last executing test programs: 26.354847421s ago: executing program 0 (id=2837): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000010003904feffffffffdbdf2500000000", @ANYRES32=r1, @ANYBLOB="d5ff"], 0x20}}, 0x804) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 24.019914792s ago: executing program 0 (id=2851): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x97, 0x2a9, &(0x7f0000000500)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000e00)={'#! ', '', [{0x20, 'cp932Y\xe4\x00\x01mi@\xa9\x04\xa6c\xe3\x80ox\xfc\xe0\x94R\x81a\xbb\x924\xfe\xac\\\xef\xb5E\xfb\xf1@\v2\xca\x9eQ-I\a\xb2\x84\x9b\xea\x82}lB\xdc@(th*\xe0\v\xba\xe6iP\xd8\xfb\x11\x86\x99\x94\xc12\x9fj\xefP\x9c\xc2\xc8\xb1-d\xb3\xb3\xbc \\\x11V%\x87\xd5\x16\xf1\x89|\xfc!\xa1\xda,\xbd\xd0\xedw\x8c\xee\xc3\xe5Ii\x81K\x1b{\xc6b;d+&i\xab\b\xbd\xbd\x8d|d\x8f+\xad\x83\x18\x81\x87(\x1e\x12\x1b\xfe\xc9 bW\xffx\xc0\x868\b!\xd7\x1d-\xaa\xdd\xa3\xe5\x19\xbbA\xa4p\x16\xbc`\xc7\xb4z\b\xb8H\v\x15\xbdD\x17c\xda\xbd?\'t\x10\xf6\xb1l\xb71\x011\xda\xce`\x16\xc7#\x1f\xa4\xfan&\xdaH\xd0\x88\xbf\x01\x13\x80n.\xc5N\a\xeb\xb1\xec|\xf5\xfe\xd0F\xbb\xa9(\xe5 \xb7Ws\xbdu\xca\xc0\a\xb3Z\xa9@\xff\x04\x8c\xbeN\x8c\x98\xb1\xe0\x84\xfa\xca\xc8'}]}, 0x105) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x4c02, &(0x7f0000000140)) ftruncate(r0, 0x5) 22.77793909s ago: executing program 0 (id=2853): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300000000000500030080ffffff0500030080ffffff0800020003"], 0x50}}, 0x0) 22.266513442s ago: executing program 4 (id=2858): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14}}, 0x7c}}, 0x4) 22.266361821s ago: executing program 2 (id=2859): syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x1014800, &(0x7f0000001880)=ANY=[], 0x1, 0xda6, &(0x7f0000003c80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r1 = openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) sendfile(r1, r1, 0x0, 0x7a680000) open(&(0x7f0000000000)='./file1\x00', 0x14d27e, 0x0) truncate(0x0, 0x8ed) 22.1079727s ago: executing program 0 (id=2860): r0 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000010003904feffffffffdbdf2500000000", @ANYRES32=r1, @ANYBLOB="d5ff"], 0x20}}, 0x804) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 21.570220357s ago: executing program 4 (id=2862): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x97, 0x2a9, &(0x7f0000000500)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000e00)={'#! ', '', [{0x20, 'cp932Y\xe4\x00\x01mi@\xa9\x04\xa6c\xe3\x80ox\xfc\xe0\x94R\x81a\xbb\x924\xfe\xac\\\xef\xb5E\xfb\xf1@\v2\xca\x9eQ-I\a\xb2\x84\x9b\xea\x82}lB\xdc@(th*\xe0\v\xba\xe6iP\xd8\xfb\x11\x86\x99\x94\xc12\x9fj\xefP\x9c\xc2\xc8\xb1-d\xb3\xb3\xbc \\\x11V%\x87\xd5\x16\xf1\x89|\xfc!\xa1\xda,\xbd\xd0\xedw\x8c\xee\xc3\xe5Ii\x81K\x1b{\xc6b;d+&i\xab\b\xbd\xbd\x8d|d\x8f+\xad\x83\x18\x81\x87(\x1e\x12\x1b\xfe\xc9 bW\xffx\xc0\x868\b!\xd7\x1d-\xaa\xdd\xa3\xe5\x19\xbbA\xa4p\x16\xbc`\xc7\xb4z\b\xb8H\v\x15\xbdD\x17c\xda\xbd?\'t\x10\xf6\xb1l\xb71\x011\xda\xce`\x16\xc7#\x1f\xa4\xfan&\xdaH\xd0\x88\xbf\x01\x13\x80n.\xc5N\a\xeb\xb1\xec|\xf5\xfe\xd0F\xbb\xa9(\xe5 \xb7Ws\xbdu\xca\xc0\a\xb3Z\xa9@\xff\x04\x8c\xbeN\x8c\x98\xb1\xe0\x84\xfa\xca\xc8'}]}, 0x105) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x4c02, &(0x7f0000000140)) ftruncate(r0, 0x5) 21.526358351s ago: executing program 2 (id=2864): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f00000000c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000dc0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = dup(r2) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) 21.079654347s ago: executing program 4 (id=2868): syz_emit_ethernet(0x4a, &(0x7f00000009c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xa, 0x0, 0x0, 0x0, 0x0, {[@eol, @md5sig={0x13, 0x12, "92cfca0408a444b93c368a417cf7fe41"}]}}}}}}}, 0x0) 20.574753163s ago: executing program 4 (id=2869): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300000000000500030080ffffff0500030080ffffff0800020003"], 0x50}}, 0x0) 17.690871968s ago: executing program 2 (id=2876): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x97, 0x2a9, &(0x7f0000000500)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000e00)={'#! ', '', [{0x20, 'cp932Y\xe4\x00\x01mi@\xa9\x04\xa6c\xe3\x80ox\xfc\xe0\x94R\x81a\xbb\x924\xfe\xac\\\xef\xb5E\xfb\xf1@\v2\xca\x9eQ-I\a\xb2\x84\x9b\xea\x82}lB\xdc@(th*\xe0\v\xba\xe6iP\xd8\xfb\x11\x86\x99\x94\xc12\x9fj\xefP\x9c\xc2\xc8\xb1-d\xb3\xb3\xbc \\\x11V%\x87\xd5\x16\xf1\x89|\xfc!\xa1\xda,\xbd\xd0\xedw\x8c\xee\xc3\xe5Ii\x81K\x1b{\xc6b;d+&i\xab\b\xbd\xbd\x8d|d\x8f+\xad\x83\x18\x81\x87(\x1e\x12\x1b\xfe\xc9 bW\xffx\xc0\x868\b!\xd7\x1d-\xaa\xdd\xa3\xe5\x19\xbbA\xa4p\x16\xbc`\xc7\xb4z\b\xb8H\v\x15\xbdD\x17c\xda\xbd?\'t\x10\xf6\xb1l\xb71\x011\xda\xce`\x16\xc7#\x1f\xa4\xfan&\xdaH\xd0\x88\xbf\x01\x13\x80n.\xc5N\a\xeb\xb1\xec|\xf5\xfe\xd0F\xbb\xa9(\xe5 \xb7Ws\xbdu\xca\xc0\a\xb3Z\xa9@\xff\x04\x8c\xbeN\x8c\x98\xb1\xe0\x84\xfa\xca\xc8'}]}, 0x105) open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000340)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x4c02, &(0x7f0000000140)) ftruncate(r0, 0x5) 17.302069424s ago: executing program 2 (id=2877): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xdc, 0x3f, 0x6e, 0x40, 0x813, 0x1, 0x3a08, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x26, 0x9b}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000180)={0x59119b9c28e5c9af, 0x18, 0x3, "02737c"}, 0x0, 0x0}) 16.086870658s ago: executing program 2 (id=2879): r0 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000010003904feffffffffdbdf2500000000", @ANYRES32=r1, @ANYBLOB="d5ff"], 0x20}}, 0x804) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 2.205418038s ago: executing program 1 (id=2916): socket$inet_udplite(0x2, 0x2, 0x88) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f0000002e80)="$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") openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_IOCTL(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./bus\x00', 0xa37e, 0x0) r2 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0) ftruncate(r2, 0x2088002) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8088e3ad122bc192, 0x4002011, r1, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 1.614528004s ago: executing program 1 (id=2918): r0 = syz_io_uring_setup(0x414b, &(0x7f0000000300)={0x0, 0x2, 0x10100, 0x3, 0x3b0}, &(0x7f00000002c0)=0x0, &(0x7f0000000400)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000001000), 0x200) add_key(0x0, 0x0, &(0x7f00000000c0)="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", 0x10d, 0xfffffffffffffffd) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) 1.595925993s ago: executing program 3 (id=2919): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, &(0x7f0000000040)) 1.406984995s ago: executing program 0 (id=2861): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001280)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IPV4_DST={0x8, 0xc, @remote}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @broadcast}]}}]}, 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.362581535s ago: executing program 3 (id=2920): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0xa, 0x3, 0x3a) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x18, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c25000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_io_uring_setup(0x24f9, &(0x7f0000000180)={0x0, 0x0, 0x10100, 0x0, 0x1000000}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000000c0)=ANY=[@ANYRES16=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 1.178263253s ago: executing program 3 (id=2921): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d85eaf5e92e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d", 0x9e}], 0x2}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01"], 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 1.119176714s ago: executing program 1 (id=2922): r0 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r2 = fcntl$dupfd(r0, 0x0, r1) write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d) 1.068608472s ago: executing program 0 (id=2923): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000040)={0x14, &(0x7f0000002a80)=ANY=[@ANYBLOB="00100200000002cb"], 0x0}, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x5b02, 0x0) 914.78622ms ago: executing program 1 (id=2924): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)={0x48, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}], @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x48}}, 0x0) 839.023905ms ago: executing program 3 (id=2925): ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000840)={0xa, 0x0, {0x8, @struct={0x80000001, 0x3}, 0x0, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0xe8, @usage=0x50, 0x0, 0x0, [0x0, 0x8]}, {0x0, @struct={0x3, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x44, @usage, 0x4, 0x0, [0x0, 0x2, 0x4]}, {0x0, @usage=0xffffffffffffffff, 0x0, 0x8, 0x0, 0x7, 0x0, 0xfffffffffffffffc, 0xa42, @usage=0x2000000000000, 0x727, 0x0, [0x760d, 0x2, 0x7]}, {0x100000000}}) 755.257553ms ago: executing program 1 (id=2926): r0 = socket(0x10, 0x803, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000540)=@file={0x0, './file0\x00'}, 0x6e) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 614.771865ms ago: executing program 3 (id=2927): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.swap.current\x00', 0x275a, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$inet(0x2, 0x3, 0x102) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stat\x00') r1 = socket$vsock_stream(0x28, 0x1, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r2, 0x0) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x0) ioctl$sock_ifreq(r0, 0x89fd, &(0x7f0000000280)={'bridge0\x00', @ifru_settings={0x20000000, 0x0, @cisco=0x0}}) 532.937133ms ago: executing program 1 (id=2928): syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000001140)='./file0\x00', 0x0, &(0x7f0000001180), 0x0, 0x10e8, &(0x7f00000011c0)="$eJzs2D2O00AYBuB3JoalM1p6C7F9Gk5AAdI2KeAIERcgoovElbgAHIErBPqkyAmMHONQhB9BCAjpeaTMxKPP/mbKdwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACDJtmW5EFNrofnkrz5Mk+66c/97aym5PnL29XTV4+frZLUw28oLnUYZz9o9fbOOJd02ezXyyx2lzsXAAAAcNSfrU1y7+S7d/9afwAAAOBn/viFAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAZrodh8T6pSUrSdR9uPyXp/vXGAAAAgLOU1Lxuv7U+XgN89TAf23pSV3OTd6fvz77f8Wrq0PzGdgEAAOB/9+Lql8rLGNKnoP4ozTGwl0NcbzKfz3dPxih+k2QzrO/Xy82+PZT0fd9f4BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCZHTggAQAAABD0/3U7AgUAAAAAAAAAANgoAAD//wAdzvo=") 367.822197ms ago: executing program 3 (id=2929): syz_mount_image$f2fs(&(0x7f0000005700), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000005a00)=ANY=[@ANYBLOB="6e6f657874656e745f63616368652c6a71666d743d7666736f6c642c6e6f71756f74612c6e6f71756f74612c66617374626f6f742c6e6f696e6c696e655f64656e7472792c6a71666d743d76667376312c6673796e635f6d6f64653d7374726963742c6772706a71756f74613d278c006c6c6f635f6d6f64653d64656661756c742c696e6c696e655f78617474722c00a2b4db502b6ba8210424f7f797a6ddd50d26e73f72a841707ea019cc81c223d959a991615e17b58a4e3ec9b2e54b87aafbaf0036421993a261bd97b95beab3b8db73ad782b6009737439da6f1d157405f23efa22e2b774ebcf1fbf96b0f516775ed21aecaa6ba0f6d45e7116d6b8e7ba106e1bc013fe42d92ac1dfb7a083be457d767f9c35564b3bec3688b7271abc48c68f836e85c938f9421f94852a1663d51e28131dc06f3283e4177f9c00588bdb206ab8133754c6df320e574f43807d7febd123f46625af37dea6e822fbc470034588d31a4f90aeba747e687159"], 0x8, 0x550f, &(0x7f00000001c0)="$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") creat(&(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00') 296.043832ms ago: executing program 4 (id=2870): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14}}, 0x7c}}, 0x4) 8.800816ms ago: executing program 2 (id=2886): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 4 (id=2930): r0 = syz_io_uring_setup(0x414b, &(0x7f0000000300)={0x0, 0x2, 0x10100, 0x3, 0x3b0}, &(0x7f00000002c0)=0x0, &(0x7f0000000400)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_io_uring_submit(r1, r2, &(0x7f00000003c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x20, 0x0, @fd_index, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000001000), 0x200) add_key(0x0, 0x0, &(0x7f00000000c0)="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", 0x10d, 0xfffffffffffffffd) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.539194][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 974.561282][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.578756][T16318] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 974.590428][T16336] veth0_vlan: entered promiscuous mode [ 974.625952][T16336] veth1_vlan: entered promiscuous mode [ 974.641207][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.669238][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.697270][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.716066][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.726567][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.739000][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.749260][T16318] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 974.760170][T16318] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 974.771830][T16318] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 974.935827][T16318] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.945177][T16318] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.954330][T16318] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 974.964152][T16318] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.050194][T16336] veth0_macvtap: entered promiscuous mode [ 975.094054][T16336] veth1_macvtap: entered promiscuous mode [ 975.133661][ T11] hsr_slave_0: left promiscuous mode [ 975.140675][ T11] hsr_slave_1: left promiscuous mode [ 975.146530][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 975.155142][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 975.163907][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 975.171706][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 975.190503][ T11] hsr_slave_0: left promiscuous mode [ 975.196542][ T11] hsr_slave_1: left promiscuous mode [ 975.205883][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 975.213437][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 975.224106][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 975.232367][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 975.243907][ T11] hsr_slave_0: left promiscuous mode [ 975.250937][ T11] hsr_slave_1: left promiscuous mode [ 975.259959][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 975.267597][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 975.275394][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 975.283323][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 975.295394][ T11] hsr_slave_0: left promiscuous mode [ 975.302738][ T11] hsr_slave_1: left promiscuous mode [ 975.311885][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 975.320028][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 975.329827][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 975.338383][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 975.407849][ T11] veth1_macvtap: left promiscuous mode [ 975.413412][ T11] veth0_macvtap: left promiscuous mode [ 975.419685][ T11] veth1_vlan: left promiscuous mode [ 975.425008][ T11] veth0_vlan: left promiscuous mode [ 975.432493][ T11] veth1_macvtap: left promiscuous mode [ 975.438759][ T11] veth0_macvtap: left promiscuous mode [ 975.444359][ T11] veth1_vlan: left promiscuous mode [ 975.449920][ T11] veth0_vlan: left promiscuous mode [ 975.456251][ T11] veth1_macvtap: left promiscuous mode [ 975.466771][ T11] veth0_macvtap: left promiscuous mode [ 975.472410][ T11] veth1_vlan: left promiscuous mode [ 975.478059][ T11] veth0_vlan: left promiscuous mode [ 975.484517][ T11] veth1_macvtap: left promiscuous mode [ 975.496779][ T11] veth0_macvtap: left promiscuous mode [ 975.502367][ T11] veth1_vlan: left promiscuous mode [ 975.508165][ T11] veth0_vlan: left promiscuous mode [ 976.385532][ T11] team0 (unregistering): Port device team_slave_1 removed [ 976.442218][ T11] team0 (unregistering): Port device team_slave_0 removed [ 977.586972][ T11] team0 (unregistering): Port device team_slave_1 removed [ 977.654035][ T11] team0 (unregistering): Port device team_slave_0 removed [ 978.832608][ T11] team0 (unregistering): Port device team_slave_1 removed [ 978.898009][ T11] team0 (unregistering): Port device team_slave_0 removed [ 980.059672][ T11] team0 (unregistering): Port device team_slave_1 removed [ 980.124616][ T11] team0 (unregistering): Port device team_slave_0 removed [ 980.746598][T16350] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 980.760672][T16350] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 980.818197][T16350] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 980.828153][T16350] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 980.863278][T16357] 8021q: adding VLAN 0 to HW filter on device bond0 [ 980.989287][T16357] 8021q: adding VLAN 0 to HW filter on device team0 [ 981.104141][T16336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 981.122186][T16336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.144884][T16336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 981.154459][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.162339][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.194534][ T2550] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.201696][ T2550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 981.218392][ T2550] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.225587][ T2550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 981.247091][T16336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 981.258213][T16336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 981.270359][T16336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 981.367237][T16336] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.383343][T16336] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.393360][T16336] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.403053][T16336] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.449331][T16353] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 981.476715][T16353] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 981.514182][T16353] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 981.568994][ T2550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.578861][T16353] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 981.604238][ T2550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.930550][T16350] 8021q: adding VLAN 0 to HW filter on device bond0 [ 981.972770][T12666] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.005713][T12666] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.083577][T16350] 8021q: adding VLAN 0 to HW filter on device team0 [ 982.209861][ T2550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.211842][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.219008][ T2550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.224873][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 982.232561][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.246756][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 982.388090][T16357] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 982.508680][T16353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 982.680310][T16353] 8021q: adding VLAN 0 to HW filter on device team0 [ 982.762363][T16357] veth0_vlan: entered promiscuous mode [ 982.825124][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 982.832296][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 982.842499][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 982.849729][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 982.893361][T16357] veth1_vlan: entered promiscuous mode [ 983.061181][T16357] veth0_macvtap: entered promiscuous mode [ 983.136546][T16357] veth1_macvtap: entered promiscuous mode [ 983.194547][T16515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2590'. [ 983.280336][T16357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.324677][T16357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.340177][T16357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 983.381407][T16357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.413113][ T5289] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 983.413933][T16357] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 983.489298][T16357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 983.504506][T16357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.515271][T16357] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 983.526536][T16357] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 983.538856][T16357] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 983.562914][ T5289] usb 4-1: device descriptor read/64, error -71 [ 983.581078][T16357] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.598565][T16357] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.623692][T16357] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.657764][T16357] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.708230][T16350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 983.789003][T16353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 983.814368][ T5289] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 983.841827][T16539] loop4: detected capacity change from 0 to 256 [ 983.924181][T16539] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x726052d3, utbl_chksum : 0xe619d30d) [ 983.952590][ T5289] usb 4-1: device descriptor read/64, error -71 [ 983.994665][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 984.013242][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 984.070401][T16350] veth0_vlan: entered promiscuous mode [ 984.080367][ T5289] usb usb4-port1: attempt power cycle [ 984.111643][T16353] veth0_vlan: entered promiscuous mode [ 984.184721][T16350] veth1_vlan: entered promiscuous mode [ 984.197430][T16353] veth1_vlan: entered promiscuous mode [ 984.216640][ T2550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 984.228235][ T2550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 984.315412][T16350] veth0_macvtap: entered promiscuous mode [ 984.324672][T16350] veth1_macvtap: entered promiscuous mode [ 984.343525][T16350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.354126][T16350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.364485][T16350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.375821][T16350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.385942][T16350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.396697][T16350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.408639][T16350] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 984.418601][T16350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.429124][T16350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.439315][T16350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.450112][T16350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.460419][T16350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 984.471645][T16350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.472687][T12932] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 984.483644][T16350] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 984.528954][T16350] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.538361][T16350] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.551431][T16350] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.570453][T16350] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 984.582414][ T5289] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 984.626997][T16353] veth0_macvtap: entered promiscuous mode [ 984.633007][ T5289] usb 4-1: device descriptor read/8, error -71 [ 984.665283][T16353] veth1_macvtap: entered promiscuous mode [ 984.678849][T12932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 984.707599][T12932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 984.770395][T16353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.773428][T12932] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 984.806493][T16353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.834569][T16353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.846798][T12932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 984.858647][T12932] usb 5-1: config 0 descriptor?? [ 984.881441][T16353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.891753][ T5289] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 984.902037][T16353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.922452][ T5289] usb 4-1: device descriptor read/8, error -71 [ 984.933707][T16353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.953922][T16353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 984.978067][T16353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 984.990170][T16353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 985.032965][ T5289] usb usb4-port1: unable to enumerate USB device [ 985.057344][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.100955][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.102349][T16353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.145257][T16353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.157940][T16353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.178405][T16353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.197451][T16353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.209587][T16353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.229361][T16353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 985.241566][T16353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 985.259448][T16353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 985.294213][T12932] dragonrise 0003:0079:0006.0014: item fetching failed at offset 2/5 [ 985.307452][T12932] dragonrise 0003:0079:0006.0014: parse failed [ 985.324097][T12932] dragonrise 0003:0079:0006.0014: probe with driver dragonrise failed with error -22 [ 985.361157][T16353] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.371835][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.387778][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.403776][T16353] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.428675][T16353] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.451969][T16353] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.496889][T14894] usb 5-1: USB disconnect, device number 17 [ 985.704143][ T1600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.780466][ T1600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.925688][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.994111][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 986.130844][T16577] loop2: detected capacity change from 0 to 32768 [ 986.460639][T16566] loop1: detected capacity change from 0 to 40427 [ 986.495182][T16566] F2FS-fs (loop1): heap/no_heap options were deprecated [ 986.506374][T16577] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 986.517396][T16566] F2FS-fs (loop1): invalid crc value [ 986.536005][T16566] F2FS-fs (loop1): Found nat_bits in checkpoint [ 986.752944][T16605] loop0: detected capacity change from 0 to 256 [ 986.878654][T16605] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x3bed3e2a, utbl_chksum : 0xe619d30d) [ 987.280488][T16566] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 987.291596][T16577] XFS (loop2): Ending clean mount [ 987.365649][T16608] loop3: detected capacity change from 0 to 256 [ 987.541808][T16608] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x726052d3, utbl_chksum : 0xe619d30d) [ 987.647272][T16566] syz.1.2608: attempt to access beyond end of device [ 987.647272][T16566] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 987.919910][T16566] F2FS-fs (loop1): Remounting filesystem read-only [ 988.014112][T16566] syz.1.2608: attempt to access beyond end of device [ 988.014112][T16566] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 988.102935][T16566] F2FS-fs (loop1): Remounting filesystem read-only [ 988.134767][T16350] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 989.355017][T16637] loop2: detected capacity change from 0 to 256 [ 989.429769][T16637] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 989.444000][T16637] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 989.456056][T16637] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 989.493770][ T29] audit: type=1800 audit(1729430975.189:85): pid=16637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2615" name="bus" dev="loop2" ino=76 res=0 errno=0 [ 989.574599][ T29] audit: type=1804 audit(1729430975.189:86): pid=16637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2615" name="/newroot/1/file0/bus" dev="loop2" ino=76 res=1 errno=0 [ 989.986502][T16654] loop2: detected capacity change from 0 to 4096 [ 990.026079][T16654] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512). [ 990.038039][T16667] fuse: Bad value for 'fd' [ 990.109677][ T5318] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 990.124799][T16654] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 990.133053][T16654] ntfs3(loop2): Failed to load $Extend (-22). [ 990.139180][T16654] ntfs3(loop2): Failed to initialize $Extend. [ 990.206827][T16671] loop0: detected capacity change from 0 to 7 [ 990.221851][T16671] Dev loop0: unable to read RDB block 7 [ 990.234117][T16671] loop0: unable to read partition table [ 990.241625][T16671] loop0: partition table beyond EOD, truncated [ 990.248344][T16671] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 990.248344][T16671] ) failed (rc=-5) [ 990.300234][ T5318] usb 4-1: Using ep0 maxpacket: 8 [ 990.328116][ T5318] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 990.358603][ T5318] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 990.407369][ T5318] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 990.445714][ T5318] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 990.477431][ T5318] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 990.516787][ T5318] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 990.524877][ T5318] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 990.559156][ T5318] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 990.597850][ T5318] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 990.635451][ T5318] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 990.678789][ T5318] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 990.693217][ T5318] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 990.715457][ T5318] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 990.748026][ T5318] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 990.785313][ T5318] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 990.822694][ T5318] usb 4-1: string descriptor 0 read error: -22 [ 990.832765][ T5318] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 990.857706][ T5318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.906277][ T5318] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 991.033653][T16662] loop4: detected capacity change from 0 to 32768 [ 991.057311][T16662] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2628 (16662) [ 991.131608][ T5318] usb 4-1: USB disconnect, device number 31 [ 991.154156][T16662] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 991.204754][T16662] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 991.242582][T16662] BTRFS info (device loop4): using free-space-tree [ 991.564709][T16674] loop2: detected capacity change from 0 to 40427 [ 991.605636][T16674] F2FS-fs (loop2): heap/no_heap options were deprecated [ 991.621478][T16674] F2FS-fs (loop2): invalid crc value [ 991.635154][T16674] F2FS-fs (loop2): Found nat_bits in checkpoint [ 991.640689][T16677] loop1: detected capacity change from 0 to 40427 [ 991.679649][T16677] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 991.707143][T16336] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 991.738687][T16677] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 991.779349][T16677] F2FS-fs (loop1): invalid crc value [ 991.799019][T16677] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 991.820735][T16677] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 991.882598][T16674] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 992.028410][T16677] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 992.068728][T16677] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 992.082252][T16674] syz.2.2631: attempt to access beyond end of device [ 992.082252][T16674] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 992.096364][T16674] F2FS-fs (loop2): Remounting filesystem read-only [ 992.104784][T16674] syz.2.2631: attempt to access beyond end of device [ 992.104784][T16674] loop2: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 992.133358][T16674] F2FS-fs (loop2): Remounting filesystem read-only [ 992.511863][T16730] loop0: detected capacity change from 0 to 256 [ 992.598347][T16730] FAT-fs (loop0): Directory bread(block 64) failed [ 992.627607][T16730] FAT-fs (loop0): Directory bread(block 65) failed [ 992.642408][T16730] FAT-fs (loop0): Directory bread(block 66) failed [ 992.652536][T16730] FAT-fs (loop0): Directory bread(block 67) failed [ 992.667216][T16730] FAT-fs (loop0): Directory bread(block 68) failed [ 992.675377][T16730] FAT-fs (loop0): Directory bread(block 69) failed [ 992.684141][T16730] FAT-fs (loop0): Directory bread(block 70) failed [ 992.691351][T16730] FAT-fs (loop0): Directory bread(block 71) failed [ 992.698389][T16730] FAT-fs (loop0): Directory bread(block 72) failed [ 992.705082][T16730] FAT-fs (loop0): Directory bread(block 73) failed [ 992.772072][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.778644][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.207817][ T5289] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 993.295982][T16740] loop0: detected capacity change from 0 to 4096 [ 993.319129][T16740] ntfs3(loop0): Primary boot: unsupported bytes per index 8192. [ 993.346059][T16740] ntfs3(loop0): try to read out of volume at offset 0x1ffe00 [ 993.357931][ T5289] usb 3-1: Using ep0 maxpacket: 16 [ 993.378258][ T5289] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 993.396810][ T5289] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 993.419642][ T5289] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 993.429574][ T5289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.443392][ T5289] usb 3-1: Product: syz [ 993.448105][ T5289] usb 3-1: Manufacturer: syz [ 993.461715][T16744] kvm: kvm [16743]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 993.487359][ T5289] usb 3-1: SerialNumber: syz [ 993.580247][T16748] loop0: detected capacity change from 0 to 256 [ 993.624920][T16748] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x726052d3, utbl_chksum : 0xe619d30d) [ 993.698342][T16750] fuse: Bad value for 'fd' [ 993.923580][ T29] audit: type=1800 audit(1729430979.612:87): pid=16753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2647" name="bus" dev="loop0" ino=1048814 res=0 errno=0 [ 993.951422][ T5289] usb 3-1: cannot find UAC_HEADER [ 994.004430][ T5289] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 994.033150][ T5289] usb 3-1: USB disconnect, device number 19 [ 994.116432][T16473] udevd[16473]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 994.378925][T16742] loop4: detected capacity change from 0 to 32768 [ 994.401598][T16742] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2645 (16742) [ 994.471898][T16763] loop0: detected capacity change from 0 to 256 [ 994.474926][T16742] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 994.517502][T16742] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 994.526230][T16742] BTRFS info (device loop4): using free-space-tree [ 995.005127][T16779] loop2: detected capacity change from 0 to 32768 [ 995.031495][T16763] FAT-fs (loop0): Directory bread(block 64) failed [ 995.097627][T16779] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 995.107366][T16763] FAT-fs (loop0): Directory bread(block 65) failed [ 995.114470][T16763] FAT-fs (loop0): Directory bread(block 66) failed [ 995.152346][T16763] FAT-fs (loop0): Directory bread(block 67) failed [ 995.159287][T16763] FAT-fs (loop0): Directory bread(block 68) failed [ 995.166026][T16763] FAT-fs (loop0): Directory bread(block 69) failed [ 995.173275][T16763] FAT-fs (loop0): Directory bread(block 70) failed [ 995.180084][T16763] FAT-fs (loop0): Directory bread(block 71) failed [ 995.186772][T16763] FAT-fs (loop0): Directory bread(block 72) failed [ 995.193496][T16763] FAT-fs (loop0): Directory bread(block 73) failed [ 995.298703][T16761] loop3: detected capacity change from 0 to 40427 [ 995.324397][T16336] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 995.342090][T16761] F2FS-fs (loop3): heap/no_heap options were deprecated [ 995.352178][T16761] F2FS-fs (loop3): invalid crc value [ 995.502984][T16761] F2FS-fs (loop3): Found nat_bits in checkpoint [ 996.413104][T16809] loop0: detected capacity change from 0 to 256 [ 996.502134][T16809] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x726052d3, utbl_chksum : 0xe619d30d) [ 996.592375][T16761] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 996.697112][T16761] syz.3.2652: attempt to access beyond end of device [ 996.697112][T16761] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 996.762887][T16779] XFS (loop2): Ending clean mount [ 996.776474][T16761] F2FS-fs (loop3): Remounting filesystem read-only [ 996.783200][T16761] syz.3.2652: attempt to access beyond end of device [ 996.783200][T16761] loop3: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 996.861434][T16761] F2FS-fs (loop3): Remounting filesystem read-only [ 997.035186][T16779] XFS (loop2): Quotacheck needed: Please wait. [ 997.193672][T16819] loop4: detected capacity change from 0 to 40427 [ 997.210642][T16815] kvm_intel: kvm [16812]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x100000001 [ 997.235253][T16815] kvm: kvm [16812]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x100000001 [ 997.245184][T16815] kvm: kvm [16812]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x186) = 0x4000 [ 997.247182][T16819] F2FS-fs (loop4): invalid crc value [ 997.261680][T16815] kvm: kvm [16812]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x1 [ 997.261807][T16815] kvm: kvm [16812]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0xbe706111 [ 997.262452][T16815] kvm_intel: kvm [16812]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x4001 [ 997.312725][T16779] XFS (loop2): Quotacheck: Done. [ 997.380528][T16819] F2FS-fs (loop4): Found nat_bits in checkpoint [ 997.442590][T16350] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 997.603123][T16819] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 997.809862][T16836] sctp: [Deprecated]: syz.1.2672 (pid 16836) Use of int in max_burst socket option. [ 997.809862][T16836] Use struct sctp_assoc_value instead [ 997.928744][T16336] syz-executor: attempt to access beyond end of device [ 997.928744][T16336] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 997.996200][T16336] syz-executor: attempt to access beyond end of device [ 997.996200][T16336] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 998.186745][T16336] syz-executor: attempt to access beyond end of device [ 998.186745][T16336] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 998.228082][T16336] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 999.229738][T16848] loop1: detected capacity change from 0 to 256 [ 999.290883][T16850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2667'. [ 999.362747][T16848] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x726052d3, utbl_chksum : 0xe619d30d) [ 999.571889][T16834] loop0: detected capacity change from 0 to 32768 [ 999.611122][T16834] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2671 (16834) [ 999.695572][T16834] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 999.738801][T16834] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 999.741756][T16844] loop3: detected capacity change from 0 to 32768 [ 999.799300][T16834] BTRFS info (device loop0): using free-space-tree [ 999.968929][ T2550] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.210390][ T2550] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.256316][T16844] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1000.297920][ T5252] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1000.336174][ T5288] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1000.353239][ T5252] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1000.362560][ T5252] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1000.384897][ T5252] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1000.397876][ T5252] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1000.405427][ T5252] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1000.413333][ T2550] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.495731][ T5288] usb 3-1: Using ep0 maxpacket: 8 [ 1000.507823][T16891] input: syz0 as /devices/virtual/input/input20 [ 1000.554363][ T5288] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1000.556306][T16844] XFS (loop3): Ending clean mount [ 1000.564348][ T5288] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1000.564384][ T5288] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1000.564413][ T5288] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1000.609858][ T5288] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1000.613684][T16844] XFS (loop3): Quotacheck needed: Please wait. [ 1000.619285][ T5288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1000.666386][ T29] audit: type=1800 audit(1729430986.355:88): pid=16834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2671" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 1000.669509][ T2550] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1000.687397][ T29] audit: type=1800 audit(1729430986.365:89): pid=16834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2671" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 1000.892352][T16844] XFS (loop3): Quotacheck: Done. [ 1000.920964][ T5288] usb 3-1: usb_control_msg returned -32 [ 1000.933435][ T5288] usbtmc 3-1:16.0: can't read capabilities [ 1000.948250][ T5288] usb 3-1: USB disconnect, device number 20 [ 1001.192550][ T1600] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 1001.308919][T16318] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1001.352342][ T2550] bridge_slave_1: left allmulticast mode [ 1001.359335][ T2550] bridge_slave_1: left promiscuous mode [ 1001.365155][ T2550] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.407388][T16353] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1001.486357][ T2550] bridge_slave_0: left allmulticast mode [ 1001.493601][ T2550] bridge_slave_0: left promiscuous mode [ 1001.500682][ T2550] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.839299][T16912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2688'. [ 1002.530694][ T5237] Bluetooth: hci1: command tx timeout [ 1002.708803][T16919] loop1: detected capacity change from 0 to 256 [ 1002.865649][T16919] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x726052d3, utbl_chksum : 0xe619d30d) [ 1003.442854][ T5288] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1003.680297][T16927] loop3: detected capacity change from 0 to 32768 [ 1003.772503][ T5288] usb 3-1: Using ep0 maxpacket: 8 [ 1003.885851][T16927] XFS (loop3): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 1003.904885][ T5288] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1003.915508][ T5288] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.927449][ T5288] usb 3-1: Product: syz [ 1003.931650][ T5288] usb 3-1: Manufacturer: syz [ 1003.942501][ T5288] usb 3-1: SerialNumber: syz [ 1003.970848][ T5288] usb 3-1: config 0 descriptor?? [ 1004.199038][ T5288] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1004.216630][T16926] loop0: detected capacity change from 0 to 32768 [ 1004.342269][T16926] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1004.403137][T16927] XFS (loop3): Ending clean mount [ 1004.431449][ T29] audit: type=1800 audit(1729430990.127:90): pid=16927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2684" name="file1" dev="loop3" ino=1286 res=0 errno=0 [ 1004.570431][T16318] XFS (loop3): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 1004.602301][ T5237] Bluetooth: hci1: command tx timeout [ 1004.741586][T16926] XFS (loop0): Ending clean mount [ 1004.873967][ T2550] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1004.925791][T16926] XFS (loop0): Quotacheck needed: Please wait. [ 1005.033853][T16926] XFS (loop0): Quotacheck: Done. [ 1005.071509][ T5288] usb write operation failed. (-71) [ 1005.073843][T16943] loop1: detected capacity change from 0 to 40427 [ 1005.097539][ T2550] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1005.102323][ T5288] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1005.113820][T16943] F2FS-fs (loop1): invalid crc value [ 1005.125555][ T2550] bond0 (unregistering): Released all slaves [ 1005.145516][ T5288] dvbdev: DVB: registering new adapter (Terratec H7) [ 1005.154515][ T5288] usb 3-1: media controller created [ 1005.166235][ T5288] usb read operation failed. (-71) [ 1005.172297][ T5288] usb write operation failed. (-71) [ 1005.174776][T16943] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1005.188234][ T5288] dvb_usb_az6007 3-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1005.210438][ T5288] usb 3-1: USB disconnect, device number 21 [ 1005.403862][T16882] chnl_net:caif_netlink_parms(): no params data found [ 1005.451729][T16943] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1005.483889][T16963] loop3: detected capacity change from 0 to 256 [ 1005.496434][T16353] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1005.602783][ T29] audit: type=1804 audit(1729430991.297:91): pid=16963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2700" name="/newroot/23/bus/bus" dev="loop3" ino=1048822 res=1 errno=0 [ 1006.034128][T16357] syz-executor: attempt to access beyond end of device [ 1006.034128][T16357] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1006.101491][T16357] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1006.356221][ T2550] hsr_slave_0: left promiscuous mode [ 1006.431335][ T2550] hsr_slave_1: left promiscuous mode [ 1006.438648][ T2550] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1006.500531][ T2550] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1006.510538][ T2550] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1006.519095][ T2550] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1006.550355][ T2550] veth1_macvtap: left promiscuous mode [ 1006.556063][ T2550] veth0_macvtap: left promiscuous mode [ 1006.561780][ T2550] veth1_vlan: left promiscuous mode [ 1006.567091][ T2550] veth0_vlan: left promiscuous mode [ 1006.694290][ T5237] Bluetooth: hci1: command tx timeout [ 1006.859711][T16989] loop2: detected capacity change from 0 to 32768 [ 1006.885140][T16989] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2706 (16989) [ 1006.961042][T16989] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1006.974403][T16989] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1006.986525][T16989] BTRFS info (device loop2): using free-space-tree [ 1007.294064][T16350] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1008.104598][ T2550] team0 (unregistering): Port device team_slave_1 removed [ 1008.257000][T17016] loop3: detected capacity change from 0 to 32768 [ 1008.286962][ T2550] team0 (unregistering): Port device team_slave_0 removed [ 1008.323659][T17016] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1008.408859][T17018] loop2: detected capacity change from 0 to 40427 [ 1008.424040][T17018] F2FS-fs (loop2): heap/no_heap options were deprecated [ 1008.448403][T17018] F2FS-fs (loop2): invalid crc value [ 1008.488783][T17018] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1008.605546][T17018] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1008.674118][T17016] XFS (loop3): Ending clean mount [ 1008.702898][T17016] XFS (loop3): Quotacheck needed: Please wait. [ 1008.717413][T17018] syz.2.2708: attempt to access beyond end of device [ 1008.717413][T17018] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1008.744854][T17018] F2FS-fs (loop2): Remounting filesystem read-only [ 1008.753784][T17018] syz.2.2708: attempt to access beyond end of device [ 1008.753784][T17018] loop2: rw=2049, sector=45136, nr_sectors = 8 limit=40427 [ 1008.772528][ T5237] Bluetooth: hci1: command tx timeout [ 1008.778156][T17018] F2FS-fs (loop2): Remounting filesystem read-only [ 1008.855387][T17016] XFS (loop3): Quotacheck: Done. [ 1009.166201][T16318] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1009.451376][T17034] loop2: detected capacity change from 0 to 256 [ 1009.985233][T16882] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.999685][T16882] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.006969][T16882] bridge_slave_0: entered allmulticast mode [ 1010.032141][T16882] bridge_slave_0: entered promiscuous mode [ 1010.041647][T16882] bridge0: port 2(bridge_slave_1) entered blocking state [ 1010.048775][T16882] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.079507][T16882] bridge_slave_1: entered allmulticast mode [ 1010.087089][T16882] bridge_slave_1: entered promiscuous mode [ 1010.429931][T16882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1010.444013][T16882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1010.446984][T17038] loop0: detected capacity change from 0 to 40427 [ 1010.488836][T17052] loop3: detected capacity change from 0 to 256 [ 1010.506912][T17038] F2FS-fs (loop0): invalid crc value [ 1010.521558][T17052] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x726052d3, utbl_chksum : 0xe619d30d) [ 1010.546183][T17038] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1010.601147][ T29] audit: type=1800 audit(1729430996.300:92): pid=17056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2718" name="bus" dev="loop3" ino=1048826 res=0 errno=0 [ 1010.636718][T17038] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1010.761669][T16882] team0: Port device team_slave_0 added [ 1010.812515][T16882] team0: Port device team_slave_1 added [ 1010.977958][T16882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1011.021256][T16882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1011.101118][T16882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1011.155363][T16353] syz-executor: attempt to access beyond end of device [ 1011.155363][T16353] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1011.160056][T16882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1011.203707][T16353] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1011.211113][T16882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1011.288752][T16882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1011.331558][T17072] loop3: detected capacity change from 0 to 256 [ 1011.553795][T16882] hsr_slave_0: entered promiscuous mode [ 1011.566418][T17048] loop2: detected capacity change from 0 to 32768 [ 1011.608995][T16882] hsr_slave_1: entered promiscuous mode [ 1011.629124][T17048] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2717 (17048) [ 1011.635370][T16882] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1011.700776][T16882] Cannot create hsr debugfs directory [ 1011.729434][T17048] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1011.793349][T17048] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1011.824642][T17048] BTRFS info (device loop2): using free-space-tree [ 1012.404394][T17059] loop1: detected capacity change from 0 to 40427 [ 1012.438628][T16350] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1012.481470][T17059] F2FS-fs (loop1): heap/no_heap options were deprecated [ 1012.531776][T17059] F2FS-fs (loop1): invalid crc value [ 1012.552206][T17059] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1012.784225][T17059] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1012.901792][T17059] syz.1.2720: attempt to access beyond end of device [ 1012.901792][T17059] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1012.961817][T17059] F2FS-fs (loop1): Remounting filesystem read-only [ 1012.987234][T17059] syz.1.2720: attempt to access beyond end of device [ 1012.987234][T17059] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 1013.001488][T17059] F2FS-fs (loop1): Remounting filesystem read-only [ 1013.437680][T17087] loop0: detected capacity change from 0 to 32768 [ 1013.469145][T17087] btrfs: Deprecated parameter 'usebackuproot' [ 1013.475289][T17087] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1013.571707][T17087] BTRFS: device /dev/loop0 (7:0) using temp-fsid a5395366-ae2c-4708-b878-f7b475f8d888 [ 1013.592842][T17087] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2726 (17087) [ 1013.691266][T17143] loop3: detected capacity change from 0 to 256 [ 1013.710617][T17087] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1013.768677][T17087] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1014.011807][T16882] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1014.125337][T16882] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1014.162287][T17087] BTRFS info (device loop0): rebuilding free space tree [ 1014.174020][T16882] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1014.247912][T17087] BTRFS info (device loop0): disabling free space tree [ 1014.256860][T16882] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1014.266916][T17087] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1014.307802][T17087] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1014.564825][T16882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1014.575075][T16353] BTRFS info (device loop0): last unmount of filesystem a5395366-ae2c-4708-b878-f7b475f8d888 [ 1014.630793][T16882] 8021q: adding VLAN 0 to HW filter on device team0 [ 1014.714480][ T1600] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.721723][ T1600] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1014.790714][ T6409] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.797955][ T6409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1015.533173][T16882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1015.569181][T17185] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1015.704493][T17174] loop2: detected capacity change from 0 to 32768 [ 1015.731810][T17174] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2738 (17174) [ 1015.811780][T17174] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1015.861704][T17174] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 1015.898273][T17174] BTRFS info (device loop2): using free-space-tree [ 1016.225696][T16882] veth0_vlan: entered promiscuous mode [ 1016.292978][T16882] veth1_vlan: entered promiscuous mode [ 1016.318527][T16882] veth0_macvtap: entered promiscuous mode [ 1016.327897][T16882] veth1_macvtap: entered promiscuous mode [ 1016.344382][T16882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1016.355054][T16882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.362086][T17199] loop0: detected capacity change from 0 to 40427 [ 1016.365027][T16882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1016.381890][T16882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.391849][T16882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1016.403133][T16882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.413549][T16882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1016.424108][T16882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.435850][T16882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1016.446957][T16882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1016.457483][T16882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.467427][T16882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1016.477943][T16882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.487829][T16882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1016.498361][T16882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.509132][T16882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1016.517188][T17199] F2FS-fs (loop0): heap/no_heap options were deprecated [ 1016.520553][T16882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1016.538339][T16882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1016.572526][T17199] F2FS-fs (loop0): invalid crc value [ 1016.590905][T16350] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1016.628344][T16882] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.670670][T16882] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.692891][T17199] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1016.705843][T16882] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.723024][T16882] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.759075][ T5237] Bluetooth: hci5: command 0x0c1a tx timeout [ 1016.766343][T17177] Bluetooth: hci5: Opcode 0x0c1a failed: -110 [ 1016.878916][T17199] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1016.989561][T17199] syz.0.2745: attempt to access beyond end of device [ 1016.989561][T17199] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1017.032242][T17199] F2FS-fs (loop0): Remounting filesystem read-only [ 1017.053506][T17199] syz.0.2745: attempt to access beyond end of device [ 1017.053506][T17199] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 1017.088132][T17199] F2FS-fs (loop0): Remounting filesystem read-only [ 1017.425438][T17177] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1017.440219][T17177] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1017.504384][T17177] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1017.516198][T17177] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1017.533938][T17177] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 1017.616263][T17177] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 1017.622270][T17177] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1017.814305][T17177] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 1017.861098][T17258] loop3: detected capacity change from 0 to 32768 [ 1017.902089][T17258] btrfs: Deprecated parameter 'usebackuproot' [ 1017.920303][T17258] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1017.976652][T17177] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1017.982957][T17177] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1018.001876][T17258] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1018.019930][T17177] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1018.024819][T17258] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1018.052759][T17177] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1018.134038][T17300] fuse: Bad value for 'fd' [ 1018.226925][T17258] BTRFS info (device loop3): rebuilding free space tree [ 1018.280135][T17258] BTRFS info (device loop3): disabling free space tree [ 1018.310259][T17258] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1018.312598][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.357919][T17258] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1018.405324][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.514454][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1018.556301][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.580574][T16318] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1018.713469][T17323] loop1: detected capacity change from 0 to 128 [ 1018.844706][ T5237] Bluetooth: hci5: command 0x0c1a tx timeout [ 1018.937059][T17323] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1019.007367][T17323] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1019.125666][T16357] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1019.174880][ T5288] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1019.344763][ T5288] usb 3-1: Using ep0 maxpacket: 8 [ 1019.352814][ T5288] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1019.388076][ T5288] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1019.438780][ T5288] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1019.483848][ T5288] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1019.516789][ T5288] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1019.554957][ T5237] Bluetooth: hci7: command 0x0c1a tx timeout [ 1019.582089][ T5288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.642592][ T5237] Bluetooth: hci8: command 0x0c1a tx timeout [ 1019.815462][ T5288] usb 3-1: GET_CAPABILITIES returned 0 [ 1019.821103][ T5288] usbtmc 3-1:16.0: can't read capabilities [ 1020.010327][T17335] loop4: detected capacity change from 0 to 32768 [ 1020.023244][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1020.042295][ T5237] Bluetooth: hci1: command 0x0c1a tx timeout [ 1020.049477][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1020.058629][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1020.067740][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1020.077376][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1020.086500][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1020.101565][T17335] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1020.102508][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1020.119472][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1020.128603][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1020.137824][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1020.146947][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1020.183158][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1020.192325][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1020.201452][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1020.210560][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1020.219631][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1020.240405][T14894] usb 3-1: USB disconnect, device number 22 [ 1020.376041][T17335] XFS (loop4): Ending clean mount [ 1020.433675][ T29] audit: type=1326 audit(1729431006.135:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17331 comm="syz.4.2680" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbed0d7dff9 code=0x0 [ 1020.570440][T17342] loop1: detected capacity change from 0 to 40427 [ 1020.588377][T17342] F2FS-fs (loop1): heap/no_heap options were deprecated [ 1020.629098][T17342] F2FS-fs (loop1): invalid crc value [ 1020.658259][T16882] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1020.682667][T17342] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1020.847301][T17342] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1020.914642][ T5237] Bluetooth: hci5: command 0x0c1a tx timeout [ 1020.954920][T17342] syz.1.2766: attempt to access beyond end of device [ 1020.954920][T17342] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1021.020785][T17342] F2FS-fs (loop1): Remounting filesystem read-only [ 1021.055243][T17342] syz.1.2766: attempt to access beyond end of device [ 1021.055243][T17342] loop1: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 1021.146984][T17342] F2FS-fs (loop1): Remounting filesystem read-only [ 1021.375145][T17383] loop2: detected capacity change from 0 to 128 [ 1021.448446][T17383] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1021.464381][T17383] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1021.470841][T17368] loop3: detected capacity change from 0 to 32768 [ 1021.506626][T17368] xfs: Unknown parameter 'biosize' [ 1021.644114][ T5237] Bluetooth: hci7: command 0x0c1a tx timeout [ 1021.767833][ T5237] Bluetooth: hci8: command 0x0c1a tx timeout [ 1021.913052][T17376] loop4: detected capacity change from 0 to 32768 [ 1021.920580][T17376] btrfs: Deprecated parameter 'usebackuproot' [ 1021.927211][T17376] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 1021.988846][T17376] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2771 (17376) [ 1022.024098][T16350] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1022.113649][ T5237] Bluetooth: hci1: command 0x0c1a tx timeout [ 1022.195123][T17376] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1022.263326][T17376] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1022.659793][T17394] loop3: detected capacity change from 0 to 32768 [ 1022.673504][T17394] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2780 (17394) [ 1022.710316][T17394] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1022.721140][T17394] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 1022.730320][T17394] BTRFS info (device loop3): using free-space-tree [ 1022.751354][T17376] BTRFS info (device loop4): rebuilding free space tree [ 1022.800260][T17376] BTRFS info (device loop4): disabling free space tree [ 1022.818018][T17376] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1022.868010][T17376] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1022.896686][T17396] loop1: detected capacity change from 0 to 32768 [ 1022.913486][T14894] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1022.929910][T16318] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1023.016609][T17396] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1023.083990][T14894] usb 3-1: Using ep0 maxpacket: 8 [ 1023.090871][T14894] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1023.101107][T14894] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1023.139717][T14894] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1023.198352][T14894] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1023.234494][T17396] XFS (loop1): Ending clean mount [ 1023.237593][T14894] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1023.267471][T14894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.273171][T16882] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1023.303498][T17396] XFS (loop1): Quotacheck needed: Please wait. [ 1023.508043][T14894] usb 3-1: GET_CAPABILITIES returned 0 [ 1023.515102][T14894] usbtmc 3-1:16.0: can't read capabilities [ 1023.718072][ T5237] Bluetooth: hci7: command 0x0c1a tx timeout [ 1023.718568][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1023.733338][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1023.742461][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1023.751574][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1023.763446][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1023.763860][T17396] XFS (loop1): Quotacheck: Done. [ 1023.772547][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1023.772595][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1023.772636][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1023.772677][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1023.773696][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1023.795094][ T5237] Bluetooth: hci8: command 0x0c1a tx timeout [ 1023.796553][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1023.838705][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1023.847786][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1023.856843][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1023.865899][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1023.874983][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 1023.915350][ T5320] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1023.946618][T14894] usb 3-1: USB disconnect, device number 23 [ 1024.034965][T16357] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1024.162311][ T5320] usb 5-1: Using ep0 maxpacket: 32 [ 1024.172492][ T5320] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1024.188123][ T5320] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1024.202498][ T5237] Bluetooth: hci1: command 0x0c1a tx timeout [ 1024.247361][T17458] loop3: detected capacity change from 0 to 128 [ 1024.252668][ T5320] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.291639][ T5320] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 1024.301195][ T5320] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1024.310525][ T5320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.329632][ T5320] usb 5-1: config 0 descriptor?? [ 1024.416577][T17458] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1024.427644][T17461] netlink: 'syz.1.2787': attribute type 10 has an invalid length. [ 1024.432548][T17458] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1024.469704][T17461] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.477353][T17461] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.533786][T17461] bridge0: port 2(bridge_slave_1) entered blocking state [ 1024.541018][T17461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1024.548561][T17461] bridge0: port 1(bridge_slave_0) entered blocking state [ 1024.555768][T17461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1024.590528][ T5320] usb 5-1: USB disconnect, device number 18 [ 1024.624162][T17461] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1024.653363][T16318] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1024.990317][T17455] loop0: detected capacity change from 0 to 40427 [ 1025.011510][T17455] F2FS-fs (loop0): heap/no_heap options were deprecated [ 1025.026132][T17455] F2FS-fs (loop0): invalid crc value [ 1025.065683][T17455] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1025.098369][ T5320] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1025.230828][T17455] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1025.294662][ T5320] usb 5-1: Using ep0 maxpacket: 32 [ 1025.321690][ T5320] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1025.330984][T17455] syz.0.2788: attempt to access beyond end of device [ 1025.330984][T17455] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1025.353869][ T5320] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1025.382388][T17455] F2FS-fs (loop0): Remounting filesystem read-only [ 1025.389406][T17455] syz.0.2788: attempt to access beyond end of device [ 1025.389406][T17455] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 1025.393823][ T5320] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.412031][T17455] F2FS-fs (loop0): Remounting filesystem read-only [ 1025.441713][ T5320] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 81 [ 1025.461126][ T5320] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1025.470391][ T5320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.512857][ T5320] usb 5-1: config 0 descriptor?? [ 1025.971120][T17484] loop2: detected capacity change from 0 to 32768 [ 1026.002418][T17484] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1026.119838][T17506] loop3: detected capacity change from 0 to 128 [ 1026.142639][T17506] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1026.192428][T17506] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1026.197849][T17484] XFS (loop2): Ending clean mount [ 1026.224445][ C1] vkms_vblank_simulate: vblank timer overrun [ 1026.256171][T17484] XFS (loop2): Quotacheck needed: Please wait. [ 1026.341514][T17484] XFS (loop2): Quotacheck: Done. [ 1026.398928][T16318] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1026.479363][T17514] loop1: detected capacity change from 0 to 256 [ 1026.638328][T16350] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1026.774165][T17514] loop1: detected capacity change from 256 to 0 [ 1026.853379][T17519] loop3: detected capacity change from 0 to 8 [ 1026.929243][T17519] loop3: detected capacity change from 0 to 512 [ 1026.948303][T17519] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1027.635417][T16357] syz-executor: attempt to access beyond end of device [ 1027.635417][T16357] loop1: rw=0, sector=12, nr_sectors = 4 limit=0 [ 1027.669651][T16357] FAT-fs (loop1): Directory bread(block 3) failed [ 1027.698642][ T5318] usb 5-1: USB disconnect, device number 19 [ 1027.810132][T17519] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 1027.856173][T16357] syz-executor: attempt to access beyond end of device [ 1027.856173][T16357] loop1: rw=0, sector=0, nr_sectors = 4 limit=0 [ 1027.886470][T16357] FAT-fs (loop1): unable to read boot sector to mark fs as dirty [ 1028.080498][ T5320] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1028.230360][ T5320] usb 3-1: Using ep0 maxpacket: 8 [ 1028.238581][ T5320] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1028.254366][ T5320] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1028.269047][ T5320] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1028.284693][ T3019] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.289011][ T5320] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1028.318136][ T5320] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1028.337905][ T5320] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1028.348301][ T5320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1028.487784][ T3019] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.568141][T17537] loop4: detected capacity change from 0 to 128 [ 1028.586056][ T5320] usb 3-1: usb_control_msg returned -32 [ 1028.600113][ T5320] usbtmc 3-1:16.0: can't read capabilities [ 1028.610914][T17537] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1028.711549][T17537] ext4 filesystem being mounted at /6/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1028.772243][ T5252] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1028.789545][ T3019] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.805229][ T5252] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1028.819772][ T5252] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1028.828139][ T5252] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1028.838100][ T5252] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1028.845898][ T5252] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1028.877846][T16882] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1028.934558][ T3019] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1028.976357][T17544] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2815'. [ 1029.349190][T17559] usbtmc 3-1:16.0: usb_control_msg returned -71 [ 1029.470891][ T3019] bridge_slave_1: left allmulticast mode [ 1029.476610][ T3019] bridge_slave_1: left promiscuous mode [ 1029.497403][ T3019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.532831][T17561] loop3: detected capacity change from 0 to 4096 [ 1029.542700][T17561] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 1029.560840][T14894] usb 3-1: USB disconnect, device number 24 [ 1029.583027][ T3019] bridge_slave_0: left allmulticast mode [ 1029.588738][ T3019] bridge_slave_0: left promiscuous mode [ 1029.597631][T17561] ntfs3(loop3): $Secure::$SDH is corrupted. [ 1029.608590][T17561] ntfs3(loop3): Failed to initialize $Secure (-22). [ 1029.628546][ T3019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.141852][ T3019] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1030.188274][T17583] loop2: detected capacity change from 0 to 128 [ 1030.240466][T17583] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1030.283474][T17583] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1030.446038][ T3019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1030.446531][T16350] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1030.470852][ T3019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1030.520240][ T3019] bond0 (unregistering): Released all slaves [ 1030.553260][T17568] netlink: 'syz.4.2822': attribute type 10 has an invalid length. [ 1030.573773][T17568] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.581453][T17568] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.602467][T17568] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.609729][T17568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1030.617270][T17568] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.624490][T17568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1030.656075][T17568] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1030.917000][ T5237] Bluetooth: hci0: command tx timeout [ 1031.010624][T14880] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1031.059802][T17540] chnl_net:caif_netlink_parms(): no params data found [ 1031.210609][T14880] usb 3-1: Using ep0 maxpacket: 8 [ 1031.235923][T17608] loop4: detected capacity change from 0 to 128 [ 1031.246892][T14880] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1031.256875][T17608] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1031.257236][T17608] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1031.269903][T14880] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1031.311585][ T5288] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1031.326540][T14880] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1031.339025][T14880] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1031.354251][T14880] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1031.365555][T14880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.412134][ T3019] hsr_slave_0: left promiscuous mode [ 1031.436195][ T3019] hsr_slave_1: left promiscuous mode [ 1031.460086][ T3019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1031.477923][ T3019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1031.488839][ T5288] usb 4-1: Using ep0 maxpacket: 32 [ 1031.489343][ T3019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1031.510588][ T5288] usb 4-1: New USB device found, idVendor=0458, idProduct=7006, bcdDevice=69.91 [ 1031.522372][ T3019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1031.524015][ T5288] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1031.540916][ T5288] usb 4-1: config 0 descriptor?? [ 1031.551303][ T5288] gspca_main: sunplus-2.14.0 probing 0458:7006 [ 1031.563871][T16882] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1031.587017][T14880] usb 3-1: GET_CAPABILITIES returned 0 [ 1031.609055][T14880] usbtmc 3-1:16.0: can't read capabilities [ 1031.709509][ T3019] veth1_macvtap: left promiscuous mode [ 1031.729242][ T3019] veth0_macvtap: left promiscuous mode [ 1031.745639][ T3019] veth1_vlan: left promiscuous mode [ 1031.762437][ T3019] veth0_vlan: left promiscuous mode [ 1031.824959][ T9] usb 3-1: USB disconnect, device number 25 [ 1031.934643][T17618] loop4: detected capacity change from 0 to 8192 [ 1032.026990][T17618] FAT-fs (loop4): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 1032.058916][T17618] FAT-fs (loop4): Filesystem has been set read-only [ 1032.163407][ T5288] gspca_sunplus: reg_w_riv err -71 [ 1032.188529][ T5288] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 1032.270348][ T5288] usb 4-1: USB disconnect, device number 32 [ 1032.815699][T17645] loop2: detected capacity change from 0 to 128 [ 1032.898645][T17645] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1032.942965][T17645] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1033.002767][ T5237] Bluetooth: hci0: command tx timeout [ 1033.087362][T16350] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1033.146239][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1033.309088][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1033.331959][ T9] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1033.340720][ T9] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1033.350125][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.360653][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1033.369746][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1033.379549][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1033.392950][ T9] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1033.412841][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1033.423170][ T9] usb 5-1: config 0 descriptor?? [ 1033.529665][ T3019] team0 (unregistering): Port device team_slave_1 removed [ 1033.573184][ T5288] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1033.598360][ T3019] team0 (unregistering): Port device team_slave_0 removed [ 1033.642226][ T5318] usb 5-1: USB disconnect, device number 20 [ 1033.757002][ T5288] usb 3-1: Using ep0 maxpacket: 8 [ 1033.783056][ T5288] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1033.795514][ T5288] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1033.816997][ T5288] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1033.827945][ T5288] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1033.855729][ T5288] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1033.879896][ T5288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.101394][ T5318] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1034.113584][ T5288] usb 3-1: GET_CAPABILITIES returned 0 [ 1034.135979][ T5288] usbtmc 3-1:16.0: can't read capabilities [ 1034.262906][ T5318] usb 5-1: Using ep0 maxpacket: 32 [ 1034.281697][ T5318] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 1034.302364][ T5318] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1034.312098][ T5318] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.322841][ T5318] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1034.324236][ T5288] usb 3-1: USB disconnect, device number 26 [ 1034.336824][ T5318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1034.336857][ T5318] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1034.368928][ T5318] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1034.413331][ T5318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1034.436739][ T5318] usb 5-1: config 0 descriptor?? [ 1034.534528][T17633] netlink: 'syz.0.2837': attribute type 10 has an invalid length. [ 1034.552313][T17633] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.559862][T17633] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.601120][T17633] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.608316][T17633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1034.615732][T17633] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.622958][T17633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1034.633265][T17633] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1034.651309][T17540] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.697158][T17540] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.725505][T17662] loop0: detected capacity change from 0 to 256 [ 1034.747277][T17540] bridge_slave_0: entered allmulticast mode [ 1034.758373][T17540] bridge_slave_0: entered promiscuous mode [ 1034.766711][T17540] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.779044][T17540] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.786307][T17540] bridge_slave_1: entered allmulticast mode [ 1034.868442][T17540] bridge_slave_1: entered promiscuous mode [ 1035.105750][ T5237] Bluetooth: hci0: command tx timeout [ 1035.149139][T17671] loop3: detected capacity change from 0 to 8 [ 1035.382198][T17673] loop3: detected capacity change from 0 to 512 [ 1035.407380][T17673] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 1035.919746][T16353] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 1035.973789][T17540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1035.976559][T16353] FAT-fs (loop0): Filesystem has been set read-only [ 1035.999369][T17540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1036.011635][T17673] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 1036.036745][T16353] FAT-fs (loop0): error, corrupted directory (invalid entries) [ 1036.140091][ T5318] usb 5-1: USB disconnect, device number 21 [ 1036.168835][T17540] team0: Port device team_slave_0 added [ 1036.177735][T17540] team0: Port device team_slave_1 added [ 1036.440377][T17688] loop3: detected capacity change from 0 to 128 [ 1036.530299][T17691] nftables ruleset with unbound chain [ 1036.534305][T17688] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1036.616286][T17694] loop2: detected capacity change from 0 to 4096 [ 1036.655518][T17694] NILFS (loop2): invalid segment: Checksum error in segment payload [ 1036.665151][T17694] NILFS (loop2): trying rollback from an earlier position [ 1036.686298][T17688] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1036.695829][T17694] NILFS (loop2): recovery complete [ 1036.757743][T17698] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1036.759169][T17540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1036.811928][T17540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1036.872546][T17540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1036.885400][T17540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1036.905769][T17540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1036.967050][T16318] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1036.977530][T17540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1037.146443][ T5237] Bluetooth: hci0: command tx timeout [ 1037.240496][T17540] hsr_slave_0: entered promiscuous mode [ 1037.243747][T17707] loop4: detected capacity change from 0 to 256 [ 1037.261962][T17540] hsr_slave_1: entered promiscuous mode [ 1037.318969][T17540] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1037.339136][T17540] Cannot create hsr debugfs directory [ 1037.520067][ T3019] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.641399][T16882] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 1037.665553][T16882] FAT-fs (loop4): Filesystem has been set read-only [ 1037.672537][T16882] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 1037.685664][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1037.851625][ T5252] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1037.853956][ T3019] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.874844][ T5252] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1037.890997][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1037.893539][ T5252] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1037.916399][ T9] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1037.924829][ T9] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1037.928058][ T5320] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1037.941167][ T5252] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1037.962361][ T5252] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1037.970285][ T5252] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1037.971344][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.033688][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1038.061216][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1038.071451][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1038.088761][ T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1038.108378][ T5320] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.111281][ T3019] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.129339][ T5320] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1038.130779][ T5320] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1038.140022][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1038.178185][ T5320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1038.179158][ T9] usb 3-1: config 0 descriptor?? [ 1038.224196][ T5320] usb 4-1: SerialNumber: syz [ 1038.354398][ T3019] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1038.450337][ T9] usb 3-1: USB disconnect, device number 27 [ 1038.484637][ T5320] usb 4-1: 0:2 : does not exist [ 1038.548159][ T5320] usb 4-1: USB disconnect, device number 33 [ 1038.637963][T16473] udevd[16473]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1038.901834][ T5252] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1038.913414][ T5252] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1038.916049][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1038.935665][ T5252] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1038.947996][ T5252] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1038.962884][ T5252] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1038.974642][ T5252] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1039.115643][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1039.128272][ T9] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1039.137364][ T9] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1039.153923][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.172357][ T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1039.183663][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1039.196902][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 1039.217105][ T9] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1039.232041][ T3019] bridge_slave_1: left allmulticast mode [ 1039.238446][ T3019] bridge_slave_1: left promiscuous mode [ 1039.244199][ T3019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1039.252786][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.265463][ T3019] bridge_slave_0: left allmulticast mode [ 1039.271153][ T3019] bridge_slave_0: left promiscuous mode [ 1039.282459][ T3019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1039.292956][ T9] usb 3-1: config 0 descriptor?? [ 1039.580876][ T3019] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1039.781200][ T3019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1039.792554][ T3019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1039.804785][ T3019] bond0 (unregistering): Released all slaves [ 1039.816655][T17740] bond0: entered promiscuous mode [ 1039.821726][T17740] bond_slave_0: entered promiscuous mode [ 1039.828198][T17740] bond_slave_1: entered promiscuous mode [ 1039.833955][T17740] bond0: entered allmulticast mode [ 1039.840654][T17740] bond_slave_0: entered allmulticast mode [ 1039.849388][T17740] bond_slave_1: entered allmulticast mode [ 1039.949286][T17745] loop3: detected capacity change from 0 to 128 [ 1039.980786][T17745] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1040.043166][T17745] ext4 filesystem being mounted at /79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1040.110102][ T5252] Bluetooth: hci1: command tx timeout [ 1040.158443][T17722] chnl_net:caif_netlink_parms(): no params data found [ 1040.169761][T16318] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1040.514581][T17752] loop3: detected capacity change from 0 to 4096 [ 1040.531873][T17752] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512). [ 1040.545104][ T3019] hsr_slave_0: left promiscuous mode [ 1040.553503][ T3019] hsr_slave_1: left promiscuous mode [ 1040.560918][ T3019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1040.569031][ T3019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1040.579645][T17752] ntfs3(loop3): Failed to load $Extend (-22). [ 1040.588910][ T3019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1040.595043][T17752] ntfs3(loop3): Failed to initialize $Extend. [ 1040.597179][ T3019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1040.642761][ T3019] veth1_macvtap: left promiscuous mode [ 1040.666906][ T3019] veth0_macvtap: left promiscuous mode [ 1040.672515][ T3019] veth1_vlan: left promiscuous mode [ 1040.679694][ T3019] veth0_vlan: left promiscuous mode [ 1040.950638][ T5288] usb 3-1: USB disconnect, device number 28 [ 1041.037556][T17759] loop2: detected capacity change from 0 to 256 [ 1041.064056][ T5252] Bluetooth: hci2: command tx timeout [ 1041.412582][T16350] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 1041.434278][T16350] FAT-fs (loop2): Filesystem has been set read-only [ 1041.455228][T16350] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 1041.587456][ T3019] team0 (unregistering): Port device team_slave_1 removed [ 1041.664618][ T3019] team0 (unregistering): Port device team_slave_0 removed [ 1042.194330][ T5252] Bluetooth: hci1: command tx timeout [ 1042.358096][T17540] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1042.420691][T17540] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1042.430335][T17540] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1042.455574][T17540] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1042.465394][T17722] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.486261][T17722] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.514029][T17722] bridge_slave_0: entered allmulticast mode [ 1042.525983][T17722] bridge_slave_0: entered promiscuous mode [ 1042.566717][T17736] chnl_net:caif_netlink_parms(): no params data found [ 1042.624766][T17722] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.631903][T17722] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.651886][T17722] bridge_slave_1: entered allmulticast mode [ 1042.660639][T17722] bridge_slave_1: entered promiscuous mode [ 1042.842572][T17722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1042.882527][T17722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1043.117033][T17774] loop3: detected capacity change from 0 to 2048 [ 1043.131028][T17722] team0: Port device team_slave_0 added [ 1043.141612][T17722] team0: Port device team_slave_1 added [ 1043.153528][ T5250] Bluetooth: hci2: command tx timeout [ 1043.159866][ T5250] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1043.171390][ T5250] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1043.174622][T17736] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.181128][ T5250] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1043.197994][ T5250] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1043.207412][ T5250] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1043.215407][ T5250] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1043.219080][T17736] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.245885][T17774] EXT4-fs: Ignoring removed nobh option [ 1043.262433][T17736] bridge_slave_0: entered allmulticast mode [ 1043.269754][T17736] bridge_slave_0: entered promiscuous mode [ 1043.297778][T17774] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1043.354467][T17722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1043.361477][T17722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1043.403077][T17722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1043.422456][T17736] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.432478][T17736] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.440729][T16318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1043.450368][T17736] bridge_slave_1: entered allmulticast mode [ 1043.470117][T17736] bridge_slave_1: entered promiscuous mode [ 1043.573922][T17783] netlink: 'syz.3.2882': attribute type 9 has an invalid length. [ 1043.589917][T17783] netlink: 'syz.3.2882': attribute type 6 has an invalid length. [ 1043.598259][T17783] netlink: 'syz.3.2882': attribute type 7 has an invalid length. [ 1043.613694][T17783] netlink: 'syz.3.2882': attribute type 8 has an invalid length. [ 1043.631112][ T3019] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.689907][T17722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1043.697090][T17722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1043.745251][T17722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1043.881539][ T3019] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.901389][T17736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1043.967008][T17736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1044.061603][ T3019] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.103469][T17722] hsr_slave_0: entered promiscuous mode [ 1044.110146][T17722] hsr_slave_1: entered promiscuous mode [ 1044.123146][T17722] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1044.130770][T17722] Cannot create hsr debugfs directory [ 1044.143933][T17540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1044.165313][T17736] team0: Port device team_slave_0 added [ 1044.259238][ T3019] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1044.272897][ T5250] Bluetooth: hci1: command tx timeout [ 1044.296797][T17736] team0: Port device team_slave_1 added [ 1044.328455][T17736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1044.335753][T17736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1044.363095][T17736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1044.390847][T17804] netlink: 'syz.3.2887': attribute type 10 has an invalid length. [ 1044.404254][T17804] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.411626][T17804] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.429207][T17804] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.436391][T17804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1044.443877][T17804] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.451087][T17804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1044.460908][T17804] bridge0: entered promiscuous mode [ 1044.466358][T17804] bridge0: entered allmulticast mode [ 1044.472187][T17804] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1044.488421][T17736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1044.495679][T17736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1044.538381][T17736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1044.684837][T17736] hsr_slave_0: entered promiscuous mode [ 1044.691327][T17736] hsr_slave_1: entered promiscuous mode [ 1044.703324][T17736] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1044.711003][T17736] Cannot create hsr debugfs directory [ 1044.780340][T17540] 8021q: adding VLAN 0 to HW filter on device team0 [ 1044.886985][ T2550] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.894197][ T2550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1044.989221][ T2550] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.996436][ T2550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1045.032296][T14880] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1045.128814][T17775] chnl_net:caif_netlink_parms(): no params data found [ 1045.206700][T14880] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1045.216895][T14880] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.228804][ T5250] Bluetooth: hci2: command tx timeout [ 1045.234663][T14880] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1045.244120][T14880] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1045.255122][ T3019] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.272166][T14880] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1045.281595][T14880] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1045.299126][T14880] usb 4-1: Product: syz [ 1045.304175][ T5250] Bluetooth: hci3: command tx timeout [ 1045.311114][T14880] usb 4-1: Manufacturer: syz [ 1045.330045][T14880] cdc_wdm 4-1:1.0: skipping garbage [ 1045.335473][T14880] cdc_wdm 4-1:1.0: skipping garbage [ 1045.344606][T14880] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 1045.350683][T14880] cdc_wdm 4-1:1.0: Unknown control protocol [ 1045.490783][ T3019] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.631570][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1045.638513][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1045.647973][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1045.654607][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1045.661717][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1045.668355][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1045.676000][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1045.682633][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1045.689102][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1045.695732][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1045.702036][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1045.708673][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1045.714989][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1045.717490][ T3019] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1045.721608][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1045.721831][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1045.744664][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1045.751219][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1045.757854][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1045.767211][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 1045.773862][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 1045.783837][ T9] usb 4-1: USB disconnect, device number 34 [ 1045.789815][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 1045.909223][ T3019] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.034342][T17809] loop3: detected capacity change from 0 to 512 [ 1046.105851][T17809] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 1046.141572][T17809] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 1046.169243][T17809] EXT4-fs error (device loop3): ext4_acquire_dquot:6879: comm syz.3.2889: Failed to acquire dquot type 1 [ 1046.216305][T17809] EXT4-fs (loop3): 1 truncate cleaned up [ 1046.232334][T17809] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1046.247378][T17775] bridge0: port 1(bridge_slave_0) entered blocking state [ 1046.255105][T17775] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.262628][T17809] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1046.267556][T17775] bridge_slave_0: entered allmulticast mode [ 1046.280723][T17775] bridge_slave_0: entered promiscuous mode [ 1046.316495][T17775] bridge0: port 2(bridge_slave_1) entered blocking state [ 1046.345114][ T5250] Bluetooth: hci1: command tx timeout [ 1046.366688][T17775] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.375121][T17775] bridge_slave_1: entered allmulticast mode [ 1046.382653][T17775] bridge_slave_1: entered promiscuous mode [ 1046.505296][T17775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1046.526114][T17775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1046.613080][T17775] team0: Port device team_slave_0 added [ 1046.623807][T17775] team0: Port device team_slave_1 added [ 1046.630172][ T3019] bridge_slave_1: left allmulticast mode [ 1046.636996][ T3019] bridge_slave_1: left promiscuous mode [ 1046.643309][ T3019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.652935][ T3019] bridge_slave_0: left allmulticast mode [ 1046.658731][ T3019] bridge_slave_0: left promiscuous mode [ 1046.667390][ T3019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.686819][ T3019] bridge_slave_1: left allmulticast mode [ 1046.700472][ T3019] bridge_slave_1: left promiscuous mode [ 1046.709143][ T3019] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.722225][ T3019] bridge_slave_0: left allmulticast mode [ 1046.728090][ T3019] bridge_slave_0: left promiscuous mode [ 1046.734319][ T3019] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.838871][T16318] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1047.319801][ T5250] Bluetooth: hci2: command tx timeout [ 1047.386392][ T5250] Bluetooth: hci3: command tx timeout [ 1047.428369][ T3019] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1047.652529][ T3019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1047.663995][ T3019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1047.676004][ T3019] bond0 (unregistering): Released all slaves [ 1047.865038][ T3019] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1047.880184][ T3019] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1047.892611][ T3019] bond0 (unregistering): Released all slaves [ 1048.084381][T17775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1048.106191][T17775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.143601][T17775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1048.216371][T17775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1048.225014][T17775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1048.253273][T17775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1048.401336][T17775] hsr_slave_0: entered promiscuous mode [ 1048.412576][T17775] hsr_slave_1: entered promiscuous mode [ 1048.418732][T17775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1048.437107][T17775] Cannot create hsr debugfs directory [ 1048.599881][T17540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1048.978106][T17736] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1049.086725][ T3019] hsr_slave_0: left promiscuous mode [ 1049.099616][ T3019] hsr_slave_1: left promiscuous mode [ 1049.106177][ T3019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1049.115086][ T3019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1049.123632][ T3019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1049.135109][ T3019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1049.147024][ T3019] hsr_slave_0: left promiscuous mode [ 1049.154216][ T3019] hsr_slave_1: left promiscuous mode [ 1049.160955][ T3019] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1049.168518][ T3019] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1049.177174][ T3019] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1049.185568][ T3019] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1049.254695][ T3019] veth1_macvtap: left promiscuous mode [ 1049.270171][ T3019] veth0_macvtap: left promiscuous mode [ 1049.275848][ T3019] veth1_vlan: left promiscuous mode [ 1049.286304][ T3019] veth0_vlan: left promiscuous mode [ 1049.294323][ T3019] veth1_macvtap: left promiscuous mode [ 1049.300764][ T3019] veth0_macvtap: left promiscuous mode [ 1049.306361][ T3019] veth1_vlan: left promiscuous mode [ 1049.313059][ T3019] veth0_vlan: left promiscuous mode [ 1049.468105][ T5250] Bluetooth: hci3: command tx timeout [ 1050.439629][ T3019] team0 (unregistering): Port device team_slave_1 removed [ 1050.560123][ T3019] team0 (unregistering): Port device team_slave_0 removed [ 1051.546752][ T5250] Bluetooth: hci3: command tx timeout [ 1051.797121][ T3019] team0 (unregistering): Port device team_slave_1 removed [ 1051.872553][ T3019] team0 (unregistering): Port device team_slave_0 removed [ 1052.597864][T17736] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1052.647227][T17736] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1052.713211][T17736] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1052.743899][T17540] veth0_vlan: entered promiscuous mode [ 1052.777747][T17722] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1052.821784][T17722] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1052.850513][T17722] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1053.099868][T17722] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1053.149915][T17540] veth1_vlan: entered promiscuous mode [ 1053.263701][T17953] netlink: 'syz.3.2902': attribute type 10 has an invalid length. [ 1053.280237][T17953] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.287553][T17953] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.655205][T17540] veth0_macvtap: entered promiscuous mode [ 1053.722842][T17540] veth1_macvtap: entered promiscuous mode [ 1053.798874][T17736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1053.822674][T17540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1053.852885][T17540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.864611][T17540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1053.883979][T17540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1053.907807][T17540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1053.923782][T17540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1054.010625][T17722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1054.037123][T17736] 8021q: adding VLAN 0 to HW filter on device team0 [ 1054.061194][T17540] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.096031][T17540] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.106437][T17540] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.115488][T17540] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.140650][ T2550] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.147822][ T2550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1054.162429][ T2550] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.169558][ T2550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1054.190282][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.196645][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.242178][T17775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1054.260785][T17775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1054.290109][T17775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1054.309576][T17775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1054.326542][T17973] loop3: detected capacity change from 0 to 8 [ 1054.414715][T17722] 8021q: adding VLAN 0 to HW filter on device team0 [ 1054.480357][ T2550] bridge0: port 1(bridge_slave_0) entered blocking state [ 1054.487526][ T2550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1054.513439][ T2550] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.520574][ T2550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1054.670092][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1054.682086][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1054.828890][T12666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1054.836815][T12666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1054.922243][T17775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1054.978921][T17775] 8021q: adding VLAN 0 to HW filter on device team0 [ 1055.054390][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1055.061602][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1055.119326][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1055.126481][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1055.241342][T17736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1055.316149][T17722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1055.510932][T17722] veth0_vlan: entered promiscuous mode [ 1055.555420][T17722] veth1_vlan: entered promiscuous mode [ 1055.689383][T17722] veth0_macvtap: entered promiscuous mode [ 1055.720937][T17976] loop3: detected capacity change from 0 to 32768 [ 1055.733602][T17722] veth1_macvtap: entered promiscuous mode [ 1055.756028][T17976] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 1055.795659][T17722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1055.822671][T17722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1055.833853][T17722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1055.889488][T17722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1055.930285][T17722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1055.966465][T17976] XFS (loop3): Ending clean mount [ 1056.028591][T17722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1056.044610][ T29] audit: type=1800 audit(1729431041.763:94): pid=17976 uid=60929 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2909" name="bus" dev="loop3" ino=5769 res=0 errno=0 [ 1056.050970][T17722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.083569][ T29] audit: type=1800 audit(1729431041.763:95): pid=17976 uid=60929 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2909" name="bus" dev="loop3" ino=5769 res=0 errno=0 [ 1056.097594][T17722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1056.115342][T17722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.128275][T17722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1056.142760][T17775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1056.192761][T17722] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.207024][T17722] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.216126][T17722] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.248545][T17722] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1056.306657][T16318] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 1056.510247][T17736] veth0_vlan: entered promiscuous mode [ 1056.533327][T17775] veth0_vlan: entered promiscuous mode [ 1056.574579][T18031] loop1: detected capacity change from 0 to 1024 [ 1056.663891][ T6409] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1056.678056][T18031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1056.712814][ T6409] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1056.775397][T17736] veth1_vlan: entered promiscuous mode [ 1056.799086][T17736] veth0_macvtap: entered promiscuous mode [ 1056.808395][T17736] veth1_macvtap: entered promiscuous mode [ 1056.823624][T17736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1056.834833][T17736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.845140][T17736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1056.856034][T17736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.866000][T17736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1056.876539][T17736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.898584][T17736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1056.942044][T17736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1056.953361][T17736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1056.965007][T17736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1056.991595][T17736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.001589][T17736] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1057.012099][T17736] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.023456][T17736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1057.071259][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1057.084096][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1057.084869][T17775] veth1_vlan: entered promiscuous mode [ 1057.109966][T17736] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.119258][T17736] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.129293][T17736] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.140901][T17736] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1057.142221][T17540] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1057.348507][T17775] veth0_macvtap: entered promiscuous mode [ 1057.407501][T17775] veth1_macvtap: entered promiscuous mode [ 1057.571368][T17775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.632294][T17775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.684108][T17775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.704222][T17775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.725492][T17775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.744238][T17775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.767812][T17775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1057.784845][T17775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.806064][T17775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1057.852309][T17775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1057.854323][ T1600] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1057.886420][T17775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.900090][ T1600] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1057.934991][T17775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1057.970739][T17775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1057.998373][T17775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1058.020431][T17775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.031069][T17775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1058.055385][T17775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1058.076812][T17775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1058.147123][T17775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.186807][T17775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.205268][T17775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.216755][T17775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1058.267128][ T6493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1058.284550][ T6493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1058.416456][ T6493] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1058.460019][ T6493] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1058.497601][T18080] loop1: detected capacity change from 0 to 8192 [ 1058.540593][T18080] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 1058.545073][ T6493] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1058.564403][ T6493] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1058.631578][T18080] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 1058.641492][T18080] REISERFS (device loop1): using ordered data mode [ 1058.648231][T18080] reiserfs: using flush barriers [ 1058.658110][T18080] REISERFS (device loop1): journal params: device ram0, size 127, journal first block 18, max trans len 1024, max batch 900, max commit age 30, max trans age 30 [ 1058.676153][T18080] REISERFS (device loop1): checking transaction log (ram0) [ 1058.714353][T18080] ================================================================== [ 1058.722483][T18080] BUG: KASAN: use-after-free in reiserfs_read_locked_inode+0x2044/0x28e0 [ 1058.730947][T18080] Read of size 4 at addr ffff88805ac55000 by task syz.1.2928/18080 [ 1058.738861][T18080] [ 1058.741291][T18080] CPU: 0 UID: 0 PID: 18080 Comm: syz.1.2928 Not tainted 6.12.0-rc3-next-20241016-syzkaller #0 [ 1058.751682][T18080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1058.761940][T18080] Call Trace: [ 1058.765248][T18080] [ 1058.768209][T18080] dump_stack_lvl+0x241/0x360 [ 1058.773547][T18080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1058.778830][T18080] ? __pfx__printk+0x10/0x10 [ 1058.783469][T18080] ? _printk+0xd5/0x120 [ 1058.787667][T18080] ? __virt_addr_valid+0x183/0x530 [ 1058.792810][T18080] ? __virt_addr_valid+0x183/0x530 [ 1058.797953][T18080] print_report+0x169/0x550 [ 1058.802484][T18080] ? __virt_addr_valid+0x183/0x530 [ 1058.807639][T18080] ? __virt_addr_valid+0x183/0x530 [ 1058.812775][T18080] ? __virt_addr_valid+0x45f/0x530 [ 1058.817906][T18080] ? __phys_addr+0xba/0x170 [ 1058.822409][T18080] ? reiserfs_read_locked_inode+0x2044/0x28e0 [ 1058.828516][T18080] kasan_report+0x143/0x180 [ 1058.833027][T18080] ? reiserfs_read_locked_inode+0x2044/0x28e0 [ 1058.839109][T18080] reiserfs_read_locked_inode+0x2044/0x28e0 [ 1058.845077][T18080] ? do_raw_spin_lock+0x14f/0x370 [ 1058.850114][T18080] ? __pfx_lock_release+0x10/0x10 [ 1058.855142][T18080] ? __pfx_reiserfs_read_locked_inode+0x10/0x10 [ 1058.861400][T18080] ? _raw_spin_unlock+0x28/0x50 [ 1058.866275][T18080] ? __pfx_reiserfs_init_locked_inode+0x10/0x10 [ 1058.872532][T18080] reiserfs_fill_super+0x1361/0x2640 [ 1058.877854][T18080] ? __pfx_reiserfs_fill_super+0x10/0x10 [ 1058.883536][T18080] ? do_raw_spin_lock+0x14f/0x370 [ 1058.889128][T18080] ? __pfx_snprintf+0x10/0x10 [ 1058.893838][T18080] ? set_blocksize+0x1f9/0x360 [ 1058.898626][T18080] ? sb_set_blocksize+0x98/0xf0 [ 1058.903499][T18080] ? setup_bdev_super+0x4e6/0x5d0 [ 1058.908548][T18080] mount_bdev+0x20a/0x2d0 [ 1058.912890][T18080] ? __pfx_reiserfs_fill_super+0x10/0x10 [ 1058.918545][T18080] ? __pfx_mount_bdev+0x10/0x10 [ 1058.923407][T18080] ? vfs_parse_fs_string+0x190/0x230 [ 1058.928708][T18080] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 1058.934353][T18080] legacy_get_tree+0xee/0x190 [ 1058.939044][T18080] ? __pfx_get_super_block+0x10/0x10 [ 1058.944359][T18080] vfs_get_tree+0x90/0x2b0 [ 1058.948792][T18080] do_new_mount+0x2be/0xb40 [ 1058.953407][T18080] ? __pfx_do_new_mount+0x10/0x10 [ 1058.958471][T18080] __se_sys_mount+0x2d6/0x3c0 [ 1058.963188][T18080] ? __pfx___se_sys_mount+0x10/0x10 [ 1058.968408][T18080] ? exc_page_fault+0x590/0x8c0 [ 1058.973284][T18080] ? __x64_sys_mount+0x20/0xc0 [ 1058.978070][T18080] do_syscall_64+0xf3/0x230 [ 1058.982591][T18080] ? clear_bhb_loop+0x35/0x90 [ 1058.987291][T18080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.993205][T18080] RIP: 0033:0x7f6ff497f79a [ 1058.997637][T18080] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1059.017262][T18080] RSP: 002b:00007f6ff5775e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1059.025699][T18080] RAX: ffffffffffffffda RBX: 00007f6ff5775ef0 RCX: 00007f6ff497f79a [ 1059.033690][T18080] RDX: 0000000020001100 RSI: 0000000020001140 RDI: 00007f6ff5775eb0 [ 1059.041673][T18080] RBP: 0000000020001100 R08: 00007f6ff5775ef0 R09: 0000000000000000 [ 1059.049662][T18080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020001140 [ 1059.057655][T18080] R13: 00007f6ff5775eb0 R14: 00000000000010e8 R15: 0000000020001180 [ 1059.065744][T18080] [ 1059.068773][T18080] [ 1059.071115][T18080] The buggy address belongs to the physical page: [ 1059.077544][T18080] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x27f pfn:0x5ac55 [ 1059.086762][T18080] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1059.093911][T18080] raw: 00fff00000000000 ffffea00013cc608 ffff8880b8644770 0000000000000000 [ 1059.102522][T18080] raw: 000000000000027f 0000000000000000 00000000ffffffff 0000000000000000 [ 1059.111114][T18080] page dumped because: kasan: bad access detected [ 1059.117545][T18080] page_owner tracks the page as freed [ 1059.122918][T18080] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 17976, tgid 17975 (syz.3.2909), ts 1055096366576, free_ts 1056574515938 [ 1059.141017][T18080] post_alloc_hook+0x1f3/0x230 [ 1059.145826][T18080] get_page_from_freelist+0x3123/0x3270 [ 1059.151392][T18080] __alloc_pages_noprof+0x292/0x710 [ 1059.156780][T18080] alloc_pages_mpol_noprof+0x3e8/0x680 [ 1059.162256][T18080] folio_alloc_mpol_noprof+0x36/0x50 [ 1059.167560][T18080] shmem_alloc_and_add_folio+0x49b/0x13d0 [ 1059.173298][T18080] shmem_get_folio_gfp+0x5a9/0x20a0 [ 1059.178701][T18080] shmem_write_begin+0x17e/0x460 [ 1059.183661][T18080] generic_perform_write+0x344/0x6d0 [ 1059.188983][T18080] shmem_file_write_iter+0xf9/0x120 [ 1059.194199][T18080] vfs_write+0xa6d/0xc90 [ 1059.198471][T18080] ksys_write+0x183/0x2b0 [ 1059.202813][T18080] do_syscall_64+0xf3/0x230 [ 1059.207332][T18080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.213245][T18080] page last free pid 16318 tgid 16318 stack trace: [ 1059.219756][T18080] free_unref_folios+0xf12/0x18d0 [ 1059.224809][T18080] folios_put_refs+0x76c/0x860 [ 1059.229599][T18080] shmem_undo_range+0x64c/0x1cf0 [ 1059.234555][T18080] shmem_evict_inode+0x29b/0xa80 [ 1059.239520][T18080] evict+0x4e8/0x9b0 [ 1059.243431][T18080] __dentry_kill+0x20d/0x630 [ 1059.248041][T18080] dput+0x19f/0x2b0 [ 1059.251867][T18080] __fput+0x5ba/0xa50 [ 1059.255860][T18080] task_work_run+0x24f/0x310 [ 1059.260464][T18080] syscall_exit_to_user_mode+0x168/0x370 [ 1059.266116][T18080] do_syscall_64+0x100/0x230 [ 1059.270716][T18080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.276624][T18080] [ 1059.278960][T18080] Memory state around the buggy address: [ 1059.284601][T18080] ffff88805ac54f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1059.292724][T18080] ffff88805ac54f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1059.300804][T18080] >ffff88805ac55000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1059.308896][T18080] ^ [ 1059.312971][T18080] ffff88805ac55080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1059.321040][T18080] ffff88805ac55100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1059.329114][T18080] ================================================================== [ 1059.354422][T18080] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1059.361669][T18080] CPU: 1 UID: 0 PID: 18080 Comm: syz.1.2928 Not tainted 6.12.0-rc3-next-20241016-syzkaller #0 [ 1059.371953][T18080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 1059.382062][T18080] Call Trace: [ 1059.385368][T18080] [ 1059.388353][T18080] dump_stack_lvl+0x241/0x360 [ 1059.393074][T18080] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1059.398308][T18080] ? __pfx__printk+0x10/0x10 [ 1059.402943][T18080] ? preempt_schedule+0xe1/0xf0 [ 1059.407837][T18080] ? vscnprintf+0x5d/0x90 [ 1059.412208][T18080] panic+0x349/0x880 [ 1059.416148][T18080] ? check_panic_on_warn+0x21/0xb0 [ 1059.421288][T18080] ? __pfx_panic+0x10/0x10 [ 1059.425747][T18080] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 1059.431771][T18080] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1059.438148][T18080] ? print_report+0x502/0x550 [ 1059.442881][T18080] check_panic_on_warn+0x86/0xb0 [ 1059.447855][T18080] ? reiserfs_read_locked_inode+0x2044/0x28e0 [ 1059.453950][T18080] end_report+0x77/0x160 [ 1059.458298][T18080] kasan_report+0x154/0x180 [ 1059.462817][T18080] ? reiserfs_read_locked_inode+0x2044/0x28e0 [ 1059.469085][T18080] reiserfs_read_locked_inode+0x2044/0x28e0 [ 1059.475101][T18080] ? do_raw_spin_lock+0x14f/0x370 [ 1059.480139][T18080] ? __pfx_lock_release+0x10/0x10 [ 1059.485168][T18080] ? __pfx_reiserfs_read_locked_inode+0x10/0x10 [ 1059.491519][T18080] ? _raw_spin_unlock+0x28/0x50 [ 1059.496389][T18080] ? __pfx_reiserfs_init_locked_inode+0x10/0x10 [ 1059.502655][T18080] reiserfs_fill_super+0x1361/0x2640 [ 1059.507967][T18080] ? __pfx_reiserfs_fill_super+0x10/0x10 [ 1059.513633][T18080] ? do_raw_spin_lock+0x14f/0x370 [ 1059.518673][T18080] ? __pfx_snprintf+0x10/0x10 [ 1059.523358][T18080] ? set_blocksize+0x1f9/0x360 [ 1059.528143][T18080] ? sb_set_blocksize+0x98/0xf0 [ 1059.533005][T18080] ? setup_bdev_super+0x4e6/0x5d0 [ 1059.538043][T18080] mount_bdev+0x20a/0x2d0 [ 1059.542379][T18080] ? __pfx_reiserfs_fill_super+0x10/0x10 [ 1059.548029][T18080] ? __pfx_mount_bdev+0x10/0x10 [ 1059.552888][T18080] ? vfs_parse_fs_string+0x190/0x230 [ 1059.558188][T18080] ? __pfx_vfs_parse_fs_string+0x10/0x10 [ 1059.563853][T18080] legacy_get_tree+0xee/0x190 [ 1059.568562][T18080] ? __pfx_get_super_block+0x10/0x10 [ 1059.573871][T18080] vfs_get_tree+0x90/0x2b0 [ 1059.578308][T18080] do_new_mount+0x2be/0xb40 [ 1059.582845][T18080] ? __pfx_do_new_mount+0x10/0x10 [ 1059.587903][T18080] __se_sys_mount+0x2d6/0x3c0 [ 1059.592629][T18080] ? __pfx___se_sys_mount+0x10/0x10 [ 1059.597852][T18080] ? exc_page_fault+0x590/0x8c0 [ 1059.602739][T18080] ? __x64_sys_mount+0x20/0xc0 [ 1059.607516][T18080] do_syscall_64+0xf3/0x230 [ 1059.612025][T18080] ? clear_bhb_loop+0x35/0x90 [ 1059.616711][T18080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.622608][T18080] RIP: 0033:0x7f6ff497f79a [ 1059.627047][T18080] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1059.646761][T18080] RSP: 002b:00007f6ff5775e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1059.655202][T18080] RAX: ffffffffffffffda RBX: 00007f6ff5775ef0 RCX: 00007f6ff497f79a [ 1059.663197][T18080] RDX: 0000000020001100 RSI: 0000000020001140 RDI: 00007f6ff5775eb0 [ 1059.671192][T18080] RBP: 0000000020001100 R08: 00007f6ff5775ef0 R09: 0000000000000000 [ 1059.679183][T18080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020001140 [ 1059.687196][T18080] R13: 00007f6ff5775eb0 R14: 00000000000010e8 R15: 0000000020001180 [ 1059.695193][T18080] [ 1059.698538][T18080] Kernel Offset: disabled [ 1059.702866][T18080] Rebooting in 86400 seconds..