0 (unregistering): Released all slaves [ 173.239588][ T3001] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.334183][ T3001] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.381541][ T3001] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.436505][ T3001] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.557648][ T3001] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.645100][ T3001] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.701837][ T3001] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.772418][ T3001] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.995309][ T3001] hsr_slave_0: left promiscuous mode [ 175.001101][ T3001] hsr_slave_1: left promiscuous mode [ 175.010782][ T3001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.018569][ T3001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.030018][ T3001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.038163][ T3001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.046058][ T3001] bridge_slave_1: left allmulticast mode [ 175.051705][ T3001] bridge_slave_1: left promiscuous mode [ 175.057478][ T3001] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.068367][ T3001] bridge_slave_0: left allmulticast mode [ 175.074044][ T3001] bridge_slave_0: left promiscuous mode [ 175.080243][ T3001] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.093863][ T3001] hsr_slave_0: left promiscuous mode [ 175.099841][ T3001] hsr_slave_1: left promiscuous mode [ 175.107803][ T3001] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.115362][ T3001] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.123853][ T3001] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.131409][ T3001] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.139442][ T3001] bridge_slave_1: left allmulticast mode [ 175.145418][ T3001] bridge_slave_1: left promiscuous mode [ 175.151445][ T3001] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.161880][ T3001] bridge_slave_0: left allmulticast mode [ 175.167685][ T3001] bridge_slave_0: left promiscuous mode [ 175.173458][ T3001] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.208894][ T3001] veth1_macvtap: left promiscuous mode [ 175.214465][ T3001] veth0_macvtap: left promiscuous mode [ 175.220132][ T3001] veth1_vlan: left promiscuous mode [ 175.226705][ T3001] veth0_vlan: left promiscuous mode [ 175.233041][ T3001] veth1_macvtap: left promiscuous mode [ 175.238650][ T3001] veth0_macvtap: left promiscuous mode [ 175.244207][ T3001] veth1_vlan: left promiscuous mode [ 175.249708][ T3001] veth0_vlan: left promiscuous mode [ 175.780922][ T3001] team0 (unregistering): Port device team_slave_1 removed [ 175.824235][ T3001] team0 (unregistering): Port device team_slave_0 removed [ 175.868591][ T3001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.321192][ T3001] bond0 (unregistering): Released all slaves [ 176.791195][ T3001] team0 (unregistering): Port device team_slave_1 removed [ 176.839776][ T3001] team0 (unregistering): Port device team_slave_0 removed [ 176.881207][ T3001] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.340366][ T3001] bond0 (unregistering): Released all slaves