last executing test programs: 6m57.439764025s ago: executing program 5 (id=626): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/11], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m56.115360671s ago: executing program 5 (id=636): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) 6m55.68810364s ago: executing program 5 (id=639): keyctl$clear(0x5, 0xfffffffffffffffd) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0x7fff, 0x0) 6m55.439583908s ago: executing program 5 (id=641): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000c00, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x1524, &(0x7f00000037c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc01, 0x0) 6m54.828213947s ago: executing program 5 (id=650): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x108c8, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32], 0x1, 0x445c, &(0x7f000000c300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x9c) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40046f01, 0x0) 6m54.258885676s ago: executing program 5 (id=657): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000001c40)={0xa, 0x4e20, 0x52, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc113}, 0x1c) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000032c0)={0x0, @in6={{0xa, 0x4e20, 0x10001, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}}, 0x84) 6m53.709536734s ago: executing program 32 (id=657): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r0, &(0x7f0000001c40)={0xa, 0x4e20, 0x52, @private1={0xfc, 0x1, '\x00', 0x1}, 0xc113}, 0x1c) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000032c0)={0x0, @in6={{0xa, 0x4e20, 0x10001, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}}, 0x84) 3m56.435347913s ago: executing program 2 (id=1917): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x45c, 0x24, 0xd0f, 0x0, 0xfffffffd, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x45, 0x3ff, 0x10000, 0x3, 0x8, 0x4, 0xa0002, 0x5, 0x36, 0x59bc9fd6, 0x2, 0x2, 0x8000, 0x8, 0x4, 0x8, 0x6, 0x114b6000, 0xfffffffb, 0x2a70, 0xffff73cc, 0x81, 0x5, 0x0, 0xa, 0x45, 0x0, 0x8, 0x5, 0xba44, 0x3, 0x60b, 0x80000000, 0x8, 0x4, 0x5, 0x3, 0xffff, 0x3, 0xfffffff8, 0x5, 0x8, 0x1a0055ee, 0x1, 0x1, 0xffff4226, 0x7, 0x0, 0x5, 0x101, 0x4, 0x1, 0x2, 0x800, 0xf9, 0x9, 0x9, 0x2, 0x8, 0x2f, 0xfffffff8, 0x0, 0x101, 0x9, 0x7, 0x5, 0x5, 0x5, 0x0, 0x46, 0x2, 0x5, 0x3, 0x2, 0x9b58, 0x4, 0xb, 0x4be, 0xe, 0xef, 0xa, 0xcaa, 0x9fa7, 0xfffeffff, 0x38, 0x4, 0x0, 0x9, 0x44d, 0x7, 0x200, 0x8, 0x401, 0x7, 0x45, 0x3, 0x9, 0x0, 0x7, 0x6, 0x9, 0x3, 0x7, 0x4, 0x6, 0x7, 0x8002, 0x7, 0x7, 0x7, 0xc3c, 0x3, 0x28000000, 0x8, 0x30c7, 0xfad, 0x7, 0x8, 0x0, 0x5, 0x10, 0x400, 0xa97, 0x4, 0x422dd3f4, 0x4, 0x8, 0x2, 0x8, 0x10000, 0x8c1, 0x0, 0x45b6, 0x9, 0x864b, 0x0, 0x7, 0x9, 0x1, 0x7, 0x81, 0x3, 0x800, 0x6, 0xffffff80, 0x41, 0xc22, 0x1, 0x6, 0x9, 0x9, 0x7fffffff, 0x4, 0xfff, 0x6, 0xfffffffd, 0x7c1, 0x136, 0x6, 0x5, 0x4, 0x3ff, 0x4, 0xb, 0x2, 0x10001, 0x0, 0x5, 0x3, 0x400, 0x101, 0xffffffff, 0x1b, 0xd589, 0xffffff81, 0xffff0001, 0x4, 0x0, 0x300, 0x8, 0x60000000, 0xd39, 0x0, 0xfffffffe, 0x0, 0x81, 0x2, 0x55, 0x4000004, 0xbc6, 0x2, 0x8, 0x28a6a52, 0x1ff, 0xb, 0x7fff, 0x9, 0x2e4c20b9, 0xb, 0x2, 0x9, 0x7, 0x4, 0x8, 0x3, 0x2, 0x8, 0x3, 0x7, 0x4, 0x9, 0x8, 0xfffffffa, 0x76e8e800, 0x800, 0x400, 0x6, 0x0, 0xcc6, 0xfffffffb, 0x8000, 0xffffff00, 0x894, 0x7, 0xe, 0x6, 0x6, 0x2, 0x6, 0x10001, 0x9, 0x4, 0x8, 0x5d, 0x1000000, 0x7, 0x1, 0x8, 0x7ffffffd, 0x384, 0x9, 0x58a, 0x80000000, 0xe08, 0x0, 0x1, 0x2c821159, 0x0, 0x9, 0x7f, 0x0, 0x6, 0x0, 0x7f]}, @TCA_TBF_PARMS={0x28, 0x1, {{0x6, 0x0, 0x2, 0x8, 0x0, 0xc}, {0xff, 0x1, 0x6, 0x5, 0x5e1d, 0x8}, 0x3ff, 0xa0, 0x99}}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4000050}, 0x20008840) 3m55.753789335s ago: executing program 2 (id=1918): r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000500)=""/45, 0x2d) getdents64(r0, 0x0, 0x18) 3m55.266863546s ago: executing program 2 (id=1921): r0 = socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$getown(r0, 0x9) 3m54.746623455s ago: executing program 2 (id=1924): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)={0xb8, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x24, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @CTA_NAT_PROTO={0xc, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6}]}]}]}, 0xb8}}, 0x0) 3m54.547801471s ago: executing program 3 (id=1925): syz_emit_ethernet(0x32, &(0x7f0000000000)={@random="e90c630faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x2, 0x0, @val=0x80}}}}}}}, 0x0) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x31, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0xffff, 0xf, 0x0, @opaque="66b71b4468e24e"}}}}}, 0x0) 3m54.350683309s ago: executing program 2 (id=1926): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0xfe, 0x46c, &(0x7f0000001380)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x2c) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40106614, 0x0) 3m54.103750835s ago: executing program 3 (id=1928): r0 = memfd_create(&(0x7f0000001480)='\x01\xfd\xae.+\xa6\x8c\xf8\xff2\x199\x94S,|\x99x?Ue[\xbd\xe1!\x03[d \xa0\x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\a\x00\x00\x00,\x82\x03\xfa\x18\x8dR\xbb\xea5F\x00G\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xccV\xa6w%\x06\x19\x7f\xc3\xb3O\xe5t3\x03\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2y\xc8W\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6x\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bO\xf0\x1ab\x96\xcf\xbb\x15\xcf\xfcNm\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x00p+\x96\x1ei|n\xda\xee\x01\xae\x96*\x82*\xb8j\xfa\xaa\x14\x1f\x1d\x9f\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xean\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\xf4\xcd\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\ti\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x17&\xb9]1\x05J\x96\xf0\x84\xc1L9p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xeb;lb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\b\x00\x00\x00\x00\x00\x00\x00\xb8\x02\x00\x00\x00\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01;\xbfM.\xe3\x84\x82\x9c\x91\a\x9b\x191c\xaeLz\xe0\x04Daz\x8d\xc3\x03\xab\x8dEGC$\x00e,\x94#\xcd4\xf9\x05\x88.\x13', 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r0, 0x0) get_mempolicy(0x0, &(0x7f0000000100), 0x7e68, &(0x7f0000acc000/0x4000)=nil, 0x2) 3m53.655527369s ago: executing program 3 (id=1929): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000088fe508a8500000004000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x18) getrlimit(0x0, &(0x7f00000000c0)) 3m53.283936762s ago: executing program 2 (id=1932): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 3m53.210870569s ago: executing program 3 (id=1933): syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x474, &(0x7f00000004c0)="$eJzs3EtsG0UfAPD/rvNo+viSr5RHSwuBgqh4JE36oAcuIJA4gIQEhyJOIUmrUrdBTZBoVUHhUI6oEnfEEYk7Eie4IOCAkLjCHVWqql5aOBmtvZs6jp06tRu3+PeT1p7ZXWfm79mxxzN2Auhb49lNErE1Iv6IiNFaduUJ47W7G9fOz/597fxsEpXKm1eT6nnXr52fLU4tHrellqlUIoaz5HCTci++EzFTLs+fyfOTS6fen1w8e+65E6dmjs8fnz89feTIwQN7hg5PH+oovjS/z+K6vuujhd07X3370uuzRy+9+/M3WX235sfr47gtWbQNxmvPbqNHs5snOyrsrvJrdrOtbkcy0PrkiQ2oEO0rRUTWXIPV/j8apRhZPjYar3za08oBd1SlUqk0e3/OXagA/2FJ9LoGQG8Ub/TZ599i26Chx13hyou1D0BZ3DfyrXZkYHnuYLDh8203jUfE0Qv/fJlt0Y15CACAW/g+G/8822z8l8YDdef9L19DGYuI/0fE9oi4LyJ2RMT9EdVzH4yIh9ZZfuMKyerxT3r5tgJrUzb+eyFf21o5/itGfzFWynPbqvEPJsdOlOf358/JvhgczvJTa5Txw8u/f16kNzUcqx//ZVtWfjEWzOtxeaBhgm5uZmmm07gLVz6J2DXQLP4kimWcJCJ2RsSu2yzjxNNf72517Nbxr2GNdaZ2Vb6KeKrW/hdiRfw3myppuT459fzh6UOTm6I8v3+yuCpW++W3i2+0Kr+j+Lsga//NTa//5VXgsWRTxOLZcyer67WL6y/j4p+f1fXpFavLWfzptxHrvv6Hkreq6aF834czS0tnpiKGktdW75+++dgiX5yfxb9vb/P+v72uxg9HRHYR74mIR/JF3KztHouIxyNi7xrx//TSE++1Oraq/UeK+NeYle+iLP65W7V/1Lf/+hOlkz9+13b8Tdv/YDW1L9/TzutfuxXs5LkDAACAe0Va/Q58kk4sp9N0YqL2Hf4dsTktLywuPXNs4YPTc7Xvyo/FYFrMdI3WzYdO5XPDRX66IX8gnzf+ojRSzU/MLpTneh089LktLfp/5q9Sr2sH3HFdWEcD7lH6P/Qv/R/6l/4P/Uv/h/7VrP9/3IN6ABvP+z/0L/0f+pf+D/1L/4e+1PK38WlHP/nvcaL43wkd/J2rvY+i48TInSwi0t4H2BeJgU4u43YSw00P9fiFCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEv+DQAA//9L2OJW") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000240)=ANY=[]) 3m52.545102157s ago: executing program 3 (id=1935): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="6673796e635f6d6f64653d706f7369782c6e6f696e6c696e655f646174612c6469736361726400aa19fd46b492dc6cf59d696e6c696e655f64656e7472792c00"], 0x1, 0x54f3, &(0x7f000000ab40)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020) 3m44.400780435s ago: executing program 3 (id=1947): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000040)={0x9c, r1, 0xa29, 0x1, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x74, 0x8, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4f}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x42}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}]}]}, 0x9c}}, 0x0) 3m37.896429401s ago: executing program 33 (id=1932): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) 3m29.19413763s ago: executing program 34 (id=1947): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000040)={0x9c, r1, 0xa29, 0x1, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x74, 0x8, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x4}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4f}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x80000001, @dev={0xfe, 0x80, '\x00', 0x1e}, 0x42}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}]}]}, 0x9c}}, 0x0) 2m42.496811095s ago: executing program 0 (id=2196): unshare(0x2c020400) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) fadvise64(r0, 0x0, 0x0, 0x5) 2m41.753090277s ago: executing program 0 (id=2201): r0 = socket$netlink(0x10, 0x3, 0x8000000004) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a067fbc4580000540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 2m41.480760617s ago: executing program 1 (id=2203): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}}, {{@in=@private=0xa010102, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) 2m41.289544453s ago: executing program 0 (id=2205): r0 = socket$inet6(0xa, 0x80803, 0x87) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x2, 0x7, @local, 0x7}, 0x1c) write$binfmt_script(r0, 0x0, 0x0) 2m41.01568263s ago: executing program 1 (id=2206): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x9762, 0xfffffffffffe}}}, 0x28) ioctl$FS_IOC_SETFLAGS(r0, 0xc0606610, &(0x7f0000000040)=0x60) 2m40.797215955s ago: executing program 0 (id=2209): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000040)=0x1, 0x4) 2m40.471750696s ago: executing program 1 (id=2210): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, 0x0, 0x0) 2m40.429670685s ago: executing program 0 (id=2212): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000680)={0x13, 0x10, 0x10f, {0x0, r1, 0x2}}, 0x18) 2m40.066068127s ago: executing program 1 (id=2214): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x94, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x80, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x2, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000001300)={0x0, 0x22, 0x5, {[@global=@item_012={0x2, 0x1, 0x3, "e857"}, @global=@item_012={0x1, 0x1, 0x4, ','}]}}, 0x0}, 0x0) 2m40.004159176s ago: executing program 0 (id=2215): r0 = inotify_init() r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x10000008}) 2m39.857303797s ago: executing program 6 (id=2217): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100) 2m39.643728325s ago: executing program 4 (id=2218): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x4000) 2m39.569456277s ago: executing program 6 (id=2219): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_PMSR_ATTR_PEERS={0x30, 0xe, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1716}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b={0x8, 0x2, 0x11, 0x0, 0x0, 0x7}}]}]}]}, 0x44}}, 0x0) 2m39.323743035s ago: executing program 4 (id=2220): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000200)={{&(0x7f0000b57000/0x3000)=nil, 0x3000}, 0x4}) 2m39.254996567s ago: executing program 6 (id=2221): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e20}, 0x15) connect$unix(r0, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x15) 2m39.055788083s ago: executing program 4 (id=2222): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000240)={0x3, @null, 0xee00}) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @null}) 2m38.893671919s ago: executing program 6 (id=2223): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b70300001b0000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b5090500000000007baaf0ff00000000bda804000000000007080000f8ffffffbfa000000000000007000000f0ffffffb70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b6080000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m38.69565441s ago: executing program 7 (id=2224): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000069000010000000000100000018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb702000008000000b70300000040000085000000cb00000095"], &(0x7f0000000240)='syzkaller\x00', 0x9, 0xfe3, &(0x7f0000001e00)=""/4067, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m38.640344811s ago: executing program 4 (id=2225): syz_open_dev$sndpcmc(&(0x7f0000000080), 0xb, 0x2) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) 2m38.43671545s ago: executing program 6 (id=2226): r0 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) sendmsg$can_bcm(r0, &(0x7f0000000140)={&(0x7f0000000000), 0x10, &(0x7f0000000080)={0x0}, 0x8}, 0x0) 2m38.183743801s ago: executing program 7 (id=2227): r0 = socket(0x40000000015, 0x5, 0x0) bind$l2tp(r0, &(0x7f0000000e40)={0x2, 0x0, @local}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) 2m38.139240437s ago: executing program 4 (id=2228): r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x101202, 0x0) read$nci(r0, &(0x7f0000000100)=""/107, 0x6b) write$nci(r0, &(0x7f00000001c0)=ANY=[], 0x4) 2m37.953674599s ago: executing program 6 (id=2229): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x40}}, 0x20004004) 2m37.787801491s ago: executing program 7 (id=2230): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) 2m37.759110653s ago: executing program 4 (id=2231): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x59, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000140)=@ready={0x0, 0x0, 0x8, '\x00', {0x1, 0x7fff, 0x5, 0xd, 0x4}}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="0c00004e15"]) 2m37.663472487s ago: executing program 1 (id=2232): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x34, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xcbe8a338f3f4940d}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280000514"], 0x528}}, 0xc000) 2m37.431815839s ago: executing program 7 (id=2233): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6) getsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 2m37.279496721s ago: executing program 1 (id=2234): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000000006700000008003d01"], 0x1c}}, 0x0) 2m37.139942727s ago: executing program 7 (id=2235): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) readv(r0, &(0x7f00000006c0)=[{&(0x7f00000017c0)=""/4096, 0x1000}], 0x1) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040)=0x1) 2m36.607642783s ago: executing program 7 (id=2236): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./bus\x00', 0x2800004, &(0x7f0000001000)=ANY=[], 0xfd, 0x6194, &(0x7f0000004a40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) 1m28.121504812s ago: executing program 35 (id=2215): r0 = inotify_init() r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x10000008}) 0s ago: executing program 36 (id=2234): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010700000000000000006700000008003d01"], 0x1c}}, 0x0) kernel console output (not intermixed with test programs): hain, 45600 per kthread [ 208.411724][ T5939] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 208.438981][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.470150][ T5939] usb 5-1: config 0 descriptor?? [ 208.511805][ T9334] loop0: detected capacity change from 0 to 1024 [ 208.586051][ T9336] loop6: detected capacity change from 0 to 256 [ 208.628569][ T5942] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 208.699722][ T9336] FAT-fs (loop6): Directory bread(block 64) failed [ 208.719652][ T9317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.731525][ T9336] FAT-fs (loop6): Directory bread(block 65) failed [ 208.744363][ T9336] FAT-fs (loop6): Directory bread(block 66) failed [ 208.754020][ T9317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.757015][ T9336] FAT-fs (loop6): Directory bread(block 67) failed [ 208.778439][ T9336] FAT-fs (loop6): Directory bread(block 68) failed [ 208.781475][ T5939] [drm] vendor descriptor length:6 data:06 5f 01 05 00 00 00 00 00 00 00 [ 208.785136][ T9336] FAT-fs (loop6): Directory bread(block 69) failed [ 208.785241][ T9336] FAT-fs (loop6): Directory bread(block 70) failed [ 208.785280][ T9336] FAT-fs (loop6): Directory bread(block 71) failed [ 208.785359][ T9336] FAT-fs (loop6): Directory bread(block 72) failed [ 208.785396][ T9336] FAT-fs (loop6): Directory bread(block 73) failed [ 208.816187][ T9341] loop0: detected capacity change from 0 to 1024 [ 208.838535][ T5942] usb 2-1: Using ep0 maxpacket: 16 [ 208.857228][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.876178][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.894172][ T5942] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 208.895018][ T9341] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 208.914988][ T5939] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 208.927619][ T9341] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.935806][ T5942] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 209.025307][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.036218][ T5939] [drm:udl_init] *ERROR* Selecting channel failed [ 209.070417][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.114698][ T5939] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 209.130353][ T5939] [drm] Initialized udl on minor 2 [ 209.143544][ T5939] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 209.159365][ T5939] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 209.167717][ T5942] usb 2-1: config 0 descriptor?? [ 209.241790][ T5967] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 209.269989][ T5939] usb 5-1: USB disconnect, device number 10 [ 209.280641][ T5967] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 209.434611][ T30] audit: type=1326 audit(1741653590.436:2665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9353 comm="syz.3.1211" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f82cd38d169 code=0x0 [ 209.599326][ T5942] microsoft 0003:045E:07DA.0020: ignoring exceeding usage max [ 209.656128][ T5942] microsoft 0003:045E:07DA.0020: No inputs registered, leaving [ 209.690566][ T5942] microsoft 0003:045E:07DA.0020: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 209.735989][ T5942] microsoft 0003:045E:07DA.0020: no inputs found [ 209.746829][ T5942] microsoft 0003:045E:07DA.0020: could not initialize ff, continuing anyway [ 209.830042][ T10] usb 2-1: USB disconnect, device number 10 [ 209.988561][ T5939] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 210.149864][ T5939] usb 1-1: config 0 has an invalid interface number: 29 but max is 0 [ 210.162751][ T5939] usb 1-1: config 0 has no interface number 0 [ 210.184193][ T5939] usb 1-1: config 0 interface 29 has no altsetting 0 [ 210.216511][ T5939] usb 1-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 210.239443][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.265623][ T5939] usb 1-1: Product: syz [ 210.281273][ T5939] usb 1-1: Manufacturer: syz [ 210.300710][ T5939] usb 1-1: SerialNumber: syz [ 210.331381][ T5939] usb 1-1: config 0 descriptor?? [ 210.571780][ T5939] peak_usb 1-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 210.791653][ T5939] peak_usb 1-1:0.29 can0: sending command failure: -22 [ 210.812035][ T9385] loop4: detected capacity change from 0 to 1024 [ 210.818754][ T5939] peak_usb 1-1:0.29 can0: sending command failure: -22 [ 210.836726][ T5939] peak_usb 1-1:0.29 can0: sending command failure: -22 [ 211.040479][ T5939] peak_usb 1-1:0.29: probe with driver peak_usb failed with error -22 [ 211.091555][ T5939] usb 1-1: USB disconnect, device number 11 [ 211.193211][ T30] audit: type=1326 audit(1741653592.186:2666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.1.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd23f8d169 code=0x7ffc0000 [ 211.240140][ T1133] hfsplus: b-tree write err: -5, ino 4 [ 211.241264][ T30] audit: type=1326 audit(1741653592.216:2667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.1.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd23f8d169 code=0x7ffc0000 [ 211.271356][ T30] audit: type=1326 audit(1741653592.226:2668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.1.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fcd23f8d169 code=0x7ffc0000 [ 211.488366][ T30] audit: type=1326 audit(1741653592.236:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.1.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd23f8d169 code=0x7ffc0000 [ 211.598657][ T30] audit: type=1326 audit(1741653592.236:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.1.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd23f8d169 code=0x7ffc0000 [ 211.707690][ T30] audit: type=1326 audit(1741653592.236:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.1.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=166 compat=0 ip=0x7fcd23f8d169 code=0x7ffc0000 [ 211.730577][ T5942] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 211.763075][ T9414] xfrm0: entered allmulticast mode [ 211.827321][ T30] audit: type=1326 audit(1741653592.296:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.1.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd23f8d169 code=0x7ffc0000 [ 211.891991][ T30] audit: type=1326 audit(1741653592.296:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9397 comm="syz.1.1232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd23f8d169 code=0x7ffc0000 [ 211.970486][ T5942] usb 5-1: New USB device found, idVendor=0c70, idProduct=f003, bcdDevice= 0.00 [ 212.007920][ T5942] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.040743][ T5942] usb 5-1: config 0 descriptor?? [ 212.056762][ T9426] program syz.3.1246 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 212.345334][ T9434] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1250'. [ 212.383076][ T9434] unsupported nlmsg_type 40 [ 212.498596][ T5942] aquacomputer_d5next 0003:0C70:F003.0021: hidraw0: USB HID vb.51 Device [HID 0c70:f003] on usb-dummy_hcd.4-1/input0 [ 212.679796][ T5942] usb 5-1: USB disconnect, device number 11 [ 213.004393][ T9449] loop6: detected capacity change from 0 to 256 [ 213.025071][ T9451] netlink: 592 bytes leftover after parsing attributes in process `syz.3.1258'. [ 213.091662][ T9449] FAT-fs (loop6): Directory bread(block 64) failed [ 213.105609][ T9449] FAT-fs (loop6): Directory bread(block 65) failed [ 213.137614][ T9416] loop0: detected capacity change from 0 to 40427 [ 213.162037][ T9449] FAT-fs (loop6): Directory bread(block 66) failed [ 213.172122][ T9416] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 213.180132][ T9449] FAT-fs (loop6): Directory bread(block 67) failed [ 213.186738][ T9449] FAT-fs (loop6): Directory bread(block 68) failed [ 213.224439][ T9449] FAT-fs (loop6): Directory bread(block 69) failed [ 213.231116][ T9416] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 213.254670][ T9449] FAT-fs (loop6): Directory bread(block 70) failed [ 213.287918][ T9449] FAT-fs (loop6): Directory bread(block 71) failed [ 213.297866][ T9416] F2FS-fs (loop0): invalid crc value [ 213.328899][ T9449] FAT-fs (loop6): Directory bread(block 72) failed [ 213.345619][ T9449] FAT-fs (loop6): Directory bread(block 73) failed [ 213.356847][ T9416] F2FS-fs (loop0): Found nat_bits in checkpoint [ 213.604959][ T9416] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 213.638735][ T9416] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 213.692549][ T9466] loop1: detected capacity change from 0 to 4096 [ 213.738309][ T9466] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 214.297663][ T9452] loop2: detected capacity change from 0 to 32768 [ 214.656145][ T9488] loop3: detected capacity change from 0 to 16 [ 214.697835][ T9488] erofs (device loop3): mounted with root inode @ nid 36. [ 214.910409][ T5967] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 214.971325][ T9468] loop4: detected capacity change from 0 to 32768 [ 215.014513][ T9493] loop3: detected capacity change from 0 to 16 [ 215.050353][ T9468] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 215.066712][ T9493] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 215.078463][ T5967] usb 7-1: Using ep0 maxpacket: 16 [ 215.097631][ T5967] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.150093][ T5967] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.196216][ T5967] usb 7-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 215.231296][ T5967] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.274042][ T9468] XFS (loop4): Ending clean mount [ 215.287356][ T5967] usb 7-1: config 0 descriptor?? [ 215.301885][ T9468] XFS (loop4): Quotacheck needed: Please wait. [ 215.409102][ T9468] XFS (loop4): Quotacheck: Done. [ 215.449665][ T9509] loop3: detected capacity change from 0 to 8 [ 215.518117][ T9509] SQUASHFS error: lzo decompression failed, data probably corrupt [ 215.596946][ T9509] SQUASHFS error: Failed to read block 0x4ef: -5 [ 215.626905][ T9514] loop0: detected capacity change from 0 to 256 [ 215.636891][ T5829] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 215.649730][ T9512] SQUASHFS error: Unable to read metadata cache entry [4ed] [ 215.657054][ T9512] SQUASHFS error: Unable to read inode 0x500a7 [ 215.661673][ T9514] exfat: Deprecated parameter 'utf8' [ 215.689484][ T9514] exfat: Deprecated parameter 'utf8' [ 215.698498][ T9509] SQUASHFS error: Unable to read metadata cache entry [4ed] [ 215.741910][ T5967] hid-alps 0003:044E:120C.0022: unknown main item tag 0x0 [ 215.751744][ T9509] SQUASHFS error: Unable to read inode 0x50087 [ 215.769447][ T5967] hid-alps 0003:044E:120C.0022: unknown main item tag 0x0 [ 215.783571][ T5967] hid-alps 0003:044E:120C.0022: unknown main item tag 0x0 [ 215.837764][ T9514] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 215.845274][ T5967] hid-alps 0003:044E:120C.0022: unknown main item tag 0x0 [ 215.897444][ T5967] hid-alps 0003:044E:120C.0022: unknown main item tag 0x0 [ 215.941678][ T5967] hid-alps 0003:044E:120C.0022: hidraw0: USB HID v0.00 Device [HID 044e:120c] on usb-dummy_hcd.6-1/input0 [ 215.994586][ T5967] usb 7-1: USB disconnect, device number 6 [ 216.040854][ T30] audit: type=1326 audit(1741653597.046:2674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9517 comm="syz.1.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd23f8d169 code=0x7ffc0000 [ 216.051412][ T55] Bluetooth: hci5: unexpected event for opcode 0x1001 [ 216.128070][ T30] audit: type=1326 audit(1741653597.046:2675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9517 comm="syz.1.1286" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd23f8d169 code=0x7ffc0000 [ 216.370912][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1291'. [ 216.506015][ T9526] loop1: detected capacity change from 0 to 2048 [ 216.605379][ T9537] loop3: detected capacity change from 0 to 512 [ 216.610780][ T9526] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.770616][ T9537] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1294: bg 0: block 248: padding at end of block bitmap is not set [ 216.806076][ T9548] tipc: Started in network mode [ 216.811125][ T9548] tipc: Node identity , cluster identity 4711 [ 216.817215][ T9548] tipc: Failed to obtain node identity [ 216.823536][ T9548] tipc: Enabling of bearer rejected, failed to enable media [ 216.870038][ T9537] __quota_error: 3 callbacks suppressed [ 216.870056][ T9537] Quota error (device loop3): write_blk: dquota write failed [ 216.948557][ T9537] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 216.977030][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.988119][ T9537] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.1294: Failed to acquire dquot type 1 [ 217.063195][ T9537] EXT4-fs (loop3): 1 truncate cleaned up [ 217.126130][ T9537] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.161062][ T9537] ext4 filesystem being mounted at /228/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.238399][ T5895] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 217.408326][ T5895] usb 7-1: Using ep0 maxpacket: 16 [ 217.427526][ T5895] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.477055][ T5895] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.498519][ T5895] usb 7-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.00 [ 217.529661][ T5895] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.567400][ T5895] usb 7-1: config 0 descriptor?? [ 217.624000][ T9567] loop1: detected capacity change from 0 to 2048 [ 217.633027][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.644146][ T9567] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=3932051, location=3932051 [ 217.690730][ T9567] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 217.875080][ T9527] loop0: detected capacity change from 0 to 40427 [ 217.915700][ T9527] F2FS-fs (loop0): Invalid log blocks per segment (4278190089) [ 217.953884][ T9527] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 217.980681][ T9527] F2FS-fs (loop0): invalid crc value [ 218.035634][ T9527] F2FS-fs (loop0): Found nat_bits in checkpoint [ 218.042305][ T5895] wacom 0003:056A:00E5.0023: hidraw0: USB HID v0.00 Device [HID 056a:00e5] on usb-dummy_hcd.6-1/input0 [ 218.090693][ T9580] loop1: detected capacity change from 0 to 1024 [ 218.133105][ T9582] loop3: detected capacity change from 0 to 1024 [ 218.191875][ T9580] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.227523][ T5895] usb 7-1: USB disconnect, device number 7 [ 218.305240][ T9527] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 218.331229][ T9527] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 218.339994][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.597631][ T9593] netlink: 'syz.3.1314': attribute type 61 has an invalid length. [ 219.154934][ T9608] loop2: detected capacity change from 0 to 4096 [ 219.167937][ T9614] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1324'. [ 219.258397][ T9617] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 219.286992][ T9616] loop4: detected capacity change from 0 to 1024 [ 219.397991][ T9616] hfsplus: bad catalog entry type [ 219.665133][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1330'. [ 220.081711][ T9634] vivid-000: disconnect [ 220.102304][ T9633] vivid-000: reconnect [ 220.367379][ T9610] loop1: detected capacity change from 0 to 32768 [ 220.384975][ T5895] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 220.398012][ T9647] trusted_key: encrypted_key: key user:syz not found [ 220.428077][ T9649] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1340'. [ 220.495319][ T9610] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 220.548698][ T5895] usb 4-1: Using ep0 maxpacket: 32 [ 220.564524][ T5895] usb 4-1: too many endpoints for config 64 interface 0 altsetting 8: 33, using maximum allowed: 30 [ 220.581976][ T9610] XFS (loop1): Ending clean mount [ 220.587619][ T5895] usb 4-1: config 64 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.601103][ T5895] usb 4-1: config 64 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.615873][ T5895] usb 4-1: config 64 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 220.689730][ T5895] usb 4-1: config 64 interface 0 has no altsetting 0 [ 220.696465][ T5895] usb 4-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 220.746124][ T5833] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 220.758410][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.213314][ T5895] hid-rmi 0003:17EF:6085.0024: unknown main item tag 0x0 [ 221.237895][ T5895] hid-rmi 0003:17EF:6085.0024: unknown main item tag 0x0 [ 221.275314][ T5895] hid-rmi 0003:17EF:6085.0024: unknown main item tag 0x0 [ 221.288475][ T5895] hid-rmi 0003:17EF:6085.0024: unknown main item tag 0x0 [ 221.314683][ T5895] hid-rmi 0003:17EF:6085.0024: unknown main item tag 0x0 [ 221.373599][ T5895] hid-rmi 0003:17EF:6085.0024: hidraw0: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.3-1/input0 [ 221.447882][ T9679] loop1: detected capacity change from 0 to 1024 [ 221.456234][ T5939] usb 4-1: USB disconnect, device number 12 [ 221.566023][ T9683] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 221.807039][ T9687] loop6: detected capacity change from 0 to 1024 [ 221.875280][ T9687] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e01c, mo2=0002] [ 221.900368][ T9687] System zones: 0-1, 3-12 [ 221.923386][ T9687] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.008714][ T30] audit: type=1800 audit(1741653602.986:2679): pid=9687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1355" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 222.058100][ T9671] loop2: detected capacity change from 0 to 32768 [ 222.109126][ T9671] btrfs: Deprecated parameter 'usebackuproot' [ 222.119656][ T9671] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 222.173130][ T9671] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1347 (9671) [ 222.191161][ T7701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.242865][ T9702] loop0: detected capacity change from 0 to 128 [ 222.284525][ T9671] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 222.320814][ T9671] BTRFS info (device loop2): using crc32c (crc32c-x86_64) checksum algorithm [ 222.341313][ T9702] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 222.378347][ T9671] BTRFS info (device loop2): using free-space-tree [ 222.386617][ T9702] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.468554][ T9712] openvswitch: netlink: Message has 1255 unknown bytes. [ 222.475552][ T9712] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 222.577126][ T9702] EXT4-fs warning (device loop0): ext4_group_extend:1862: can't shrink FS - resize aborted [ 222.663478][ T53] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 222.767337][ T5827] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 222.786819][ T9671] BTRFS error (device loop2): failed to load root extent [ 222.809721][ T9671] BTRFS warning (device loop2): try to load backup roots slot 1 [ 222.892945][ T53] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 222.969179][ T9671] BTRFS warning (device loop2): couldn't read tree root [ 222.976182][ T9671] BTRFS warning (device loop2): try to load backup roots slot 2 [ 223.064459][ T1096] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 223.105942][ T9671] BTRFS warning (device loop2): couldn't read tree root [ 223.133491][ T9671] BTRFS warning (device loop2): try to load backup roots slot 3 [ 223.267445][ T9671] BTRFS info (device loop2): rebuilding free space tree [ 223.288449][ T9740] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1372'. [ 223.363835][ T9671] BTRFS info (device loop2): checking UUID tree [ 223.431995][ T9696] loop1: detected capacity change from 0 to 32768 [ 223.440059][ T9749] loop4: detected capacity change from 0 to 64 [ 223.524891][ T9696] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 223.701569][ T5830] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 223.754436][ T5895] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 223.811464][ T9696] XFS (loop1): Starting recovery (logdev: internal) [ 223.949339][ T9696] XFS (loop1): Ending recovery (logdev: internal) [ 223.951756][ T5895] usb 4-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 224.024451][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.087305][ T5895] usb 4-1: config 0 descriptor?? [ 224.310397][ T5833] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 224.769196][ T9784] netlink: 'syz.4.1390': attribute type 3 has an invalid length. [ 224.857416][ T5895] usb 4-1: string descriptor 0 read error: -71 [ 224.886131][ T5895] uclogic 0003:5543:0047.0025: failed retrieving string descriptor #200: -71 [ 224.908548][ T5895] uclogic 0003:5543:0047.0025: failed retrieving pen parameters: -71 [ 224.916643][ T5895] uclogic 0003:5543:0047.0025: failed probing pen v2 parameters: -71 [ 225.404896][ T5895] uclogic 0003:5543:0047.0025: failed probing parameters: -71 [ 225.540528][ T9794] loop1: detected capacity change from 0 to 512 [ 225.547526][ T9794] EXT4-fs: Ignoring removed nomblk_io_submit option [ 225.572923][ T5895] uclogic 0003:5543:0047.0025: probe with driver uclogic failed with error -71 [ 225.640635][ T5895] usb 4-1: USB disconnect, device number 13 [ 225.693625][ T9794] EXT4-fs (loop1): filesystem is read-only [ 225.793010][ T9794] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 225.966803][ T9794] EXT4-fs (loop1): filesystem is read-only [ 226.010494][ T9794] EXT4-fs (loop1): orphan cleanup on readonly fs [ 226.029341][ T9794] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1388: bg 0: block 64: padding at end of block bitmap is not set [ 226.101678][ T9794] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6550: Corrupt filesystem [ 226.187163][ T9794] EXT4-fs (loop1): 1 orphan inode deleted [ 226.193184][ T5939] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 226.247240][ T9794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 226.355431][ T9776] loop2: detected capacity change from 0 to 32768 [ 226.419632][ T5939] usb 5-1: config 0 interface 0 has no altsetting 0 [ 226.450700][ T9810] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 226.467320][ T5939] usb 5-1: New USB device found, idVendor=056a, idProduct=00b0, bcdDevice= 0.00 [ 226.467354][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.547657][ T5939] usb 5-1: config 0 descriptor?? [ 226.604099][ T9776] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 226.760736][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.821946][ T9776] XFS (loop2): Ending clean mount [ 227.001103][ T5939] wacom 0003:056A:00B0.0026: Unknown device_type for 'HID 056a:00b0'. Assuming pen. [ 227.109147][ T5939] wacom 0003:056A:00B0.0026: hidraw0: USB HID v0.00 Device [HID 056a:00b0] on usb-dummy_hcd.4-1/input0 [ 227.134592][ T5830] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 227.188077][ T5939] input: Wacom Intuos3 4x5 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00B0.0026/input/input21 [ 227.368315][ T5939] usb 5-1: USB disconnect, device number 12 [ 228.191247][ T9841] loop0: detected capacity change from 0 to 128 [ 228.289656][ T9841] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 228.547202][ T9845] loop4: detected capacity change from 0 to 512 [ 228.607972][ T9845] ext4: Invalid gid '0x00000000ffffffff' [ 228.870927][ T5827] sysv_free_block: trying to free block not in datazone [ 228.978337][ T5827] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 229.587860][ T9867] loop3: detected capacity change from 0 to 64 [ 231.138991][ T9890] loop3: detected capacity change from 0 to 1024 [ 231.178246][ T9890] EXT4-fs: Ignoring removed nobh option [ 231.230670][ T9891] loop1: detected capacity change from 0 to 2048 [ 231.300846][ T9891] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 231.397128][ T9890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.428160][ T9891] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 231.557489][ T9891] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 231.949326][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.290654][ T9865] loop6: detected capacity change from 0 to 32768 [ 232.356778][ T9906] loop1: detected capacity change from 0 to 64 [ 232.647453][ T9909] loop2: detected capacity change from 0 to 128 [ 232.887828][ T9913] loop3: detected capacity change from 0 to 2048 [ 232.898376][ T5939] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 233.077587][ T9913] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.125909][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9 [ 233.184057][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.286622][ T30] audit: type=1800 audit(1741653614.276:2680): pid=9913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1440" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 233.333776][ T5939] usb 5-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 233.402503][ T5939] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.503074][ T5939] usb 5-1: config 0 descriptor?? [ 233.622386][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.949898][ T5939] sony 0003:054C:0268.0027: unbalanced collection at end of report description [ 234.053582][ T5939] sony 0003:054C:0268.0027: parse failed [ 234.111682][ T5939] sony 0003:054C:0268.0027: probe with driver sony failed with error -22 [ 234.198455][ T5939] usb 5-1: USB disconnect, device number 13 [ 234.233970][ T9929] netlink: 'syz.6.1445': attribute type 1 has an invalid length. [ 234.312810][ T9929] netlink: 240 bytes leftover after parsing attributes in process `syz.6.1445'. [ 235.369362][ T9945] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1456'. [ 235.428349][ T9945] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1456'. [ 235.568216][ C0] sched: DL replenish lagged too much [ 236.026551][ T9956] loop0: detected capacity change from 0 to 1024 [ 236.146089][ T9956] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.266274][ T9956] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.593445][ T9965] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1463'. [ 236.694827][ T9965] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1463'. [ 236.755505][ T9967] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1464'. [ 236.771593][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.848308][ T9967] nbd: illegal input index 16744192 [ 236.914872][ T9970] tipc: Started in network mode [ 236.983763][ T9970] tipc: Node identity , cluster identity 4711 [ 237.377553][ T9975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1468'. [ 237.768553][ T5939] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 237.948351][ T5939] usb 4-1: Using ep0 maxpacket: 16 [ 237.998394][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.070578][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.192471][ T5939] usb 4-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00 [ 238.288085][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.393595][ T5939] usb 4-1: config 0 descriptor?? [ 238.876198][ T5939] kye 0003:0458:4018.0028: unknown main item tag 0x0 [ 238.921886][ T5939] kye 0003:0458:4018.0028: unknown main item tag 0x0 [ 238.961224][ T5939] kye 0003:0458:4018.0028: unknown main item tag 0x0 [ 239.001909][ T5939] kye 0003:0458:4018.0028: unknown main item tag 0x0 [ 239.038330][ T5939] kye 0003:0458:4018.0028: unknown main item tag 0x0 [ 239.113892][ T5939] kye 0003:0458:4018.0028: hidraw0: USB HID vff.fe Device [HID 0458:4018] on usb-dummy_hcd.3-1/input0 [ 239.228586][ T5939] usb 4-1: USB disconnect, device number 14 [ 240.824775][T10033] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1496'. [ 240.883540][ T9992] loop6: detected capacity change from 0 to 32768 [ 241.297549][T10039] openvswitch: netlink: nsh attribute has 65524 unknown bytes. [ 241.380723][T10039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 242.143383][T10056] loop1: detected capacity change from 0 to 512 [ 242.286069][T10056] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 242.471956][T10056] EXT4-fs error (device loop1): ext4_map_blocks:671: inode #2: block 3: comm syz.1.1507: lblock 0 mapped to illegal pblock 3 (length 1) [ 242.692238][T10056] EXT4-fs warning (device loop1): dx_probe:823: inode #2: lblock 0: comm syz.1.1507: error -117 reading directory block [ 243.133099][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.521817][T10074] xt_CT: No such helper "snmp" [ 243.663006][T10083] loop1: detected capacity change from 0 to 512 [ 243.859690][T10083] EXT4-fs (loop1): 1 orphan inode deleted [ 243.945045][T10083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.049561][T10092] loop4: detected capacity change from 0 to 128 [ 244.125055][T10083] ext4 filesystem being mounted at /255/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.196254][ T1332] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 244.276969][ T1332] EXT4-fs error (device loop1): ext4_release_dquot:6950: comm kworker/u8:9: Failed to release dquot type 1 [ 244.545452][T10097] loop0: detected capacity change from 0 to 2048 [ 244.590210][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.652642][T10097] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 244.807756][T10097] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 244.978681][ T30] audit: type=1800 audit(1741653625.976:2681): pid=10097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1520" name="file1" dev="loop0" ino=1367 res=0 errno=0 [ 245.568569][T10105] loop4: detected capacity change from 0 to 64 [ 246.326237][T10084] loop2: detected capacity change from 0 to 32768 [ 246.487554][T10084] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1516 (10084) [ 246.619308][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1530'. [ 247.083811][T10126] loop1: detected capacity change from 0 to 1024 [ 247.184397][T10126] EXT4-fs: Ignoring removed orlov option [ 247.315698][T10126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 247.507319][T10125] loop4: detected capacity change from 0 to 4096 [ 247.599086][T10125] ntfs3: Unknown parameter 'sys_i÷!ü_able' [ 247.875708][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.994434][T10148] loop4: detected capacity change from 0 to 4096 [ 249.343876][T10148] ntfs3(loop4): mft corrupted [ 249.403729][T10148] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 250.059330][T10166] loop0: detected capacity change from 0 to 1024 [ 250.135019][T10166] EXT4-fs: inline encryption not supported [ 250.213987][T10166] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 250.407252][T10166] EXT4-fs error (device loop0): ext4_map_blocks:705: inode #3: block 1: comm syz.0.1552: lblock 1 mapped to illegal pblock 1 (length 1) [ 250.568296][T10166] EXT4-fs (loop0): Remounting filesystem read-only [ 250.612219][T10166] Quota error (device loop0): write_blk: dquota write failed [ 250.669055][T10166] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 250.669238][T10166] EXT4-fs (loop0): 1 orphan inode deleted [ 250.670185][T10166] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.002917][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.058570][ T5939] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 251.229031][ T5939] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 251.266409][ T5939] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.367756][ T5939] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 251.435580][ T5939] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 251.479058][T10152] loop6: detected capacity change from 0 to 32768 [ 251.512405][ T5939] usb 5-1: Manufacturer: syz [ 251.579529][ T5939] usb 5-1: config 0 descriptor?? [ 252.009239][ T5939] rc_core: IR keymap rc-hauppauge not found [ 252.078431][ T5939] Registered IR keymap rc-empty [ 252.107182][ T5939] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 252.139343][ T47] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 252.218136][ T5939] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input24 [ 252.418512][ T47] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 252.470010][ T5939] usb 5-1: USB disconnect, device number 14 [ 252.486224][ T47] usb 4-1: config 0 has no interface number 0 [ 252.536856][ T47] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 252.670071][ T47] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 252.781296][ T47] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 252.851430][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.937607][ T47] usb 4-1: config 0 descriptor?? [ 253.003644][T10197] veth2: entered allmulticast mode [ 253.012722][T10186] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 253.122202][ T47] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 253.428219][ C1] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 253.443578][ T5942] usb 4-1: USB disconnect, device number 15 [ 255.065636][T10195] loop0: detected capacity change from 0 to 32768 [ 255.143952][T10195] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1565 (10195) [ 255.285323][T10223] loop2: detected capacity change from 0 to 4096 [ 255.356083][T10195] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 255.446785][T10223] NILFS (loop2): invalid segment: Checksum error in segment payload [ 255.469571][T10195] BTRFS info (device loop0): using sha256 (sha256-ni) checksum algorithm [ 255.528311][T10223] NILFS (loop2): trying rollback from an earlier position [ 255.548372][T10195] BTRFS info (device loop0): using free-space-tree [ 255.636525][T10223] NILFS (loop2): recovery complete [ 255.796487][T10236] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 255.810736][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.853846][T10195] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 255.874135][T10195] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 255.935017][T10195] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 255.993268][T10195] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 256.003021][ T5942] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 256.094073][T10195] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 256.094448][T10195] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 256.177702][T10195] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 256.238064][T10195] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 256.308679][ T5942] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.423766][T10195] BTRFS error (device loop0): open_ctree failed: -12 [ 256.470793][ T5942] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 256.551519][ T5942] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.652700][ T5942] usb 2-1: config 0 descriptor?? [ 257.080926][ T5942] hid (null): global environment stack underflow [ 257.139370][ T5942] uclogic 0003:28BD:0071.0029: interface is invalid, ignoring [ 257.325149][ T5942] usb 2-1: USB disconnect, device number 11 [ 257.364699][T10251] loop4: detected capacity change from 0 to 2048 [ 257.558802][T10252] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 257.825103][T10225] loop6: detected capacity change from 0 to 32768 [ 258.078615][ T5942] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 258.278632][ T5942] usb 1-1: Using ep0 maxpacket: 8 [ 258.306832][ T5942] usb 1-1: too many configurations: 10, using maximum allowed: 8 [ 258.569423][ T5942] usb 1-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 258.578852][ T5942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.659816][ T5942] usb 1-1: Product: syz [ 258.664157][ T5942] usb 1-1: Manufacturer: syz [ 258.715410][ T5942] usb 1-1: SerialNumber: syz [ 258.770132][ T5942] usb 1-1: config 0 descriptor?? [ 258.828280][ T5942] radio-usb-si4713 1-1:0.0: Si4713 development board discovered: (10C4:8244) [ 259.530679][ T5942] radio-usb-si4713 1-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 259.560931][ T5942] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 259.608309][ T5942] usb 1-1: USB disconnect, device number 12 [ 259.662310][T10268] loop6: detected capacity change from 0 to 1024 [ 259.877329][T10272] netlink: 1264 bytes leftover after parsing attributes in process `syz.4.1592'. [ 260.024024][T10272] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 260.053961][T10254] loop2: detected capacity change from 0 to 32768 [ 260.109950][T10274] loop1: detected capacity change from 0 to 64 [ 260.136678][T10254] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1584 (10254) [ 260.421995][T10254] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 260.611251][T10254] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 260.656616][T10254] BTRFS info (device loop2): using free-space-tree [ 260.750635][T10254] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 260.750945][T10254] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 260.814340][T10254] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 260.938694][T10254] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 261.013881][T10254] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 261.101547][T10254] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 261.186814][T10264] loop3: detected capacity change from 0 to 32768 [ 261.239030][T10264] btrfs: Deprecated parameter 'usebackuproot' [ 261.256916][T10264] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 261.283971][T10254] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 261.284253][T10254] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 261.373341][T10264] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1589 (10264) [ 261.398583][T10254] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 261.630084][T10254] BTRFS error (device loop2): open_ctree failed: -12 [ 261.668403][T10264] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 261.738420][T10264] BTRFS info (device loop3): using crc32c (crc32c-x86_64) checksum algorithm [ 261.828709][T10264] BTRFS info (device loop3): using free-space-tree [ 261.888669][T10264] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 261.888962][T10264] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 261.989229][T10264] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 262.062637][T10264] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 262.129383][T10315] loop1: detected capacity change from 0 to 16 [ 262.169490][T10264] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 262.169751][T10264] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 262.240550][T10315] erofs (device loop1): mounted with root inode @ nid 36. [ 262.267983][T10264] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 262.268403][T10264] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 262.357334][T10264] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 262.466447][T10264] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 262.562666][T10264] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 262.641624][T10264] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 262.710802][T10264] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 262.819257][T10264] BTRFS error (device loop3): open_ctree failed: -12 [ 263.264737][T10339] netlink: 'syz.2.1605': attribute type 33 has an invalid length. [ 263.306356][T10339] netlink: 'syz.2.1605': attribute type 3 has an invalid length. [ 263.327601][T10343] loop0: detected capacity change from 0 to 512 [ 263.388576][T10339] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.1605'. [ 263.398925][T10343] EXT4-fs: Ignoring removed i_version option [ 263.422929][T10343] EXT4-fs: Ignoring removed nobh option [ 263.488293][T10343] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 263.603770][T10343] EXT4-fs (loop0): 1 truncate cleaned up [ 263.639237][T10343] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.795285][ T30] audit: type=1326 audit(1741653644.776:2682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.4.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11dc78d169 code=0x50000 [ 263.885254][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.978255][ T30] audit: type=1326 audit(1741653644.776:2683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.4.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11dc78d169 code=0x50000 [ 264.025910][ T30] audit: type=1326 audit(1741653644.776:2684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.4.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11dc78d169 code=0x50000 [ 264.105059][ T30] audit: type=1326 audit(1741653644.776:2685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.4.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11dc78d169 code=0x50000 [ 264.268390][ T30] audit: type=1326 audit(1741653644.776:2686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.4.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11dc78d169 code=0x50000 [ 264.445748][ T30] audit: type=1326 audit(1741653644.776:2687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.4.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11dc78d169 code=0x50000 [ 264.556128][T10354] loop2: detected capacity change from 0 to 4096 [ 264.604078][ T30] audit: type=1326 audit(1741653644.776:2688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.4.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11dc78d169 code=0x50000 [ 264.761160][T10354] ntfs3(loop2): Failed to load $BadClus (-22). [ 264.808083][ T30] audit: type=1326 audit(1741653644.776:2689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.4.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11dc78d169 code=0x50000 [ 264.967881][ T30] audit: type=1326 audit(1741653644.776:2690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.4.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11dc78d169 code=0x50000 [ 265.152763][ T30] audit: type=1326 audit(1741653644.776:2691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10346 comm="syz.4.1614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11dc78d169 code=0x50000 [ 266.049713][T10380] loop2: detected capacity change from 0 to 1024 [ 266.091108][T10380] EXT4-fs: Ignoring removed orlov option [ 266.117825][T10380] EXT4-fs: Ignoring removed nomblk_io_submit option [ 266.351985][T10380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.732515][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.755300][T10393] loop0: detected capacity change from 0 to 256 [ 267.253559][T10396] loop1: detected capacity change from 0 to 1024 [ 267.267620][T10399] loop4: detected capacity change from 0 to 64 [ 267.317373][T10369] loop3: detected capacity change from 0 to 32768 [ 267.587314][T10369] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 267.620790][T10396] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.817737][T10417] loop2: detected capacity change from 0 to 1024 [ 268.109871][T10369] XFS (loop3): Ending clean mount [ 268.178932][ T1133] hfsplus: b-tree write err: -5, ino 8 [ 268.230806][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.274463][ T5828] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 268.776844][ C1] sd 0:0:1:0: [sda] tag#3814 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 268.787336][ C1] sd 0:0:1:0: [sda] tag#3814 CDB: Read(6) 08 00 0c 6a 08 48 [ 269.496629][T10445] loop4: detected capacity change from 0 to 1024 [ 269.558426][ T5939] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 269.573714][T10445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.593965][T10445] EXT4-fs error (device loop4): ext4_lookup:1805: inode #2: comm syz.4.1655: bad inode number: 12 [ 269.607475][T10445] EXT4-fs (loop4): Remounting filesystem read-only [ 269.614796][ T47] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 269.674533][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.727583][ T5939] usb 3-1: Using ep0 maxpacket: 32 [ 269.734919][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.745986][ T5942] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 269.773689][ T5939] usb 3-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.00 [ 269.783056][ T47] usb 1-1: Using ep0 maxpacket: 16 [ 269.794582][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.808327][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.822417][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.854663][ T5939] usb 3-1: config 0 descriptor?? [ 269.863753][ T47] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 269.929169][ T5942] usb 7-1: Using ep0 maxpacket: 16 [ 269.994610][ T47] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 270.007471][ T5942] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 270.107621][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.137628][ T5942] usb 7-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 270.175502][ T47] usb 1-1: config 0 descriptor?? [ 270.221646][ T5942] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.264806][ T5942] usb 7-1: config 0 descriptor?? [ 270.371450][ T5939] macally 0003:060B:0001.002A: unknown main item tag 0x0 [ 270.398302][ T5939] macally 0003:060B:0001.002A: unknown main item tag 0x0 [ 270.420804][ T5939] macally 0003:060B:0001.002A: unknown main item tag 0x0 [ 270.436057][ T5939] macally 0003:060B:0001.002A: unknown main item tag 0x0 [ 270.478017][ T5939] macally 0003:060B:0001.002A: hidraw0: USB HID v0.00 Device [HID 060b:0001] on usb-dummy_hcd.2-1/input0 [ 270.588719][ T5939] usb 3-1: USB disconnect, device number 8 [ 270.706289][ T47] input: HID 0955:7214 Haptics as /devices/virtual/input/input25 [ 270.803462][ T5942] logitech 0003:046D:C24F.002C: ignoring exceeding usage max [ 270.844448][ T47] shield 0003:0955:7214.002B: Registered Thunderstrike controller [ 270.908856][ T5942] logitech 0003:046D:C24F.002C: hidraw0: USB HID v10.00 Device [HID 046d:c24f] on usb-dummy_hcd.6-1/input0 [ 270.945841][ T47] shield 0003:0955:7214.002B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 271.039573][ T5942] logitech 0003:046D:C24F.002C: no inputs found [ 271.106951][ T5942] usb 7-1: USB disconnect, device number 8 [ 271.137658][ T47] usb 1-1: USB disconnect, device number 13 [ 271.246839][ T5939] shield 0003:0955:7214.002B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 271.345794][ T5939] shield 0003:0955:7214.002B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 271.372386][T10460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1645'. [ 271.457877][ T5939] shield 0003:0955:7214.002B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 271.541104][ T5939] shield 0003:0955:7214.002B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 271.701573][T10462] loop1: detected capacity change from 0 to 2048 [ 271.792688][T10462] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 271.891608][T10456] udevd[10456]: incorrect nilfs2 checksum on /dev/loop1 [ 271.938358][T10468] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 272.614434][T10478] loop0: detected capacity change from 0 to 512 [ 272.762962][T10478] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.889270][T10478] ext4 filesystem being mounted at /287/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.074253][T10482] loop6: detected capacity change from 0 to 4096 [ 273.186290][T10489] loop1: detected capacity change from 0 to 1024 [ 273.305648][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.316747][T10489] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 273.518314][ T5939] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 273.629804][ T5833] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.693997][ T5939] usb 4-1: Using ep0 maxpacket: 32 [ 273.726395][ T5939] usb 4-1: unable to get BOS descriptor or descriptor too short [ 273.744836][ T5939] usb 4-1: config 128 has an invalid interface number: 127 but max is 3 [ 273.768362][ T5939] usb 4-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 273.790736][ T47] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 273.811028][ T5939] usb 4-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 273.838513][ T5939] usb 4-1: config 128 has no interface number 0 [ 273.858347][ T5939] usb 4-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 1828, setting to 1024 [ 273.899491][ T5939] usb 4-1: config 128 interface 127 has no altsetting 0 [ 273.942456][ T5939] usb 4-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 273.962371][ T47] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.988778][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.007693][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.031718][ T5939] usb 4-1: Product: syz [ 274.035901][ T5939] usb 4-1: Manufacturer: syz [ 274.053934][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.073395][ T5939] usb 4-1: SerialNumber: syz [ 274.093389][ T47] usb 3-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 274.105230][T10491] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 274.153549][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.190277][ T47] usb 3-1: config 0 descriptor?? [ 274.439433][T10482] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 274.492068][T10482] ntfs3(loop6): Failed to load $Extend (-22). [ 274.593335][T10482] ntfs3(loop6): Failed to initialize $Extend. [ 274.697092][ T47] aquacomputer_d5next 0003:0C70:F014.002D: unknown main item tag 0x0 [ 274.729045][T10506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1676'. [ 274.759040][T10482] netlink: 208 bytes leftover after parsing attributes in process `syz.6.1671'. [ 274.770099][ T5939] usb 4-1: USB disconnect, device number 16 [ 274.816090][T10506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1676'. [ 274.867356][ T47] aquacomputer_d5next 0003:0C70:F014.002D: hidraw0: USB HID v1.01 Device [HID 0c70:f014] on usb-dummy_hcd.2-1/input0 [ 275.059891][ T47] usb 3-1: USB disconnect, device number 9 [ 275.095198][T10456] udevd[10456]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 275.255269][T10509] loop4: detected capacity change from 0 to 512 [ 275.371546][T10509] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 275.496103][T10509] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002] [ 275.598002][T10509] System zones: 1-12 [ 275.648391][T10509] EXT4-fs (loop4): orphan cleanup on readonly fs [ 275.673018][ T47] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 275.719464][T10509] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 275.763192][ T47] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 275.818348][ T47] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 275.826279][T10509] EXT4-fs (loop4): 1 truncate cleaned up [ 275.864036][T10509] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 275.896788][ T47] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 275.953881][ T47] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 276.023713][ T47] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 276.084589][ T47] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 276.141352][ T47] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 276.224373][T10516] loop6: detected capacity change from 0 to 8192 [ 276.233240][ T47] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 276.277733][ T47] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 276.336611][ T47] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 276.353031][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.417432][ T47] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 276.438516][ T5939] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 276.476844][T10525] loop0: detected capacity change from 0 to 512 [ 276.491639][ T47] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 276.543461][T10525] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 276.561128][ T47] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 276.616208][ T47] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 276.642167][ T5939] usb 4-1: config 7 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 206, setting to 64 [ 276.653306][T10525] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002] [ 276.698367][ T47] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 276.717101][ T5939] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 276.764177][T10525] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2240: inode #15: comm syz.0.1688: corrupted in-inode xattr: e_value size too large [ 276.788267][ T47] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 276.827952][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.873351][ T47] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz0] on syz0 [ 276.883481][T10525] EXT4-fs error (device loop0): ext4_orphan_get:1394: comm syz.0.1688: couldn't read orphan inode 15 (err -117) [ 276.910673][T10522] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 276.968649][T10522] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 276.990138][T10525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.170939][T10532] loop2: detected capacity change from 0 to 256 [ 277.240637][T10532] exfat: Deprecated parameter 'utf8' [ 277.245980][T10532] exfat: Deprecated parameter 'namecase' [ 277.370050][ T47] usb 4-1: USB disconnect, device number 17 [ 277.449507][T10536] loop1: detected capacity change from 0 to 256 [ 277.457563][T10532] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 277.532456][T10536] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 278.266594][T10546] erspan0: entered promiscuous mode [ 278.283020][T10546] erspan0: left promiscuous mode [ 283.404970][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.751849][ T47] hid-generic 0000:0000:0000.002F: item fetching failed at offset 0/1 [ 284.789317][ T47] hid-generic 0000:0000:0000.002F: probe with driver hid-generic failed with error -22 [ 284.818579][T10571] loop1: detected capacity change from 0 to 1764 [ 284.878006][T10576] loop6: detected capacity change from 0 to 512 [ 284.927157][T10576] EXT4-fs: Ignoring removed i_version option [ 284.977003][T10571] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 285.005344][T10576] EXT4-fs (loop6): Test dummy encryption mode enabled [ 285.041564][T10576] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 285.208418][T10576] EXT4-fs (loop6): 1 truncate cleaned up [ 285.215127][T10576] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.587135][ T7701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.830091][T10602] tipc: Started in network mode [ 286.851847][T10602] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 286.908613][T10602] tipc: Enabled bearer , priority 10 [ 286.969564][T10606] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1724'. [ 287.204889][T10608] loop6: detected capacity change from 0 to 64 [ 287.254159][T10608] hfs: filesystem is marked locked, mounting read-only. [ 287.319008][T10608] hfs: walked past end of dir [ 288.022393][ T47] tipc: Node number set to 10398378 [ 288.085470][T10612] netlink: 'syz.6.1726': attribute type 1 has an invalid length. [ 288.832066][T10627] loop4: detected capacity change from 0 to 128 [ 288.956404][T10630] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1736'. [ 288.972815][T10627] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 289.108105][T10627] ext4 filesystem being mounted at /265/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 289.487077][ T5829] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 291.268559][ T5939] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 291.468462][ T5939] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 291.524426][ T5939] usb 3-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.578409][ T5939] usb 3-1: config 0 interface 0 has no altsetting 0 [ 291.623147][ T5939] usb 3-1: New USB device found, idVendor=0403, idProduct=97c1, bcdDevice= 0.00 [ 291.674628][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.727808][ T5939] usb 3-1: config 0 descriptor?? [ 291.741267][T10641] loop1: detected capacity change from 0 to 32768 [ 291.798665][T10641] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1740 (10641) [ 291.908984][T10641] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 292.025843][T10641] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 292.113748][T10641] BTRFS info (device loop1): using free-space-tree [ 292.305270][ T5939] hid-retrode 0003:0403:97C1.0030: unbalanced delimiter at end of report description [ 292.399634][ T5939] hid-retrode 0003:0403:97C1.0030: probe with driver hid-retrode failed with error -22 [ 292.511062][ T5939] usb 3-1: USB disconnect, device number 10 [ 292.632253][T10655] loop6: detected capacity change from 0 to 32768 [ 292.709683][T10641] BTRFS error (device loop1): open_ctree failed: -4 [ 292.718020][T10655] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1747 (10655) [ 292.864606][T10655] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 292.974741][T10655] BTRFS info (device loop6): using crc32c (crc32c-x86_64) checksum algorithm [ 293.069289][T10655] BTRFS info (device loop6): disk space caching is enabled [ 293.141697][T10655] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 293.785507][T10655] BTRFS error (device loop6): open_ctree failed: -4 [ 293.820386][T10705] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1758'. [ 293.898517][T10705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1758'. [ 293.999160][T10705] netlink: 'syz.4.1758': attribute type 15 has an invalid length. [ 294.269996][ T5939] kernel write not supported for file /snd/seq (pid: 5939 comm: kworker/1:7) [ 296.838622][ T5939] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 296.989582][T10711] loop3: detected capacity change from 0 to 32768 [ 297.068317][ T5939] usb 2-1: unable to get BOS descriptor or descriptor too short [ 297.102252][ T5939] usb 2-1: not running at top speed; connect to a high speed hub [ 297.116654][T10711] (syz.3.1761,10711,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 297.201232][ T5939] usb 2-1: config 4 has an invalid interface descriptor of length 8, skipping [ 297.256905][T10711] (syz.3.1761,10711,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 297.283966][ T5939] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 297.361128][ T5939] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 297.403338][T10711] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 297.403489][T10711] (syz.3.1761,10711,1):ocfs2_initialize_super:2226 ERROR: status = -12 [ 297.507320][ T5939] usb 2-1: New USB device found, idVendor=0499, idProduct=101e, bcdDevice=ec.47 [ 297.543635][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.553200][T10711] (syz.3.1761,10711,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 297.600444][ T5939] usb 2-1: Product: syz [ 297.604649][ T5939] usb 2-1: Manufacturer: syz [ 297.652597][ T5939] usb 2-1: SerialNumber: syz [ 298.082633][ T5939] usb 2-1: USB disconnect, device number 12 [ 298.596386][T10732] loop4: detected capacity change from 0 to 32768 [ 298.858783][T10732] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/loop4": -EINTR [ 298.875359][T10752] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1778'. [ 299.381703][T10742] loop0: detected capacity change from 0 to 32768 [ 299.488333][T10742] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1776 (10742) [ 299.707914][T10742] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 299.794002][T10742] BTRFS info (device loop0): using crc32c (crc32c-x86_64) checksum algorithm [ 299.865249][T10742] BTRFS info (device loop0): disk space caching is enabled [ 299.923222][T10745] loop6: detected capacity change from 0 to 32768 [ 299.931048][T10743] loop2: detected capacity change from 0 to 32768 [ 299.950768][T10742] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 300.078143][T10743] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop2": -EINTR [ 300.099130][T10745] ocfs2: Slot 0 on device (7,6) was already allocated to this node! [ 300.116801][T10742] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 300.117110][T10742] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 300.194889][T10742] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 300.305638][T10742] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 300.330864][T10745] JBD2: journal reset failed [ 300.460770][T10742] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 300.461059][T10742] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 300.486907][T10745] (syz.6.1777,10745,1):ocfs2_journal_load:1145 ERROR: Failed to load journal! [ 300.568592][T10742] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 300.568858][T10742] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 300.610627][T10745] (syz.6.1777,10745,0):ocfs2_check_volume:2373 ERROR: ocfs2 journal load failed! -4 [ 300.644388][T10742] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 300.644646][T10742] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 300.716249][T10742] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 300.762620][T10780] loop1: detected capacity change from 0 to 256 [ 300.809810][T10742] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 300.815552][T10742] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 300.835707][T10776] loop3: detected capacity change from 0 to 1024 [ 300.895640][T10780] FAT-fs (loop1): Directory bread(block 1285) failed [ 301.041996][T10742] BTRFS error (device loop0): open_ctree failed: -12 [ 301.058352][T10780] FAT-fs (loop1): Directory bread(block 1285) failed [ 301.160447][T10776] hfsplus: xattr exists yet [ 302.667878][T10801] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1793'. [ 302.722594][T10801] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1793'. [ 302.730846][T10799] loop3: detected capacity change from 0 to 2048 [ 302.772015][T10801] netlink: 'syz.4.1793': attribute type 12 has an invalid length. [ 302.783022][T10805] loop6: detected capacity change from 0 to 128 [ 302.961196][ T5943] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 303.138995][T10799] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.198597][ T5943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.267187][ T5943] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.311896][ T5943] usb 1-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 303.362100][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.449617][ T5943] usb 1-1: config 0 descriptor?? [ 303.658391][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 304.128609][ T5943] hid-led 0003:1D34:0004.0031: probe with driver hid-led failed with error -71 [ 304.226810][ T5943] usb 1-1: USB disconnect, device number 14 [ 304.546358][T10827] netlink: 188 bytes leftover after parsing attributes in process `syz.1.1802'. [ 304.566743][T10828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.607528][T10827] netlink: 'syz.1.1802': attribute type 1 has an invalid length. [ 305.363468][T10830] loop0: detected capacity change from 0 to 1024 [ 305.488112][T10830] EXT4-fs: Ignoring removed orlov option [ 305.585845][T10830] EXT4-fs: Ignoring removed nomblk_io_submit option [ 305.739781][T10811] loop2: detected capacity change from 0 to 32768 [ 305.779408][T10830] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 305.809086][T10811] XFS: ikeep mount option is deprecated. [ 306.009471][T10849] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 306.075502][T10811] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 306.128598][T10811] XFS (loop2): AIL initialisation failed: error -12 [ 306.140341][ T30] kauditd_printk_skb: 744 callbacks suppressed [ 306.140359][ T30] audit: type=1800 audit(1741653687.146:3436): pid=10830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1804" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 306.278704][T10811] XFS (loop2): log mount failed [ 306.641030][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.976049][T10834] loop6: detected capacity change from 0 to 32768 [ 308.143290][T10871] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 308.177802][T10834] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1803 (10834) [ 308.220778][T10871] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 308.288587][T10871] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 308.354657][T10871] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 308.429455][T10871] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 308.872177][T10894] loop0: detected capacity change from 0 to 256 [ 309.301587][T10903] loop3: detected capacity change from 0 to 128 [ 309.485726][T10903] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 550, start 00050006) [ 309.519909][ T5943] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 309.593071][T10903] FAT-fs (loop3): Filesystem has been set read-only [ 309.638725][ T55] Bluetooth: hci0: command 0x0c1a tx timeout [ 309.768567][ T5943] usb 7-1: Using ep0 maxpacket: 32 [ 309.833439][ T5943] usb 7-1: config 0 interface 0 altsetting 18 endpoint 0x82 has invalid wMaxPacketSize 0 [ 309.918334][ T5943] usb 7-1: config 0 interface 0 altsetting 18 bulk endpoint 0x82 has invalid maxpacket 0 [ 310.038668][ T5943] usb 7-1: config 0 interface 0 has no altsetting 0 [ 310.192191][ T5943] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 310.278771][ T55] Bluetooth: hci1: command 0x0c1a tx timeout [ 310.285601][ T5943] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.332969][ T5943] usb 7-1: Product: syz [ 310.360181][ T5943] usb 7-1: Manufacturer: syz [ 310.364820][ T5943] usb 7-1: SerialNumber: syz [ 310.370243][ T55] Bluetooth: hci5: command 0x0c1a tx timeout [ 310.438560][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 310.529038][ T55] Bluetooth: hci4: command 0x0c1a tx timeout [ 310.580328][T10918] loop0: detected capacity change from 0 to 128 [ 310.642179][T10918] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 310.653186][ T5943] usb 7-1: config 0 descriptor?? [ 310.740075][T10918] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 311.104496][ T5943] gs_usb 7-1:0.0: Configuring for 93 interfaces [ 311.165834][ T5943] gs_usb 7-1:0.0: Driver cannot handle more that 3 CAN interfaces [ 311.248487][ T5943] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -22 [ 311.399745][ T5943] usb 7-1: USB disconnect, device number 9 [ 311.759843][T10901] loop1: detected capacity change from 0 to 32768 [ 311.875780][T10901] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1822 (10901) [ 312.195229][ T5943] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 312.465784][ T5943] usb 3-1: Using ep0 maxpacket: 16 [ 312.519178][ T5943] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 312.604842][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 312.717904][ T5943] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 312.794023][ T5943] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 312.889748][ T5943] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 312.982317][ T5943] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 313.045146][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.135070][ T5943] usb 3-1: Product: syz [ 313.165565][ T5943] usb 3-1: Manufacturer: syz [ 313.208394][ T5943] usb 3-1: SerialNumber: syz [ 313.236560][ T47] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 313.319261][ T5943] usb 3-1: config 0 descriptor?? [ 313.396853][ T5943] port100 3-1:0.0: NFC: Could not get supported command types [ 313.503160][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 313.551657][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.628352][ T47] usb 1-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 313.645626][ T5943] usb 3-1: USB disconnect, device number 11 [ 313.727602][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.819416][ T47] usb 1-1: config 0 descriptor?? [ 314.353696][ T47] nintendo 0003:057E:2009.0032: hidraw0: USB HID v80.09 Device [HID 057e:2009] on usb-dummy_hcd.0-1/input0 [ 314.553268][ T47] nintendo 0003:057E:2009.0032: Failed to get joycon info; ret=-38 [ 314.639987][ T47] nintendo 0003:057E:2009.0032: Failed to retrieve controller info; ret=-38 [ 314.741584][ T47] nintendo 0003:057E:2009.0032: Failed to initialize controller; ret=-38 [ 314.797898][T10978] loop3: detected capacity change from 0 to 128 [ 314.829986][ T47] nintendo 0003:057E:2009.0032: probe - fail = -38 [ 314.901613][ T47] nintendo 0003:057E:2009.0032: probe with driver nintendo failed with error -38 [ 314.932993][T10978] VFS: Found a Xenix FS (block size = 512) on device loop3 [ 315.095958][ T47] usb 1-1: USB disconnect, device number 15 [ 315.392572][ T5828] sysv_free_block: trying to free block not in datazone [ 315.529797][ T5828] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 317.260832][ T5943] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 317.277845][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.429399][ T5943] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 317.478560][ T5943] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 317.551254][ T5943] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 317.600073][ T5943] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 317.686590][ T5943] usb 4-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 317.729228][ T5943] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.779117][ T5943] usb 4-1: Product: syz [ 317.791033][ T47] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 317.820187][ T5943] usb 4-1: Manufacturer: syz [ 317.824823][ T5943] usb 4-1: SerialNumber: syz [ 317.861909][ T5943] usb 4-1: config 0 descriptor?? [ 317.916166][ T5943] redrat3 4-1:0.0: Couldn't find all endpoints [ 318.011357][ T47] usb 5-1: Using ep0 maxpacket: 8 [ 318.042484][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.133947][ T47] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 318.176186][ T5939] usb 4-1: USB disconnect, device number 18 [ 318.230376][ T47] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 318.292862][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.369713][ T47] usb 5-1: config 0 descriptor?? [ 318.738463][ T5939] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 318.939038][ T47] wacom 0003:056A:0331.0033: hidraw0: USB HID v0.02 Device [HID 056a:0331] on usb-dummy_hcd.4-1/input0 [ 318.950577][ T5939] usb 4-1: Using ep0 maxpacket: 16 [ 319.005174][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 319.121591][ T5939] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 319.203930][ T5942] usb 5-1: USB disconnect, device number 15 [ 319.235092][ T5939] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x92, changing to 0x82 [ 319.325948][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 319.378339][ T5939] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 319.454030][ T5939] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 319.503263][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 319.559212][ T5939] usb 4-1: Product: syz [ 319.583887][ T5939] usb 4-1: Manufacturer: syz [ 319.614402][ T5939] usb 4-1: SerialNumber: syz [ 319.639283][ T5939] usb 4-1: config 0 descriptor?? [ 319.682458][ T5939] usb 4-1: NFC: intf ffff88807d64e000 id ffffffff8f525580 [ 319.782503][T11005] loop0: detected capacity change from 0 to 32768 [ 319.839395][ T5939] nfcmrvl 4-1:0.0: NFC: registered with nci successfully [ 319.918542][ T5939] usb 4-1: USB disconnect, device number 19 [ 319.951353][ T5939] usb 4-1: NFC: intf ffff88807d64e000 [ 320.054000][T11005] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 320.145474][T11013] loop2: detected capacity change from 0 to 32768 [ 320.178766][T11013] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 320.205579][T11005] XFS (loop0): AIL initialisation failed: error -12 [ 320.286366][T11013] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 320.345675][T11037] netlink: 408 bytes leftover after parsing attributes in process `syz.6.1869'. [ 320.383840][T11005] XFS (loop0): log mount failed [ 321.224560][ T5830] ocfs2: Unmounting device (7,2) on (node local) [ 322.213924][T11019] loop1: detected capacity change from 0 to 32768 [ 322.373759][T11019] workqueue: Failed to create a rescuer kthread for wq "xfs-inodegc/loop1": -EINTR [ 322.709229][T11063] netlink: 'syz.6.1877': attribute type 280 has an invalid length. [ 323.441289][T11069] devpts: called with bogus options [ 323.553349][T11045] loop4: detected capacity change from 0 to 32768 [ 323.771292][T11045] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 324.112416][T11079] loop6: detected capacity change from 0 to 1024 [ 324.181965][T11081] loop0: detected capacity change from 0 to 164 [ 324.311746][ T5829] ocfs2: Unmounting device (7,4) on (node local) [ 324.668732][ T1085] hfsplus: b-tree write err: -5, ino 4 [ 325.378336][ T5939] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 325.456299][T11086] loop0: detected capacity change from 0 to 4096 [ 325.526222][T11086] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512). [ 325.578621][ T5939] usb 7-1: Using ep0 maxpacket: 32 [ 325.603692][ T5939] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 325.649657][ T5939] usb 7-1: config 0 has no interface number 0 [ 325.713531][ T5939] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 325.789590][ T5939] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.850188][T11086] ntfs3(loop0): ino=1a, mi_enum_attr [ 325.858369][ T5939] usb 7-1: Product: syz [ 325.865787][T11086] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 325.908017][ T5939] usb 7-1: Manufacturer: syz [ 325.945715][ T5939] usb 7-1: SerialNumber: syz [ 325.950868][T11086] ntfs3(loop0): Failed to initialize $Extend/$ObjId. [ 325.991801][ T5939] usb 7-1: config 0 descriptor?? [ 326.055227][ T5939] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 326.279381][ T5939] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 326.380291][T11101] netlink: 'syz.2.1894': attribute type 5 has an invalid length. [ 326.417890][ T5939] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 326.455991][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - status message too short [ 326.599128][T11101] netlink: 'syz.2.1894': attribute type 1 has an invalid length. [ 326.664085][ C1] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 326.682671][ T5942] usb 7-1: USB disconnect, device number 10 [ 326.706682][T11101] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.1894'. [ 326.757699][ T5942] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 326.858904][ T5942] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 326.911529][T11078] loop1: detected capacity change from 0 to 32768 [ 327.004615][ T5942] quatech2 7-1:0.51: device disconnected [ 327.068849][T11078] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 327.068941][T11078] (syz.1.1879,11078,1):ocfs2_initialize_super:2226 ERROR: status = -12 [ 327.202075][T11078] (syz.1.1879,11078,0):ocfs2_fill_super:1177 ERROR: status = -12 [ 327.387791][T11110] cifs: Bad value for 'port' [ 328.868358][ T5943] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 329.061413][ T5942] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 329.069595][ T5943] usb 7-1: Using ep0 maxpacket: 16 [ 329.121342][ T5943] usb 7-1: config 0 interface 0 altsetting 15 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.215629][ T5943] usb 7-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.302124][ T5943] usb 7-1: config 0 interface 0 has no altsetting 0 [ 329.318989][ T5942] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 329.358861][ T5942] usb 4-1: config 0 has no interface number 0 [ 329.366998][ T5943] usb 7-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 329.430116][ T5942] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 329.466639][ T5943] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.491682][ T5942] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.535241][ T5943] usb 7-1: config 0 descriptor?? [ 329.554430][ T5942] usb 4-1: Product: syz [ 329.590817][ T5942] usb 4-1: Manufacturer: syz [ 329.645682][ T5942] usb 4-1: SerialNumber: syz [ 329.676468][ T5942] usb 4-1: config 0 descriptor?? [ 329.956982][ T5942] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 330.032734][ T5943] kye 0003:0458:500F.0034: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 330.132795][ T5942] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 330.170546][ T5943] kye 0003:0458:500F.0034: hidraw0: USB HID vff.fd Device [HID 0458:500f] on usb-dummy_hcd.6-1/input0 [ 330.229358][ T5942] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 330.268477][ T5943] kye 0003:0458:500F.0034: tablet-enabling feature report not found [ 330.297046][ T5942] usb 4-1: media controller created [ 330.324282][ T5943] kye 0003:0458:500F.0034: tablet enabling failed [ 330.431134][ T5943] usb 7-1: USB disconnect, device number 11 [ 330.501704][ T5942] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 330.585907][T11149] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 330.619982][T11116] loop0: detected capacity change from 0 to 32768 [ 330.702121][T11116] XFS (loop0): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 331.011465][ T5942] usb 4-1: USB disconnect, device number 20 [ 331.068834][T11116] XFS (loop0): Ending clean mount [ 331.310806][ T5827] XFS (loop0): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 332.632929][T11145] loop1: detected capacity change from 0 to 32768 [ 332.720783][T11175] loop2: detected capacity change from 0 to 512 [ 332.789758][T11145] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 332.809582][T11175] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 332.882339][T11175] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 332.943513][T11175] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1926: corrupted in-inode xattr: e_value size too large [ 333.006548][T11145] XFS (loop1): Ending clean mount [ 333.027283][T11175] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.1926: couldn't read orphan inode 15 (err -117) [ 333.120173][T11175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.222094][ T5833] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 333.485802][ T5830] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.719392][T11194] loop3: detected capacity change from 0 to 512 [ 333.751523][T11194] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 333.811618][T11194] EXT4-fs (loop3): invalid journal inode [ 333.817475][T11194] EXT4-fs (loop3): can't get journal size [ 333.880250][T11194] EXT4-fs (loop3): 1 truncate cleaned up [ 333.912192][T11194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 334.196980][ T5828] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.828529][ T5943] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 335.018553][ T5943] usb 7-1: Using ep0 maxpacket: 8 [ 335.037673][ T5943] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 335.066168][ T5943] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.095910][ T5943] usb 7-1: Product: syz [ 335.111939][ T5943] usb 7-1: Manufacturer: syz [ 335.116614][ T5943] usb 7-1: SerialNumber: syz [ 335.144292][ T5943] usb 7-1: config 0 descriptor?? [ 335.432308][ T5943] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 335.877206][ T5943] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 335.903337][ T5943] usb 7-1: USB disconnect, device number 12 [ 338.273144][T11206] loop6: detected capacity change from 0 to 32768 [ 338.378801][T11206] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 338.621240][T11206] XFS (loop6): Ending clean mount [ 338.693807][T11206] XFS (loop6): Quotacheck needed: Please wait. [ 338.807384][T11206] XFS (loop6): Quotacheck: Done. [ 338.971884][ T7701] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 340.783838][T11226] loop0: detected capacity change from 0 to 2048 [ 340.950213][T11227] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 341.980079][T11217] loop3: detected capacity change from 0 to 40427 [ 342.031785][T11217] F2FS-fs (loop3): Found nat_bits in checkpoint [ 342.210816][T11217] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 349.479076][ T5142] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 349.488693][ T5142] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 349.497364][ T5142] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 349.505665][ T5142] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 349.513524][ T5142] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 349.520957][ T5142] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 349.912455][T11242] chnl_net:caif_netlink_parms(): no params data found [ 351.420220][T11259] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1950'. [ 351.452635][T11242] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.532913][T11242] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.608525][T11242] bridge_slave_0: entered allmulticast mode [ 351.655703][ T55] Bluetooth: hci6: command tx timeout [ 351.686768][T11242] bridge_slave_0: entered promiscuous mode [ 351.705244][T11242] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.714075][T11242] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.721914][T11242] bridge_slave_1: entered allmulticast mode [ 351.729657][T11242] bridge_slave_1: entered promiscuous mode [ 352.034843][T11242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.072704][ T5942] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 352.202505][T11268] loop6: detected capacity change from 0 to 256 [ 352.254051][T11268] exfat: Deprecated parameter 'utf8' [ 352.259896][ T5942] usb 1-1: Using ep0 maxpacket: 32 [ 352.328696][ T5942] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 352.337227][ T5942] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 352.387646][T11268] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 352.437983][T11242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.471687][ T5942] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 352.539907][ T5942] usb 1-1: config 1 has no interface number 0 [ 352.546075][ T5942] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 352.648272][ T5942] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 352.728319][ T5942] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 352.845033][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.965329][ T5942] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 353.171109][ T5942] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 353.317611][T11278] loop6: detected capacity change from 0 to 256 [ 353.533790][T11242] team0: Port device team_slave_0 added [ 353.611033][ T5943] usb 1-1: USB disconnect, device number 16 [ 353.644760][ T5943] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 353.718904][ T55] Bluetooth: hci6: command tx timeout [ 353.803461][T11242] team0: Port device team_slave_1 added [ 354.055484][T11286] loop4: detected capacity change from 0 to 22 [ 354.072904][T11286] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 354.142622][T11286] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 354.443120][T11290] loop6: detected capacity change from 0 to 256 [ 354.785961][T11290] Process accounting resumed [ 354.847968][T11290] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 354.901144][T11290] FAT-fs (loop6): Filesystem has been set read-only [ 354.927415][T11242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.954554][T11290] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 354.975278][T11242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.090803][T11242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.667834][T11242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.727465][ T5942] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 355.748425][T11242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.831050][ T5942] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 355.885655][ T55] Bluetooth: hci6: command tx timeout [ 355.954245][T11242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.007852][T11307] tipc: Enabling of bearer rejected, failed to enable media [ 356.503656][T11242] hsr_slave_0: entered promiscuous mode [ 356.538922][T11242] hsr_slave_1: entered promiscuous mode [ 356.582008][T11242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.625995][T11242] Cannot create hsr debugfs directory [ 356.667911][T11315] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 357.778445][T11333] nbd: couldn't find device at index 119 [ 357.818676][T11326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1983'. [ 357.868494][T11326] netlink: 'syz.1.1983': attribute type 7 has an invalid length. [ 357.988588][ T55] Bluetooth: hci6: command tx timeout [ 358.309215][T11335] tipc: Enabling of bearer rejected, media not registered [ 359.061272][T11242] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 359.219474][T11242] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 359.433084][T11242] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 359.712541][ T5142] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 359.748504][ T5142] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 359.768005][ T5142] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 359.778725][ T5142] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 359.786355][ T5142] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 359.793756][ T5142] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 359.914957][T11242] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 360.213982][T11362] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1998'. [ 360.656011][T11366] loop0: detected capacity change from 0 to 2048 [ 360.784968][T11366] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 361.494606][T11242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.725033][T11242] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.782507][T11381] loop1: detected capacity change from 0 to 64 [ 361.790309][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.790426][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.879531][ T55] Bluetooth: hci3: command tx timeout [ 361.906309][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.913468][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.963931][T11381] hfs: bad catalog entry type 0 [ 362.017467][T11383] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2007'. [ 362.068136][T11352] chnl_net:caif_netlink_parms(): no params data found [ 362.224300][T11384] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2007'. [ 362.983932][T11402] CUSE: unknown device info "€" [ 362.983953][T11402] CUSE: zero length info key specified [ 363.191184][ T1133] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.959447][ T55] Bluetooth: hci3: command tx timeout [ 364.089956][T11415] loop6: detected capacity change from 0 to 1024 [ 364.102335][T11418] loop4: detected capacity change from 0 to 256 [ 364.154419][T11415] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 364.212101][T11418] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 364.369747][T11352] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.417193][T11415] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 364.439039][T11352] bridge0: port 1(bridge_slave_0) entered disabled state [ 364.439322][T11352] bridge_slave_0: entered allmulticast mode [ 364.440941][T11352] bridge_slave_0: entered promiscuous mode [ 364.444430][T11352] bridge0: port 2(bridge_slave_1) entered blocking state [ 364.444510][T11352] bridge0: port 2(bridge_slave_1) entered disabled state [ 364.444682][T11352] bridge_slave_1: entered allmulticast mode [ 364.446985][T11352] bridge_slave_1: entered promiscuous mode [ 364.491031][ T5939] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 364.675637][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 364.724804][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.769474][ T5939] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 364.791616][ T7701] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 364.814150][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.919756][ T5939] usb 2-1: config 0 descriptor?? [ 364.982529][ T5939] hub 2-1:0.0: USB hub found [ 365.212327][ T1133] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.289548][ T5939] hub 2-1:0.0: 1 port detected [ 365.496119][ T5939] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 365.556723][ T5939] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 365.571301][T11352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.668391][ T5939] usbhid 2-1:0.0: can't add hid device: -71 [ 365.674529][ T5939] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 365.856521][ T5939] usb 2-1: USB disconnect, device number 13 [ 366.039389][ T55] Bluetooth: hci3: command tx timeout [ 366.140276][ T1133] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.172669][T11352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.806578][ T1133] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.921027][T11449] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 366.928097][T11449] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 367.080312][T11352] team0: Port device team_slave_0 added [ 367.087151][T11449] vhci_hcd vhci_hcd.0: Device attached [ 367.165730][T11242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.220758][T11352] team0: Port device team_slave_1 added [ 367.278424][ T5939] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 367.307284][ T47] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 367.488587][ T5939] usb 1-1: Using ep0 maxpacket: 16 [ 367.529349][ T5939] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 367.551624][T11352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.602010][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.612073][T11352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.661865][ T5939] usb 1-1: Product: syz [ 367.696951][ T5939] usb 1-1: Manufacturer: syz [ 367.720253][ T5939] usb 1-1: SerialNumber: syz [ 367.750653][T11461] netlink: 'syz.6.2034': attribute type 16 has an invalid length. [ 367.761336][ T5939] usb 1-1: config 0 descriptor?? [ 367.785470][T11352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.808166][T11461] netlink: 'syz.6.2034': attribute type 3 has an invalid length. [ 367.817859][ T5939] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 367.846311][T11461] netlink: 64066 bytes leftover after parsing attributes in process `syz.6.2034'. [ 367.862723][ T5939] usb 1-1: Detected FT232H [ 367.867931][T11352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.887148][T11352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.913128][ C1] vkms_vblank_simulate: vblank timer overrun [ 368.002048][ T5939] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 368.018505][T11450] vhci_hcd: unknown pdu 2 [ 368.067214][ T5939] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 368.098270][ T1096] vhci_hcd: stop threads [ 368.113162][ T5939] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 368.120396][ T55] Bluetooth: hci3: command tx timeout [ 368.141672][T11352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.153229][ T1096] vhci_hcd: release socket [ 368.168451][ T47] usb 33-1: device descriptor read/64, error -71 [ 368.217690][ T5939] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 368.243004][ T1096] vhci_hcd: disconnect device [ 368.323868][ T5939] usb 1-1: USB disconnect, device number 17 [ 368.429705][ T5939] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 368.449206][ T47] vhci_hcd: vhci_device speed not set [ 368.514113][ T5939] ftdi_sio 1-1:0.0: device disconnected [ 368.526288][T11469] loop6: detected capacity change from 0 to 16 [ 369.005046][ T55] Bluetooth: hci1: unexpected event 0x2f length: 1017 > 260 [ 369.005093][ T55] Bluetooth: hci1: Malformed Event: 0x2f [ 369.063717][T11352] hsr_slave_0: entered promiscuous mode [ 369.126432][T11352] hsr_slave_1: entered promiscuous mode [ 369.199124][T11352] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.280486][T11352] Cannot create hsr debugfs directory [ 369.589595][ T1133] bridge_slave_1: left allmulticast mode [ 369.643019][ T1133] bridge_slave_1: left promiscuous mode [ 369.671016][ T1133] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.759389][ T1133] bridge_slave_0: left allmulticast mode [ 369.815028][ T1133] bridge_slave_0: left promiscuous mode [ 369.868507][ T1133] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.341856][ C1] vkms_vblank_simulate: vblank timer overrun [ 370.582112][T11490] loop4: detected capacity change from 0 to 4096 [ 370.621119][T11490] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512). [ 370.727756][T11492] xt_CT: No such helper "pptp" [ 371.030002][ T1133] xfrm0 (unregistering): left allmulticast mode [ 371.572339][T11500] loop0: detected capacity change from 0 to 4096 [ 372.470968][ T1133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.509679][ T1133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.537392][ T1133] bond0 (unregistering): Released all slaves [ 372.893451][T11500] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 372.913955][T11242] veth0_vlan: entered promiscuous mode [ 372.967530][T11500] ntfs3(loop0): Failed to load $Extend (-22). [ 373.021264][T11500] ntfs3(loop0): Failed to initialize $Extend. [ 377.435779][T11546] openvswitch: netlink: Message has 4 unknown bytes. [ 377.468457][T11546] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 378.026242][T11554] loop4: detected capacity change from 0 to 16 [ 378.054466][T11554] erofs (device loop4): mounted with root inode @ nid 36. [ 378.683561][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.884981][T11242] veth1_vlan: entered promiscuous mode [ 381.203873][T11242] veth0_macvtap: entered promiscuous mode [ 381.430344][T11242] veth1_macvtap: entered promiscuous mode [ 381.734599][T11242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.828286][T11242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.897004][T11242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.974140][T11242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.008640][T11595] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2086'. [ 382.058342][T11242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.146456][T11242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.224505][T11242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.292993][T11242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.408327][T11242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.507504][T11242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.623300][T11242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.684354][T11242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.772595][T11242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.846326][T11242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.902331][T11601] loop6: detected capacity change from 0 to 4096 [ 382.937560][T11242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.998984][T11242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.092846][T11242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.133551][T11607] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 383.198943][T11242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.268393][T11242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.335812][T11242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.392013][T11609] autofs: Bad value for 'fd' [ 383.401758][T11242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.455576][T11242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.523479][T11242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.578319][T11242] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.662750][T11242] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.709444][T11242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.755944][T11611] loop1: detected capacity change from 0 to 64 [ 383.796062][T11352] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 383.975297][T11352] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 384.165119][T11352] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 384.337911][T11242] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.374998][T11603] syz.4.2090 (11603): drop_caches: 2 [ 384.436510][T11242] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.513708][T11242] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.578567][T11242] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.661968][T11352] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 384.818015][T11593] loop0: detected capacity change from 0 to 40427 [ 386.221313][T11639] loop4: detected capacity change from 0 to 4096 [ 386.296863][T11639] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 386.700822][T11639] ntfs3(loop4): ino=0, attr_set_size [ 386.706563][T11639] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 386.891029][T11656] ntfs3(loop4): ino=0, attr_set_size [ 388.144127][T11674] loop1: detected capacity change from 0 to 1024 [ 388.409972][T11458] hfsplus: b-tree write err: -5, ino 4 [ 388.528617][T11677] loop6: detected capacity change from 0 to 4096 [ 388.566701][T11677] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 388.680547][T11677] ntfs3(loop6): ino=19, mi_enum_attr [ 388.711984][T11677] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 388.839622][T11677] ntfs3(loop6): failed to convert "c46c" to cp863 [ 388.878902][T11677] ntfs3(loop6): ino=20, mi_enum_attr [ 389.298446][ T47] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 389.504107][ T47] usb 2-1: Using ep0 maxpacket: 16 [ 389.560026][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 389.604766][ T1133] hsr_slave_0: left promiscuous mode [ 389.629864][T11693] loop6: detected capacity change from 0 to 256 [ 389.668968][ T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 389.692945][ T1133] hsr_slave_1: left promiscuous mode [ 389.699950][T11693] exfat: Deprecated parameter 'namecase' [ 389.736565][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.755102][ T47] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 389.784024][T11693] exFAT-fs (loop6): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 389.834819][ T1133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.850166][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.900488][ T47] usb 2-1: config 0 descriptor?? [ 389.941191][ T1133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.991630][ T1133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.154425][ T1133] veth1_macvtap: left promiscuous mode [ 390.195748][ T1133] veth0_macvtap: left promiscuous mode [ 390.245329][ T1133] veth1_vlan: left promiscuous mode [ 390.292599][ T1133] veth0_vlan: left promiscuous mode [ 390.384274][ T47] kye 0003:0458:501A.0035: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 390.461717][ T47] kye 0003:0458:501A.0035: unknown main item tag 0x1 [ 390.511977][ T47] kye 0003:0458:501A.0035: hidraw0: USB HID v0.00 Device [HID 0458:501a] on usb-dummy_hcd.1-1/input0 [ 390.586845][ T47] kye 0003:0458:501A.0035: tablet-enabling feature report not found [ 390.643129][ T47] kye 0003:0458:501A.0035: tablet enabling failed [ 390.723572][ T47] usb 2-1: USB disconnect, device number 14 [ 392.248470][ T1133] team0 (unregistering): Port device team_slave_1 removed [ 392.448792][ T1133] team0 (unregistering): Port device team_slave_0 removed [ 393.808314][ T1332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.873780][ T1332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.137979][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 394.208852][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 394.489444][T11352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.711427][T11352] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.791187][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.798360][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.933922][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.941077][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.032938][T11766] loop1: detected capacity change from 0 to 64 [ 396.123295][ T1133] IPVS: stop unused estimator thread 0... [ 396.246618][T11766] hfs: request for non-existent node 16777216 in B*Tree [ 396.322703][T11766] hfs: request for non-existent node 16777216 in B*Tree [ 396.438659][T11766] hfs: request for non-existent node 16777216 in B*Tree [ 396.553611][T11766] hfs: request for non-existent node 16777216 in B*Tree [ 396.764388][T11780] loop4: detected capacity change from 0 to 128 [ 396.865140][T11780] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 396.962677][T11780] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 397.367433][T11791] program syz.1.2156 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 397.892048][ T1133] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.983464][T11802] loop0: detected capacity change from 0 to 512 [ 398.083300][T11799] mkiss: ax0: crc mode is auto. [ 398.088742][T11802] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 398.102509][T11352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.194437][T11802] EXT4-fs (loop0): 1 truncate cleaned up [ 398.236042][T11802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.307487][T11808] loop4: detected capacity change from 0 to 512 [ 398.387174][T11808] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 398.417478][T11802] EXT4-fs warning (device loop0): verify_group_input:137: Cannot add at group 1025 (only 1 groups) [ 398.499618][T11808] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.594560][T11808] ext4 filesystem being mounted at /358/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.724977][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.949368][ T5829] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.163605][ T1133] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.472202][T11823] loop0: detected capacity change from 0 to 256 [ 399.594906][T11823] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d) [ 399.722764][ T1133] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.346177][ T1133] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.799052][T11848] loop6: detected capacity change from 0 to 64 [ 400.995582][T11352] veth0_vlan: entered promiscuous mode [ 401.119445][T11352] veth1_vlan: entered promiscuous mode [ 401.280029][T11853] netlink: 1256 bytes leftover after parsing attributes in process `syz.7.2180'. [ 401.351486][T11352] veth0_macvtap: entered promiscuous mode [ 401.417173][T11352] veth1_macvtap: entered promiscuous mode [ 401.555436][T11352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.626641][T11352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.697913][T11352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.776726][T11352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.826312][T11352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.875984][T11352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 401.930439][T11352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 401.994548][T11352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.059420][T11352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.129105][T11352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.165736][T11352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 402.202249][T11352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.244756][T11352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.325438][T11352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.398996][T11352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.461496][T11352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.537370][T11352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.618369][T11352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.658658][T11352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.698888][T11352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.733023][T11352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.791275][T11352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.826852][T11352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.862262][T11352] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 402.899491][T11352] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 402.937082][T11352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.025182][T11352] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.089715][T11352] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.150708][T11352] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.193517][T11352] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.714028][T11891] loop1: detected capacity change from 0 to 256 [ 403.722253][T11891] exfat: Deprecated parameter 'utf8' [ 403.734995][T11891] exfat: Deprecated parameter 'namecase' [ 403.750434][T11891] exfat: Deprecated parameter 'namecase' [ 403.760282][T11891] exfat: Deprecated parameter 'utf8' [ 403.777307][T11891] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 404.750868][ T1133] bridge_slave_1: left allmulticast mode [ 404.756559][ T1133] bridge_slave_1: left promiscuous mode [ 404.864833][ T1133] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.217710][T11910] loop4: detected capacity change from 0 to 256 [ 405.359387][ T1133] bridge_slave_0: left allmulticast mode [ 405.365082][ T1133] bridge_slave_0: left promiscuous mode [ 405.372943][ T30] audit: type=1800 audit(2000000079.730:3437): pid=11910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2202" name="file1" dev="loop4" ino=191 res=0 errno=0 [ 405.486471][ T1133] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.158713][ T5943] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 407.338370][ T5943] usb 2-1: Using ep0 maxpacket: 32 [ 407.371698][ T5943] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.428037][ T5943] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 407.518310][ T5943] usb 2-1: config 0 interface 0 has no altsetting 0 [ 407.548343][ T5943] usb 2-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 407.593004][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.635609][ T5943] usb 2-1: config 0 descriptor?? [ 408.106750][ T5943] wacom 0003:056A:0094.0036: Using device in hidraw-only mode [ 408.182278][ T5943] wacom 0003:056A:0094.0036: hidraw0: USB HID v0.05 Device [HID 056a:0094] on usb-dummy_hcd.1-1/input0 [ 408.415486][ T5943] usb 2-1: USB disconnect, device number 15 [ 409.244892][T11971] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.428414][ T5892] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 409.640092][ T5892] usb 5-1: too many configurations: 89, using maximum allowed: 8 [ 409.704485][ T5892] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 409.727697][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.758370][ T5892] usb 5-1: Product: syz [ 409.790552][ T5892] usb 5-1: Manufacturer: syz [ 409.802040][ T5892] usb 5-1: SerialNumber: syz [ 409.835267][ T5892] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 409.980009][ T5943] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 411.456983][ T5943] usb 5-1: Service connection timeout for: 256 [ 427.218379][ T5943] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 458.351319][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 492.157993][ T5204] udevd[5204]: worker [11692] /devices/platform/dummy_udc.4/udc/dummy_udc.4 is taking a long time [ 497.238156][ T5204] udevd[5204]: worker [11360] /devices/platform/dummy_udc.4/gadget.4 is taking a long time [ 502.134396][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 529.522158][ T55] Bluetooth: hci6: command tx timeout [ 532.421924][ T55] Bluetooth: hci3: command tx timeout [ 562.087408][ T5892] usb 5-1: USB disconnect, device number 16 [ 562.100292][ T5943] ath9k_htc: Failed to initialize the device [ 562.119647][ T5892] usb 5-1: ath9k_htc: USB layer deinitialized [ 563.139206][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.245919][ T31] INFO: task kworker/u8:0:12 blocked for more than 149 seconds. [ 573.341045][ T31] Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 573.408712][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 573.417425][ T31] task:kworker/u8:0 state:D stack:22912 pid:12 tgid:12 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 573.638338][ T31] Workqueue: events_unbound linkwatch_event [ 573.644333][ T31] Call Trace: [ 573.729049][ T1133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.752884][ T31] [ 573.755909][ T31] __schedule+0x190e/0x4c90 [ 573.838565][ T31] ? __pfx___schedule+0x10/0x10 [ 573.843579][ T31] ? __pfx_lock_release+0x10/0x10 [ 573.955705][ T31] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 574.068448][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 574.074212][ T31] ? kthread_data+0x52/0xd0 [ 574.138384][ T31] ? schedule+0x90/0x320 [ 574.142718][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 574.228296][ T31] ? wq_worker_sleeping+0x66/0x240 [ 574.233490][ T31] ? schedule+0x90/0x320 [ 574.237764][ T31] schedule+0x14b/0x320 [ 574.364969][ T31] schedule_preempt_disabled+0x13/0x30 [ 574.418774][ T31] __mutex_lock+0x817/0x1010 [ 574.423468][ T31] ? __mutex_lock+0x602/0x1010 [ 574.478695][ T31] ? linkwatch_event+0xe/0x60 [ 574.483494][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 574.558877][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 574.564964][ T31] ? process_scheduled_works+0x9c6/0x18e0 [ 574.658405][ T31] linkwatch_event+0xe/0x60 [ 574.662998][ T31] process_scheduled_works+0xac0/0x18e0 [ 574.738420][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 574.744490][ T31] ? assign_work+0x364/0x3d0 [ 574.879982][ T31] worker_thread+0x870/0xd30 [ 574.884665][ T31] ? __kthread_parkme+0x169/0x1d0 [ 574.901519][ T31] ? __pfx_worker_thread+0x10/0x10 [ 574.906668][ T31] kthread+0x7ab/0x920 SYZFAIL: failed to send rpc fd=3 want=232 sent=0 n=-1 (errno 32: Broken pipe) [ 575.149578][ T31] ? __pfx_kthread+0x10/0x10 [ 575.154250][ T31] ? __pfx_worker_thread+0x10/0x10 [ 575.171052][ T31] ? __pfx_kthread+0x10/0x10 [ 575.175690][ T31] ? __pfx_kthread+0x10/0x10 [ 575.268309][ T31] ? __pfx_kthread+0x10/0x10 [ 575.272997][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 575.368671][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 575.374413][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 575.468299][ T31] ? __pfx_kthread+0x10/0x10 [ 575.472998][ T31] ret_from_fork+0x4d/0x80 [ 575.477455][ T31] ? __pfx_kthread+0x10/0x10 [ 575.548476][ T31] ret_from_fork_asm+0x1a/0x30 [ 575.553342][ T31] [ 575.598634][ T31] INFO: task kworker/u8:1:13 blocked for more than 152 seconds. [ 575.606403][ T31] Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 575.616052][ T1133] bond_slave_0: left promiscuous mode [ 575.698673][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 575.707404][ T31] task:kworker/u8:1 state:D stack:20312 pid:13 tgid:13 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 575.878948][ T31] Workqueue: ipv6_addrconf addrconf_dad_work [ 575.885033][ T31] Call Trace: [ 575.958559][ T31] [ 575.961574][ T31] __schedule+0x190e/0x4c90 [ 575.966139][ T31] ? __pfx___schedule+0x10/0x10 [ 576.045205][ T31] ? __pfx_lock_release+0x10/0x10 [ 576.078325][ T31] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 576.084308][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 576.148893][ T31] ? kthread_data+0x52/0xd0 [ 576.153497][ T31] ? schedule+0x90/0x320 [ 576.157812][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 576.198650][ T31] ? wq_worker_sleeping+0x66/0x240 [ 576.203911][ T31] ? schedule+0x90/0x320 [ 576.249464][ T31] schedule+0x14b/0x320 [ 576.253727][ T31] schedule_preempt_disabled+0x13/0x30 [ 576.288467][ T31] __mutex_lock+0x817/0x1010 [ 576.293147][ T31] ? __mutex_lock+0x602/0x1010 [ 576.297961][ T31] ? addrconf_dad_work+0x10e/0x16a0 [ 576.368390][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 576.373500][ T31] ? do_raw_spin_unlock+0x13c/0x8b0 [ 576.408432][ T31] addrconf_dad_work+0x10e/0x16a0 [ 576.438745][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 576.444446][ T31] ? __pfx_addrconf_dad_work+0x10/0x10 [ 576.482025][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 576.502799][ T31] ? process_scheduled_works+0x9c6/0x18e0 [ 576.528633][ T31] process_scheduled_works+0xac0/0x18e0 [ 576.534272][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 576.558315][ T31] ? assign_work+0x364/0x3d0 [ 576.562990][ T31] worker_thread+0x870/0xd30 [ 576.567646][ T31] ? __kthread_parkme+0x169/0x1d0 [ 576.589149][ T31] ? __pfx_worker_thread+0x10/0x10 [ 576.594357][ T31] kthread+0x7ab/0x920 [ 576.608436][ T31] ? __pfx_kthread+0x10/0x10 [ 576.613117][ T31] ? __pfx_worker_thread+0x10/0x10 [ 576.628843][ T31] ? __pfx_kthread+0x10/0x10 [ 576.633512][ T31] ? __pfx_kthread+0x10/0x10 [ 576.638156][ T31] ? __pfx_kthread+0x10/0x10 [ 576.668416][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 576.673690][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 576.693150][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 576.708572][ T31] ? __pfx_kthread+0x10/0x10 [ 576.713260][ T31] ret_from_fork+0x4d/0x80 [ 576.717725][ T31] ? __pfx_kthread+0x10/0x10 [ 576.738449][ T31] ret_from_fork_asm+0x1a/0x30 [ 576.743321][ T31] [ 576.767831][ T31] INFO: task kworker/1:1:47 blocked for more than 153 seconds. [ 576.809664][ T31] Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 576.828904][ T1133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.837617][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 576.878448][ T31] task:kworker/1:1 state:D stack:19688 pid:47 tgid:47 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 576.925066][ T31] Workqueue: events switchdev_deferred_process_work [ 576.948387][ T31] Call Trace: [ 576.951767][ T31] [ 576.969009][ T31] __schedule+0x190e/0x4c90 [ 576.973617][ T31] ? do_raw_spin_lock+0x14f/0x370 [ 577.027346][ T31] ? schedule+0x90/0x320 [ 577.048909][ T31] ? __pfx___schedule+0x10/0x10 [ 577.053869][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 577.108607][ T31] ? __pfx_lock_release+0x10/0x10 [ 577.113725][ T31] ? kick_pool+0x1bd/0x620 [ 577.118173][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 577.163811][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 577.226800][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 577.258809][ T31] ? schedule+0x90/0x320 [ 577.263095][ T31] schedule+0x14b/0x320 [ 577.267283][ T31] schedule_preempt_disabled+0x13/0x30 [ 577.316270][ T31] __mutex_lock+0x817/0x1010 [ 577.358317][ T31] ? __mutex_lock+0x602/0x1010 [ 577.363150][ T31] ? switchdev_deferred_process_work+0xe/0x20 [ 577.408931][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 577.414004][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 577.460481][ T31] ? process_scheduled_works+0x9c6/0x18e0 [ 577.466347][ T31] switchdev_deferred_process_work+0xe/0x20 [ 577.518294][ T31] process_scheduled_works+0xac0/0x18e0 [ 577.523914][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 577.563613][ T31] ? assign_work+0x364/0x3d0 [ 577.596076][ T31] worker_thread+0x870/0xd30 [ 577.608505][ T31] ? __kthread_parkme+0x169/0x1d0 [ 577.613573][ T31] ? __pfx_worker_thread+0x10/0x10 [ 577.647552][ T31] kthread+0x7ab/0x920 [ 577.655779][ T31] ? __pfx_kthread+0x10/0x10 [ 577.683261][ T31] ? __pfx_worker_thread+0x10/0x10 [ 577.698369][ T31] ? __pfx_kthread+0x10/0x10 [ 577.703001][ T31] ? __pfx_kthread+0x10/0x10 [ 577.707632][ T31] ? __pfx_kthread+0x10/0x10 [ 577.747644][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 577.768892][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 577.774571][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 577.808755][ T31] ? __pfx_kthread+0x10/0x10 [ 577.813390][ T31] ret_from_fork+0x4d/0x80 [ 577.817834][ T31] ? __pfx_kthread+0x10/0x10 [ 577.846381][ T31] ret_from_fork_asm+0x1a/0x30 [ 577.866001][ T31] [ 577.878806][ T31] INFO: task dhcpcd:5497 blocked for more than 154 seconds. [ 577.886101][ T31] Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 577.935649][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 577.974698][ T31] task:dhcpcd state:D stack:23792 pid:5497 tgid:5497 ppid:1 task_flags:0x400140 flags:0x00000002 [ 578.031929][ T31] Call Trace: [ 578.035240][ T31] [ 578.038193][ T31] __schedule+0x190e/0x4c90 [ 578.063515][ T31] ? __pfx___schedule+0x10/0x10 [ 578.072987][ T31] ? __pfx_lock_release+0x10/0x10 [ 578.078057][ T31] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 578.092688][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 578.103427][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 578.112705][ T31] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 578.127763][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 578.145727][ T31] ? schedule+0x90/0x320 [ 578.158242][ T31] schedule+0x14b/0x320 [ 578.162438][ T31] schedule_preempt_disabled+0x13/0x30 [ 578.167932][ T31] __mutex_lock+0x817/0x1010 [ 578.182411][ T31] ? __mutex_lock+0x602/0x1010 [ 578.187231][ T31] ? vlan_ioctl_handler+0x112/0x9d0 [ 578.196879][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 578.213991][ T31] ? rcu_is_watching+0x15/0xb0 [ 578.223072][ T31] ? trace_contention_end+0x3c/0x120 [ 578.234647][ T31] ? __might_fault+0xaa/0x120 [ 578.243088][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 578.261290][ T31] vlan_ioctl_handler+0x112/0x9d0 [ 578.266352][ T31] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 578.278255][ T31] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 578.284151][ T31] sock_ioctl+0x682/0x8e0 [ 578.298244][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 578.303148][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 578.317034][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 578.323368][ T31] __se_sys_ioctl+0xf7/0x170 [ 578.327991][ T31] do_syscall_64+0xf3/0x230 [ 578.338245][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.347242][ T31] RIP: 0033:0x7fa846a41d49 [ 578.357007][ T31] RSP: 002b:00007ffe9fec43d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 578.391790][ T31] RAX: ffffffffffffffda RBX: 0000559f4c17dd50 RCX: 00007fa846a41d49 [ 578.404678][ T31] RDX: 00007ffe9fec43e0 RSI: 0000000000008982 RDI: 0000000000000011 [ 578.417857][ T31] RBP: 0000000000000002 R08: 0000000000000008 R09: 0000000000000000 [ 578.434740][ T31] R10: 00007ffe9fed4a60 R11: 0000000000000246 R12: 00007ffe9fec43e0 [ 578.444744][ T31] R13: 00007ffe9fec4460 R14: 0000559f4c17dd50 R15: 0000559f4c197d30 [ 578.458538][ T31] [ 578.484197][ T1133] bond_slave_1: left promiscuous mode [ 578.494957][ T31] INFO: task syz-executor:11352 blocked for more than 155 seconds. [ 578.510797][ T1133] bond0 (unregistering): Released all slaves [ 578.539114][ T31] Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 578.546768][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 578.572666][ T31] task:syz-executor state:D stack:20544 pid:11352 tgid:11352 ppid:1 task_flags:0x400140 flags:0x00000004 [ 578.592771][ T31] Call Trace: [ 578.596082][ T31] [ 578.604073][ T31] __schedule+0x190e/0x4c90 [ 578.617712][ T31] ? __pfx___schedule+0x10/0x10 [ 578.634346][ T31] ? __pfx_lock_release+0x10/0x10 [ 578.643712][ T31] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 578.655247][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 578.665751][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 578.677588][ T31] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 578.687208][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 578.702439][ T31] ? schedule+0x90/0x320 [ 578.706720][ T31] schedule+0x14b/0x320 [ 578.714671][ T31] schedule_preempt_disabled+0x13/0x30 [ 578.728511][ T31] __mutex_lock+0x817/0x1010 [ 578.733152][ T31] ? __mutex_lock+0x602/0x1010 [ 578.737962][ T31] ? devinet_ioctl+0x34c/0x1d80 [ 578.754573][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 578.765885][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 578.777082][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 578.788284][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 578.793967][ T31] ? security_capable+0x7e/0x2d0 [ 578.807871][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 578.814756][ T31] devinet_ioctl+0x34c/0x1d80 [ 578.827631][ T31] ? __might_fault+0xaa/0x120 [ 578.836388][ T31] ? __pfx_devinet_ioctl+0x10/0x10 [ 578.853152][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 578.866461][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 578.874962][ T31] ? get_user_ifreq+0x1bb/0x200 [ 578.888144][ T31] inet_ioctl+0x3d7/0x4f0 [ 578.892566][ T31] ? __pfx_inet_ioctl+0x10/0x10 [ 578.897451][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 578.912714][ T31] ? tomoyo_path_number_perm+0x5dd/0x770 [ 578.923441][ T31] sock_do_ioctl+0x15a/0x460 [ 578.928080][ T31] ? __pfx_sock_do_ioctl+0x10/0x10 [ 578.938908][ T31] ? __pfx_lock_release+0x10/0x10 [ 578.943993][ T31] sock_ioctl+0x626/0x8e0 [ 578.963395][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 578.975013][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 578.985696][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 578.997161][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 579.010701][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 579.016395][ T31] ? __pfx_sock_ioctl+0x10/0x10 [ 579.030688][ T31] __se_sys_ioctl+0xf7/0x170 [ 579.035348][ T31] do_syscall_64+0xf3/0x230 [ 579.046055][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 579.054723][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.068261][ T31] RIP: 0033:0x7fc797d8cd6b [ 579.072713][ T31] RSP: 002b:00007ffffc83fbe0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 579.095023][ T31] RAX: ffffffffffffffda RBX: 00007ffffc83fd00 RCX: 00007fc797d8cd6b [ 579.116557][ T31] RDX: 00007ffffc83fc60 RSI: 0000000000008914 RDI: 0000000000000005 [ 579.133679][ T31] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 579.145909][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000024 [ 579.158241][ T31] R13: 0000000000000047 R14: 00007fc798ad4620 R15: 00007ffffc83fc60 [ 579.166269][ T31] [ 579.186942][ T31] INFO: task syz.6.2229:11965 blocked for more than 155 seconds. [ 579.198533][ T31] Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 579.206526][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 579.226704][ T31] task:syz.6.2229 state:D stack:25984 pid:11965 tgid:11964 ppid:7701 task_flags:0x400140 flags:0x00004004 [ 579.248320][ T31] Call Trace: [ 579.251621][ T31] [ 579.254595][ T31] __schedule+0x190e/0x4c90 [ 579.269010][ T31] ? __pfx___schedule+0x10/0x10 [ 579.273901][ T31] ? __pfx_lock_release+0x10/0x10 [ 579.294729][ T31] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 579.307416][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 579.316726][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 579.328734][ T31] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 579.334664][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 579.348155][ T31] ? schedule+0x90/0x320 [ 579.353214][ T31] schedule+0x14b/0x320 [ 579.357406][ T31] schedule_preempt_disabled+0x13/0x30 [ 579.368669][ T31] __mutex_lock+0x817/0x1010 [ 579.373298][ T31] ? dev_get_by_name+0x23/0x210 [ 579.378171][ T31] ? __mutex_lock+0x602/0x1010 [ 579.404329][ T31] ? ethnl_default_set_doit+0x3ab/0xa00 [ 579.416541][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 579.424567][ T31] ? __pfx_ethnl_parse_header_dev_get+0x10/0x10 [ 579.437850][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 579.446129][ T31] ? ethnl_set_linkmodes_validate+0x1fd/0x330 [ 579.458886][ T31] ethnl_default_set_doit+0x3ab/0xa00 [ 579.464308][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 579.478156][ T31] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 579.485330][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 579.506701][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 579.522743][ T31] genl_rcv_msg+0xb21/0xec0 [ 579.527307][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 579.537229][ T31] ? __pfx_lock_acquire+0x10/0x10 [ 579.547481][ T31] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 579.558081][ T31] ? __pfx___might_resched+0x10/0x10 [ 579.567077][ T31] netlink_rcv_skb+0x208/0x480 [ 579.578402][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 579.583476][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 579.601397][ T31] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 579.606909][ T31] genl_rcv+0x28/0x40 [ 579.618417][ T31] netlink_unicast+0x7f8/0x990 [ 579.623222][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 579.638509][ T31] ? __virt_addr_valid+0x45f/0x530 [ 579.643648][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 579.660992][ T31] ? __phys_addr_symbol+0x2f/0x70 [ 579.666041][ T31] ? __check_object_size+0x47a/0x730 [ 579.679034][ T31] netlink_sendmsg+0x8de/0xcb0 [ 579.683848][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 579.698986][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 579.704664][ T31] ? aa_sock_msg_perm+0x91/0x160 [ 579.713308][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 579.728061][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 579.735902][ T31] __sock_sendmsg+0x223/0x270 [ 579.747875][ T31] ____sys_sendmsg+0x53a/0x860 [ 579.756298][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 579.768324][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 579.773634][ T31] ? __fget_files+0x2a/0x410 [ 579.786638][ T31] ? __fget_files+0x2a/0x410 [ 579.792654][ T31] __sys_sendmsg+0x269/0x350 [ 579.806300][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 579.812138][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 579.826912][ T31] ? do_syscall_64+0x100/0x230 [ 579.836283][ T31] ? do_syscall_64+0xb6/0x230 [ 579.849551][ T31] do_syscall_64+0xf3/0x230 [ 579.854101][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.871320][ T31] RIP: 0033:0x7f644fd8d169 [ 579.875761][ T31] RSP: 002b:00007f6450b17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 579.893426][ T31] RAX: ffffffffffffffda RBX: 00007f644ffa5fa0 RCX: 00007f644fd8d169 [ 579.906284][ T31] RDX: 0000000020004004 RSI: 0000400000000240 RDI: 0000000000000003 [ 579.918317][ T31] RBP: 00007f644fe0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 579.926595][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 579.947224][ T31] R13: 0000000000000000 R14: 00007f644ffa5fa0 R15: 00007ffca6f47288 [ 579.968040][ T31] [ 579.971439][ T31] INFO: task syz.1.2234:11975 blocked for more than 156 seconds. [ 579.987424][ T31] Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 579.997376][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 580.015744][ T31] task:syz.1.2234 state:D stack:25984 pid:11975 tgid:11974 ppid:5833 task_flags:0x400140 flags:0x00000004 [ 580.036501][ T31] Call Trace: [ 580.040148][ T31] [ 580.043104][ T31] __schedule+0x190e/0x4c90 [ 580.047667][ T31] ? __pfx___schedule+0x10/0x10 [ 580.069577][ T31] ? __pfx_lock_release+0x10/0x10 [ 580.074644][ T31] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 580.088897][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 580.094583][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 580.111657][ T31] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 580.117589][ T31] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 580.134215][ T31] ? schedule+0x90/0x320 [ 580.144485][ T31] schedule+0x14b/0x320 [ 580.154685][ T31] schedule_preempt_disabled+0x13/0x30 [ 580.166220][ T31] __mutex_lock+0x817/0x1010 [ 580.178146][ T31] ? __mutex_lock+0x602/0x1010 [ 580.183158][ T31] ? nl80211_vendor_cmd_dump+0x8e/0x15e0 [ 580.198140][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 580.208627][ T31] nl80211_vendor_cmd_dump+0x8e/0x15e0 [ 580.214125][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 580.231590][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 580.237264][ T31] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 580.255786][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 580.262176][ T31] ? __build_skb_around+0x245/0x3d0 [ 580.267420][ T31] ? __pfx_nl80211_vendor_cmd_dump+0x10/0x10 [ 580.288646][ T31] ? __alloc_skb+0x28f/0x440 [ 580.293283][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.306205][ T31] ? __pfx___alloc_skb+0x10/0x10 [ 580.319006][ T31] genl_dumpit+0x10f/0x1b0 [ 580.323472][ T31] netlink_dump+0x64f/0xe10 [ 580.328012][ T31] ? __pfx_netlink_dump+0x10/0x10 [ 580.345138][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 580.354815][ T31] ? __asan_memset+0x23/0x50 [ 580.366591][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 580.375879][ T31] ? genl_start+0x4ae/0x6d0 [ 580.388303][ T31] __netlink_dump_start+0x5a2/0x790 [ 580.393543][ T31] genl_rcv_msg+0x894/0xec0 [ 580.398089][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 580.416196][ T31] ? __pfx_genl_start+0x10/0x10 [ 580.424787][ T31] ? __pfx_genl_dumpit+0x10/0x10 [ 580.437948][ T31] ? __pfx_genl_done+0x10/0x10 [ 580.447536][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 580.457931][ T31] ? __pfx_lock_acquire+0x10/0x10 [ 580.466653][ T31] ? __pfx_nl80211_vendor_cmd_dump+0x10/0x10 [ 580.478161][ T31] ? __pfx___might_resched+0x10/0x10 [ 580.486934][ T31] netlink_rcv_skb+0x208/0x480 [ 580.500302][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 580.505381][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 580.519615][ T31] ? __netlink_deliver_tap+0x7b0/0x7f0 [ 580.525135][ T31] genl_rcv+0x28/0x40 [ 580.539731][ T31] netlink_unicast+0x7f8/0x990 [ 580.544553][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 580.558606][ T31] ? __virt_addr_valid+0x45f/0x530 [ 580.563750][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 580.577665][ T31] ? __phys_addr_symbol+0x2f/0x70 [ 580.583645][ T31] ? __check_object_size+0x47a/0x730 [ 580.597269][ T31] netlink_sendmsg+0x8de/0xcb0 [ 580.613691][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 580.625679][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 580.635219][ T31] ? aa_sock_msg_perm+0x91/0x160 [ 580.646979][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 580.655653][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 580.667894][ T31] __sock_sendmsg+0x223/0x270 [ 580.675504][ T31] ____sys_sendmsg+0x53a/0x860 [ 580.686199][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 580.694472][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 580.706546][ T31] ? __fget_files+0x2a/0x410 [ 580.723456][ T31] ? __fget_files+0x2a/0x410 [ 580.728117][ T31] __sys_sendmsg+0x269/0x350 [ 580.742449][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 580.747651][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 580.763000][ T31] ? do_syscall_64+0x100/0x230 [ 580.767818][ T31] ? do_syscall_64+0xb6/0x230 [ 580.777506][ T31] do_syscall_64+0xf3/0x230 [ 580.793729][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.802185][ T31] RIP: 0033:0x7fcd23f8d169 [ 580.806626][ T31] RSP: 002b:00007fcd24e54038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 580.824333][ T31] RAX: ffffffffffffffda RBX: 00007fcd241a5fa0 RCX: 00007fcd23f8d169 [ 580.843937][ T31] RDX: 0000000000000000 RSI: 0000400000000840 RDI: 0000000000000003 [ 580.856111][ T31] RBP: 00007fcd2400e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 580.872272][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 580.888922][ T31] R13: 0000000000000000 R14: 00007fcd241a5fa0 R15: 00007ffe09ad59b8 [ 580.896945][ T31] [ 580.908247][ T31] [ 580.908247][ T31] Showing all locks held in the system: [ 580.915977][ T31] 1 lock held by pool_workqueue_/3: [ 580.936867][ T31] #0: ffffffff8eb3e8b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x381/0x820 [ 580.962746][ T31] 3 locks held by kworker/u8:0/12: [ 580.967878][ T31] #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 580.989574][ T31] #1: ffffc90000117c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 581.009393][ T31] #2: ffffffff8fed5d08 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 581.027122][ T31] 3 locks held by kworker/u8:1/13: [ 581.032547][ T31] #0: ffff888030c2e948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 581.050819][ T31] #1: ffffc90000127c60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 581.081775][ T31] #2: ffffffff8fed5d08 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x10e/0x16a0 [ 581.096123][ T31] 1 lock held by khungtaskd/31: [ 581.108332][ T31] #0: ffffffff8eb393e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 581.127245][ T31] 3 locks held by kworker/1:1/47: [ 581.133189][ T31] #0: ffff88801b078d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 581.152981][ T31] #1: ffffc90000b77c60 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 581.181790][ T31] #2: ffffffff8fed5d08 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 581.197398][ T31] 3 locks held by kworker/0:2/969: [ 581.209480][ T31] 5 locks held by kworker/u8:8/1133: [ 581.214783][ T31] #0: ffff88801beee148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 581.235492][ T31] #1: ffffc900045efc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 581.256981][ T31] #2: ffffffff8fec94d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17a/0xd60 [ 581.274908][ T31] #3: ffffffff8fed5d08 (rtnl_mutex){+.+.}-{4:4}, at: cleanup_net+0x6bf/0xd60 [ 581.297334][ T31] #4: ffffffff8eb3e8b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x820 [ 581.338011][ T31] 2 locks held by dhcpcd/5497: [ 581.343476][ T31] #0: ffffffff8febac08 (vlan_ioctl_mutex){+.+.}-{4:4}, at: sock_ioctl+0x661/0x8e0 [ 581.364329][ T31] #1: ffffffff8fed5d08 (rtnl_mutex){+.+.}-{4:4}, at: vlan_ioctl_handler+0x112/0x9d0 [ 581.387408][ T31] 2 locks held by getty/5582: [ 581.400161][ T31] #0: ffff888031b850a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 581.418508][ T31] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x616/0x1770 [ 581.442039][ T31] 1 lock held by syz-executor/5829: [ 581.447538][ T31] #0: ffffffff8fed5d08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 581.465625][ T31] 2 locks held by kworker/0:4/5893: [ 581.471150][ T31] 3 locks held by kworker/1:10/5967: [ 581.476454][ T31] #0: ffff88801b079d48 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x98b/0x18e0 [ 581.501572][ T31] #1: ffffc9000411fc60 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9c6/0x18e0 [ 581.524876][ T31] #2: ffffffff8fed5d08 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x99/0xfb0 [ 581.586356][ T31] 1 lock held by syz-executor/11242: [ 581.594766][ T31] #0: ffffffff8fed5d08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 581.604689][ T31] 2 locks held by udevd/11243: [ 581.616117][ T31] #0: ffff88802a199fe0 (&mm->mmap_lock){++++}-{4:4}, at: vms_complete_munmap_vmas+0x196/0x8f0 [ 581.628422][ T31] #1: ffff888028130a08 (&anon_vma->rwsem){++++}-{4:4}, at: validate_mm+0x2c8/0x590 [ 581.676680][ T31] 1 lock held by udevd/11246: [ 581.688762][ T31] #0: ffff8880b873e958 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 581.699448][ T31] 1 lock held by syz-executor/11352: [ 581.704747][ T31] #0: ffffffff8fed5d08 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x34c/0x1d80 [ 581.714976][ T31] 2 locks held by kworker/u8:10/11458: [ 581.724161][ T31] 1 lock held by syz.0.2215/11935: [ 581.731380][ T31] #0: ffffffff8fed5d08 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 581.743191][ T31] 2 locks held by syz.6.2229/11965: [ 581.748710][ T31] #0: ffffffff8ff39e10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 581.756978][ T31] #1: ffffffff8fed5d08 (rtnl_mutex){+.+.}-{4:4}, at: ethnl_default_set_doit+0x3ab/0xa00 [ 581.767979][ T31] 3 locks held by syz.1.2234/11975: [ 581.773747][ T31] #0: ffffffff8ff39e10 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 581.782319][ T31] #1: ffff88807c2856c8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0x119/0x790 [ 581.797457][ T31] #2: ffffffff8fed5d08 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_vendor_cmd_dump+0x8e/0x15e0 [ 581.848396][ T31] [ 581.850755][ T31] ============================================= [ 581.850755][ T31] [ 581.868357][ T31] NMI backtrace for cpu 1 [ 581.868373][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 581.868401][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 581.868415][ T31] Call Trace: [ 581.868425][ T31] [ 581.868443][ T31] dump_stack_lvl+0x241/0x360 [ 581.868476][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 581.868505][ T31] ? __pfx__printk+0x10/0x10 [ 581.868542][ T31] nmi_cpu_backtrace+0x49c/0x4d0 [ 581.868580][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 581.868611][ T31] ? _printk+0xd5/0x120 [ 581.868632][ T31] ? __pfx__printk+0x10/0x10 [ 581.868656][ T31] ? __wake_up_klogd+0xcc/0x110 [ 581.868690][ T31] ? __pfx__printk+0x10/0x10 [ 581.868714][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 581.868754][ T31] ? __rcu_read_unlock+0xa1/0x110 [ 581.868792][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 581.868828][ T31] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 581.868864][ T31] watchdog+0x1058/0x10a0 [ 581.868904][ T31] ? watchdog+0x1ea/0x10a0 [ 581.868947][ T31] ? __pfx_watchdog+0x10/0x10 [ 581.868985][ T31] kthread+0x7ab/0x920 [ 581.869022][ T31] ? __pfx_kthread+0x10/0x10 [ 581.869062][ T31] ? __pfx_watchdog+0x10/0x10 [ 581.869101][ T31] ? __pfx_kthread+0x10/0x10 [ 581.869138][ T31] ? __pfx_kthread+0x10/0x10 [ 581.869180][ T31] ? __pfx_kthread+0x10/0x10 [ 581.869217][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 581.869248][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 581.869286][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 581.869322][ T31] ? __pfx_kthread+0x10/0x10 [ 581.869362][ T31] ret_from_fork+0x4d/0x80 [ 581.869395][ T31] ? __pfx_kthread+0x10/0x10 [ 581.869438][ T31] ret_from_fork_asm+0x1a/0x30 [ 581.869484][ T31] [ 581.869493][ T31] Sending NMI from CPU 1 to CPUs 0: [ 582.054193][ C0] NMI backtrace for cpu 0 [ 582.054210][ C0] CPU: 0 UID: 0 PID: 11458 Comm: kworker/u8:10 Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 582.054235][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 582.054249][ C0] Workqueue: bat_events batadv_nc_worker [ 582.054276][ C0] RIP: 0010:unwind_next_frame+0x177c/0x22d0 [ 582.054314][ C0] Code: 24 10 48 8d 5a 02 48 83 c2 03 48 89 d8 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 81 0a 00 00 48 89 d0 48 c1 e8 03 0f b6 04 28 84 c0 <0f> 85 93 0a 00 00 48 0f bf 03 48 8b 34 24 48 01 c6 49 8d 55 40 4c [ 582.054332][ C0] RSP: 0018:ffffc90000006a50 EFLAGS: 00000246 [ 582.054350][ C0] RAX: 0000000000000000 RBX: ffffffff9148a994 RCX: 0000000000000000 [ 582.054365][ C0] RDX: ffffffff9148a995 RSI: 0000000000000001 RDI: ffffc90000006b80 [ 582.054381][ C0] RBP: dffffc0000000000 R08: ffffc90000006b7f R09: ffffc90000006b70 [ 582.054397][ C0] R10: dffffc0000000000 R11: fffff52000000d70 R12: ffffc90000008000 [ 582.054413][ C0] R13: ffffc90000006b20 R14: ffffffff89ce0a7d R15: ffffc90000006b70 [ 582.054433][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 582.054452][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 582.054467][ C0] CR2: 00007fff35c33df8 CR3: 000000007a444000 CR4: 0000000000350ef0 [ 582.054484][ C0] Call Trace: [ 582.054492][ C0] [ 582.054502][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 582.054529][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 582.054566][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 582.054592][ C0] ? nmi_handle+0x2a/0x5a0 [ 582.054637][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 582.054665][ C0] ? nmi_handle+0x151/0x5a0 [ 582.054699][ C0] ? nmi_handle+0x2a/0x5a0 [ 582.054733][ C0] ? unwind_next_frame+0x177c/0x22d0 [ 582.054766][ C0] ? default_do_nmi+0x63/0x160 [ 582.054792][ C0] ? exc_nmi+0x123/0x1f0 [ 582.054817][ C0] ? end_repeat_nmi+0xf/0x53 [ 582.054849][ C0] ? __napi_poll+0xcd/0x490 [ 582.054884][ C0] ? unwind_next_frame+0x177c/0x22d0 [ 582.054917][ C0] ? unwind_next_frame+0x177c/0x22d0 [ 582.054952][ C0] ? unwind_next_frame+0x177c/0x22d0 [ 582.054986][ C0] [ 582.054994][ C0] [ 582.055007][ C0] ? process_backlog+0x662/0x15b0 [ 582.055040][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 582.055071][ C0] arch_stack_walk+0x11c/0x150 [ 582.055095][ C0] ? __napi_poll+0xcd/0x490 [ 582.055126][ C0] stack_trace_save+0x118/0x1d0 [ 582.055153][ C0] ? stack_trace_save+0x118/0x1d0 [ 582.055185][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 582.055215][ C0] ? __asan_memset+0x23/0x50 [ 582.055238][ C0] ? unwind_next_frame+0x193b/0x22d0 [ 582.055274][ C0] kasan_save_track+0x3f/0x80 [ 582.055297][ C0] ? kasan_save_track+0x3f/0x80 [ 582.055319][ C0] ? __kasan_slab_alloc+0x66/0x80 [ 582.055344][ C0] ? kmem_cache_alloc_node_noprof+0x1d9/0x380 [ 582.055375][ C0] ? __alloc_skb+0x1c3/0x440 [ 582.055407][ C0] ? synproxy_send_client_synack+0x1b9/0xe20 [ 582.055433][ C0] ? nft_synproxy_eval_v4+0x3ca/0x610 [ 582.055462][ C0] ? nft_synproxy_do_eval+0x362/0xa60 [ 582.055490][ C0] ? nft_do_chain+0x4af/0x1da0 [ 582.055517][ C0] ? nft_do_chain_inet+0x418/0x6b0 [ 582.055545][ C0] ? nf_hook_slow+0xc5/0x220 [ 582.055566][ C0] ? NF_HOOK+0x29e/0x450 [ 582.055588][ C0] ? NF_HOOK+0x3a6/0x450 [ 582.055609][ C0] ? __netif_receive_skb+0x2bf/0x650 [ 582.055635][ C0] ? process_backlog+0x662/0x15b0 [ 582.055690][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.055726][ C0] __kasan_slab_alloc+0x66/0x80 [ 582.055753][ C0] kmem_cache_alloc_node_noprof+0x1d9/0x380 [ 582.055785][ C0] ? __alloc_skb+0x1c3/0x440 [ 582.055821][ C0] __alloc_skb+0x1c3/0x440 [ 582.055858][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 582.055892][ C0] ? __entry_text_end+0x1020c5/0x1020c9 [ 582.055932][ C0] synproxy_send_client_synack+0x1b9/0xe20 [ 582.055963][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.055996][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 582.056029][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 582.056055][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.056091][ C0] ? synproxy_pernet+0x45/0x270 [ 582.056120][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.056156][ C0] nft_synproxy_eval_v4+0x3ca/0x610 [ 582.056193][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 582.056222][ C0] ? validate_chain+0x11e/0x5920 [ 582.056248][ C0] ? nf_ip_checksum+0x13a/0x500 [ 582.056279][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 582.056312][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 582.056346][ C0] ? __pfx_validate_chain+0x10/0x10 [ 582.056372][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.056410][ C0] nft_do_chain+0x4af/0x1da0 [ 582.056448][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 582.056475][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 582.056506][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.056552][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 582.056624][ C0] nft_do_chain_inet+0x418/0x6b0 [ 582.056654][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 582.056681][ C0] ? ipt_do_table+0x312/0x1860 [ 582.056727][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 582.056754][ C0] nf_hook_slow+0xc5/0x220 [ 582.056777][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 582.056802][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 582.056825][ C0] NF_HOOK+0x29e/0x450 [ 582.056847][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.056883][ C0] ? NF_HOOK+0x9a/0x450 [ 582.056904][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 582.056929][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 582.056957][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.056991][ C0] ? ip_rcv_finish+0x406/0x560 [ 582.057015][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 582.057039][ C0] NF_HOOK+0x3a6/0x450 [ 582.057059][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.057093][ C0] ? __lock_acquire+0x1397/0x2100 [ 582.057127][ C0] ? NF_HOOK+0x9a/0x450 [ 582.057148][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 582.057170][ C0] ? ip_rcv_core+0x801/0xd10 [ 582.057200][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 582.057228][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 582.057252][ C0] __netif_receive_skb+0x2bf/0x650 [ 582.057282][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 582.057315][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 582.057342][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 582.057376][ C0] ? __pfx_lock_release+0x10/0x10 [ 582.057410][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 582.057446][ C0] process_backlog+0x662/0x15b0 [ 582.057480][ C0] ? process_backlog+0x33b/0x15b0 [ 582.057516][ C0] ? __pfx_process_backlog+0x10/0x10 [ 582.057546][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 582.057580][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 582.057616][ C0] __napi_poll+0xcd/0x490 [ 582.057647][ C0] net_rx_action+0x89b/0x1240 [ 582.057690][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 582.057721][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 582.057778][ C0] handle_softirqs+0x2d6/0x9b0 [ 582.057803][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 582.057833][ C0] ? do_softirq+0x11b/0x1e0 [ 582.057859][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 582.057891][ C0] do_softirq+0x11b/0x1e0 [ 582.057914][ C0] [ 582.057921][ C0] [ 582.057930][ C0] ? __pfx_do_softirq+0x10/0x10 [ 582.057955][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 582.057988][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 582.058021][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.058055][ C0] ? rcu_is_watching+0x15/0xb0 [ 582.058081][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 582.058107][ C0] ? batadv_nc_purge_paths+0x312/0x3b0 [ 582.058131][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 582.058156][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.058200][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.058238][ C0] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 582.058265][ C0] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10 [ 582.058296][ C0] batadv_nc_purge_paths+0x312/0x3b0 [ 582.058332][ C0] batadv_nc_worker+0x365/0x610 [ 582.058359][ C0] ? process_scheduled_works+0x9c6/0x18e0 [ 582.058390][ C0] process_scheduled_works+0xac0/0x18e0 [ 582.058439][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 582.058476][ C0] ? assign_work+0x364/0x3d0 [ 582.058506][ C0] worker_thread+0x870/0xd30 [ 582.058538][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.058573][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.058607][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 582.058639][ C0] ? __kthread_parkme+0x169/0x1d0 [ 582.058672][ C0] ? __pfx_worker_thread+0x10/0x10 [ 582.058702][ C0] kthread+0x7ab/0x920 [ 582.058734][ C0] ? __pfx_kthread+0x10/0x10 [ 582.058769][ C0] ? __pfx_worker_thread+0x10/0x10 [ 582.058799][ C0] ? __pfx_kthread+0x10/0x10 [ 582.058831][ C0] ? __pfx_kthread+0x10/0x10 [ 582.058867][ C0] ? __pfx_kthread+0x10/0x10 [ 582.058899][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 582.058925][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 582.058959][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 582.058993][ C0] ? __pfx_kthread+0x10/0x10 [ 582.059027][ C0] ret_from_fork+0x4d/0x80 [ 582.059056][ C0] ? __pfx_kthread+0x10/0x10 [ 582.059089][ C0] ret_from_fork_asm+0x1a/0x30 [ 582.059127][ C0] [ 582.968296][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 582.975171][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc6-syzkaller-00003-g4d872d51bc9d #0 [ 582.985689][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 582.995839][ T31] Call Trace: [ 582.999128][ T31] [ 583.002068][ T31] dump_stack_lvl+0x241/0x360 [ 583.006769][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 583.011988][ T31] ? __pfx__printk+0x10/0x10 [ 583.016598][ T31] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 583.022617][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.028281][ T31] ? vscnprintf+0x5d/0x90 [ 583.032633][ T31] panic+0x349/0x880 [ 583.036543][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.042209][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 583.048387][ T31] ? __pfx_panic+0x10/0x10 [ 583.052812][ T31] ? tick_nohz_tick_stopped+0x82/0xb0 [ 583.058212][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.063877][ T31] ? __irq_work_queue_local+0x137/0x410 [ 583.069455][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.075117][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 583.080524][ T31] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 583.086700][ T31] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 583.092880][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.098542][ T31] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 583.104723][ T31] watchdog+0x1097/0x10a0 [ 583.109084][ T31] ? watchdog+0x1ea/0x10a0 [ 583.113534][ T31] ? __pfx_watchdog+0x10/0x10 [ 583.118238][ T31] kthread+0x7ab/0x920 [ 583.122334][ T31] ? __pfx_kthread+0x10/0x10 [ 583.126957][ T31] ? __pfx_watchdog+0x10/0x10 [ 583.131661][ T31] ? __pfx_kthread+0x10/0x10 [ 583.136281][ T31] ? __pfx_kthread+0x10/0x10 [ 583.140905][ T31] ? __pfx_kthread+0x10/0x10 [ 583.145522][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 583.150743][ T31] ? srso_alias_return_thunk+0x5/0xfbef5 [ 583.156406][ T31] ? lockdep_hardirqs_on+0x99/0x150 [ 583.161632][ T31] ? __pfx_kthread+0x10/0x10 [ 583.166252][ T31] ret_from_fork+0x4d/0x80 [ 583.170693][ T31] ? __pfx_kthread+0x10/0x10 [ 583.175312][ T31] ret_from_fork_asm+0x1a/0x30 [ 583.180112][ T31] [ 583.183345][ T31] Kernel Offset: disabled [ 583.187670][ T31] Rebooting in 86400 seconds..