last executing test programs: 1m9.814887357s ago: executing program 3 (id=245): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x3, @remote, 'tunl0\x00'}}, 0x1e) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_devices(r2, &(0x7f00000001c0)=ANY=[], 0x47) splice(r1, 0x0, r0, 0x0, 0x5, 0x2) 1m9.644072181s ago: executing program 3 (id=247): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="02030e00d3fc02000000ab5d71b9edd7c9560385dcb188a8", 0x18, 0x800, &(0x7f0000000040)={0x11, 0x3, r2, 0x1, 0xfd, 0x6, @random="2f793e4a2893"}, 0x14) 1m9.481361516s ago: executing program 3 (id=250): socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x80800) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r0, @ANYRES64=r1], 0x0) 1m7.962378554s ago: executing program 3 (id=265): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x2, &(0x7f0000000880)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000280)="b970cb2b79989428", 0x8, 0x1000, 0x0, 0xbd4c3b8bc89fc43d, r1}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x1, r1, &(0x7f0000000040), 0x0, 0x5, 0x0, 0x3, r1}]) syz_clone(0xe200, 0x0, 0x0, 0x0, 0x0, 0x0) 1m7.272110442s ago: executing program 3 (id=272): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)='\x00', 0x1) 1m7.174377234s ago: executing program 3 (id=273): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x6, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x208e, 0x68) write$binfmt_script(r0, &(0x7f00000000c0), 0x28) 52.031410266s ago: executing program 32 (id=273): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000080)=0x6, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x208e, 0x68) write$binfmt_script(r0, &(0x7f00000000c0), 0x28) 4.851030118s ago: executing program 2 (id=821): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r0, &(0x7f0000002bc0)=[{{&(0x7f0000000100)={0x2, 0x4e26, @multicast1}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000000140)="2b3dcb037cf6eefdd865abf4cb8b1d17613cba0add0fc611e8e8edeb824ba694c30ed1d75eafde7ef357f25d275ad90b0ad65c4e3181039007d9096ab1a098bbd39415dc16914bbe91674f0deb1055864e2dc88798e3b3bf82e866c36f30af92cf204c04b58ef42e2744042bb5d5af77aff174539bd796f35aedbcaef63cce67d65f3321eb7700beef47308d9fc2b6d1a18e0484c097d27c0b2fc3b708c2897b9f55dd06c88b6db07b64431bff78a7eea64b1300bd6de2393e21f640e8b377e934245cd31a70d7f4823df271b235bd3d0b356a6bf5e7bd476d4ab8dd640f746dc0b90e080a494f", 0xe7}, {&(0x7f0000000700)="fd3f12b11bb32a8a76e016794ce0643bb98d1c07715d51090783781fefb0a7b2b3e618c882ed4d2251b83d733eb420ce93c78f2f93f899e2bf36f1c58b9703d0ba118ad0b3f2cb5b3e51b06e5925d81e6e4fd80f16431e01f64990254de92d67902dd61b93f3006dfe188282923bb8aa3c7af13dec03b0521221868f11d0301d273e3f6726d107520e8b6aed0a1b", 0x8e}, {&(0x7f0000000800)="862581263117a595cc8b4d91c81820960c318c8396349d812700e75e525fa32b7544ceb489026264e882e6b071a1340ff527950b0065fa1dad2ffdb5e7ff35e2e1002046d831da9a75680854fe172d076b8dc3803ff9d26d49bf4b103373dff834806016adcd95ad25f436a81a0bd5d8cdc59c4ade543b23b68110ccfd37ccc3c778d40629a5e61b0e8cd6af005f30363c40c4bca955232d75b1609cd8da8771356513bf156c823aed462a5773220cfff599bc209f5f2d7baf2ac7cb7a896eb9708cef3b8c24cb243997889d197ee8bc4ab9a5c69628751008577fcf4074fbdee3591a3a2641", 0xe6}, {&(0x7f0000000040)="1da91706353d671ffb11e4f447350c1aae5cc28f91a212a31f3550b813a7c81cf5d7fa00"/48, 0x30}, {&(0x7f0000000b40)="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", 0x336}], 0x5}}], 0x1, 0x40080a0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000080)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012) 4.519832866s ago: executing program 2 (id=836): socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x80800) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r0, @ANYRES64=r1], 0x0) 4.307524252s ago: executing program 0 (id=828): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa241, 0x0) write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0xfffffff9, 0x161, 0x17, "00020000f7fd00"}) r1 = syz_open_pts(r0, 0xc0000) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f00000004c0)) 4.122930356s ago: executing program 4 (id=830): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0xde9, r1}, 0x38) 3.766490495s ago: executing program 5 (id=831): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x15, 0x0, 0x0) 3.765641415s ago: executing program 1 (id=845): r0 = socket(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000000040)=0xfffffff9, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0xffffffffffffff7c, 0x0, 0x0, &(0x7f0000002000)=""/6, 0x11}, 0x7}], 0x50, 0x102, 0x0) 3.311517117s ago: executing program 5 (id=832): syz_mount_image$xfs(&(0x7f0000000580), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000240)={[{@lazytime}, {}, {@filestreams}, {@nolazytime}, {@prjquota}]}, 0x84, 0x9606, &(0x7f0000009680)="$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") r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x1100, 0x402000}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0xfea7) 3.310527687s ago: executing program 0 (id=834): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x414, &(0x7f0000000340)=ANY=[], 0x1, 0x67d, &(0x7f0000000780)="$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") r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x2) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088) syz_mount_image$fuse(0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0) 3.120888662s ago: executing program 4 (id=835): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000004200)={'#! ', './file1/../file0', [{0x20, 'h\x9aA,6\x89\xd5\xb8T\xeb>\xf4=@\xdb[\xcf\xe0\xcb\xaeK\x86\v=Q\xd7\x1f\xc3\xaf{\xc8\x95\xc4E\xd5^[\x7f\x1b\xc3s\x97\xc4\x1d\xfe\x93\x16:\xed\x92\x8bF\x8cy\xe6\xe1\x1a\xdf\xec*p\x15\xac\xf6\x00%Zx\x1e\xae\x02\xcb\xaa\xcb\xb0\'\x87\x18W\x01\x16\x1d\xc5\xe5\xb9\xd9#\xa6e%\xe5\xd5o\x8f\x0e\xcd\x18v\x96\xfd\x15\xc2\xc1\xee\x191Q\'\xd6\x0e\x1c>\x8d\xd2\xc7\x1f\xf0lJE\x00.g\xbb\xf3\xfe\xbb\xce=\x91h3`q\xcd\xfbJ\x9ck\x04Y'}, {0x20, '\x00'}], 0xa, "e39a0e756a544899dc9745f153c7c1c96c278c"}, 0x1aa) write$UHID_INPUT(r1, &(0x7f00000007c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c551265406c7f306003d8a0f4bd0000000300", [0x10, 0x4]}}) 2.920391007s ago: executing program 2 (id=837): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x5, 0x8000, 0x1}, 0x50) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r0, 0x401070c9, &(0x7f0000000100)=0x3) 2.919734307s ago: executing program 0 (id=850): r0 = syz_io_uring_setup(0x34b8, &(0x7f0000000540)={0x0, 0xc3b1, 0x800, 0xfffffffe, 0x82}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xffff, 0xe9, @dev={0xfe, 0x80, '\x00', 0x31}, 0x6}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000040)=@IORING_OP_CLOSE={0x13, 0x48, 0x0, r0}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) 2.811276439s ago: executing program 1 (id=838): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/nfsv4leasetime\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='0\n', 0x2) 2.810525409s ago: executing program 4 (id=852): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) splice(r0, 0x0, r1, 0x0, 0x6, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f00000002c0)) 2.758302391s ago: executing program 2 (id=839): r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000001200)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d0000090582020002000000090503", @ANYRESHEX], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x2, 0x0, 0xe, 0x1, 0x1, 0xffff, 0x7, 0x1040, 0x6, 0xffff, 0x0, 0x1000}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.624770034s ago: executing program 1 (id=841): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r0}, &(0x7f00000001c0), 0x0}, 0x20) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x8, "", [{{0x9, 0x4, 0x0, 0xfe, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x3, 0xc1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000380)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB=' \b('], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.624124174s ago: executing program 0 (id=855): socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x80800) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r0, @ANYRES64=r1], 0x0) 2.342187512s ago: executing program 5 (id=843): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) fcntl$setlease(r1, 0x400, 0x1) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) 2.342075881s ago: executing program 4 (id=844): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000002680)={0x984, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x970, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x96a, 0x3, "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"}]}]}, 0x984}, 0x1, 0x0, 0x0, 0x4080}, 0xd0) 2.305916742s ago: executing program 4 (id=846): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc/fs/nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)='\x00', 0x1) 2.253367363s ago: executing program 4 (id=847): sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) read$FUSE(r0, &(0x7f0000002600)={0x2020}, 0x2020) 1.172390681s ago: executing program 0 (id=848): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x43501) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x2000, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12, 0xff}, 0x8, 0xd2, 0x8, 0x0, 0x0, 0x0, 0x0}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x1ff}]}) socket(0x10, 0x80002, 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 958.663987ms ago: executing program 5 (id=849): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x1a, 0xa01, 0x70bd2f, 0x0, {0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4050054}, 0x4004080) ioctl$FS_IOC_FSGETXATTR(0xffffffffffffffff, 0x801c581f, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x44, 0x3a, 0x1, @empty, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x2, '\x00', {0x3, 0x6, "39afb8", 0xf648, 0x4, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, [], "8d481ba3c73de00565b962105ace0d4598d45c84"}}}}}}}, 0x0) 827.77101ms ago: executing program 5 (id=851): r0 = fsopen(&(0x7f0000000140)='hugetlbfs\x00', 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0xfd}]}) close_range(r0, 0xffffffffffffffff, 0x0) 790.905091ms ago: executing program 1 (id=853): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0xd4, 0x0, @multicast}, 0x10) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 371.735991ms ago: executing program 2 (id=854): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x15, 0x0, 0x0) 371.515091ms ago: executing program 5 (id=856): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet_sctp(0x2, 0x5, 0x84) pselect6(0x40, &(0x7f0000000100)={0x1e, 0x2f, 0x6, 0x801, 0x1ffffffffffffffe, 0x0, 0x7ffd, 0xfffffffffffffffc}, 0x0, 0x0, 0x0, 0x0) write$tun(r0, &(0x7f0000000080)=ANY=[], 0xffe) 365.550721ms ago: executing program 1 (id=865): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002dbd70f632df8a6c8ec4bd0008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 269.272834ms ago: executing program 1 (id=857): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0xffffffff) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) exit(0xffff) 1.70289ms ago: executing program 2 (id=858): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000040)=0x4, 0x4) 0s ago: executing program 0 (id=859): syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x1, 0x1a5, &(0x7f0000002840)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000140)='2', 0x1}], 0x1) open(&(0x7f0000000200)='./file2\x00', 0x100, 0x123) kernel console output (not intermixed with test programs): HANGE): hsr_slave_0: link becomes ready [ 71.634495][ T4282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.649929][ T4271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.664064][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.683007][ T4277] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.695848][ T4277] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.709249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.722911][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.732952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.747876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.758833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.770393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.781063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.790533][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.799778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.819027][ T4272] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.859882][ T4282] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.870162][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.884818][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.892879][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.908108][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.939569][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.961129][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.984099][ T4281] Bluetooth: hci2: command 0x041b tx timeout [ 71.984684][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.990146][ T4281] Bluetooth: hci1: command 0x041b tx timeout [ 71.997285][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.019339][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 72.030552][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 72.042959][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.050182][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.062967][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.070648][ T4281] Bluetooth: hci0: command 0x041b tx timeout [ 72.071896][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 72.076821][ T4281] Bluetooth: hci3: command 0x041b tx timeout [ 72.076851][ T4281] Bluetooth: hci4: command 0x041b tx timeout [ 72.121221][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.130048][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.147205][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.156628][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.169218][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.176400][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.184919][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 72.194263][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 72.202948][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.210145][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.218725][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.227898][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 72.237145][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.246949][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 72.261065][ T4275] device veth0_vlan entered promiscuous mode [ 72.278172][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.287039][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.295480][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.305892][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.315401][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.324179][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.332972][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.366437][ T4277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.374963][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 72.385440][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 72.394318][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.401806][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.410290][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 72.417904][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 72.427032][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.435719][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.444827][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.453181][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.461642][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 72.472571][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.497458][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.506915][ T4275] device veth1_vlan entered promiscuous mode [ 72.517617][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 72.528038][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 72.537727][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 72.546642][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 72.555839][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 72.564718][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 72.574270][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 72.605034][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.617233][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.671258][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.684986][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.705353][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.715050][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.736027][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.749336][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.792321][ T4277] device veth0_vlan entered promiscuous mode [ 72.819150][ T4271] device veth0_vlan entered promiscuous mode [ 72.838153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.861410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.870711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.880463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.889145][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.897041][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 72.907007][ T4275] device veth0_macvtap entered promiscuous mode [ 72.921126][ T4271] device veth1_vlan entered promiscuous mode [ 72.935174][ T4277] device veth1_vlan entered promiscuous mode [ 72.956288][ T4275] device veth1_macvtap entered promiscuous mode [ 73.021437][ T4271] device veth0_macvtap entered promiscuous mode [ 73.039588][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.051386][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.059853][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.068533][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.077533][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.094232][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.113867][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.122794][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.133212][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.161301][ T4271] device veth1_macvtap entered promiscuous mode [ 73.203119][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.229263][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.237505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.246089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.255440][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.264519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.272058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.280181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.289614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.302719][ T4275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.318267][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.334284][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.347133][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.355511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.365735][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.374762][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.382427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.390869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.400005][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.414918][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.425718][ T4275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.440029][ T4275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.449852][ T4275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.460755][ T4275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.471909][ T4277] device veth0_macvtap entered promiscuous mode [ 73.484354][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.495579][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.509622][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.530412][ T4277] device veth1_macvtap entered promiscuous mode [ 73.551170][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.563390][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.582516][ T4271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.600997][ T4271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.610529][ T4271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.619591][ T4271] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.664109][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 73.672931][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.738176][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.754983][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.765497][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.776168][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.788532][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.809172][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.848043][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.859433][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.872260][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.883966][ T4282] device veth0_vlan entered promiscuous mode [ 73.894675][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.908392][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.918897][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.929698][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.941146][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.954664][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.962503][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.980993][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.991280][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.015368][ T4277] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.024870][ T4277] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.035107][ T4277] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.044385][ T4277] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.064809][ T49] Bluetooth: hci1: command 0x040f tx timeout [ 74.070889][ T49] Bluetooth: hci2: command 0x040f tx timeout [ 74.085569][ T4282] device veth1_vlan entered promiscuous mode [ 74.115456][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.137494][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.145090][ T49] Bluetooth: hci4: command 0x040f tx timeout [ 74.151115][ T49] Bluetooth: hci3: command 0x040f tx timeout [ 74.157449][ T4281] Bluetooth: hci0: command 0x040f tx timeout [ 74.184418][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.192936][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.201539][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.211001][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.220597][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.268227][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.280686][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.289812][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.299230][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.308664][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.317934][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.328839][ T4272] device veth0_vlan entered promiscuous mode [ 74.368351][ T4282] device veth0_macvtap entered promiscuous mode [ 74.376137][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.392253][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.400808][ T4272] device veth1_vlan entered promiscuous mode [ 74.402309][ T4298] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.415780][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.416885][ T4298] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.454214][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.461281][ T4282] device veth1_macvtap entered promiscuous mode [ 74.469312][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.484752][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.493338][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.505456][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.537837][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.550203][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.568375][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.592067][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.592371][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.604410][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.631121][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.645772][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.657053][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.667825][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.678817][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.706080][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.731042][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.743717][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.754221][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.764819][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.774753][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.786450][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.797674][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.805900][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.815039][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.824122][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.832871][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.841707][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.860198][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.873260][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.925145][ T4282] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.949111][ T4282] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.988738][ T4282] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.001549][ T4282] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.046686][ T4272] device veth0_macvtap entered promiscuous mode [ 75.062417][ T4354] device veth0 entered promiscuous mode [ 75.103418][ T4272] device veth1_macvtap entered promiscuous mode [ 75.132351][ T4353] device veth0 left promiscuous mode [ 75.226769][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.258348][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.303679][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.336178][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.347834][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.361211][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.372672][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.401253][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.414136][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.425985][ T4339] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 75.471177][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.489590][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.515644][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.542076][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.581848][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.613641][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.634846][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.646971][ T4339] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 75.669758][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.680467][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.688042][ T4339] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.698278][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.708433][ T4339] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 75.723308][ T4339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.726379][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.752775][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.766164][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.781372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.791757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.816577][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.822399][ T4272] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.828954][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.837866][ T4272] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.853599][ T4272] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.862505][ T4272] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.880127][ T4298] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.940360][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.965418][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.017516][ T4339] usb 4-1: GET_CAPABILITIES returned 0 [ 76.023240][ T4339] usbtmc 4-1:16.0: can't read capabilities [ 76.032532][ T63] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.068524][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.102168][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.123303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.153864][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 76.160019][ T4281] Bluetooth: hci1: command 0x0419 tx timeout [ 76.199886][ T4387] loop0: detected capacity change from 0 to 4096 [ 76.220141][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.225296][ T4281] Bluetooth: hci0: command 0x0419 tx timeout [ 76.234393][ T4285] Bluetooth: hci3: command 0x0419 tx timeout [ 76.234473][ T49] Bluetooth: hci4: command 0x0419 tx timeout [ 76.302045][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.310565][ T4389] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 76.330518][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.401931][ T4365] usb 4-1: USB disconnect, device number 2 [ 76.581384][ T4393] loop4: detected capacity change from 0 to 128 [ 76.779476][ T4402] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.814970][ T4393] syz.4.5: attempt to access beyond end of device [ 76.814970][ T4393] loop4: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 76.895653][ T4403] syz.4.5: attempt to access beyond end of device [ 76.895653][ T4403] loop4: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 76.913950][ T4403] Buffer I/O error on dev loop4, logical block 71, lost async page write [ 76.921708][ T4408] loop2: detected capacity change from 0 to 256 [ 76.968736][ T4408] exfat: Deprecated parameter 'namecase' [ 76.979638][ T4403] syz.4.5: attempt to access beyond end of device [ 76.979638][ T4403] loop4: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 77.005038][ T4408] exfat: Deprecated parameter 'namecase' [ 77.026519][ T4408] exfat: Deprecated parameter 'utf8' [ 77.086879][ T4403] Buffer I/O error on dev loop4, logical block 72, lost async page write [ 77.101113][ T4408] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 77.164907][ T4415] loop1: detected capacity change from 0 to 24 [ 77.215073][ T4403] syz.4.5: attempt to access beyond end of device [ 77.215073][ T4403] loop4: rw=2049, sector=146, nr_sectors = 2 limit=128 [ 77.219169][ T4406] syz.4.5: attempt to access beyond end of device [ 77.219169][ T4406] loop4: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 77.339342][ T4406] Buffer I/O error on dev loop4, logical block 69, lost async page write [ 77.369579][ T4419] loop0: detected capacity change from 0 to 128 [ 77.393039][ T4403] Buffer I/O error on dev loop4, logical block 73, lost async page write [ 77.415145][ T4419] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 77.584490][ T27] usb 4-1: new low-speed USB device number 3 using dummy_hcd [ 77.593884][ T4298] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 77.722310][ T4425] loop1: detected capacity change from 0 to 256 [ 77.752383][ T4425] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 77.802720][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 77.848589][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 77.873544][ T27] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 77.876022][ T4431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30'. [ 77.894522][ T27] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c1f, bcdDevice= 0.00 [ 77.928510][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.959092][ T27] usb 4-1: config 0 descriptor?? [ 77.964015][ T4431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.30'. [ 77.977309][ T4417] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 78.416056][ T27] corsair-psu 0003:1B1C:1C1F.0001: unknown main item tag 0x3 [ 78.431991][ T27] corsair-psu 0003:1B1C:1C1F.0001: unknown main item tag 0x0 [ 78.440176][ T27] corsair-psu 0003:1B1C:1C1F.0001: unknown main item tag 0x0 [ 78.453657][ T27] corsair-psu 0003:1B1C:1C1F.0001: unknown main item tag 0x0 [ 78.461251][ T27] corsair-psu 0003:1B1C:1C1F.0001: unknown main item tag 0x0 [ 78.471664][ T27] corsair-psu 0003:1B1C:1C1F.0001: unknown main item tag 0x0 [ 78.480554][ T27] corsair-psu 0003:1B1C:1C1F.0001: unknown main item tag 0x0 [ 78.488466][ T27] corsair-psu 0003:1B1C:1C1F.0001: unknown main item tag 0x0 [ 78.500266][ T27] corsair-psu 0003:1B1C:1C1F.0001: unknown main item tag 0x0 [ 78.515461][ T27] corsair-psu 0003:1B1C:1C1F.0001: hidraw0: USB HID v0.04 Device [HID 1b1c:1c1f] on usb-dummy_hcd.3-1/input0 [ 78.543850][ T4365] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.603778][ T27] corsair-psu 0003:1B1C:1C1F.0001: unable to initialize device (-38) [ 78.625573][ T27] corsair-psu: probe of 0003:1B1C:1C1F.0001 failed with error -38 [ 78.643660][ T27] usb 4-1: USB disconnect, device number 3 [ 78.739222][ T4365] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.758348][ T4365] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 78.784749][ T4365] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.811618][ T4365] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.832433][ T4458] fido_id[4458]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 78.835846][ T4365] usb 5-1: Product: syz [ 78.870120][ T4365] usb 5-1: Manufacturer: syz [ 78.887902][ T4365] usb 5-1: SerialNumber: syz [ 78.912677][ T4365] cdc_mbim 5-1:1.0: skipping garbage [ 79.044906][ T4465] netlink: 24 bytes leftover after parsing attributes in process `syz.2.43'. [ 79.065161][ T4465] bond0: ARP target 1.4.0.0 is already present [ 79.075576][ T4467] loop1: detected capacity change from 0 to 128 [ 79.085206][ T4465] bond0: option arp_ip_target: invalid value (1025) [ 79.129472][ T4444] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 79.137547][ T4467] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 79.309248][ T34] FAT-fs (loop1): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 79.473590][ T4363] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 79.635540][ T4485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.52'. [ 79.675111][ T4363] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 79.675139][ T4363] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.675156][ T4363] usb 1-1: Product: syz [ 79.675169][ T4363] usb 1-1: Manufacturer: syz [ 79.675182][ T4363] usb 1-1: SerialNumber: syz [ 79.691187][ T4363] usb 1-1: config 0 descriptor?? [ 79.768388][ T4444] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 79.768785][ T4365] cdc_mbim 5-1:1.0: setting tx_max = 16384 [ 79.772895][ T4365] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 79.818781][ T4365] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, da:09:0e:bf:82:60 [ 79.901129][ T4363] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 80.016524][ T4495] Illegal XDP return value 4294967294 on prog (id 7) dev N/A, expect packet loss! [ 80.034498][ T4496] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 80.068886][ T4365] usb 5-1: USB disconnect, device number 2 [ 80.084609][ T4365] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 80.453670][ T27] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 80.532950][ T4511] loop3: detected capacity change from 0 to 2048 [ 80.659338][ T27] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 80.674245][ T4511] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 80.688976][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.709251][ T4363] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 80.722755][ T27] usb 2-1: Product: syz [ 80.738080][ T4363] usb 1-1: USB disconnect, device number 2 [ 80.745493][ T27] usb 2-1: Manufacturer: syz [ 80.768504][ T27] usb 2-1: SerialNumber: syz [ 80.842315][ T4521] capability: warning: `syz.4.64' uses deprecated v2 capabilities in a way that may be insecure [ 81.132502][ T4530] syz.4.67 uses obsolete (PF_INET,SOCK_PACKET) [ 81.237749][ T4499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 81.270429][ T4499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 81.323016][ T27] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 81.363292][ T27] usb 2-1: USB disconnect, device number 2 [ 81.391280][ T27] usblp0: removed [ 81.548457][ T4540] netlink: 'syz.2.71': attribute type 12 has an invalid length. [ 81.598364][ T4540] netlink: 'syz.2.71': attribute type 29 has an invalid length. [ 81.654819][ T4540] netlink: 148 bytes leftover after parsing attributes in process `syz.2.71'. [ 81.709249][ T4540] netlink: 51 bytes leftover after parsing attributes in process `syz.2.71'. [ 82.470502][ T4571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.83'. [ 82.515409][ T4573] Invalid ELF header len 8 [ 82.520051][ T4571] netlink: 'syz.1.83': attribute type 30 has an invalid length. [ 82.582673][ T4571] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.591888][ T4571] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.601235][ T4571] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.610287][ T4571] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.656625][ T4577] netlink: 8 bytes leftover after parsing attributes in process `syz.1.83'. [ 82.676960][ T4577] netlink: 'syz.1.83': attribute type 30 has an invalid length. [ 82.711764][ T4577] Zero length message leads to an empty skb [ 83.132386][ T4365] kernel read not supported for file /video9 (pid: 4365 comm: kworker/1:8) [ 83.674783][ T4339] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 83.867038][ T4339] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 83.893861][ T4339] usb 3-1: config 0 has no interface number 0 [ 83.911033][ T4339] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 83.942888][ T4339] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 83.989802][ T4339] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 84.009915][ T4339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.042084][ T4339] usb 3-1: config 0 descriptor?? [ 84.068525][ T4613] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 84.091218][ T4339] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 84.322301][ T4339] usb 3-1: USB disconnect, device number 2 [ 84.328299][ C0] iowarrior 3-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 84.353915][ T4365] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 84.553565][ T4365] usb 1-1: Using ep0 maxpacket: 32 [ 84.562658][ T4365] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 84.582519][ T4365] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.600404][ T4365] usb 1-1: Product: syz [ 84.613623][ T4365] usb 1-1: Manufacturer: syz [ 84.618425][ T4365] usb 1-1: SerialNumber: syz [ 84.640220][ T4365] usb 1-1: config 0 descriptor?? [ 84.663970][ T4260] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 84.712219][ T4656] loop1: detected capacity change from 0 to 1024 [ 84.739635][ T4656] ======================================================= [ 84.739635][ T4656] WARNING: The mand mount option has been deprecated and [ 84.739635][ T4656] and is ignored by this kernel. Remove the mand [ 84.739635][ T4656] option from the mount to silence this warning. [ 84.739635][ T4656] ======================================================= [ 84.847812][ T4656] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 84.862205][ T4656] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.862276][ T4260] usb 4-1: unable to get BOS descriptor or descriptor too short [ 84.921002][ T4260] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 84.925387][ T4656] EXT4-fs error (device loop1): ext4_map_blocks:747: inode #15: comm syz.1.116: lblock 0 mapped to illegal pblock 0 (length 1) [ 84.943137][ T4260] usb 4-1: can't read configurations, error -71 [ 84.959772][ T4656] EXT4-fs (loop1): Remounting filesystem read-only [ 84.998792][ T4656] EXT4-fs warning (device loop1): ext4_resize_begin:84: There are errors in the filesystem, so online resizing is not allowed [ 85.130033][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 85.273634][ T4365] peak_usb 1-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 85.355694][ T4365] peak_usb: probe of 1-1:0.0 failed with error -71 [ 85.414871][ T4365] usb 1-1: USB disconnect, device number 3 [ 85.492587][ T4320] kernel write not supported for file /snd/seq (pid: 4320 comm: kworker/0:4) [ 85.663691][ T4320] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 85.861287][ T4320] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 85.884288][ T4692] netlink: 'syz.3.132': attribute type 1 has an invalid length. [ 85.892371][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.909342][ T4320] usb 3-1: Product: syz [ 85.919900][ T4320] usb 3-1: Manufacturer: syz [ 85.925571][ T4320] usb 3-1: SerialNumber: syz [ 85.942663][ T4320] usb 3-1: config 0 descriptor?? [ 85.952664][ T4320] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 86.042861][ T4697] clocksource: Switched to clocksource acpi_pm [ 86.052611][ T4697] clocksource: Switched to clocksource tsc [ 86.203539][ T4315] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 86.400848][ T4315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 86.424256][ T4315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 86.449677][ T4315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 86.481246][ T4315] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 86.505485][ T4315] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 86.523530][ T4315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.533765][ T4315] usb 1-1: Product: syz [ 86.537961][ T4315] usb 1-1: Manufacturer: syz [ 86.552775][ T4315] usb 1-1: SerialNumber: syz [ 86.573733][ T4315] usb 1-1: config 0 descriptor?? [ 86.712246][ T1182] cfg80211: failed to load regulatory.db [ 86.795256][ T4315] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 86.813023][ T4712] Core dump to core aborted: cannot preserve file permissions [ 86.839005][ T4707] loop4: detected capacity change from 0 to 32768 [ 86.903999][ T4713] overlayfs: failed to resolve './bus': -2 [ 86.922388][ T4707] XFS (loop4): Mounting V5 Filesystem [ 86.981257][ T4320] gspca_sunplus: reg_w_riv err -71 [ 86.987748][ T4320] sunplus: probe of 3-1:0.0 failed with error -71 [ 87.014284][ T4315] usb 1-1: USB disconnect, device number 4 [ 87.064639][ T4723] loop3: detected capacity change from 0 to 512 [ 87.097133][ T4320] usb 3-1: USB disconnect, device number 3 [ 87.172077][ T4707] XFS (loop4): Ending clean mount [ 87.203311][ T4707] XFS (loop4): Quotacheck needed: Please wait. [ 87.279462][ T4707] XFS (loop4): Quotacheck: Done. [ 87.327531][ T4723] EXT4-fs: Ignoring removed bh option [ 87.340258][ T4723] EXT4-fs (loop3): Test dummy encryption mode enabled [ 87.398987][ T4723] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 87.423684][ T4723] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 87.447356][ T4723] EXT4-fs error (device loop3): ext4_orphan_get:1405: inode #15: comm syz.3.142: inode has both inline data and extents flags [ 87.474568][ T4723] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.142: couldn't read orphan inode 15 (err -117) [ 87.500437][ T4723] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 87.592994][ T4272] XFS (loop4): Unmounting Filesystem [ 87.617607][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 87.980707][ T4746] loop0: detected capacity change from 0 to 164 [ 88.079215][ T4746] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 88.192897][ T4746] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 88.473675][ T4260] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 88.597128][ T4762] loop0: detected capacity change from 0 to 256 [ 88.646420][ T4762] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d) [ 88.667298][ T4260] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 88.685934][ T4260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.719909][ T4260] usb 5-1: Product: syz [ 88.737201][ T4260] usb 5-1: Manufacturer: syz [ 88.742183][ T4764] input: syz0 as /devices/virtual/input/input5 [ 88.752148][ T4260] usb 5-1: SerialNumber: syz [ 88.792296][ T4260] usb 5-1: config 0 descriptor?? [ 88.824404][ T4260] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 89.045963][ T4776] loop1: detected capacity change from 0 to 64 [ 89.078786][ T4776] hfs: unable to locate alternate MDB [ 89.087842][ T4776] hfs: continuing without an alternate MDB [ 89.805237][ T4802] loop1: detected capacity change from 0 to 512 [ 89.822993][ T4260] gspca_sunplus: reg_w_riv err -71 [ 89.833095][ T4260] sunplus: probe of 5-1:0.0 failed with error -71 [ 89.849133][ T4802] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 89.856826][ T4260] usb 5-1: USB disconnect, device number 3 [ 89.890403][ T4802] EXT4-fs error (device loop1): ext4_orphan_get:1431: comm syz.1.175: bad orphan inode 131083 [ 89.903377][ T4802] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 90.084924][ T4809] loop3: detected capacity change from 0 to 4096 [ 90.099517][ T4809] EXT4-fs: Ignoring removed bh option [ 90.107243][ T4809] EXT4-fs: Ignoring removed bh option [ 90.110500][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 90.183880][ T4809] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 90.216843][ T4811] loop0: detected capacity change from 0 to 1764 [ 90.224671][ T4809] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 90.708500][ T4824] loop4: detected capacity change from 0 to 512 [ 90.730202][ T4824] EXT4-fs (loop4): Test dummy encryption mode enabled [ 90.778300][ T4824] EXT4-fs error (device loop4): __ext4_iget:5102: inode #11: block 1: comm syz.4.184: invalid block [ 90.880977][ T4824] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.184: couldn't read orphan inode 11 (err -117) [ 90.921745][ T4824] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 90.940417][ T26] audit: type=1326 audit(1785805160.698:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4823 comm="syz.4.184" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d77b9e019 code=0x7ffc0000 [ 90.999392][ T26] audit: type=1326 audit(1785805160.728:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4823 comm="syz.4.184" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f5d77b9e019 code=0x7ffc0000 [ 91.037679][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 91.079167][ T26] audit: type=1326 audit(1785805160.728:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4823 comm="syz.4.184" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d77b9e019 code=0x7ffc0000 [ 91.142848][ T4836] Invalid ELF header magic: != ELF [ 91.520323][ T4831] loop3: detected capacity change from 0 to 32768 [ 91.552017][ T4846] netlink: 24 bytes leftover after parsing attributes in process `syz.1.194'. [ 91.573326][ T4846] bond0: ARP target 1.4.0.0 is already present [ 91.584631][ T4846] bond0: option arp_ip_target: invalid value (1025) [ 91.606283][ T4831] XFS (loop3): Mounting V5 Filesystem [ 91.664537][ T4831] XFS (loop3): Ending clean mount [ 91.712121][ T4831] XFS (loop3): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 91.782698][ T4864] netlink: 36 bytes leftover after parsing attributes in process `syz.4.199'. [ 91.846965][ T4277] XFS (loop3): Unmounting Filesystem [ 92.494013][ T4890] netlink: 92 bytes leftover after parsing attributes in process `syz.0.210'. [ 92.682233][ T4895] loop3: detected capacity change from 0 to 256 [ 92.718218][ T4895] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 92.744125][ T27] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.788239][ T4897] loop0: detected capacity change from 0 to 512 [ 92.835939][ T4897] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 92.946334][ T27] usb 2-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 92.975090][ T27] usb 2-1: config 0 interface 0 has no altsetting 0 [ 93.004152][ T4899] loop4: detected capacity change from 0 to 4096 [ 93.016232][ T27] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 93.055630][ T27] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 93.115365][ T27] usb 2-1: Product: syz [ 93.127664][ T27] usb 2-1: Manufacturer: syz [ 93.131943][ T4904] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.157878][ T27] usb 2-1: SerialNumber: syz [ 93.190966][ T27] usb 2-1: config 0 descriptor?? [ 93.209413][ T4888] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 93.248060][ T27] usb 2-1: selecting invalid altsetting 0 [ 93.346722][ T4906] loop3: detected capacity change from 0 to 128 [ 93.647511][ T4365] usb 2-1: USB disconnect, device number 3 [ 93.979122][ T4902] loop0: detected capacity change from 0 to 32768 [ 94.099703][ T26] audit: type=1800 audit(1785805163.858:5): pid=4902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.215" name="file1" dev="loop0" ino=4 res=0 errno=0 [ 94.938931][ T4943] loop2: detected capacity change from 0 to 512 [ 94.978206][ T4943] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 96.103768][ T5028] sock: sock_set_timeout: `syz.3.239' (pid 5028) tries to set negative timeout [ 96.141042][ T4943] EXT4-fs (loop2): failed to open journal device unknown-block(11,127) -6 [ 96.401522][ T5036] device gretap0 entered promiscuous mode [ 96.742777][ T5052] loop0: detected capacity change from 0 to 512 [ 96.765197][ T5052] EXT4-fs: Ignoring removed bh option [ 96.827794][ T5052] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 96.837143][ T5052] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.040428][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 97.073632][ T4315] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 97.286242][ T4315] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.303524][ T4315] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.325269][ T4315] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 97.344419][ T4315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 97.392452][ T4315] usb 4-1: SerialNumber: syz [ 97.589971][ T5065] loop2: detected capacity change from 0 to 32768 [ 97.619399][ T4315] usb 4-1: 0:2 : does not exist [ 97.660983][ T5079] loop4: detected capacity change from 0 to 1024 [ 97.746179][ T4315] usb 4-1: USB disconnect, device number 6 [ 97.791905][ T4348] udevd[4348]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 97.820252][ T5065] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 97.856854][ T5065] XFS (loop2): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 97.989717][ T4275] XFS (loop2): Unmounting Filesystem [ 98.123553][ T27] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 98.334911][ T27] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 98.343144][ T27] usb 2-1: config 0 has no interface number 0 [ 98.372232][ T27] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 98.391617][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.410015][ T27] usb 2-1: Product: syz [ 98.414887][ T27] usb 2-1: Manufacturer: syz [ 98.419525][ T27] usb 2-1: SerialNumber: syz [ 98.449038][ T27] usb 2-1: config 0 descriptor?? [ 99.173796][ T4315] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 99.189798][ T5120] loop4: detected capacity change from 0 to 8192 [ 99.237425][ T5120] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 99.251119][ T5120] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 99.260689][ T5120] REISERFS (device loop4): using ordered data mode [ 99.267858][ T5120] reiserfs: using flush barriers [ 99.275689][ T5120] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 99.299390][ T27] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 99.299449][ T5120] REISERFS (device loop4): checking transaction log (loop4) [ 99.322394][ T5120] REISERFS (device loop4): Using r5 hash to sort names [ 99.333327][ T5120] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 99.341259][ T27] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 99.393729][ T4315] usb 3-1: Using ep0 maxpacket: 32 [ 99.400896][ T4315] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 99.422542][ T27] asix: probe of 2-1:0.251 failed with error -71 [ 99.466110][ T27] usb 2-1: USB disconnect, device number 4 [ 99.472679][ T4315] usb 3-1: config 0 interface 0 has no altsetting 0 [ 99.524814][ T4315] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00 [ 99.558360][ T4315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.597928][ T4315] usb 3-1: config 0 descriptor?? [ 100.023427][ T4315] corsair-psu 0003:1B1C:1C09.0002: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.2-1/input0 [ 100.289091][ T5140] loop1: detected capacity change from 0 to 256 [ 100.322701][ T5140] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbd11d127, utbl_chksum : 0xe619d30d) [ 100.620517][ T4315] corsair-psu 0003:1B1C:1C09.0002: unable to initialize device (-71) [ 100.645464][ T4315] corsair-psu: probe of 0003:1B1C:1C09.0002 failed with error -71 [ 100.678756][ T4315] usb 3-1: USB disconnect, device number 4 [ 100.812372][ T5147] fido_id[5147]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 101.536090][ T5172] loop1: detected capacity change from 0 to 256 [ 101.609180][ T5172] FAT-fs (loop1): Directory bread(block 64) failed [ 101.630139][ T5172] FAT-fs (loop1): Directory bread(block 65) failed [ 101.658312][ T5172] FAT-fs (loop1): Directory bread(block 66) failed [ 101.680027][ T5172] FAT-fs (loop1): Directory bread(block 67) failed [ 101.682290][ T5174] loop4: detected capacity change from 0 to 512 [ 101.699105][ T5172] FAT-fs (loop1): Directory bread(block 68) failed [ 101.715151][ T5172] FAT-fs (loop1): Directory bread(block 69) failed [ 101.729946][ T5176] loop2: detected capacity change from 0 to 1024 [ 101.737633][ T5172] FAT-fs (loop1): Directory bread(block 70) failed [ 101.756018][ T5172] FAT-fs (loop1): Directory bread(block 71) failed [ 101.762842][ T5172] FAT-fs (loop1): Directory bread(block 72) failed [ 101.771059][ T5172] FAT-fs (loop1): Directory bread(block 73) failed [ 101.797429][ T5174] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #17: comm syz.4.298: corrupted in-inode xattr [ 101.900054][ T5174] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.298: couldn't read orphan inode 17 (err -117) [ 101.924000][ T5174] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 102.042974][ T26] audit: type=1800 audit(1785805171.798:6): pid=5174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.298" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 102.081799][ T5181] netlink: 'syz.1.301': attribute type 2 has an invalid length. [ 102.145151][ T5182] loop2: detected capacity change from 0 to 1024 [ 102.286527][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 102.348133][ T5182] hfsplus: inconsistency in B*Tree (9,1,255,1,0) [ 102.376591][ T5182] hfsplus: xattr search failed [ 102.517195][ T5017] hfsplus: b-tree write err: -5, ino 25 [ 102.524705][ T5017] hfsplus: b-tree write err: -5, ino 4 [ 102.535468][ T5191] binder: 5190:5191 ioctl c0306201 200000000080 returned -14 [ 102.554478][ T5017] hfsplus: b-tree write err: -5, ino 2 [ 102.560079][ T5017] hfsplus: b-tree write err: -5, ino 28 [ 102.642382][ T5195] input: syz0 as /devices/virtual/input/input8 [ 103.191500][ T5211] loop2: detected capacity change from 0 to 2048 [ 103.283728][ T5211] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.406231][ T5214] loop4: detected capacity change from 0 to 2048 [ 103.429269][ T5216] netlink: 'syz.0.316': attribute type 10 has an invalid length. [ 103.457981][ T5216] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.466653][ T5216] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.501389][ T5214] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.554573][ T26] audit: type=1800 audit(1785805173.318:7): pid=5214 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.315" name="file1" dev="loop4" ino=1346 res=0 errno=0 [ 103.574936][ C0] vkms_vblank_simulate: vblank timer overrun [ 103.586035][ T5216] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.593337][ T5216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.603095][ T5216] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.610318][ T5216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.711271][ T5216] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 103.741841][ T5217] netlink: 4 bytes leftover after parsing attributes in process `syz.0.316'. [ 103.753826][ T5217] device bridge_slave_1 left promiscuous mode [ 103.800762][ T5217] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.890063][ T5217] device bridge_slave_0 left promiscuous mode [ 103.930904][ T5217] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.029674][ T5217] bond0: (slave bridge0): Releasing backup interface [ 104.779635][ T5246] loop2: detected capacity change from 0 to 256 [ 104.805609][ T5246] FAT-fs (loop2): Unrecognized mount option "shortname'²Ïe=win95" or missing value [ 105.790643][ T5262] loop1: detected capacity change from 0 to 64 [ 106.081253][ T5269] loop2: detected capacity change from 0 to 256 [ 106.172135][ T5269] FAT-fs (loop2): Directory bread(block 64) failed [ 106.201372][ T5269] FAT-fs (loop2): Directory bread(block 65) failed [ 106.253871][ T5269] FAT-fs (loop2): Directory bread(block 66) failed [ 106.260512][ T5269] FAT-fs (loop2): Directory bread(block 67) failed [ 106.323261][ T5269] FAT-fs (loop2): Directory bread(block 68) failed [ 106.350059][ T5269] FAT-fs (loop2): Directory bread(block 69) failed [ 106.379421][ T5269] FAT-fs (loop2): Directory bread(block 70) failed [ 106.390928][ T5278] loop4: detected capacity change from 0 to 128 [ 106.403595][ T5269] FAT-fs (loop2): Directory bread(block 71) failed [ 106.410249][ T5269] FAT-fs (loop2): Directory bread(block 72) failed [ 106.441527][ T5269] FAT-fs (loop2): Directory bread(block 73) failed [ 106.484394][ T5278] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 106.509141][ T5278] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 106.593318][ T5278] fscrypt (loop4, inode 12): Direct key flag not allowed with different contents and filenames modes [ 106.756911][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 106.901117][ T5271] loop0: detected capacity change from 0 to 32768 [ 107.133548][ T27] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 107.170652][ T5295] netlink: 20 bytes leftover after parsing attributes in process `syz.4.348'. [ 107.325324][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.349029][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.372570][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.386607][ T27] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.410546][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.422963][ T27] usb 3-1: config 0 descriptor?? [ 107.426454][ T1182] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 107.623870][ T4339] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 107.638514][ T1182] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 107.651516][ T1182] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.689637][ T1182] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.702932][ T1182] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.712606][ T1182] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.736311][ T1182] usb 1-1: config 0 descriptor?? [ 107.837530][ T4339] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 107.848183][ T27] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 107.849442][ T4339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.882772][ T4339] usb 5-1: Product: syz [ 107.891426][ T4339] usb 5-1: Manufacturer: syz [ 107.897776][ T4339] usb 5-1: SerialNumber: syz [ 107.912524][ T27] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 107.922720][ T4339] usb 5-1: config 0 descriptor?? [ 108.161017][ T1182] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 108.189947][ T1182] plantronics 0003:047F:FFFF.0004: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 108.352444][ T4339] usb 5-1: Firmware: major: 0, minor: 101, hardware type: UNKNOWN (114) [ 108.554049][ T4339] usb 5-1: failed to fetch extended address, random address set [ 108.565600][ T4339] usb 5-1: atusb_probe: initialization failed, error = -524 [ 108.581203][ T4339] atusb: probe of 5-1:0.0 failed with error -524 [ 108.608921][ T4339] usb 5-1: USB disconnect, device number 4 [ 109.107416][ T4315] usb 3-1: USB disconnect, device number 5 [ 109.193235][ T27] usb 1-1: USB disconnect, device number 5 [ 109.356744][ T5331] loop1: detected capacity change from 0 to 128 [ 109.418562][ T5331] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 109.458511][ T5331] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 109.617184][ T5337] loop4: detected capacity change from 0 to 128 [ 109.679506][ T5337] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 109.681756][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 109.703627][ T5337] System zones: 1-3, 19-19, 35-36 [ 109.709869][ T5337] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 109.791558][ T5337] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 110.002005][ T5342] loop2: detected capacity change from 0 to 128 [ 110.061988][ T5342] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 110.099674][ T5342] hpfs: filesystem error: improperly stopped [ 110.134363][ T5342] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 110.142499][ T5342] hpfs: You really don't want any checks? You are crazy... [ 110.159276][ T5347] loop1: detected capacity change from 0 to 128 [ 110.193671][ T5342] hpfs: Code page index out of array [ 110.199013][ T5342] hpfs: code page support is disabled [ 110.210027][ T5347] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 110.221609][ T5342] hpfs: hpfs_map_4sectors(): unaligned read [ 110.228914][ T5347] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 110.237739][ T5342] hpfs: hpfs_map_4sectors(): unaligned read [ 110.268410][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 110.278554][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 110.280077][ T5342] hpfs: filesystem error: unable to find root dir [ 111.168799][ T5369] svc: failed to register nfsdv3 RPC service (errno 97). [ 111.193643][ T5369] svc: failed to register nfsaclv3 RPC service (errno 97). [ 111.363600][ T4320] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 111.438977][ T5380] device syzkaller1 entered promiscuous mode [ 111.565346][ T4320] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 112, setting to 64 [ 111.588417][ T4320] usb 5-1: config 0 interface 0 has no altsetting 0 [ 111.640830][ T4320] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 111.665683][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 111.703552][ T4320] usb 5-1: Product: syz [ 111.707767][ T4320] usb 5-1: Manufacturer: syz [ 111.732764][ T4320] usb 5-1: SerialNumber: syz [ 111.760276][ T4320] usb 5-1: config 0 descriptor?? [ 111.799003][ T4320] usb 5-1: selecting invalid altsetting 0 [ 112.016457][ T5374] usb 5-1: cannot submit urb 0, error -8: unknown error [ 112.053708][ T4339] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 112.101350][ T5390] loop0: detected capacity change from 0 to 512 [ 112.158365][ T5390] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 112.168014][ T5390] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.245836][ T4339] usb 2-1: unable to get BOS descriptor or descriptor too short [ 112.275033][ T4339] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 112.302797][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 112.320412][ T4339] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 112.368062][ T4339] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.397640][ T4339] usb 2-1: Product: syz [ 112.410194][ T4339] usb 2-1: Manufacturer: syz [ 112.419200][ T4339] usb 2-1: SerialNumber: syz [ 112.646026][ T4339] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 112.854115][ T4339] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 112.869344][ T4339] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 112.956415][ T5397] loop0: detected capacity change from 0 to 32768 [ 113.051143][ T5397] XFS (loop0): Mounting V5 Filesystem [ 113.130195][ T5397] XFS (loop0): Ending clean mount [ 113.211980][ T5397] XFS (loop0): User initiated shutdown received. [ 113.239246][ T5397] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 113.272964][ T4339] usb 2-1: invalid uac2 rates [ 113.278702][ T4339] usb 2-1: invalid uac2 rates [ 113.285182][ T4339] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 113.293907][ T4339] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 113.296311][ T5397] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 113.470837][ T4282] XFS (loop0): Unmounting Filesystem [ 113.479215][ T4339] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 113.520560][ T4339] usb 2-1: USB disconnect, device number 5 [ 113.548365][ T5416] loop2: detected capacity change from 0 to 512 [ 113.576333][ T5416] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.607545][ T5416] EXT4-fs: Ignoring removed i_version option [ 113.678674][ T5416] EXT4-fs (loop2): 1 orphan inode deleted [ 113.688903][ T5416] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 113.756197][ T4348] udevd[4348]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 114.002675][ T5421] netlink: 16 bytes leftover after parsing attributes in process `syz.0.394'. [ 114.012923][ T5421] netlink: 16 bytes leftover after parsing attributes in process `syz.0.394'. [ 114.031086][ T5421] netlink: 6 bytes leftover after parsing attributes in process `syz.0.394'. [ 114.050931][ T5421] netlink: 16 bytes leftover after parsing attributes in process `syz.0.394'. [ 114.060052][ T5421] netlink: 16 bytes leftover after parsing attributes in process `syz.0.394'. [ 114.076580][ T5421] netlink: 6 bytes leftover after parsing attributes in process `syz.0.394'. [ 114.383140][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 114.480967][ T5432] loop2: detected capacity change from 0 to 64 [ 114.708626][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 114.727449][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 114.737501][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 114.749480][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 114.757302][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 114.765079][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 114.805169][ T4339] usb 5-1: USB disconnect, device number 5 [ 114.818975][ T5438] loop2: detected capacity change from 0 to 256 [ 114.886115][ T5440] ubi31: attaching mtd0 [ 114.927775][ T5438] netlink: 20 bytes leftover after parsing attributes in process `syz.2.401'. [ 115.044868][ T5015] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.206037][ T5015] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.213149][ T5446] loop1: detected capacity change from 0 to 1024 [ 115.220332][ T5445] loop2: detected capacity change from 0 to 1024 [ 115.265777][ T5446] EXT4-fs: Ignoring removed mblk_io_submit option [ 115.353545][ T5446] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 115.388104][ T5015] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.443351][ T5452] loop4: detected capacity change from 0 to 128 [ 115.472338][ T5452] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 115.507379][ T5452] ext4 filesystem being mounted at /89/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 115.562157][ T5015] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.646933][ T5435] chnl_net:caif_netlink_parms(): no params data found [ 115.761278][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 115.831368][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 116.042627][ T5435] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.068550][ T5435] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.112491][ T5435] device bridge_slave_0 entered promiscuous mode [ 116.275118][ T5435] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.287291][ T5435] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.301993][ T5435] device bridge_slave_1 entered promiscuous mode [ 116.378372][ T5435] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.458310][ T5435] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.525261][ T5484] netlink: 'syz.1.418': attribute type 10 has an invalid length. [ 116.545914][ T5484] device syz_tun entered promiscuous mode [ 116.559356][ T5461] overlayfs: statfs failed on './file0' [ 116.609732][ T5484] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 116.780431][ T5488] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 116.827151][ T5488] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 116.873871][ T49] Bluetooth: hci2: command 0x0409 tx timeout [ 116.917623][ T5435] team0: Port device team_slave_0 added [ 117.058773][ T5511] loop1: detected capacity change from 0 to 64 [ 117.072694][ T5435] team0: Port device team_slave_1 added [ 117.166616][ T5435] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.189512][ T5435] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.277891][ T5513] loop0: detected capacity change from 0 to 256 [ 117.295890][ T4315] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 117.314255][ T5435] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.389306][ T5435] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.444180][ T5435] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.503666][ T5435] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.503761][ T4315] usb 3-1: Using ep0 maxpacket: 16 [ 117.546923][ T5520] loop8: detected capacity change from 0 to 8 [ 117.549090][ T4315] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 117.567406][ T4361] Dev loop8: unable to read RDB block 8 [ 117.573256][ T4361] loop8: unable to read partition table [ 117.603898][ T4315] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.629305][ T4315] usb 3-1: Product: syz [ 117.635369][ T4361] loop8: partition table beyond EOD, truncated [ 117.639410][ T4315] usb 3-1: Manufacturer: syz [ 117.655763][ T5520] Dev loop8: unable to read RDB block 8 [ 117.668159][ T5520] loop8: unable to read partition table [ 117.674180][ T4315] usb 3-1: SerialNumber: syz [ 117.699877][ T5520] loop8: partition table beyond EOD, truncated [ 117.718491][ T5524] 9pnet: p9_errstr2errno: server reported unknown error 0xffffffffffffffff [ 117.733623][ T5520] loop_reread_partitions: partition scan of loop8 (þ被xü^>æ) failed (rc=-5) [ 117.874225][ T5435] device hsr_slave_0 entered promiscuous mode [ 117.894108][ T5435] device hsr_slave_1 entered promiscuous mode [ 117.921927][ T5435] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 117.956660][ T5435] Cannot create hsr debugfs directory [ 118.544461][ T5547] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 118.584855][ T5547] CIFS mount error: No usable UNC path provided in device string! [ 118.584855][ T5547] [ 118.600471][ T5547] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 118.600594][ T5015] device hsr_slave_0 left promiscuous mode [ 118.631458][ T5015] device hsr_slave_1 left promiscuous mode [ 118.651424][ T5015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.659769][ T5015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.670049][ T5015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.677705][ T5015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.683673][ T4339] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 118.703797][ T5015] device bridge_slave_1 left promiscuous mode [ 118.731272][ T5015] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.757736][ T4315] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 118.786602][ T4315] usb 3-1: USB disconnect, device number 6 [ 118.827398][ T5015] device bridge_slave_0 left promiscuous mode [ 118.843937][ T5015] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.893720][ T4339] usb 5-1: Using ep0 maxpacket: 32 [ 118.902892][ T4339] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 118.932229][ T4339] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.943681][ T49] Bluetooth: hci2: command 0x041b tx timeout [ 118.960053][ T5015] device veth1_macvtap left promiscuous mode [ 118.968883][ T4339] usb 5-1: Product: syz [ 118.974598][ T5015] device veth0_macvtap left promiscuous mode [ 118.980829][ T4339] usb 5-1: Manufacturer: syz [ 118.989254][ T5015] device veth1_vlan left promiscuous mode [ 119.005148][ T4339] usb 5-1: SerialNumber: syz [ 119.012522][ T5015] device veth0_vlan left promiscuous mode [ 119.022449][ T5559] loop1: detected capacity change from 0 to 512 [ 119.067499][ T5559] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.443: invalid indirect mapped block 4294967295 (level 1) [ 119.086360][ T5559] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.443: invalid indirect mapped block 4294967295 (level 1) [ 119.102966][ T5559] EXT4-fs (loop1): 2 truncates cleaned up [ 119.108906][ T5559] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 119.170056][ T4271] EXT4-fs (loop1): unmounting filesystem. [ 119.268123][ T4339] usb 5-1: selecting invalid altsetting 1 [ 119.290962][ T4339] usb 5-1: unit 9 not found! [ 119.352267][ T4339] snd-usb-audio: probe of 5-1:1.0 failed with error -22 [ 119.383168][ T4339] usb 5-1: USB disconnect, device number 6 [ 119.539348][ T5575] netlink: 'syz.2.445': attribute type 11 has an invalid length. [ 119.598329][ T4348] udevd[4348]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.891669][ T5578] netlink: 4 bytes leftover after parsing attributes in process `syz.4.446'. [ 119.973110][ T5580] loop4: detected capacity change from 0 to 512 [ 120.037104][ T5580] EXT4-fs error (device loop4): ext4_orphan_get:1405: inode #15: comm syz.4.447: inode has both inline data and extents flags [ 120.056119][ T5580] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.447: couldn't read orphan inode 15 (err -117) [ 120.107959][ T5580] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 120.251576][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 120.312301][ T5015] team0 (unregistering): Port device team_slave_1 removed [ 120.380142][ T5015] team0 (unregistering): Port device team_slave_0 removed [ 120.442791][ T5015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.505302][ T5015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.688292][ T5591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.452'. [ 120.910631][ T5015] bond0 (unregistering): Released all slaves [ 121.023584][ T49] Bluetooth: hci2: command 0x040f tx timeout [ 121.456008][ T5435] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 121.483408][ T5603] loop2: detected capacity change from 0 to 8 [ 121.534487][ T5435] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 121.552432][ T5435] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 121.585494][ T5435] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 121.601473][ T5603] SQUASHFS error: xz decompression failed, data probably corrupt [ 121.642105][ T5603] SQUASHFS error: Failed to read block 0x108: -5 [ 121.659124][ T5603] SQUASHFS error: Unable to read metadata cache entry [106] [ 121.688967][ T5603] SQUASHFS error: Unable to read inode 0x11f [ 121.980952][ T5435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.035344][ T5617] device syzkaller1 entered promiscuous mode [ 122.049223][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 122.085430][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 122.163206][ T5435] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.167289][ T4320] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 122.203777][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 122.219544][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 122.248244][ T4726] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.255471][ T4726] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.294549][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 122.342930][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 122.369073][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 122.380614][ T4320] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.401641][ T4726] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.408843][ T4726] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.427178][ T4320] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 122.449499][ T4320] usb 5-1: config 1 has no interface number 0 [ 122.473308][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 122.489418][ T4320] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 122.514482][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 122.532666][ T4320] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 122.548975][ T5633] netlink: 40 bytes leftover after parsing attributes in process `syz.2.468'. [ 122.554069][ T4320] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 122.569629][ T5633] netlink: 2 bytes leftover after parsing attributes in process `syz.2.468'. [ 122.584081][ T4320] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 122.597807][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 122.617461][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 122.648688][ T4320] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 122.668454][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 122.686904][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.696700][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 122.723801][ T4320] usb 5-1: Product: syz [ 122.728018][ T4320] usb 5-1: Manufacturer: syz [ 122.732633][ T4320] usb 5-1: SerialNumber: syz [ 122.736406][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 122.750569][ T4315] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 122.762450][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 122.776483][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 122.784439][ T5614] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 122.801144][ T5435] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.820268][ T5435] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 122.830877][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 122.846187][ T5006] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 122.946149][ T4315] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 122.962261][ T4315] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 122.993616][ T4315] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.037015][ T4315] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 123.077117][ T4315] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 123.095803][ T4315] usb 2-1: Product: syz [ 123.103733][ T49] Bluetooth: hci2: command 0x0419 tx timeout [ 123.110012][ T4315] usb 2-1: Manufacturer: syz [ 123.120161][ T4315] usb 2-1: SerialNumber: syz [ 123.134802][ T4315] usb 2-1: config 0 descriptor?? [ 123.151566][ T4315] hub 2-1:0.0: bad descriptor, ignoring hub [ 123.158074][ T4315] hub: probe of 2-1:0.0 failed with error -5 [ 123.166782][ T4315] usb 2-1: selecting invalid altsetting 0 [ 123.193411][ T5614] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 123.520870][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 123.535247][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 123.568354][ T5435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.810519][ T4320] cdc_ncm 5-1:1.1: bind() failure [ 123.833674][ T4320] usb 5-1: USB disconnect, device number 7 [ 123.984518][ T4339] usb 2-1: USB disconnect, device number 6 [ 124.386514][ T4281] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 124.396250][ T4281] Bluetooth: hci1: Injecting HCI hardware error event [ 124.416348][ T49] Bluetooth: hci1: hardware error 0x00 [ 124.504056][ T5670] loop2: detected capacity change from 0 to 32768 [ 124.549249][ T4997] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 124.617884][ T4997] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 124.714098][ T5015] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 124.722518][ T5015] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 124.823328][ T5435] device veth0_vlan entered promiscuous mode [ 124.835244][ T5015] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 124.865305][ T5015] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 124.892850][ T5435] device veth1_vlan entered promiscuous mode [ 125.048109][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 125.066218][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 125.107133][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.142397][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.188108][ T5435] device veth0_macvtap entered promiscuous mode [ 125.214095][ T5435] device veth1_macvtap entered promiscuous mode [ 125.261486][ T5700] netlink: 452 bytes leftover after parsing attributes in process `syz.1.485'. [ 125.302710][ T5435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.338010][ T5435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.396765][ T5435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.475827][ T5435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.511965][ T5435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.536039][ T5435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.551180][ T5435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.562118][ T5435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.620634][ T5435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.633912][ T5704] netlink: 'syz.2.486': attribute type 39 has an invalid length. [ 125.800863][ T4993] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 125.821242][ T4993] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.837441][ T4993] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.851569][ T5694] loop4: detected capacity change from 0 to 32768 [ 125.877706][ T4993] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.899554][ T5435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.929108][ T5435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.947017][ T5435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.967156][ T5694] XFS (loop4): Mounting V5 Filesystem [ 125.968045][ T5435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.022494][ T5694] XFS (loop4): Ending clean mount [ 126.029626][ T5435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.093587][ T5435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.107973][ T5435] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.120131][ T5435] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.148933][ T5435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.163908][ T4993] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 126.179848][ T4993] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 126.213653][ T5435] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.238942][ T5435] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.255431][ T5435] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.274512][ T5435] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.299346][ T4272] XFS (loop4): Unmounting Filesystem [ 126.554619][ T49] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 126.692047][ T4726] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.716804][ T4726] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.761989][ T5746] netlink: 'syz.0.498': attribute type 3 has an invalid length. [ 126.785520][ T5746] netlink: 'syz.0.498': attribute type 3 has an invalid length. [ 126.830655][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 126.856353][ T5012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.883022][ T5012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.906859][ T4726] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.928432][ T5751] loop2: detected capacity change from 0 to 128 [ 127.777610][ T5784] loop2: detected capacity change from 0 to 1024 [ 127.850553][ T5784] EXT4-fs: Ignoring removed orlov option [ 127.935316][ T5784] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 128.212840][ T5796] netlink: 44 bytes leftover after parsing attributes in process `syz.5.514'. [ 128.253771][ T5796] netlink: 43 bytes leftover after parsing attributes in process `syz.5.514'. [ 128.263195][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 128.331593][ T5796] netlink: 'syz.5.514': attribute type 6 has an invalid length. [ 128.346616][ T5796] netlink: 'syz.5.514': attribute type 5 has an invalid length. [ 128.373747][ T5796] netlink: 43 bytes leftover after parsing attributes in process `syz.5.514'. [ 128.691936][ T5813] netlink: 'syz.1.520': attribute type 1 has an invalid length. [ 128.935063][ T5823] kernel read not supported for file /file1 (pid: 5823 comm: syz.1.524) [ 128.953255][ T5782] loop0: detected capacity change from 0 to 40427 [ 128.981247][ T26] audit: type=1800 audit(1785805198.738:8): pid=5823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.524" name="file1" dev="mqueue" ino=38825 res=0 errno=0 [ 129.065262][ T5782] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 129.120771][ T5782] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 129.227882][ T5782] F2FS-fs (loop0): Found nat_bits in checkpoint [ 129.406632][ T5839] loop4: detected capacity change from 0 to 256 [ 129.453179][ T5839] exfat: Deprecated parameter 'namecase' [ 129.485924][ T5782] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 129.500056][ T5839] exfat: Deprecated parameter 'utf8' [ 129.526043][ T5839] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 129.554049][ T5782] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 129.968950][ T4282] syz-executor: attempt to access beyond end of device [ 129.968950][ T4282] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 130.367977][ T5837] loop5: detected capacity change from 0 to 32768 [ 130.387116][ T5857] size and base must be multiples of 4 kiB [ 130.393029][ T5857] CPU: 0 PID: 5857 Comm: syz.4.536 Not tainted syzkaller #0 [ 130.400338][ T5857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 130.410520][ T5857] Call Trace: [ 130.413822][ T5857] [ 130.416774][ T5857] dump_stack_lvl+0x188/0x24e [ 130.421485][ T5857] ? __might_fault+0xa6/0x120 [ 130.426205][ T5857] ? show_regs_print_info+0x12/0x12 [ 130.431441][ T5857] ? load_image+0x410/0x410 [ 130.435977][ T5857] ? tomoyo_path_number_perm+0x5a4/0x650 [ 130.441646][ T5857] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 130.447142][ T5857] ? __might_fault+0xa6/0x120 [ 130.451845][ T5857] ? __might_fault+0xc2/0x120 [ 130.456602][ T5857] ? __might_fault+0xa6/0x120 [ 130.461314][ T5857] mtrr_add+0x8e/0xc0 [ 130.465331][ T5857] mtrr_ioctl+0x9bf/0x1140 [ 130.469798][ T5857] ? mtrr_close+0x1f0/0x1f0 [ 130.474344][ T5857] ? __fget_files+0x28/0x460 [ 130.478988][ T5857] ? mtrr_close+0x1f0/0x1f0 [ 130.483535][ T5857] proc_reg_unlocked_ioctl+0x1cb/0x2b0 [ 130.489040][ T5857] ? proc_reg_poll+0x280/0x280 [ 130.493848][ T5857] __se_sys_ioctl+0xfa/0x170 [ 130.498511][ T5857] do_syscall_64+0x4c/0xa0 [ 130.503022][ T5857] ? clear_bhb_loop+0x60/0xb0 [ 130.507725][ T5857] ? clear_bhb_loop+0x60/0xb0 [ 130.512418][ T5857] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 130.518326][ T5857] RIP: 0033:0x7f5d77b9e019 [ 130.522744][ T5857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.542356][ T5857] RSP: 002b:00007f5d78a86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.550772][ T5857] RAX: ffffffffffffffda RBX: 00007f5d77e25fa0 RCX: 00007f5d77b9e019 [ 130.558742][ T5857] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000003 [ 130.566716][ T5857] RBP: 00007f5d77c3500c R08: 0000000000000000 R09: 0000000000000000 [ 130.574682][ T5857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.582647][ T5857] R13: 00007f5d77e26038 R14: 00007f5d77e25fa0 R15: 00007ffc3aaf3288 [ 130.590639][ T5857] [ 130.747276][ T5837] XFS (loop5): Mounting V5 Filesystem [ 130.832368][ T5841] loop2: detected capacity change from 0 to 32768 [ 130.918965][ T5837] XFS (loop5): Ending clean mount [ 130.988607][ T5837] XFS (loop5): Quotacheck needed: Please wait. [ 130.997939][ T5841] XFS (loop2): Mounting V5 Filesystem [ 131.030003][ T5837] XFS (loop5): Quotacheck: Done. [ 131.183879][ T5841] XFS (loop2): Ending clean mount [ 131.300721][ T5841] XFS (loop2): User initiated shutdown received. [ 131.323210][ T5841] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 131.363599][ T5841] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 131.429852][ T5435] XFS (loop5): Unmounting Filesystem [ 131.604412][ T4275] XFS (loop2): Unmounting Filesystem [ 132.233576][ T126] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 132.322985][ T5918] loop4: detected capacity change from 0 to 164 [ 132.450303][ T126] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 132.471865][ T126] usb 1-1: config 1 has no interface number 0 [ 132.489850][ T126] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 132.523871][ T126] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 132.553272][ T126] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 132.572805][ T126] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 132.591746][ T126] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 26232, setting to 64 [ 132.637894][ T126] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 132.670275][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.695983][ T126] usb 1-1: Product: syz [ 132.704834][ T126] usb 1-1: Manufacturer: syz [ 132.715221][ T126] usb 1-1: SerialNumber: syz [ 132.741817][ T5902] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 132.782191][ T5933] device syzkaller1 entered promiscuous mode [ 132.789108][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.789193][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.903697][ T5939] loop1: detected capacity change from 0 to 16 [ 132.957094][ T5939] erofs: (device loop1): mounted with root inode @ nid 36. [ 132.971844][ T5902] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 133.088617][ T5939] syz.1.554: attempt to access beyond end of device [ 133.088617][ T5939] loop1: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 133.177219][ T5939] erofs: (device loop1): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 133.193914][ T5902] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 133.309477][ T5939] syz.1.554: attempt to access beyond end of device [ 133.309477][ T5939] loop1: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 133.353094][ T5939] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 133.400374][ T26] audit: type=1800 audit(1785805203.158:9): pid=5939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.554" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 133.400557][ T5947] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 133.476317][ T26] audit: type=1800 audit(1785805203.228:10): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.554" name="file2" dev="loop1" ino=89 res=0 errno=0 [ 133.623722][ T4260] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 133.636288][ T5902] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 133.655208][ T126] cdc_ncm 1-1:1.1: bind() failure [ 133.778924][ T5937] loop2: detected capacity change from 0 to 32768 [ 133.807355][ T5939] syz.1.554 (5939) used greatest stack depth: 20576 bytes left [ 133.830752][ T4260] usb 5-1: config 0 interface 0 has no altsetting 0 [ 133.844966][ T4260] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 133.878715][ T4260] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.920003][ T4317] usb 1-1: USB disconnect, device number 6 [ 133.941886][ T4260] usb 5-1: config 0 descriptor?? [ 134.016122][ T5961] loop8: detected capacity change from 0 to 8 [ 134.034237][ T4361] Dev loop8: unable to read RDB block 8 [ 134.039893][ T4361] loop8: unable to read partition table [ 134.060588][ T4361] loop8: partition table beyond EOD, truncated [ 134.089416][ T5961] Dev loop8: unable to read RDB block 8 [ 134.111972][ T5945] syz.1.554 (5945): drop_caches: 2 [ 134.119195][ T5961] loop8: unable to read partition table [ 134.137417][ T5961] loop8: partition table beyond EOD, truncated [ 134.168871][ T5961] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 134.185106][ T5937] XFS (loop2): Mounting V5 Filesystem [ 134.247288][ T5972] netlink: 36 bytes leftover after parsing attributes in process `syz.1.561'. [ 134.354734][ T5937] XFS (loop2): Ending clean mount [ 134.372499][ T5937] XFS (loop2): Quotacheck needed: Please wait. [ 134.381918][ T4260] creative-sb0540 0003:041E:3100.0005: unknown main item tag 0x0 [ 134.402620][ T4260] creative-sb0540 0003:041E:3100.0005: unknown main item tag 0x0 [ 134.431144][ T4260] creative-sb0540 0003:041E:3100.0005: collection stack underflow [ 134.450972][ T4260] creative-sb0540 0003:041E:3100.0005: item 0 0 0 12 parsing failed [ 134.466594][ T4260] creative-sb0540 0003:041E:3100.0005: parse failed [ 134.473258][ T4260] creative-sb0540: probe of 0003:041E:3100.0005 failed with error -22 [ 134.498025][ T5937] XFS (loop2): Quotacheck: Done. [ 134.634649][ T4260] usb 5-1: USB disconnect, device number 8 [ 134.817385][ T4275] XFS (loop2): Unmounting Filesystem [ 135.927879][ T6025] loop4: detected capacity change from 0 to 512 [ 136.462345][ T6023] loop2: detected capacity change from 0 to 32768 [ 136.587993][ T6023] XFS (loop2): Mounting V5 Filesystem [ 136.612580][ T6054] device veth0 entered promiscuous mode [ 136.619989][ T6053] device veth0 left promiscuous mode [ 136.698080][ T6023] XFS (loop2): Ending clean mount [ 136.945772][ T4275] XFS (loop2): Unmounting Filesystem [ 137.249001][ T6072] loop5: detected capacity change from 0 to 4096 [ 137.483099][ T6072] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 137.506022][ T6081] loop1: detected capacity change from 0 to 4096 [ 137.597886][ T6084] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.151290][ T6098] loop2: detected capacity change from 0 to 128 [ 138.255325][ T6098] syz.2.615: attempt to access beyond end of device [ 138.255325][ T6098] loop2: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 138.278061][ T6104] syz.2.615: attempt to access beyond end of device [ 138.278061][ T6104] loop2: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 138.332845][ T6104] Buffer I/O error on dev loop2, logical block 71, lost async page write [ 138.368269][ T6104] syz.2.615: attempt to access beyond end of device [ 138.368269][ T6104] loop2: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 138.402599][ T6104] Buffer I/O error on dev loop2, logical block 72, lost async page write [ 138.417314][ T6098] syz.2.615: attempt to access beyond end of device [ 138.417314][ T6098] loop2: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 138.437502][ T6104] syz.2.615: attempt to access beyond end of device [ 138.437502][ T6104] loop2: rw=2049, sector=146, nr_sectors = 2 limit=128 [ 138.460722][ T6098] Buffer I/O error on dev loop2, logical block 69, lost async page write [ 138.470541][ T6104] Buffer I/O error on dev loop2, logical block 73, lost async page write [ 138.583599][ T1182] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 138.686402][ T6117] loop0: detected capacity change from 0 to 256 [ 138.721618][ T6117] exfat: Deprecated parameter 'namecase' [ 138.739898][ T6117] exfat: Deprecated parameter 'namecase' [ 138.758953][ T6117] exfat: Deprecated parameter 'utf8' [ 138.777620][ T1182] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 138.790720][ T6120] netlink: 'syz.1.623': attribute type 39 has an invalid length. [ 138.791743][ T6121] input: syz0 as /devices/virtual/input/input9 [ 138.814426][ T1182] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.830460][ T6117] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 138.865285][ T1182] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 138.900710][ T1182] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.150003][ T6123] loop2: detected capacity change from 0 to 4096 [ 139.162388][ T1182] usb 6-1: GET_CAPABILITIES returned 0 [ 139.173610][ T1182] usbtmc 6-1:16.0: can't read capabilities [ 139.233623][ T6127] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 139.401956][ T1182] usb 6-1: USB disconnect, device number 2 [ 139.865869][ T6143] loop0: detected capacity change from 0 to 256 [ 139.925705][ T6143] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 139.960412][ T6149] netlink: 452 bytes leftover after parsing attributes in process `syz.4.622'. [ 140.351166][ T6164] input: syz0 as /devices/virtual/input/input10 [ 140.880833][ T6148] loop2: detected capacity change from 0 to 32768 [ 140.999614][ T6192] loop0: detected capacity change from 0 to 128 [ 141.007737][ T6192] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 141.068154][ T6148] XFS (loop2): Mounting V5 Filesystem [ 141.225850][ T5017] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 4) [ 141.251838][ T6206] netlink: 12 bytes leftover after parsing attributes in process `syz.4.639'. [ 141.277545][ T6148] XFS (loop2): Ending clean mount [ 141.482642][ T4275] XFS (loop2): Unmounting Filesystem [ 141.641723][ T6216] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 141.693723][ T4365] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 141.905361][ T4365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 141.922249][ T4365] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 141.933514][ T4365] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 141.951737][ T4365] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c1f, bcdDevice= 0.00 [ 141.964295][ T4365] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.979343][ T4365] usb 1-1: config 0 descriptor?? [ 141.991893][ T6210] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 142.418304][ T4365] corsair-psu 0003:1B1C:1C1F.0006: unknown main item tag 0x3 [ 142.429990][ T4365] corsair-psu 0003:1B1C:1C1F.0006: unknown main item tag 0x0 [ 142.446504][ T4365] corsair-psu 0003:1B1C:1C1F.0006: unknown main item tag 0x0 [ 142.467521][ T4365] corsair-psu 0003:1B1C:1C1F.0006: unknown main item tag 0x0 [ 142.479665][ T4365] corsair-psu 0003:1B1C:1C1F.0006: unknown main item tag 0x0 [ 142.490116][ T4365] corsair-psu 0003:1B1C:1C1F.0006: unknown main item tag 0x0 [ 142.499286][ T4365] corsair-psu 0003:1B1C:1C1F.0006: unknown main item tag 0x0 [ 142.506862][ T4365] corsair-psu 0003:1B1C:1C1F.0006: unknown main item tag 0x0 [ 142.514719][ T4365] corsair-psu 0003:1B1C:1C1F.0006: unknown main item tag 0x0 [ 142.525252][ T4365] corsair-psu 0003:1B1C:1C1F.0006: hidraw0: USB HID v0.04 Device [HID 1b1c:1c1f] on usb-dummy_hcd.0-1/input0 [ 142.608544][ T6241] netlink: 'syz.4.651': attribute type 3 has an invalid length. [ 142.608624][ T4365] corsair-psu 0003:1B1C:1C1F.0006: unable to initialize device (-38) [ 142.622285][ T6241] netlink: 'syz.4.651': attribute type 3 has an invalid length. [ 142.661717][ T4365] corsair-psu: probe of 0003:1B1C:1C1F.0006 failed with error -38 [ 142.697241][ T4365] usb 1-1: USB disconnect, device number 7 [ 142.803625][ T4317] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 142.966417][ T6246] fido_id[6246]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 143.020633][ T4317] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.049685][ T4317] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 143.090060][ T4317] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 143.106240][ T4317] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.114823][ T4317] usb 3-1: Product: syz [ 143.119534][ T4317] usb 3-1: Manufacturer: syz [ 143.130063][ T4317] usb 3-1: SerialNumber: syz [ 143.184185][ T4317] cdc_mbim 3-1:1.0: skipping garbage [ 143.378551][ T6235] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 143.614031][ T6252] loop5: detected capacity change from 0 to 32768 [ 143.633536][ T126] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 143.779875][ T6252] XFS (loop5): Mounting V5 Filesystem [ 143.848998][ T126] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 143.899184][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.931220][ T126] usb 1-1: Product: syz [ 143.943523][ T126] usb 1-1: Manufacturer: syz [ 143.948212][ T126] usb 1-1: SerialNumber: syz [ 143.960599][ T6258] loop4: detected capacity change from 0 to 32768 [ 143.998071][ T6252] XFS (loop5): Ending clean mount [ 144.013244][ T6235] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 144.043974][ T4317] cdc_mbim 3-1:1.0: setting tx_max = 16384 [ 144.073812][ T4317] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 144.105997][ T4317] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, c2:f3:6a:d6:28:1b [ 144.120959][ T6258] XFS (loop4): Mounting V5 Filesystem [ 144.266413][ T6258] XFS (loop4): Ending clean mount [ 144.287586][ T4320] usb 3-1: USB disconnect, device number 7 [ 144.290495][ T5435] XFS (loop5): Unmounting Filesystem [ 144.296783][ T4320] cdc_mbim 3-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 144.372988][ T6258] XFS (loop4): User initiated shutdown received. [ 144.412661][ T6258] XFS (loop4): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495). Shutting down filesystem. [ 144.449633][ T6260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.477526][ T6260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.495829][ T6258] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 144.564985][ T126] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 144.599396][ T126] usb 1-1: USB disconnect, device number 8 [ 144.638834][ T126] usblp0: removed [ 144.702658][ T4272] XFS (loop4): Unmounting Filesystem [ 145.298802][ T6305] Invalid ELF header len 8 [ 145.429337][ T6310] netlink: 'syz.5.671': attribute type 3 has an invalid length. [ 145.482415][ T6310] netlink: 'syz.5.671': attribute type 3 has an invalid length. [ 145.623944][ T6319] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'. [ 145.632793][ T6319] netlink: 'syz.2.674': attribute type 30 has an invalid length. [ 145.700991][ T6319] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.710244][ T6319] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.719044][ T6319] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.727824][ T6319] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.809848][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.674'. [ 145.841615][ T6322] netlink: 'syz.2.674': attribute type 30 has an invalid length. [ 147.910140][ T6393] loop2: detected capacity change from 0 to 1024 [ 147.979988][ T6393] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 147.989240][ T6393] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.016485][ T6393] EXT4-fs error (device loop2): ext4_map_blocks:747: inode #15: comm syz.2.698: lblock 0 mapped to illegal pblock 0 (length 1) [ 148.148662][ T6393] EXT4-fs (loop2): Remounting filesystem read-only [ 148.345758][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 148.980315][ T5012] tipc: Subscription rejected, illegal request [ 149.051131][ T6433] clocksource: Switched to clocksource acpi_pm [ 149.073111][ T6433] clocksource: Switched to clocksource tsc [ 149.904701][ T6466] Core dump to core aborted: cannot preserve file permissions [ 150.911767][ T6468] loop1: detected capacity change from 0 to 32768 [ 150.973850][ T4726] tipc: Subscription rejected, illegal request [ 151.086056][ T6468] XFS (loop1): Mounting V5 Filesystem [ 151.329003][ T6468] XFS (loop1): Ending clean mount [ 151.364504][ T6468] XFS (loop1): Quotacheck needed: Please wait. [ 151.512879][ T6468] XFS (loop1): Quotacheck: Done. [ 151.708874][ T4271] XFS (loop1): Unmounting Filesystem [ 152.332903][ T6539] loop2: detected capacity change from 0 to 512 [ 152.366900][ T6539] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 152.411483][ T6539] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.747: bad orphan inode 131083 [ 152.426321][ T6539] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 152.542877][ T6548] input: syz0 as /devices/virtual/input/input11 [ 152.576466][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 153.162055][ T6580] loop0: detected capacity change from 0 to 128 [ 153.249360][ T6580] syz.0.749: attempt to access beyond end of device [ 153.249360][ T6580] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 153.281434][ T6584] syz.0.749: attempt to access beyond end of device [ 153.281434][ T6584] loop0: rw=2049, sector=142, nr_sectors = 2 limit=128 [ 153.310747][ T6584] Buffer I/O error on dev loop0, logical block 71, lost async page write [ 153.328599][ T6584] syz.0.749: attempt to access beyond end of device [ 153.328599][ T6584] loop0: rw=2049, sector=144, nr_sectors = 2 limit=128 [ 153.367143][ T6584] Buffer I/O error on dev loop0, logical block 72, lost async page write [ 153.370188][ T6583] loop4: detected capacity change from 0 to 4096 [ 153.385167][ T6580] syz.0.749: attempt to access beyond end of device [ 153.385167][ T6580] loop0: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 153.428710][ T6583] EXT4-fs: Ignoring removed bh option [ 153.432313][ T6584] syz.0.749: attempt to access beyond end of device [ 153.432313][ T6584] loop0: rw=2049, sector=146, nr_sectors = 2 limit=128 [ 153.443728][ T6583] EXT4-fs: Ignoring removed bh option [ 153.470473][ T6583] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 153.480610][ T6580] Buffer I/O error on dev loop0, logical block 69, lost async page write [ 153.500304][ T6583] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal [ 153.506844][ T6584] Buffer I/O error on dev loop0, logical block 73, lost async page write [ 153.810397][ T6590] loop4: detected capacity change from 0 to 1764 [ 153.944745][ T6594] loop0: detected capacity change from 0 to 512 [ 153.971692][ T6594] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 154.035511][ T6594] EXT4-fs error (device loop0): ext4_orphan_get:1431: comm syz.0.753: bad orphan inode 131083 [ 154.054645][ T6594] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 154.332881][ T4282] EXT4-fs (loop0): unmounting filesystem. [ 155.009221][ T6635] device veth0 entered promiscuous mode [ 155.034436][ T6631] device veth0 left promiscuous mode [ 155.198986][ T6641] netlink: 24 bytes leftover after parsing attributes in process `syz.5.768'. [ 155.208210][ T4320] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 155.238653][ T6641] bond0: ARP target 1.4.0.0 is already present [ 155.256755][ T6641] bond0: option arp_ip_target: invalid value (1025) [ 155.405227][ T4320] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 155.429030][ T4320] usb 2-1: config 1 has no interface number 0 [ 155.458443][ T4320] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 155.480057][ T4320] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 155.544331][ T4320] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 155.567265][ T4320] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 155.621616][ T4320] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 26232, setting to 64 [ 155.666030][ T4320] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 155.694835][ T4320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.743989][ T4320] usb 2-1: Product: syz [ 155.748278][ T4320] usb 2-1: Manufacturer: syz [ 155.752908][ T4320] usb 2-1: SerialNumber: syz [ 155.782902][ T6629] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 155.999819][ T6667] device syzkaller1 entered promiscuous mode [ 156.005507][ T6629] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 156.228145][ T6629] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 156.264962][ T126] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 156.367276][ T6677] netlink: 92 bytes leftover after parsing attributes in process `syz.4.784'. [ 156.371753][ T6679] loop5: detected capacity change from 0 to 256 [ 156.413187][ T6679] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 156.491419][ T126] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 156.515773][ T126] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.535597][ T126] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 156.549701][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.653024][ T6629] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 156.675441][ T4320] cdc_ncm 2-1:1.1: bind() failure [ 156.771329][ T126] usb 3-1: GET_CAPABILITIES returned 0 [ 156.783272][ T126] usbtmc 3-1:16.0: can't read capabilities [ 156.797772][ T6686] loop4: detected capacity change from 0 to 128 [ 156.902971][ T4320] usb 2-1: USB disconnect, device number 7 [ 157.028691][ T126] usb 3-1: USB disconnect, device number 8 [ 157.486612][ T6692] loop4: detected capacity change from 0 to 32768 [ 157.572135][ T6692] XFS (loop4): Mounting V5 Filesystem [ 157.659537][ T6715] device syzkaller1 entered promiscuous mode [ 157.718073][ T6717] loop2: detected capacity change from 0 to 256 [ 157.758540][ T6692] XFS (loop4): Ending clean mount [ 157.789927][ T6717] exfat: Deprecated parameter 'namecase' [ 157.834048][ T6692] XFS (loop4): Quotacheck needed: Please wait. [ 157.870691][ T6717] exfat: Deprecated parameter 'utf8' [ 157.902489][ T6717] exfat: Deprecated parameter 'namecase' [ 157.923233][ T6692] XFS (loop4): Quotacheck: Done. [ 157.973535][ T6717] exfat: Deprecated parameter 'utf8' [ 158.027605][ T6717] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 158.194130][ T4260] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 158.232266][ T4272] XFS (loop4): Unmounting Filesystem [ 158.389294][ T4260] usb 1-1: config 0 interface 0 has no altsetting 0 [ 158.399522][ T4260] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 158.413873][ T4260] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.433123][ T4260] usb 1-1: config 0 descriptor?? [ 158.616673][ T6721] loop1: detected capacity change from 0 to 32768 [ 158.685139][ T26] audit: type=1800 audit(1785805228.449:11): pid=6721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.800" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 158.851916][ T4260] creative-sb0540 0003:041E:3100.0007: unknown main item tag 0x0 [ 158.886926][ T4260] creative-sb0540 0003:041E:3100.0007: unknown main item tag 0x0 [ 158.899690][ T4260] creative-sb0540 0003:041E:3100.0007: collection stack underflow [ 158.911866][ T4260] creative-sb0540 0003:041E:3100.0007: item 0 0 0 12 parsing failed [ 158.926282][ T4260] creative-sb0540 0003:041E:3100.0007: parse failed [ 158.933213][ T4260] creative-sb0540: probe of 0003:041E:3100.0007 failed with error -22 [ 159.065089][ T4260] usb 1-1: USB disconnect, device number 9 [ 159.523711][ T1182] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 159.720570][ T1182] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 159.742683][ T1182] usb 5-1: config 1 has no interface number 0 [ 159.750393][ T1182] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 159.767151][ T1182] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 159.788474][ T1182] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 159.813406][ T1182] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 159.830124][ T1182] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 26232, setting to 64 [ 159.849102][ T1182] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 159.858435][ T1182] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.871771][ T1182] usb 5-1: Product: syz [ 159.877032][ T1182] usb 5-1: Manufacturer: syz [ 159.881686][ T1182] usb 5-1: SerialNumber: syz [ 159.896420][ T6740] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 159.993770][ T126] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 160.120013][ T6740] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 160.186271][ T126] usb 6-1: config 0 interface 0 has no altsetting 0 [ 160.206874][ T126] usb 6-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 160.247999][ T126] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.277789][ T126] usb 6-1: config 0 descriptor?? [ 160.350428][ T6740] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 160.706079][ T126] creative-sb0540 0003:041E:3100.0008: unknown main item tag 0x0 [ 160.714110][ T126] creative-sb0540 0003:041E:3100.0008: unknown main item tag 0x0 [ 160.721957][ T126] creative-sb0540 0003:041E:3100.0008: collection stack underflow [ 160.730988][ T126] creative-sb0540 0003:041E:3100.0008: item 0 0 0 12 parsing failed [ 160.739832][ T126] creative-sb0540 0003:041E:3100.0008: parse failed [ 160.747014][ T126] creative-sb0540: probe of 0003:041E:3100.0008 failed with error -22 [ 160.780931][ T6740] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 160.782640][ T6763] loop0: detected capacity change from 0 to 32768 [ 160.795261][ T1182] cdc_ncm 5-1:1.1: bind() failure [ 160.860701][ T6763] XFS (loop0): Mounting V5 Filesystem [ 160.934124][ T126] usb 6-1: USB disconnect, device number 3 [ 160.999940][ T6763] XFS (loop0): Ending clean mount [ 161.022305][ T6763] XFS (loop0): Quotacheck needed: Please wait. [ 161.097618][ T4320] usb 5-1: USB disconnect, device number 9 [ 161.144110][ T6763] XFS (loop0): Quotacheck: Done. [ 161.171202][ T6775] loop1: detected capacity change from 0 to 256 [ 161.178659][ T6775] exfat: Deprecated parameter 'namecase' [ 161.186492][ T6775] exfat: Deprecated parameter 'utf8' [ 161.192062][ T6775] exfat: Deprecated parameter 'namecase' [ 161.207701][ T6775] exfat: Deprecated parameter 'utf8' [ 161.235006][ T6775] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0x555ffa9e, utbl_chksum : 0xe619d30d) [ 161.301111][ T4282] XFS (loop0): Unmounting Filesystem [ 161.954976][ T6798] device gretap0 entered promiscuous mode [ 162.053730][ T1182] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 162.255548][ T1182] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.275330][ T1182] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 162.292706][ T1182] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 162.309967][ T1182] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 162.321843][ T1182] usb 3-1: SerialNumber: syz [ 162.548712][ T1182] usb 3-1: 0:2 : does not exist [ 162.595632][ T1182] usb 3-1: USB disconnect, device number 9 [ 162.889254][ T4348] udevd[4348]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.930311][ T6818] loop0: detected capacity change from 0 to 1024 [ 163.137197][ T6822] loop8: detected capacity change from 0 to 8 [ 163.146985][ T4348] Dev loop8: unable to read RDB block 8 [ 163.152595][ T4348] loop8: unable to read partition table [ 163.161863][ T4348] loop8: partition table beyond EOD, truncated [ 163.173692][ T6822] Dev loop8: unable to read RDB block 8 [ 163.179306][ T6822] loop8: unable to read partition table [ 163.188130][ T6822] loop8: partition table beyond EOD, truncated [ 163.203701][ T6822] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 163.565005][ T6820] loop5: detected capacity change from 0 to 32768 [ 163.595359][ T6820] XFS (loop5): Mounting V5 Filesystem [ 163.688703][ T6820] XFS (loop5): Ending clean mount [ 163.705776][ T6820] XFS (loop5): Quotacheck needed: Please wait. [ 163.749094][ T6820] XFS (loop5): Quotacheck: Done. [ 163.773617][ T1182] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 163.833369][ T5435] XFS (loop5): Unmounting Filesystem [ 163.873772][ T126] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 163.903829][ T4320] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 163.955896][ T1182] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 163.966586][ T1182] usb 3-1: config 1 has no interface number 0 [ 163.972899][ T1182] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 163.984950][ T1182] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 164.002990][ T1182] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 164.012986][ T1182] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 164.028997][ T1182] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 26232, setting to 64 [ 164.043161][ T1182] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 164.057392][ T1182] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.066493][ T1182] usb 3-1: Product: syz [ 164.070828][ T1182] usb 3-1: Manufacturer: syz [ 164.076166][ T126] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 164.083596][ T1182] usb 3-1: SerialNumber: syz [ 164.093204][ T126] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.093831][ T6833] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 164.114835][ T126] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 164.125270][ T4320] usb 2-1: config 0 interface 0 has no altsetting 0 [ 164.132070][ T4320] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 164.133508][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 164.149302][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.159773][ T4320] usb 2-1: config 0 descriptor?? [ 164.184389][ T126] usb 1-1: SerialNumber: syz [ 164.351837][ T6833] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 164.402447][ T126] usb 1-1: 0:2 : does not exist [ 164.426936][ T126] usb 1-1: USB disconnect, device number 10 [ 164.569891][ T6833] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 164.581832][ T4320] creative-sb0540 0003:041E:3100.0009: unknown main item tag 0x0 [ 164.591658][ T4320] creative-sb0540 0003:041E:3100.0009: unknown main item tag 0x0 [ 164.600136][ T4320] creative-sb0540 0003:041E:3100.0009: collection stack underflow [ 164.608808][ T4320] creative-sb0540 0003:041E:3100.0009: item 0 0 0 12 parsing failed [ 164.626518][ T4320] creative-sb0540 0003:041E:3100.0009: parse failed [ 164.639610][ T4320] creative-sb0540: probe of 0003:041E:3100.0009 failed with error -22 [ 164.676996][ T4361] udevd[4361]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.797715][ T4339] usb 2-1: USB disconnect, device number 8 [ 164.994949][ T6833] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 165.003979][ T1182] cdc_ncm 3-1:1.1: bind() failure [ 165.112599][ T26] audit: type=1326 audit(1785805234.869:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6851 comm="syz.0.848" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f495a59e019 code=0x0 [ 165.260103][ T1182] usb 3-1: USB disconnect, device number 10 [ 166.197172][ T6876] loop0: detected capacity change from 0 to 16 [ 166.230676][ T6876] erofs: (device loop0): mounted with root inode @ nid 36. [ 166.289767][ T6876] syz.0.859: attempt to access beyond end of device [ 166.289767][ T6876] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 166.341536][ T6876] erofs: (device loop0): z_erofs_readahead: readahead error at page 6 @ nid 89 [ 166.381270][ T6876] syz.0.859: attempt to access beyond end of device [ 166.381270][ T6876] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 166.425141][ T6876] ================================================================== [ 166.433253][ T6876] BUG: KASAN: use-after-free in z_erofs_transform_plain+0x3a7/0x4a0 [ 166.441264][ T6876] Read of size 4096 at addr ffff88802a08a000 by task syz.0.859/6876 [ 166.449260][ T6876] [ 166.451614][ T6876] CPU: 0 PID: 6876 Comm: syz.0.859 Not tainted syzkaller #0 [ 166.458912][ T6876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 166.468995][ T6876] Call Trace: [ 166.472287][ T6876] [ 166.475227][ T6876] dump_stack_lvl+0x188/0x24e [ 166.479926][ T6876] ? read_lock_is_recursive+0x10/0x10 [ 166.485358][ T6876] ? show_regs_print_info+0x12/0x12 [ 166.490562][ T6876] ? load_image+0x410/0x410 [ 166.495057][ T6876] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 166.500509][ T6876] ? __virt_addr_valid+0x188/0x540 [ 166.505623][ T6876] ? __virt_addr_valid+0x467/0x540 [ 166.510726][ T6876] ? z_erofs_transform_plain+0x3a7/0x4a0 [ 166.516388][ T6876] print_report+0xa8/0x210 [ 166.520803][ T6876] kasan_report+0x10b/0x140 [ 166.525305][ T6876] ? z_erofs_transform_plain+0x3a7/0x4a0 [ 166.531027][ T6876] kasan_check_range+0x235/0x290 [ 166.535967][ T6876] ? z_erofs_transform_plain+0x3a7/0x4a0 [ 166.541597][ T6876] memcpy+0x25/0x60 [ 166.545395][ T6876] z_erofs_transform_plain+0x3a7/0x4a0 [ 166.550866][ T6876] z_erofs_decompress_queue+0x169e/0x24a0 [ 166.556591][ T6876] ? z_erofs_onlinepage_end+0x370/0x370 [ 166.562132][ T6876] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 166.568110][ T6876] ? lock_chain_count+0x20/0x20 [ 166.572964][ T6876] ? z_erofs_decompressqueue_endio+0x540/0x540 [ 166.579119][ T6876] ? erofs_map_blocks+0x18b0/0x18b0 [ 166.584309][ T6876] ? folio_unlock+0x114/0x2f0 [ 166.588988][ T6876] z_erofs_runqueue+0x198d/0x1b20 [ 166.594019][ T6876] ? z_erofs_do_read_page+0x3920/0x3920 [ 166.599654][ T6876] ? z_erofs_read_folio+0x2af/0x630 [ 166.604935][ T6876] ? __lock_acquire+0x7c40/0x7c40 [ 166.609974][ T6876] ? z_erofs_pcluster_readmore+0x43a/0x4f0 [ 166.615799][ T6876] ? verify_lock_unused+0x140/0x140 [ 166.620995][ T6876] z_erofs_read_folio+0x35d/0x630 [ 166.626020][ T6876] ? z_erofs_rcu_callback+0x1a0/0x1a0 [ 166.631391][ T6876] ? __might_sleep+0xd0/0xd0 [ 166.635970][ T6876] ? filemap_add_folio+0x186/0x3d0 [ 166.641103][ T6876] filemap_read_folio+0x164/0x7a0 [ 166.646122][ T6876] ? z_erofs_rcu_callback+0x1a0/0x1a0 [ 166.651486][ T6876] ? maybe_unlock_mmap_for_io+0x140/0x140 [ 166.657202][ T6876] ? down_read+0x1a8/0x2d0 [ 166.661604][ T6876] filemap_read+0x1846/0x3150 [ 166.666301][ T6876] ? find_get_pages_range_tag+0x780/0x780 [ 166.672038][ T6876] ? kernel_text_address+0x9c/0xd0 [ 166.677166][ T6876] generic_file_read_iter+0x124/0x700 [ 166.682540][ T6876] ? kiocb_invalidate_pages+0x360/0x360 [ 166.688082][ T6876] ? iov_iter_kvec+0x4a/0x1f0 [ 166.692754][ T6876] __kernel_read+0x2dd/0x6e0 [ 166.697345][ T6876] ? rw_verify_area+0x1a0/0x1a0 [ 166.702284][ T6876] ? crypto_shash_setkey+0x2a0/0x2a0 [ 166.707585][ T6876] integrity_kernel_read+0x86/0xd0 [ 166.712705][ T6876] ? integrity_inode_free+0x170/0x170 [ 166.718083][ T6876] ima_calc_file_hash+0xb12/0x1950 [ 166.723220][ T6876] ? __lock_acquire+0x7c40/0x7c40 [ 166.728243][ T6876] ? register_lock_class+0xc0/0x870 [ 166.733526][ T6876] ? unwind_next_frame+0x1719/0x1fd0 [ 166.738804][ T6876] ? is_dynamic_key+0x260/0x260 [ 166.743647][ T6876] ? is_bpf_text_address+0x28b/0x2a0 [ 166.748921][ T6876] ? ima_alloc_tfm+0x2f0/0x2f0 [ 166.753684][ T6876] ? mark_lock+0x94/0x320 [ 166.758015][ T6876] ? init_inode_xattrs+0x2b0/0xbf0 [ 166.763115][ T6876] ? integrity_inode_get+0x111/0x560 [ 166.768394][ T6876] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.774457][ T6876] ? erofs_getxattr+0x590/0x590 [ 166.779302][ T6876] ima_collect_measurement+0x503/0xb50 [ 166.784753][ T6876] ? trace_raw_output_contention_end+0xd0/0xd0 [ 166.791084][ T6876] ? trace_contention_end+0x5f/0x170 [ 166.796370][ T6876] ? ima_get_action+0xa0/0xa0 [ 166.801128][ T6876] ? __mutex_lock+0x1ab/0xae0 [ 166.805830][ T6876] ? vfs_getxattr_alloc+0x49f/0x5a0 [ 166.811025][ T6876] ? ima_get_cache_status+0xb0/0xb0 [ 166.816243][ T6876] process_measurement+0x119b/0x1c40 [ 166.821550][ T6876] ? ima_file_mmap+0x140/0x140 [ 166.826306][ T6876] ? tomoyo_check_open_permission+0x1bf/0x440 [ 166.832363][ T6876] ? tomoyo_check_path_number_acl+0x280/0x280 [ 166.838433][ T6876] ? apparmor_inode_getattr+0x20/0x20 [ 166.843815][ T6876] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 166.849984][ T6876] ima_file_check+0xc8/0x110 [ 166.854570][ T6876] ? ima_bprm_check+0x200/0x200 [ 166.859413][ T6876] path_openat+0x272b/0x2f10 [ 166.864005][ T6876] ? do_filp_open+0x420/0x420 [ 166.868675][ T6876] do_filp_open+0x1ee/0x420 [ 166.873171][ T6876] ? vfs_tmpfile+0x470/0x470 [ 166.877844][ T6876] ? _raw_spin_unlock+0x24/0x40 [ 166.882684][ T6876] ? alloc_fd+0x590/0x640 [ 166.887102][ T6876] do_sys_openat2+0x14b/0x4f0 [ 166.891776][ T6876] ? do_sys_open+0xe0/0xe0 [ 166.896183][ T6876] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 166.902177][ T6876] ? lock_chain_count+0x20/0x20 [ 166.907023][ T6876] __x64_sys_openat+0x135/0x160 [ 166.911968][ T6876] do_syscall_64+0x4c/0xa0 [ 166.916376][ T6876] ? clear_bhb_loop+0x60/0xb0 [ 166.921047][ T6876] ? clear_bhb_loop+0x60/0xb0 [ 166.925718][ T6876] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 166.931624][ T6876] RIP: 0033:0x7f495a59e019 [ 166.936051][ T6876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.955661][ T6876] RSP: 002b:00007f495b3d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 166.964095][ T6876] RAX: ffffffffffffffda RBX: 00007f495a825fa0 RCX: 00007f495a59e019 [ 166.972060][ T6876] RDX: 0000000000080000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 166.980026][ T6876] RBP: 00007f495a63500c R08: 0000000000000000 R09: 0000000000000000 [ 166.987988][ T6876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.995982][ T6876] R13: 00007f495a826038 R14: 00007f495a825fa0 R15: 00007fff5e8b8938 [ 167.003977][ T6876] [ 167.006993][ T6876] [ 167.009305][ T6876] The buggy address belongs to the physical page: [ 167.015710][ T6876] page:ffffea0000a82280 refcount:0 mapcount:-128 mapping:0000000000000000 index:0x0 pfn:0x2a08a [ 167.026122][ T6876] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 167.033234][ T6876] raw: 00fff00000000000 ffffea00008dcf08 ffffea0001505e88 0000000000000000 [ 167.041805][ T6876] raw: 0000000000000000 0000000000000001 00000000ffffff7f 0000000000000000 [ 167.050370][ T6876] page dumped because: kasan: bad access detected [ 167.056777][ T6876] page_owner tracks the page as freed [ 167.062131][ T6876] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 6674, tgid 6672 (syz.0.783), ts 156610539464, free_ts 157104366332 [ 167.082544][ T6876] post_alloc_hook+0x173/0x1a0 [ 167.087306][ T6876] get_page_from_freelist+0x206b/0x2180 [ 167.092948][ T6876] __alloc_pages+0x1ec/0x4f0 [ 167.097532][ T6876] folio_alloc+0x1c/0x60 [ 167.101782][ T6876] filemap_alloc_folio+0xdb/0x480 [ 167.106810][ T6876] page_cache_ra_unbounded+0x17b/0x750 [ 167.112255][ T6876] filemap_fault+0x57a/0x1590 [ 167.116920][ T6876] __do_fault+0x13b/0x4e0 [ 167.121237][ T6876] handle_mm_fault+0x2610/0x3d40 [ 167.126176][ T6876] __get_user_pages+0x40d/0xec0 [ 167.131028][ T6876] populate_vma_page_range+0x214/0x2b0 [ 167.136490][ T6876] __mm_populate+0x25c/0x380 [ 167.141072][ T6876] vm_mmap_pgoff+0x212/0x2d0 [ 167.145667][ T6876] ksys_mmap_pgoff+0x4bf/0x720 [ 167.150437][ T6876] do_syscall_64+0x4c/0xa0 [ 167.154854][ T6876] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.160748][ T6876] page last free stack trace: [ 167.165412][ T6876] free_unref_page_prepare+0x8e5/0x9e0 [ 167.170869][ T6876] free_unref_page_list+0xbb/0x8e0 [ 167.175976][ T6876] release_pages+0x20d1/0x2340 [ 167.180732][ T6876] __pagevec_release+0x6d/0xe0 [ 167.185487][ T6876] truncate_inode_pages_range+0x35c/0x10b0 [ 167.191286][ T6876] blkdev_flush_mapping+0x12c/0x290 [ 167.196472][ T6876] blkdev_put+0x4a1/0x780 [ 167.200792][ T6876] blkdev_close+0x51/0x80 [ 167.205112][ T6876] __fput+0x20a/0x8b0 [ 167.209096][ T6876] task_work_run+0x1d0/0x260 [ 167.213680][ T6876] do_exit+0x9d5/0x2570 [ 167.217826][ T6876] do_group_exit+0x229/0x2e0 [ 167.222408][ T6876] __x64_sys_exit_group+0x3b/0x40 [ 167.227424][ T6876] do_syscall_64+0x4c/0xa0 [ 167.231841][ T6876] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.237737][ T6876] [ 167.240060][ T6876] Memory state around the buggy address: [ 167.245673][ T6876] ffff88802a089f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 167.253727][ T6876] ffff88802a089f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 167.261773][ T6876] >ffff88802a08a000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 167.269822][ T6876] ^ [ 167.273880][ T6876] ffff88802a08a080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 167.281931][ T6876] ffff88802a08a100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 167.289995][ T6876] ================================================================== [ 167.319019][ T6876] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 167.326258][ T6876] CPU: 1 PID: 6876 Comm: syz.0.859 Not tainted syzkaller #0 [ 167.333568][ T6876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 167.343638][ T6876] Call Trace: [ 167.346925][ T6876] [ 167.349864][ T6876] dump_stack_lvl+0x188/0x24e [ 167.354552][ T6876] ? memcpy+0x3c/0x60 [ 167.358533][ T6876] ? show_regs_print_info+0x12/0x12 [ 167.363726][ T6876] ? load_image+0x410/0x410 [ 167.368219][ T6876] panic+0x2d3/0x710 [ 167.372113][ T6876] ? bpf_jit_dump+0xd0/0xd0 [ 167.376605][ T6876] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 167.382575][ T6876] ? _raw_spin_unlock+0x40/0x40 [ 167.387445][ T6876] check_panic_on_warn+0x80/0xa0 [ 167.392414][ T6876] ? z_erofs_transform_plain+0x3a7/0x4a0 [ 167.398039][ T6876] end_report+0x66/0x110 [ 167.402274][ T6876] kasan_report+0x118/0x140 [ 167.406771][ T6876] ? z_erofs_transform_plain+0x3a7/0x4a0 [ 167.412397][ T6876] kasan_check_range+0x235/0x290 [ 167.417327][ T6876] ? z_erofs_transform_plain+0x3a7/0x4a0 [ 167.422951][ T6876] memcpy+0x25/0x60 [ 167.426745][ T6876] z_erofs_transform_plain+0x3a7/0x4a0 [ 167.432197][ T6876] z_erofs_decompress_queue+0x169e/0x24a0 [ 167.437932][ T6876] ? z_erofs_onlinepage_end+0x370/0x370 [ 167.443481][ T6876] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 167.449455][ T6876] ? lock_chain_count+0x20/0x20 [ 167.454301][ T6876] ? z_erofs_decompressqueue_endio+0x540/0x540 [ 167.460447][ T6876] ? erofs_map_blocks+0x18b0/0x18b0 [ 167.465645][ T6876] ? folio_unlock+0x114/0x2f0 [ 167.470316][ T6876] z_erofs_runqueue+0x198d/0x1b20 [ 167.475340][ T6876] ? z_erofs_do_read_page+0x3920/0x3920 [ 167.480879][ T6876] ? z_erofs_read_folio+0x2af/0x630 [ 167.486076][ T6876] ? __lock_acquire+0x7c40/0x7c40 [ 167.491123][ T6876] ? z_erofs_pcluster_readmore+0x43a/0x4f0 [ 167.496922][ T6876] ? verify_lock_unused+0x140/0x140 [ 167.502135][ T6876] z_erofs_read_folio+0x35d/0x630 [ 167.507155][ T6876] ? z_erofs_rcu_callback+0x1a0/0x1a0 [ 167.512528][ T6876] ? __might_sleep+0xd0/0xd0 [ 167.517103][ T6876] ? filemap_add_folio+0x186/0x3d0 [ 167.522207][ T6876] filemap_read_folio+0x164/0x7a0 [ 167.527235][ T6876] ? z_erofs_rcu_callback+0x1a0/0x1a0 [ 167.532598][ T6876] ? maybe_unlock_mmap_for_io+0x140/0x140 [ 167.538316][ T6876] ? down_read+0x1a8/0x2d0 [ 167.542722][ T6876] filemap_read+0x1846/0x3150 [ 167.547399][ T6876] ? find_get_pages_range_tag+0x780/0x780 [ 167.553120][ T6876] ? kernel_text_address+0x9c/0xd0 [ 167.558224][ T6876] generic_file_read_iter+0x124/0x700 [ 167.563606][ T6876] ? kiocb_invalidate_pages+0x360/0x360 [ 167.569175][ T6876] ? iov_iter_kvec+0x4a/0x1f0 [ 167.573849][ T6876] __kernel_read+0x2dd/0x6e0 [ 167.578455][ T6876] ? rw_verify_area+0x1a0/0x1a0 [ 167.583309][ T6876] ? crypto_shash_setkey+0x2a0/0x2a0 [ 167.588583][ T6876] integrity_kernel_read+0x86/0xd0 [ 167.593685][ T6876] ? integrity_inode_free+0x170/0x170 [ 167.599052][ T6876] ima_calc_file_hash+0xb12/0x1950 [ 167.604183][ T6876] ? __lock_acquire+0x7c40/0x7c40 [ 167.609212][ T6876] ? register_lock_class+0xc0/0x870 [ 167.614398][ T6876] ? unwind_next_frame+0x1719/0x1fd0 [ 167.619676][ T6876] ? is_dynamic_key+0x260/0x260 [ 167.624519][ T6876] ? is_bpf_text_address+0x28b/0x2a0 [ 167.629806][ T6876] ? ima_alloc_tfm+0x2f0/0x2f0 [ 167.634560][ T6876] ? mark_lock+0x94/0x320 [ 167.638890][ T6876] ? init_inode_xattrs+0x2b0/0xbf0 [ 167.643994][ T6876] ? integrity_inode_get+0x111/0x560 [ 167.649273][ T6876] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.655335][ T6876] ? erofs_getxattr+0x590/0x590 [ 167.660182][ T6876] ima_collect_measurement+0x503/0xb50 [ 167.665637][ T6876] ? trace_raw_output_contention_end+0xd0/0xd0 [ 167.671781][ T6876] ? trace_contention_end+0x5f/0x170 [ 167.677176][ T6876] ? ima_get_action+0xa0/0xa0 [ 167.681872][ T6876] ? __mutex_lock+0x1ab/0xae0 [ 167.686569][ T6876] ? vfs_getxattr_alloc+0x49f/0x5a0 [ 167.691792][ T6876] ? ima_get_cache_status+0xb0/0xb0 [ 167.696998][ T6876] process_measurement+0x119b/0x1c40 [ 167.702290][ T6876] ? ima_file_mmap+0x140/0x140 [ 167.707047][ T6876] ? tomoyo_check_open_permission+0x1bf/0x440 [ 167.713112][ T6876] ? tomoyo_check_path_number_acl+0x280/0x280 [ 167.719195][ T6876] ? apparmor_inode_getattr+0x20/0x20 [ 167.724564][ T6876] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 167.730725][ T6876] ima_file_check+0xc8/0x110 [ 167.735314][ T6876] ? ima_bprm_check+0x200/0x200 [ 167.740162][ T6876] path_openat+0x272b/0x2f10 [ 167.744768][ T6876] ? do_filp_open+0x420/0x420 [ 167.749442][ T6876] do_filp_open+0x1ee/0x420 [ 167.753950][ T6876] ? vfs_tmpfile+0x470/0x470 [ 167.758622][ T6876] ? _raw_spin_unlock+0x24/0x40 [ 167.763467][ T6876] ? alloc_fd+0x590/0x640 [ 167.767793][ T6876] do_sys_openat2+0x14b/0x4f0 [ 167.772558][ T6876] ? do_sys_open+0xe0/0xe0 [ 167.776972][ T6876] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 167.783060][ T6876] ? lock_chain_count+0x20/0x20 [ 167.787907][ T6876] __x64_sys_openat+0x135/0x160 [ 167.792759][ T6876] do_syscall_64+0x4c/0xa0 [ 167.797179][ T6876] ? clear_bhb_loop+0x60/0xb0 [ 167.801963][ T6876] ? clear_bhb_loop+0x60/0xb0 [ 167.806638][ T6876] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 167.812523][ T6876] RIP: 0033:0x7f495a59e019 [ 167.816931][ T6876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.836534][ T6876] RSP: 002b:00007f495b3d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 167.844939][ T6876] RAX: ffffffffffffffda RBX: 00007f495a825fa0 RCX: 00007f495a59e019 [ 167.852987][ T6876] RDX: 0000000000080000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 167.861042][ T6876] RBP: 00007f495a63500c R08: 0000000000000000 R09: 0000000000000000 [ 167.869009][ T6876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.876969][ T6876] R13: 00007f495a826038 R14: 00007f495a825fa0 R15: 00007fff5e8b8938 [ 167.884939][ T6876] [ 167.888214][ T6876] Kernel Offset: disabled [ 167.892792][ T6876] Rebooting in 86400 seconds..