last executing test programs: 35.959764719s ago: executing program 0 (id=276): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="740000001e00010d00c2ca8d120000000700", @ANYRES8=r1], 0x74}, 0x1, 0x0, 0x0, 0x200020a0}, 0x8040) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 35.017976224s ago: executing program 0 (id=290): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="02"], 0x10) socket$kcm(0x2, 0x2, 0x73) 34.810851457s ago: executing program 0 (id=294): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000280)='./file1\x00', 0x808010, &(0x7f0000000640)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES32], 0x1, 0x2b2, &(0x7f0000001380)="$eJzs3NFLU28cx/Hvz6mbE91+EEFB9aVu6uag6w+oEQrRoDAn1UVwzLMaO21yzlgsIncT3fZ3SJfdBdU/4E100313EgTdeBGd8Jwd3XTa1M2t+X6BnO/xeT4+jzrlewSf9XtvnhZyrpEzyzIUUxkSqcmGSHKzqvuvfh3y61FpVJMr4z+/nrt7/8GtdCYzM6c6m56/mlLVyQsfnr14e/FTeXzh3eT7qKwlH67/SH1bO712Zv33/JO8q3lXi6WymrpYKpXNRdvSpbxbMFTv2JbpWpovupbTNJ6zS8vLVTWLSxPxZcdyXTWLVS1YVS2XtOxU1Xxs5otqGIZOxOVkG25jTnZ1bs5M7znsRTq6I3RetPl2rNUcx0nXWg9mV7u1LwAA0L/27/+DXn/v/j+zEFw73P+L0P93Sa3p7i/9PwaC46TNeP3ntxn9PwAAAAAAAAAAAAAAAAAAAAAA/4INz0t4npcIr+FbVERiIhLe93qf6I5Dfv+v9Wi76LCGf9yLidivK9lKNrgG4+mc5MUWS6YkIb/810NdUM/ezMxMqW+k/iE38yuVbMQ/m8DPh5Kt8uf/nw7yKh83c5V6fkTijeunJCGnWq+f2s6HxyGsVLKjcvlSQ96QhHx+JCWxZcl/XW/nX06r3rid2bH+mD8PAAAAAIBBYOiWZPPzb3D2o+FPiMnu8SB/gL8P7Hi+Hpaz7RxRCQAAAAAAjsytPi+Ytm05hyiiInKE+KAWEemLbeworotIH2zjuIqYiATv0cPEv2/F20p5bcwZFpGef1kOUPT6NxMAAACATttu+g8Q+vKqizsCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODkafc8sHD+rqFwYJ94w3KRY/8EAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD7yJwAA//+j7Rqj") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000000)=""/48, 0x30) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 34.331264644s ago: executing program 0 (id=302): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@my=0x1}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000380)={{@host}, 0x0, 0x800000000000000, 0x1, 0xfffffffa}) 21.726928888s ago: executing program 0 (id=302): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@my=0x1}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000380)={{@host}, 0x0, 0x800000000000000, 0x1, 0xfffffffa}) 7.40554403s ago: executing program 0 (id=302): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@my=0x1}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000380)={{@host}, 0x0, 0x800000000000000, 0x1, 0xfffffffa}) 2.921197222s ago: executing program 1 (id=477): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="73686f727461642c756e64656c6574652c73657373696f6e3d30303030000800003030303030303030303139302c6d6f64653d30303030303030303030303030303030303030303030352c726f6f746469723d30303030303030303030303030303030303030352c646d6f64653d30303030303030303030303030303030303030303030362c696f636861727365743d6370313235312c696f636861727365743d6b6f69382d722c6e6f7672732c0084f5b23d82aacbefd1de1daab7394a9b4696461da9ab46f2d71c895d8c", @ANYRESHEX], 0xfc, 0xc41, &(0x7f0000001b80)="$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") syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xf5, 0x0, &(0x7f00000000c0)) r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2.694845776s ago: executing program 3 (id=479): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) 2.528815009s ago: executing program 3 (id=480): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60140, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0) 2.4478064s ago: executing program 1 (id=481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002280)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 2.217556514s ago: executing program 1 (id=482): syz_mount_image$minix(&(0x7f0000000300), &(0x7f0000000180)='./file2\x00', 0x4000, &(0x7f0000000340)=ANY=[], 0x1, 0x1ff, &(0x7f00000005c0)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r0) close(r0) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) 2.170812345s ago: executing program 3 (id=483): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3f, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x4, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x824, 0xd, 0x1, 0x2, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0x6, 0x0, 0x5, 0x4, 0xfffffffa, 0x3fc, 0x80, 0x0, 0x2, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0xf292, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x78, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x31, 0xe, 0x312, 0x78, 0xea4, 0x2, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfdfffffd, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x7, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x6, 0x7ff7, 0x0, 0x5, 0xb, 0x3, 0x5, 0x405, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x3e, 0xd9, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1002, 0xa2, 0x7, 0x953a, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x6, 0xb, 0x5, 0x893a, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x149, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x1, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0x8af, 0x8, 0x6, 0x226, 0x5, 0x5, 0x28, 0x30b1d693, 0xa1f, 0xf43, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.891735579s ago: executing program 1 (id=484): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000020000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f00000001c0)="c8", &(0x7f0000000100)=@tcp6=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000080)={r1, &(0x7f0000000500)='N'}, 0x20) 1.84529662s ago: executing program 3 (id=485): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2058) write$FUSE_INIT(r0, &(0x7f0000002200)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x1dd880}}, 0x50) newfstatat(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', &(0x7f0000001440), 0x4000) 1.721419562s ago: executing program 1 (id=486): syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) syz_open_dev$radio(&(0x7f0000000100), 0x2, 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f00000000c0)={0xf0f041}) 1.530908405s ago: executing program 1 (id=488): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_CSUM={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}]}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x4c}}, 0x0) 987.769083ms ago: executing program 2 (id=492): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xe}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='signal_generate\x00', r1}, 0x18) r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) 855.588586ms ago: executing program 3 (id=493): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x2, 0xc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000740)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdc04}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) 825.530926ms ago: executing program 2 (id=494): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000480)={[{@acl}]}, 0x1, 0x787, &(0x7f0000001000)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000240)={'syz0\x00', {0xf, 0x7, 0x7, 0x1}, 0x4a, [0x5f11bec3, 0x3, 0x5, 0x40, 0x0, 0xffffffff, 0x0, 0x7d, 0x13, 0x5, 0x0, 0x6, 0x0, 0xffffffff, 0x4000000, 0x0, 0x1a4, 0xfffff605, 0x3, 0x0, 0x46e9, 0x7ff, 0xe2b, 0xb, 0x681c1eb2, 0x11e, 0x0, 0x0, 0x0, 0x2, 0x12, 0xffffffff, 0x9, 0x4, 0x0, 0x3, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0xa, 0xfffffffe, 0x1, 0x0, 0x0, 0x0, 0x0, 0xe0, 0x3fd, 0x5, 0xfffffff6, 0x0, 0xf681, 0x0, 0x1ab9, 0xffffffff, 0x0, 0x0, 0xfffffffb, 0x1c15d73a], [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x7, 0x200, 0x1, 0x0, 0x61c5fb46, 0x10000, 0x0, 0x4, 0x10001, 0x75, 0x0, 0x4, 0x0, 0xd, 0x80000000, 0x0, 0x0, 0x9, 0x0, 0x9, 0x4, 0xff, 0x0, 0x10001, 0x3, 0x0, 0x7, 0xfffffffb, 0xbc, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x441238ca, 0x0, 0x0, 0x0, 0xfffffff9, 0x2, 0x7fffffff, 0x6, 0x9], [0x0, 0x0, 0x3, 0x9f5, 0x0, 0xa02, 0x1c75, 0xf51, 0x0, 0x40, 0x0, 0xc7, 0x7, 0x0, 0x6, 0x0, 0x0, 0x0, 0x205, 0x5, 0x80000, 0xc, 0x5, 0x200, 0xcc0, 0x0, 0x6, 0x63, 0x0, 0x0, 0x0, 0xe, 0x929, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x15960318, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6574, 0x0, 0x0, 0xcd55, 0xfb], [0x0, 0x6, 0x0, 0x2, 0x1, 0x2, 0x5, 0x200, 0x0, 0xd63, 0x6, 0x0, 0x0, 0x0, 0xfffffffa, 0xfa3, 0x400, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xffffff14, 0x0, 0x194e, 0x0, 0xe793, 0xddda, 0x3, 0x0, 0x80000001, 0x3, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0x40, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7fff, 0x6, 0x800, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x45d, 0x4, 0x0, 0xfff, 0xb2, 0x9, 0xb]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000200), 0x1000000000000276, 0x0, 0x0) 736.839418ms ago: executing program 3 (id=495): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x1c, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x1c, {[@window={0xe, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 493.717341ms ago: executing program 2 (id=496): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f00000002c0)={0x6, 0x8002, 0x820a, 0x400, 0x10}) 183.785826ms ago: executing program 2 (id=497): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x4d, [0x10004, 0x6, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x4, 0x1, 0xfd, 0x3c6, 0x7, 0x7, 0xf70, 0x3c00, 0xe7, 0x4007, 0x401, 0xbc5e, 0x4, 0x1, 0x8, 0xffff, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1, 0x1, 0x1, 0x0, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x3, 0x1, 0x6, 0x2, 0x5, 0x49, 0x5, 0x9, 0x0, 0x1, 0x1000, 0x3, 0x2, 0x6, 0x7ff, 0xb8547353], [0x4, 0xffffffff, 0x4, 0x5, 0x7ffffdff, 0x1, 0x550, 0x6, 0x2, 0xfffffffc, 0x10001, 0xc, 0x36, 0x4, 0x6, 0x8001, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x9, 0x99d, 0x8, 0x0, 0xd, 0x6, 0xfffffffe, 0x6e38, 0x8000, 0xa, 0x6, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40000040, 0x1, 0x8, 0x5, 0x8, 0x0, 0x34f1, 0x9, 0x4, 0x1b2c5a97, 0x0, 0x9, 0x8, 0x0, 0x1, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x4, 0x2, 0x200006, 0x5, 0x5, 0x2, 0x80, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40004, 0x1, 0x1, 0x4, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x40000008, 0x2, 0x4, 0x800, 0x7, 0x9, 0x10000, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x4, 0x8c0, 0x9, 0x2, 0x8, 0x5, 0x6, 0x2, 0x81, 0x8, 0x1, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0x82, 0x2, 0x10], [0x0, 0x897, 0x8, 0x246d, 0x6, 0x101, 0x7fffffff, 0xd, 0x7ff, 0x606, 0x5, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x8, 0x7ff, 0x1, 0x0, 0x2, 0x6, 0x20c, 0xfffffffd, 0xa18, 0x61c8, 0x6, 0x7ff, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0x20e, 0x4000006, 0x7, 0xfffffffd, 0x9, 0x1, 0x4, 0x100009, 0x100, 0x8, 0x3c, 0x1000, 0x3, 0x3, 0x15, 0x8000, 0x7, 0x81, 0x8, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000001180)={'syz0\x00', {0xaf0, 0xd033, 0x180}, 0x45, [0xfffffff7, 0x3, 0x2, 0x1, 0x80, 0xaf7, 0x8, 0x6, 0x7fff, 0x9, 0x42, 0x40, 0x3ff, 0x2, 0x1, 0x8000, 0x7ff, 0x20000003, 0x5, 0x5, 0x1, 0x4, 0x6, 0x2, 0x6, 0x6, 0x7, 0x1600000, 0xa, 0xfe, 0x3ff, 0xc6, 0x3, 0x8000, 0x1b, 0xb, 0x7, 0x0, 0xff, 0x4, 0x57, 0x6253, 0x7, 0xda, 0x67aa2099, 0xffffffff, 0x7, 0x8, 0x9, 0x9, 0xd, 0x6, 0x5, 0x9ec6, 0x7, 0x1, 0x7, 0xff, 0x7, 0x800, 0xfffffffa, 0x3, 0x6, 0x3], [0x3, 0x7ff, 0x7, 0xa, 0x3, 0x3, 0x3, 0x2, 0x2, 0x5, 0x0, 0xfffff283, 0x1ff8, 0x8, 0x100, 0xffffffff, 0x7, 0x3ff, 0xffffffff, 0x0, 0x400000, 0x9, 0x6, 0xe, 0x0, 0x100, 0x1, 0xd, 0x100, 0x800, 0xcb, 0x5, 0x5, 0x6, 0x0, 0x3, 0xe, 0x6, 0x81, 0x3, 0x2, 0x8, 0xfffffff7, 0x6, 0x8, 0x5, 0xd, 0xfffffffa, 0x2, 0x8a, 0x4, 0x8b7, 0xfffffffa, 0x1, 0xfbfffff9, 0x3, 0x9, 0x7, 0x3, 0x942, 0x4, 0x12000, 0x4fb2adfa, 0xdea0], [0x2, 0x2, 0xfffff001, 0xfffffffd, 0x8, 0xe6, 0x8, 0x2, 0xf441, 0x2, 0xfffffffd, 0x2, 0x10, 0x1000, 0x9, 0x2, 0xfffffffb, 0x7, 0x0, 0xf361, 0x7, 0x3, 0x0, 0x5, 0x6, 0xff, 0x81, 0xf, 0x1, 0x9, 0x7, 0x0, 0x10001, 0x8e5c, 0x4, 0x9, 0x6, 0x1, 0x200, 0x7, 0x40, 0x7a2c, 0x200101, 0x9e38, 0x4c88, 0x6, 0xa8, 0x4, 0x8, 0x9, 0x2, 0x6, 0x5, 0x1, 0x1137, 0x8, 0xae, 0x4d70, 0x400, 0xfaa5, 0xffffff01, 0x15, 0x78, 0x1], [0x0, 0x9, 0x9, 0x0, 0x6, 0x8, 0x9, 0x4, 0xfffffff8, 0x200, 0xf, 0x5, 0x3, 0x6727, 0x7fff, 0x9, 0x200, 0x6, 0xe3, 0x400, 0x0, 0x4, 0xdfd2, 0x39, 0x101, 0x9, 0x1, 0x1, 0xa, 0x2, 0x10001, 0x1, 0x6, 0x400, 0x0, 0x8, 0x2, 0x9, 0x9, 0x6, 0x200, 0x0, 0x2334, 0x6, 0x1, 0x2, 0x6f51, 0x81, 0x5, 0x0, 0x7, 0x3, 0x7, 0x34254b70, 0x4ad, 0x3, 0x8b21, 0x80000001, 0x9, 0x1, 0xc, 0xffff, 0x7, 0x8]}, 0x45c) 91.542058ms ago: executing program 2 (id=498): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net\x00') fchdir(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) 0s ago: executing program 2 (id=499): syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x84, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRESHEX], 0x8b, 0x2bb, &(0x7f00000009c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141142, 0x0) pwrite64(r1, &(0x7f0000000000)='2', 0x1, 0x4fed0) ftruncate(r0, 0xc17a) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.112' (ED25519) to the list of known hosts. [ 65.524865][ T5777] cgroup: Unknown subsys name 'net' [ 65.720963][ T5777] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 67.059519][ T5777] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.919923][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.927836][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.936483][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.942799][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.947826][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.958574][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.964042][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.966569][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.994161][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.994161][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.017092][ T5801] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.021647][ T5803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.025778][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.032845][ T5802] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 69.039124][ T5801] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.045322][ T5803] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.053030][ T5801] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 69.061562][ T5803] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.066799][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.073271][ T5802] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.081093][ T5801] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 69.095935][ T5803] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.095938][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.096310][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.522369][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 69.620922][ T5799] chnl_net:caif_netlink_parms(): no params data found [ 69.662397][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.671665][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.679747][ T5787] bridge_slave_0: entered allmulticast mode [ 69.689261][ T5787] bridge_slave_0: entered promiscuous mode [ 69.738263][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.745771][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.752951][ T5787] bridge_slave_1: entered allmulticast mode [ 69.760257][ T5787] bridge_slave_1: entered promiscuous mode [ 69.768255][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 69.841403][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.851206][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 69.871161][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.931193][ T5787] team0: Port device team_slave_0 added [ 69.982117][ T5787] team0: Port device team_slave_1 added [ 69.996997][ T5799] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.004708][ T5799] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.011845][ T5799] bridge_slave_0: entered allmulticast mode [ 70.018701][ T5799] bridge_slave_0: entered promiscuous mode [ 70.038680][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.047101][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.054346][ T5788] bridge_slave_0: entered allmulticast mode [ 70.061427][ T5788] bridge_slave_0: entered promiscuous mode [ 70.088224][ T5799] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.095705][ T5799] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.102838][ T5799] bridge_slave_1: entered allmulticast mode [ 70.110468][ T5799] bridge_slave_1: entered promiscuous mode [ 70.129850][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.137040][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.144558][ T5788] bridge_slave_1: entered allmulticast mode [ 70.151206][ T5788] bridge_slave_1: entered promiscuous mode [ 70.173742][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.181045][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.207028][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.250332][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.257415][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.284361][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.298569][ T5799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.310587][ T5799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.321783][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.333882][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.378318][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.385976][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.393175][ T5789] bridge_slave_0: entered allmulticast mode [ 70.400494][ T5789] bridge_slave_0: entered promiscuous mode [ 70.409167][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.418435][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.425674][ T5789] bridge_slave_1: entered allmulticast mode [ 70.432328][ T5789] bridge_slave_1: entered promiscuous mode [ 70.498535][ T5799] team0: Port device team_slave_0 added [ 70.508956][ T5799] team0: Port device team_slave_1 added [ 70.532383][ T5788] team0: Port device team_slave_0 added [ 70.561699][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.572351][ T5788] team0: Port device team_slave_1 added [ 70.579561][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.587466][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.613397][ T5799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.626144][ T5799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.633102][ T5799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.659293][ T5799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.675411][ T5787] hsr_slave_0: entered promiscuous mode [ 70.681570][ T5787] hsr_slave_1: entered promiscuous mode [ 70.690277][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.740304][ T5789] team0: Port device team_slave_0 added [ 70.759914][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.767070][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.793209][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.816106][ T5789] team0: Port device team_slave_1 added [ 70.829131][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.836140][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.862697][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.938350][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.945621][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.972586][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.989027][ T5799] hsr_slave_0: entered promiscuous mode [ 70.995407][ T5799] hsr_slave_1: entered promiscuous mode [ 71.001425][ T5799] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.009492][ T5799] Cannot create hsr debugfs directory [ 71.035569][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.042642][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 71.069941][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.125656][ T50] Bluetooth: hci0: command tx timeout [ 71.151432][ T5788] hsr_slave_0: entered promiscuous mode [ 71.158092][ T5788] hsr_slave_1: entered promiscuous mode [ 71.164460][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.172024][ T5788] Cannot create hsr debugfs directory [ 71.208615][ T50] Bluetooth: hci2: command tx timeout [ 71.208631][ T5795] Bluetooth: hci3: command tx timeout [ 71.208825][ T5795] Bluetooth: hci1: command tx timeout [ 71.335272][ T5789] hsr_slave_0: entered promiscuous mode [ 71.341450][ T5789] hsr_slave_1: entered promiscuous mode [ 71.348135][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 71.355739][ T5789] Cannot create hsr debugfs directory [ 71.482567][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 71.493024][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 71.530423][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.537237][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.547932][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 71.562812][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 71.646752][ T5799] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.656650][ T5799] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.672654][ T5799] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.710282][ T5799] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.769659][ T5788] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.779459][ T5788] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.815444][ T5788] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.825464][ T5788] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.869342][ T5789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.882094][ T5789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.891468][ T5789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.903269][ T5789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.042411][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.076585][ T5799] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.105070][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.120573][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.130139][ T3501] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.137545][ T3501] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.173128][ T3501] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.180256][ T3501] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.202192][ T5799] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.245438][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.252543][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.262858][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.269967][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.286380][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.316459][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.331035][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.338159][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.391434][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.398642][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.436435][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.467819][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.475002][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.496884][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.504067][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.692088][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.817426][ T5787] veth0_vlan: entered promiscuous mode [ 72.868901][ T5787] veth1_vlan: entered promiscuous mode [ 72.980307][ T5787] veth0_macvtap: entered promiscuous mode [ 72.990920][ T5787] veth1_macvtap: entered promiscuous mode [ 73.027968][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.043131][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.056309][ T5799] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.065462][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.077871][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.101312][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.110758][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.121427][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.131328][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.221040][ T5795] Bluetooth: hci0: command tx timeout [ 73.233574][ T5799] veth0_vlan: entered promiscuous mode [ 73.284622][ T5795] Bluetooth: hci1: command tx timeout [ 73.290496][ T5788] veth0_vlan: entered promiscuous mode [ 73.296227][ T5795] Bluetooth: hci2: command tx timeout [ 73.301640][ T5795] Bluetooth: hci3: command tx timeout [ 73.310989][ T5799] veth1_vlan: entered promiscuous mode [ 73.327549][ T1068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.341883][ T5789] veth0_vlan: entered promiscuous mode [ 73.355463][ T5789] veth1_vlan: entered promiscuous mode [ 73.363403][ T1068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.406133][ T5788] veth1_vlan: entered promiscuous mode [ 73.415596][ T3422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.423426][ T3422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.490890][ T5799] veth0_macvtap: entered promiscuous mode [ 73.527602][ T5789] veth0_macvtap: entered promiscuous mode [ 73.538051][ T5799] veth1_macvtap: entered promiscuous mode [ 73.555196][ T5789] veth1_macvtap: entered promiscuous mode [ 73.576721][ T5788] veth0_macvtap: entered promiscuous mode [ 73.639542][ T5788] veth1_macvtap: entered promiscuous mode [ 73.645262][ T5879] syz.3.4[5879]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 73.660047][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.673082][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.686751][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.723460][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.739689][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.750101][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.762623][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.783483][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.793253][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.808930][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.821680][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.837174][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.849350][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.863811][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.881730][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.905640][ T5799] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.916643][ T5799] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.930153][ T5799] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.948211][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.959219][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.969860][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.980843][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.000366][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.031756][ T5789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.047342][ T5789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.059091][ T5789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.071804][ T5789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.091799][ T5799] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.097996][ T5879] loop3: detected capacity change from 0 to 32768 [ 74.113694][ T5799] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.122953][ T5799] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.132789][ T5799] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.151839][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.157120][ T5879] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 74.177260][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.187779][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.199653][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.210660][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.221492][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.233602][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.314683][ T5788] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.331300][ T5788] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.340548][ T5788] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.349875][ T5788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.354211][ T5879] XFS (loop3): Ending clean mount [ 74.474144][ T5879] XFS (loop3): User initiated shutdown received. [ 74.481281][ T5879] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 74.501399][ T5879] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 74.594066][ T3422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.595503][ T5787] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 74.601901][ T3422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.741204][ T1068] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.750822][ T3422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.765542][ T1068] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.771222][ T3422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.848937][ T1130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.857710][ T1130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.925351][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.933213][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.036002][ T1130] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.085436][ T1130] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.202415][ T5896] loop2: detected capacity change from 0 to 512 [ 75.216368][ T5899] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7'. [ 75.240811][ T5900] netlink: 64 bytes leftover after parsing attributes in process `syz.1.6'. [ 75.284434][ T5795] Bluetooth: hci0: command tx timeout [ 75.310314][ T5896] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 75.342876][ T5896] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 75.365128][ T5795] Bluetooth: hci3: command tx timeout [ 75.365139][ T5803] Bluetooth: hci1: command tx timeout [ 75.374715][ T5803] Bluetooth: hci2: command tx timeout [ 75.428285][ T5896] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 75.485612][ T5896] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 75.543526][ T5896] EXT4-fs (loop2): 1 truncate cleaned up [ 75.556266][ T5911] loop3: detected capacity change from 0 to 128 [ 75.572074][ T5896] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.638399][ T5911] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.671310][ T27] audit: type=1800 audit(1752708163.854:2): pid=5896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 75.691179][ T5911] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.720769][ T5911] syz.3.9 (pid 5911) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 75.786197][ T5787] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.799568][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.814352][ T5860] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 75.890334][ T5916] loop0: detected capacity change from 0 to 256 [ 76.005317][ T5860] usb 2-1: Using ep0 maxpacket: 8 [ 76.023872][ T5860] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 76.037442][ T5860] usb 2-1: config 179 has no interface number 0 [ 76.043904][ T5860] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 76.070751][ T5860] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 76.103658][ T5920] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 76.141692][ T5860] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 76.167025][ T5860] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 76.204260][ T5860] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 76.248267][ T5860] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 76.263521][ T5860] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.293796][ T5907] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 76.401059][ T5929] mmap: syz.2.17 (5929) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 76.637759][ T5860] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input5 [ 77.008488][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 77.008597][ T5861] usb 2-1: USB disconnect, device number 2 [ 77.023751][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 77.023927][ T5861] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 77.365699][ T5803] Bluetooth: hci0: command tx timeout [ 77.444687][ T5803] Bluetooth: hci3: command tx timeout [ 77.454957][ T5803] Bluetooth: hci2: command tx timeout [ 77.454969][ T5795] Bluetooth: hci1: command tx timeout [ 77.785269][ T5932] loop2: detected capacity change from 0 to 40427 [ 77.864691][ T5932] F2FS-fs (loop2): invalid crc value [ 77.897650][ T5932] F2FS-fs (loop2): Found nat_bits in checkpoint [ 77.930747][ T5888] kernel write not supported for file /cpuinfo (pid: 5888 comm: kworker/0:6) [ 78.067115][ T5932] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 78.554994][ T5958] syz.2.18: attempt to access beyond end of device [ 78.554994][ T5958] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 78.608156][ T5958] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 78.618454][ T5964] netlink: 'syz.0.30': attribute type 21 has an invalid length. [ 78.627203][ T5964] netlink: 'syz.0.30': attribute type 6 has an invalid length. [ 78.637235][ T5964] netlink: 132 bytes leftover after parsing attributes in process `syz.0.30'. [ 79.205563][ T5833] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.424478][ T5833] usb 4-1: Using ep0 maxpacket: 16 [ 79.452659][ T5988] overlayfs: workdir and upperdir must reside under the same mount [ 79.463438][ T5833] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 79.484765][ T5833] usb 4-1: config 0 interface 0 has no altsetting 0 [ 79.501788][ T5833] usb 4-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 79.511832][ T5833] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.523760][ T5833] usb 4-1: config 0 descriptor?? [ 79.544601][ T5990] loop0: detected capacity change from 0 to 1024 [ 79.572159][ T5990] hfsplus: Filesystem is marked locked, mounting read-only. [ 79.664061][ T5888] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 79.800598][ T5996] loop7: detected capacity change from 0 to 7 [ 79.812564][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 79.821891][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 79.830405][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 79.839646][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 79.848740][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 79.849160][ T785] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 79.857949][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 79.865323][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 79.882518][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 79.890510][ T5888] usb 3-1: Using ep0 maxpacket: 8 [ 79.890641][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 79.901709][ T5888] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 79.904750][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 79.923575][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 79.924778][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.932791][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 79.942378][ T5888] usb 3-1: Product: syz [ 79.951257][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 79.953310][ T5888] usb 3-1: Manufacturer: syz [ 79.964896][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 79.971437][ T5888] usb 3-1: SerialNumber: syz [ 79.975676][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 79.975741][ T5996] ldm_validate_partition_table(): Disk read failed. [ 79.993084][ T5888] usb 3-1: config 0 descriptor?? [ 79.997104][ T5833] hid (null): report_id 67708416 is invalid [ 80.005904][ T5888] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 80.022044][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.031245][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 80.039158][ T5833] cougar 0003:060B:500A.0001: usage count exceeds max: fixing up report descriptor [ 80.049845][ T5833] cougar 0003:060B:500A.0001: unexpected long global item [ 80.057091][ T785] usb 2-1: Using ep0 maxpacket: 16 [ 80.063873][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 80.072681][ T785] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 80.073119][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 80.082688][ T5833] cougar 0003:060B:500A.0001: parse failed [ 80.093969][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 80.097527][ T785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.107364][ T5996] Dev loop7: unable to read RDB block 0 [ 80.119208][ T5833] cougar: probe of 0003:060B:500A.0001 failed with error -22 [ 80.120637][ T5996] loop7: unable to read partition table [ 80.128957][ T785] usb 2-1: Product: syz [ 80.133575][ T5996] loop7: partition table beyond EOD, truncated [ 80.143473][ T785] usb 2-1: Manufacturer: syz [ 80.151468][ T785] usb 2-1: SerialNumber: syz [ 80.157861][ T5996] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 80.178533][ T785] usb 2-1: config 0 descriptor?? [ 80.222308][ T5861] usb 4-1: USB disconnect, device number 2 [ 80.412015][ T6003] sock: sock_set_timeout: `syz.0.48' (pid 6003) tries to set negative timeout [ 80.599341][ T785] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 80.626746][ T785] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 80.637962][ T785] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 80.652612][ T785] usb 2-1: media controller created [ 80.689068][ T785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 81.038727][ T5888] gspca_sonixj: reg_w1 err -71 [ 81.104156][ T5888] sonixj: probe of 3-1:0.0 failed with error -71 [ 81.152096][ T5888] usb 3-1: USB disconnect, device number 2 [ 81.256102][ T785] zl10353_read_register: readreg error (reg=127, ret==0) [ 81.277316][ T785] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 81.287102][ T785] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 81.316715][ T785] usb 2-1: USB disconnect, device number 3 [ 81.378035][ T6016] loop0: detected capacity change from 0 to 32768 [ 81.401190][ T6016] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.54 (6016) [ 81.429987][ T785] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 81.462598][ T6016] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 81.480546][ T6016] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 81.490942][ T6016] BTRFS info (device loop0): using free space tree [ 81.668812][ T6039] loop3: detected capacity change from 0 to 2048 [ 81.692214][ T6016] BTRFS info (device loop0): enabling ssd optimizations [ 81.728928][ T6016] BTRFS info (device loop0): auto enabling async discard [ 81.750457][ T6039] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 81.786433][ T786] cfg80211: failed to load regulatory.db [ 81.790956][ T6043] netlink: 32 bytes leftover after parsing attributes in process `syz.2.59'. [ 81.814551][ T6043] (unnamed net_device) (uninitialized): option ad_select: invalid value (102) [ 81.825816][ T6043] Zero length message leads to an empty skb [ 81.890674][ T27] audit: type=1800 audit(1752708170.074:3): pid=6039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.58" name="file1" dev="loop3" ino=1415 res=0 errno=0 [ 81.915799][ T5788] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 82.077499][ T6047] loop1: detected capacity change from 0 to 512 [ 82.085703][ T6047] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.125596][ T6047] EXT4-fs: inline encryption not supported [ 82.131514][ T6047] EXT4-fs: Ignoring removed mblk_io_submit option [ 82.199618][ T6047] EXT4-fs (loop1): Test dummy encryption mode enabled [ 82.220901][ T6047] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 82.239426][ T6049] netlink: 'syz.0.61': attribute type 30 has an invalid length. [ 82.264487][ T5781] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop0 scanned by udevd (5781) [ 82.276998][ T6047] EXT4-fs (loop1): 1 truncate cleaned up [ 82.329639][ T6047] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.382398][ T6055] loop2: detected capacity change from 0 to 256 [ 82.434661][ T6055] ======================================================= [ 82.434661][ T6055] WARNING: The mand mount option has been deprecated and [ 82.434661][ T6055] and is ignored by this kernel. Remove the mand [ 82.434661][ T6055] option from the mount to silence this warning. [ 82.434661][ T6055] ======================================================= [ 82.668925][ T6066] capability: warning: `syz.0.66' uses 32-bit capabilities (legacy support in use) [ 82.692336][ T6055] FAT-fs (loop2): Directory bread(block 64) failed [ 82.702658][ T6055] FAT-fs (loop2): Directory bread(block 65) failed [ 82.722937][ T6055] FAT-fs (loop2): Directory bread(block 66) failed [ 82.732891][ T6055] FAT-fs (loop2): Directory bread(block 67) failed [ 82.759912][ T6055] FAT-fs (loop2): Directory bread(block 68) failed [ 82.778402][ T6055] FAT-fs (loop2): Directory bread(block 69) failed [ 82.798731][ T6055] FAT-fs (loop2): Directory bread(block 70) failed [ 82.821674][ T6055] FAT-fs (loop2): Directory bread(block 71) failed [ 82.851412][ T6055] FAT-fs (loop2): Directory bread(block 72) failed [ 82.871891][ T6055] FAT-fs (loop2): Directory bread(block 73) failed [ 82.900203][ T6047] fscrypt (loop1): Error allocating 'xts(aes)' transform: -4 [ 82.909662][ T6071] program syz.3.67 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.026174][ T5799] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.786693][ T6102] input: syz1 as /devices/virtual/input/input6 [ 83.960945][ T6104] input: syz0 as /devices/virtual/input/input7 [ 83.986061][ T6106] loop0: detected capacity change from 0 to 764 [ 84.028171][ T6106] Symlink component flag not implemented [ 84.060450][ T6106] Symlink component flag not implemented (101) [ 84.276485][ T6112] loop0: detected capacity change from 0 to 128 [ 84.319848][ T6112] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 84.327256][ T6108] loop2: detected capacity change from 0 to 8192 [ 84.367537][ T6112] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 84.627019][ T5788] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 84.939344][ T27] audit: type=1326 audit(1752708173.114:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.0.89" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6048d8e929 code=0x0 [ 85.043442][ T6114] loop3: detected capacity change from 0 to 32768 [ 85.063597][ T6114] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 85.217662][ T5781] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 9 [ 85.485083][ T6128] loop2: detected capacity change from 0 to 32768 [ 85.568718][ T6140] loop3: detected capacity change from 0 to 256 [ 85.578004][ T6140] exfat: Unknown parameter '0xffffffffffffffff0xffffffffffffffff' [ 85.663351][ T6128] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 85.663351][ T6128] [ 85.874127][ T5888] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 86.076536][ T5888] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.087554][ T5888] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 86.096569][ T5888] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 86.112752][ T5888] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.122268][ T5888] usb 4-1: New USB device strings: Mfr=3, Product=2, SerialNumber=3 [ 86.133970][ T5888] usb 4-1: Product: syz [ 86.138553][ T5888] usb 4-1: Manufacturer: syz [ 86.149432][ T5888] usb 4-1: SerialNumber: syz [ 86.163833][ T6144] loop0: detected capacity change from 0 to 32768 [ 86.165420][ T5888] cdc_ncm 4-1:1.0: invalid descriptor buffer length [ 86.179883][ T6144] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.97 (6144) [ 86.185536][ T6150] loop1: detected capacity change from 0 to 512 [ 86.203999][ T5888] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 86.208923][ T6144] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 86.218897][ T5888] cdc_ncm 4-1:1.0: bind() failure [ 86.233277][ T6150] EXT4-fs: Ignoring removed i_version option [ 86.262270][ T6144] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 86.273442][ T6144] BTRFS info (device loop0): using free space tree [ 86.333124][ T6150] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.380101][ T786] usb 4-1: USB disconnect, device number 3 [ 86.389671][ T6150] ext4 filesystem being mounted at /21/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.440402][ T6144] BTRFS info (device loop0): enabling ssd optimizations [ 86.478010][ T6144] BTRFS info (device loop0): auto enabling async discard [ 86.508252][ T27] audit: type=1800 audit(1752708174.674:5): pid=6150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.100" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 86.594915][ T27] audit: type=1800 audit(1752708174.714:6): pid=6150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.100" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 86.615881][ T5799] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.870719][ T6173] loop1: detected capacity change from 0 to 2048 [ 86.919836][ T6173] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 86.929067][ T5788] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 87.715258][ T6196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.111'. [ 87.981345][ T6202] loop1: detected capacity change from 0 to 4096 [ 88.154209][ T6206] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 88.298051][ T6178] loop3: detected capacity change from 0 to 40427 [ 88.313298][ T6202] NILFS error (device loop1): nilfs_lookup: deleted inode referenced: 12 [ 88.338803][ T6178] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 88.355303][ T6178] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 88.363594][ T6178] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x7ffff [ 88.373131][ T6202] Remounting filesystem read-only [ 88.414002][ T6178] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x6 [ 88.441506][ T6178] F2FS-fs (loop3): invalid crc value [ 88.466263][ T6178] F2FS-fs (loop3): Found nat_bits in checkpoint [ 88.484740][ T5799] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 88.514136][ T5799] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 88.521081][ T5799] NILFS (loop1): discard dirty block: blocknr=14, size=4096 [ 88.543798][ T5799] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 88.575189][ T5799] NILFS (loop1): discard dirty block: blocknr=23, size=4096 [ 88.587590][ T5799] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 88.603096][ T5799] NILFS (loop1): discard dirty block: blocknr=24, size=4096 [ 88.611598][ T6178] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 88.618811][ T5799] NILFS (loop1): discard dirty page: offset=8192, ino=6 [ 88.626329][ T6178] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 88.635023][ T5799] NILFS (loop1): discard dirty block: blocknr=25, size=4096 [ 88.655593][ T5799] NILFS (loop1): discard dirty page: offset=0, ino=3 [ 88.662326][ T5799] NILFS (loop1): discard dirty block: blocknr=28, size=4096 [ 88.690223][ T5799] NILFS (loop1): discard dirty page: offset=4096, ino=3 [ 88.704411][ T5799] NILFS (loop1): discard dirty block: blocknr=29, size=4096 [ 88.712252][ T5799] NILFS (loop1): discard dirty page: offset=532480, ino=3 [ 88.721365][ T5799] NILFS (loop1): discard dirty block: blocknr=33, size=4096 [ 88.730752][ T5787] syz-executor: attempt to access beyond end of device [ 88.730752][ T5787] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 88.756629][ T5787] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 89.087828][ T6226] loop2: detected capacity change from 0 to 2048 [ 89.175301][ T6226] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 89.238048][ T6231] loop6: detected capacity change from 0 to 524287999 [ 89.336243][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.611411][ T6236] netlink: 12 bytes leftover after parsing attributes in process `syz.3.121'. [ 89.793853][ T6224] loop1: detected capacity change from 0 to 32768 [ 89.848421][ T6224] [ 89.848421][ T6224] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 89.848421][ T6224] [ 89.918697][ T3422] [ 89.918697][ T3422] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 89.918697][ T3422] [ 89.938712][ T3422] [ 89.938712][ T3422] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 89.938712][ T3422] [ 89.958212][ T3422] [ 89.958212][ T3422] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 89.958212][ T3422] [ 89.983374][ T6224] [ 89.983374][ T6224] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 89.983374][ T6224] [ 90.006058][ T110] [ 90.006058][ T110] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.006058][ T110] [ 90.021220][ T6224] [ 90.021220][ T6224] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.021220][ T6224] [ 90.054141][ T6245] ERROR: (device loop1): diWrite: ixpxd invalid [ 90.054141][ T6245] [ 90.104365][ T6245] ERROR: (device loop1): txCommit: [ 90.104365][ T6245] [ 90.164114][ T6245] [ 90.164114][ T6245] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.164114][ T6245] [ 90.290047][ T5799] [ 90.290047][ T5799] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.290047][ T5799] [ 90.331548][ T5799] [ 90.331548][ T5799] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.331548][ T5799] [ 90.477124][ T6234] loop2: detected capacity change from 0 to 40427 [ 90.516309][ T6234] F2FS-fs (loop2): invalid crc value [ 90.539551][ T6234] F2FS-fs (loop2): Found nat_bits in checkpoint [ 90.654566][ T6234] F2FS-fs (loop2): Start checkpoint disabled! [ 90.717024][ T6234] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 90.766781][ T27] audit: type=1326 audit(1752708178.954:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.1.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188c98e929 code=0x7ffc0000 [ 90.826487][ T27] audit: type=1326 audit(1752708178.974:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.1.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188c98e929 code=0x7ffc0000 [ 90.858936][ T27] audit: type=1326 audit(1752708178.994:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.1.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f188c98e929 code=0x7ffc0000 [ 90.942109][ T27] audit: type=1326 audit(1752708178.994:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.1.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188c98e929 code=0x7ffc0000 [ 91.004056][ T27] audit: type=1326 audit(1752708178.994:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.1.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188c98e929 code=0x7ffc0000 [ 91.036398][ T6247] loop0: detected capacity change from 0 to 32768 [ 91.049065][ T27] audit: type=1326 audit(1752708178.994:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.1.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f188c98e929 code=0x7ffc0000 [ 91.088052][ T27] audit: type=1326 audit(1752708178.994:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.1.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188c98e929 code=0x7ffc0000 [ 91.089195][ T1130] kworker/u4:7: attempt to access beyond end of device [ 91.089195][ T1130] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 91.111003][ T27] audit: type=1326 audit(1752708178.994:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.1.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f188c98e929 code=0x7ffc0000 [ 91.128126][ T1130] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 91.155899][ T27] audit: type=1326 audit(1752708178.994:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.1.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f188c98e929 code=0x7ffc0000 [ 91.166418][ T6247] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 91.220912][ T1130] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 91.221826][ T6262] loop3: detected capacity change from 0 to 4096 [ 91.245133][ T27] audit: type=1326 audit(1752708179.004:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.1.133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f188c98e929 code=0x7ffc0000 [ 91.249637][ T6262] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 91.489526][ T6247] XFS (loop0): Ending clean mount [ 91.535380][ T6247] XFS (loop0): Quotacheck needed: Please wait. [ 91.656308][ T6247] XFS (loop0): Quotacheck: Done. [ 91.714717][ T6276] syzkaller1: entered promiscuous mode [ 91.720238][ T6276] syzkaller1: entered allmulticast mode [ 91.789739][ T5788] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 92.512652][ T6302] Illegal XDP return value 4291366912 on prog (id 26) dev N/A, expect packet loss! [ 93.125761][ T6304] loop2: detected capacity change from 0 to 40427 [ 93.147667][ T6304] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 93.168188][ T6304] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 93.201586][ T6304] F2FS-fs (loop2): Found nat_bits in checkpoint [ 93.389722][ T6304] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 93.414757][ T6304] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 94.246880][ T6344] loop0: detected capacity change from 0 to 24 [ 94.267938][ T6344] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 94.293782][ T6344] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 94.537490][ T6336] loop3: detected capacity change from 0 to 32768 [ 94.695675][ T6336] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 94.839081][ T6336] OCFS2: ERROR (device loop3): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 94.870275][ T6336] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 94.881600][ T6336] OCFS2: File system is now read-only. [ 94.897446][ T6336] (syz.3.164,6336,1):ocfs2_find_leaf:1941 ERROR: status = -30 [ 94.905375][ T6336] (syz.3.164,6336,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 94.923223][ T6336] (syz.3.164,6336,1):ocfs2_fiemap:776 ERROR: status = -30 [ 95.006541][ T5787] ocfs2: Unmounting device (7,3) on (node local) [ 95.764159][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.301820][ T6384] loop1: detected capacity change from 0 to 1024 [ 96.441961][ T6384] tipc: Enabling of bearer rejected, failed to enable media [ 96.584779][ T6374] loop2: detected capacity change from 0 to 40427 [ 96.616312][ T6374] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x7ffff [ 96.657237][ T6374] F2FS-fs (loop2): invalid crc value [ 96.677103][ T6374] F2FS-fs (loop2): Found nat_bits in checkpoint [ 96.690894][ T6380] loop3: detected capacity change from 0 to 32768 [ 96.722887][ T6380] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.181 (6380) [ 96.796006][ T6380] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 96.839785][ T6380] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 96.859710][ T6380] BTRFS info (device loop3): turning on sync discard [ 96.887169][ T6374] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 96.897781][ T6380] BTRFS info (device loop3): use zlib compression, level 3 [ 96.919503][ T6380] BTRFS info (device loop3): turning off barriers [ 96.937181][ T6380] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 96.965471][ T6380] BTRFS info (device loop3): trying to use backup root at mount time [ 96.999230][ T6380] BTRFS info (device loop3): enabling auto defrag [ 97.020331][ T6380] BTRFS info (device loop3): max_inline at 0 [ 97.029502][ T6380] BTRFS info (device loop3): using free space tree [ 97.145994][ T3422] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 97.198286][ T5789] syz-executor: attempt to access beyond end of device [ 97.198286][ T5789] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 97.223125][ T6380] BTRFS error (device loop3): failed to load root extent [ 97.251565][ T6380] BTRFS warning (device loop3): try to load backup roots slot 1 [ 97.261453][ T11] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 97.263420][ T5789] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 97.275872][ T6380] BTRFS warning (device loop3): couldn't read tree root [ 97.289965][ T6380] BTRFS warning (device loop3): try to load backup roots slot 2 [ 97.298708][ T1068] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 97.313399][ T5789] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 97.346280][ T6417] syzkaller1: entered promiscuous mode [ 97.351892][ T6417] syzkaller1: entered allmulticast mode [ 97.394952][ T6380] BTRFS warning (device loop3): couldn't read tree root [ 97.401948][ T6380] BTRFS warning (device loop3): try to load backup roots slot 3 [ 97.438820][ T6380] BTRFS info (device loop3): enabling ssd optimizations [ 97.449955][ T6380] BTRFS info (device loop3): rebuilding free space tree [ 97.582698][ T6415] loop1: detected capacity change from 0 to 32768 [ 97.645803][ T6380] BTRFS info (device loop3): checking UUID tree [ 97.658662][ T6415] JBD2: Ignoring recovery information on journal [ 97.714070][ T6415] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 97.751640][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 97.751653][ T27] audit: type=1800 audit(1752708185.934:18): pid=6415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.192" name="file0" dev="loop1" ino=17058 res=0 errno=0 [ 97.797066][ T6415] OCFS2: ERROR (device loop1): int ocfs2_reserve_suballoc_bits(struct ocfs2_super *, struct ocfs2_alloc_context *, int, u32, u64 *, int): Invalid chain allocator 71 [ 97.814168][ T6415] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 97.823371][ T6424] loop0: detected capacity change from 0 to 1024 [ 97.825312][ T6415] OCFS2: File system is now read-only. [ 97.835925][ T6415] (syz.1.192,6415,1):ocfs2_reserve_suballoc_bits:850 ERROR: status = -30 [ 97.844949][ T6415] (syz.1.192,6415,1):ocfs2_reserve_cluster_bitmap_bits:1133 ERROR: status = -30 [ 97.854061][ T6415] (syz.1.192,6415,1):ocfs2_local_alloc_reserve_for_window:1123 ERROR: status = -30 [ 97.863494][ T6415] (syz.1.192,6415,1):ocfs2_local_alloc_reserve_for_window:1139 ERROR: status = -30 [ 97.873221][ T6415] (syz.1.192,6415,1):ocfs2_local_alloc_slide_window:1254 ERROR: status = -30 [ 97.882085][ T6415] (syz.1.192,6415,1):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 97.890934][ T6415] (syz.1.192,6415,1):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 97.898104][ T27] audit: type=1800 audit(1752708185.964:19): pid=6380 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.181" name="file1" dev="loop3" ino=257 res=0 errno=0 [ 97.899672][ T6415] (syz.1.192,6415,1):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 97.930386][ T6415] (syz.1.192,6415,1):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 97.939568][ T6415] (syz.1.192,6415,1):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 97.948658][ T6415] (syz.1.192,6415,1):ocfs2_lock_allocators:2672 ERROR: status = -30 [ 97.956767][ T6415] (syz.1.192,6415,1):ocfs2_write_begin_nolock:1744 ERROR: status = -30 [ 97.966132][ T6415] (syz.1.192,6415,1):ocfs2_dio_wr_get_block:2243 ERROR: status = -30 [ 97.974780][ T6415] (syz.1.192,6415,1):ocfs2_dio_end_io:2428 ERROR: Direct IO failed, bytes = -5 [ 97.982031][ T6415] syz.1.192 (6415) used greatest stack depth: 19760 bytes left [ 98.160642][ T6424] hfsplus: request for non-existent node 16777216 in B*Tree [ 98.194403][ T6424] hfsplus: request for non-existent node 16777216 in B*Tree [ 98.203128][ T6424] hfsplus: request for non-existent node 16777216 in B*Tree [ 98.214772][ T5799] ocfs2: Unmounting device (7,1) on (node local) [ 98.231937][ T5787] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 98.272948][ T6424] hfsplus: request for non-existent node 16777216 in B*Tree [ 98.363816][ T6424] hfsplus: request for non-existent node 16777216 in B*Tree [ 98.376765][ T6424] hfsplus: request for non-existent node 16777216 in B*Tree [ 99.171233][ T6449] loop3: detected capacity change from 0 to 47 [ 99.315346][ T6449] syz.3.203: attempt to access beyond end of device [ 99.315346][ T6449] loop3: rw=2049, sector=48, nr_sectors = 2 limit=47 [ 99.349272][ T6449] buffer_io_error: 10 callbacks suppressed [ 99.349288][ T6449] Buffer I/O error on dev loop3, logical block 24, lost async page write [ 99.384100][ T6449] syz.3.203: attempt to access beyond end of device [ 99.384100][ T6449] loop3: rw=2049, sector=50, nr_sectors = 2 limit=47 [ 99.414025][ T6449] Buffer I/O error on dev loop3, logical block 25, lost async page write [ 99.445003][ T6449] syz.3.203: attempt to access beyond end of device [ 99.445003][ T6449] loop3: rw=2049, sector=52, nr_sectors = 2 limit=47 [ 99.475561][ T6449] Buffer I/O error on dev loop3, logical block 26, lost async page write [ 99.485841][ T6435] loop1: detected capacity change from 0 to 32768 [ 99.528201][ T6435] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 99.566585][ T3422] kworker/u4:8: attempt to access beyond end of device [ 99.566585][ T3422] loop3: rw=1, sector=54, nr_sectors = 2 limit=47 [ 99.601096][ T6435] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 99.602402][ T6441] loop2: detected capacity change from 0 to 32768 [ 99.625008][ T3422] Buffer I/O error on dev loop3, logical block 27, lost async page write [ 99.652311][ T6441] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.199 (6441) [ 99.736712][ T6441] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 99.782485][ T6441] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 99.803814][ T6441] BTRFS info (device loop2): using free space tree [ 99.878121][ T5799] ocfs2: Unmounting device (7,1) on (node local) [ 100.014206][ T6441] BTRFS info (device loop2): enabling ssd optimizations [ 100.021207][ T6441] BTRFS info (device loop2): auto enabling async discard [ 100.050978][ T6482] loop3: detected capacity change from 0 to 256 [ 100.148692][ T6482] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 100.292639][ T5789] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 100.513303][ T6492] netlink: 240 bytes leftover after parsing attributes in process `syz.0.211'. [ 100.777160][ T6499] loop3: detected capacity change from 0 to 2048 [ 100.839444][ T6499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.130853][ T6508] netlink: 64 bytes leftover after parsing attributes in process `syz.0.216'. [ 101.331481][ T6501] loop2: detected capacity change from 0 to 32768 [ 101.343400][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.389567][ T6501] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 101.509598][ T6494] loop1: detected capacity change from 0 to 32768 [ 101.572458][ T6494] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 101.579866][ T6501] XFS (loop2): Ending clean mount [ 101.778918][ T6494] syz.1.213 (6494) used greatest stack depth: 18736 bytes left [ 101.881761][ T5799] ocfs2: Unmounting device (7,1) on (node local) [ 102.008316][ T5789] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 102.289560][ T6510] loop0: detected capacity change from 0 to 32768 [ 102.312914][ T6510] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.217 (6510) [ 102.341193][ T6510] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 102.362441][ T6510] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 102.385024][ T5833] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 102.405139][ T6510] BTRFS info (device loop0): force zlib compression, level 3 [ 102.412609][ T6510] BTRFS info (device loop0): force clearing of disk cache [ 102.439632][ T6510] BTRFS info (device loop0): setting nodatasum [ 102.449153][ T6510] BTRFS info (device loop0): use zlib compression, level 3 [ 102.460716][ T6510] BTRFS info (device loop0): allowing degraded mounts [ 102.469901][ T6510] BTRFS info (device loop0): enabling disk space caching [ 102.506155][ T6532] syz.3.222 uses obsolete (PF_INET,SOCK_PACKET) [ 102.506253][ T6510] BTRFS info (device loop0): disk space caching is enabled [ 102.604112][ T5833] usb 2-1: Using ep0 maxpacket: 8 [ 102.619306][ T5833] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 102.636785][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.649783][ T5833] usb 2-1: Product: syz [ 102.654099][ T5833] usb 2-1: Manufacturer: syz [ 102.658839][ T5833] usb 2-1: SerialNumber: syz [ 102.667333][ T5833] usb 2-1: config 0 descriptor?? [ 102.668351][ T6510] BTRFS info (device loop0): enabling ssd optimizations [ 102.707018][ T6554] capability: warning: `syz.2.223' uses deprecated v2 capabilities in a way that may be insecure [ 102.744181][ T6510] BTRFS info (device loop0): auto enabling async discard [ 102.782594][ T6510] BTRFS info (device loop0): rebuilding free space tree [ 102.865012][ T6510] BTRFS info (device loop0): disabling free space tree [ 102.872027][ T6510] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 102.892840][ T5833] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 102.912767][ T6510] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 103.114361][ T5788] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 103.303845][ T6566] loop2: detected capacity change from 0 to 256 [ 103.322571][ T6566] exfat: Deprecated parameter 'utf8' [ 103.441821][ T6566] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd9b3646f, utbl_chksum : 0xe619d30d) [ 103.698853][ T5833] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 103.730750][ T5833] usb 2-1: USB disconnect, device number 4 [ 103.862908][ T6582] Bluetooth: MGMT ver 1.22 [ 103.913897][ T6584] loop3: detected capacity change from 0 to 512 [ 103.938801][ T6584] EXT4-fs: Ignoring removed orlov option [ 103.982095][ T6584] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 104.020095][ T6584] EXT4-fs (loop3): orphan cleanup on readonly fs [ 104.049852][ T6584] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.233: bg 0: block 248: padding at end of block bitmap is not set [ 104.079252][ T6584] Quota error (device loop3): write_blk: dquota write failed [ 104.089318][ T6584] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 104.099693][ T6584] EXT4-fs error (device loop3): ext4_acquire_dquot:6938: comm syz.3.233: Failed to acquire dquot type 1 [ 104.115685][ T6584] EXT4-fs (loop3): 1 truncate cleaned up [ 104.126746][ T6584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.148398][ T6584] EXT4-fs: Ignoring removed orlov option [ 104.154542][ T6584] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 104.168424][ T6584] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 104.195181][ T6584] EXT4-fs error (device loop3): __ext4_remount:6741: comm syz.3.233: Abort forced by user [ 104.205885][ T6584] EXT4-fs (loop3): Remounting filesystem read-only [ 104.212714][ T6584] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 104.224090][ T6584] ext4 filesystem being remounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.266816][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.334205][ T786] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.534002][ T786] usb 1-1: Using ep0 maxpacket: 8 [ 104.540482][ T786] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 104.548852][ T786] usb 1-1: config 179 has no interface number 0 [ 104.555186][ T786] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 104.566743][ T786] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 104.578951][ T786] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 104.590207][ T786] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 104.602033][ T786] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 104.615429][ T786] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 104.625783][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.638514][ T6591] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 104.684132][ T5174] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 104.889238][ T5174] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.904073][ T5174] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.923799][ T786] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input8 [ 104.935279][ T5174] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 104.946169][ T5174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 104.958897][ T5174] usb 4-1: SerialNumber: syz [ 105.113484][ T6591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.125294][ T6591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.198888][ T5174] usb 4-1: 0:2 : does not exist [ 105.311974][ T5174] usb 4-1: USB disconnect, device number 4 [ 105.368261][ T5861] usb 1-1: USB disconnect, device number 2 [ 105.368334][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 105.368385][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 105.423258][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.242'. [ 105.496904][ T6610] bond_slave_0: entered promiscuous mode [ 105.502928][ T6610] bond_slave_1: entered promiscuous mode [ 105.519195][ T6610] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 105.645512][ T6617] bridge0: entered promiscuous mode [ 105.653793][ T6617] bond0: entered promiscuous mode [ 105.667093][ T6617] bond0: left promiscuous mode [ 105.672620][ T6617] bridge0: left promiscuous mode [ 105.836251][ T6621] loop1: detected capacity change from 0 to 512 [ 105.860755][ T6626] loop2: detected capacity change from 0 to 256 [ 105.901266][ T6621] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.247: corrupted in-inode xattr: invalid ea_ino [ 105.924494][ T5795] Bluetooth: hci0: command 0x0401 tx timeout [ 105.930949][ T5803] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 105.946819][ T6626] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 105.987997][ T6626] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 106.002595][ T6621] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.247: couldn't read orphan inode 15 (err -117) [ 106.049900][ T6621] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.231424][ T5799] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.411027][ T6642] loop0: detected capacity change from 0 to 256 [ 106.768002][ T6647] all (unregistering): Released all slaves [ 106.987552][ T6641] loop1: detected capacity change from 0 to 40427 [ 107.052825][ T6658] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.073312][ T6641] F2FS-fs (loop1): Found nat_bits in checkpoint [ 107.148620][ T6638] loop2: detected capacity change from 0 to 32768 [ 107.222488][ T6638] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 107.317980][ T6641] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 107.356010][ T6673] loop0: detected capacity change from 0 to 1024 [ 107.363577][ T6673] EXT4-fs: Ignoring removed mblk_io_submit option [ 107.435803][ T6673] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 107.491774][ T6638] XFS (loop2): Ending clean mount [ 107.528363][ T6673] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.534499][ T5799] syz-executor: attempt to access beyond end of device [ 107.534499][ T5799] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 107.559085][ T5799] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 107.681715][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.710695][ T5789] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 108.139921][ T6667] loop3: detected capacity change from 0 to 32768 [ 108.184983][ T6667] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 108.303551][ T27] audit: type=1800 audit(1752708196.484:20): pid=6667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.263" name="file1" dev="loop3" ino=17058 res=0 errno=0 [ 108.490411][ T6667] syz.3.263 (6667) used greatest stack depth: 18288 bytes left [ 108.655852][ T5787] (syz-executor,5787,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 108.671152][ T6697] loop2: detected capacity change from 0 to 2048 [ 108.695990][ T5787] ocfs2: Unmounting device (7,3) on (node local) [ 108.747932][ T6697] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 108.778438][ T6697] UDF-fs: Scanning with blocksize 512 failed [ 108.850394][ T6697] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.915125][ T6701] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.274'. [ 109.295066][ T6709] netlink: 84 bytes leftover after parsing attributes in process `syz.0.276'. [ 110.079882][ T6738] netlink: 'syz.2.289': attribute type 1 has an invalid length. [ 110.088937][ T6738] netlink: 'syz.2.289': attribute type 2 has an invalid length. [ 110.425343][ T6749] netlink: 452 bytes leftover after parsing attributes in process `syz.1.295'. [ 110.730748][ T6758] loop3: detected capacity change from 0 to 512 [ 110.736825][ T6760] netlink: 'syz.2.300': attribute type 10 has an invalid length. [ 110.760507][ T6760] syz_tun: entered promiscuous mode [ 110.770674][ T6758] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 110.818073][ T6760] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 110.835289][ T6758] EXT4-fs (loop3): 1 truncate cleaned up [ 110.841678][ T6758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.994894][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.009078][ T3501] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.122455][ T3501] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.243220][ T3501] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.387903][ T3501] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.444309][ T5861] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 111.570444][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.581573][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.590402][ T5795] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.602028][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.615692][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 111.629540][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.639454][ T5861] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 111.653986][ T5861] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 111.663460][ T5861] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 111.672918][ T5861] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 111.683944][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 111.694238][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 111.730843][ T5861] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 111.798620][ T6781] process 'syz.2.308' launched '/dev/fd/3' with NULL argv: empty string added [ 111.808388][ T5861] usb 4-1: string descriptor 0 read error: -22 [ 111.808507][ T5861] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 111.836156][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.897781][ T5861] usb 4-1: config 0 descriptor?? [ 111.927699][ T5861] hub 4-1:0.0: bad descriptor, ignoring hub [ 111.933676][ T5861] hub: probe of 4-1:0.0 failed with error -5 [ 112.024432][ T5861] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input9 [ 112.171076][ T5174] usb 4-1: USB disconnect, device number 5 [ 112.710954][ T6777] chnl_net:caif_netlink_parms(): no params data found [ 112.784116][ T5833] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 112.978421][ T5833] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 113.008563][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.033983][ T5833] usb 3-1: Product: syz [ 113.038198][ T5833] usb 3-1: Manufacturer: syz [ 113.051237][ T5833] usb 3-1: SerialNumber: syz [ 113.079887][ T5833] usb 3-1: config 0 descriptor?? [ 113.416842][ T6777] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.461448][ T6777] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.476403][ T6777] bridge_slave_0: entered allmulticast mode [ 113.489599][ T6777] bridge_slave_0: entered promiscuous mode [ 113.523619][ T6777] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.553582][ T6777] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.563463][ T6777] bridge_slave_1: entered allmulticast mode [ 113.579862][ T6777] bridge_slave_1: entered promiscuous mode [ 113.764220][ T5795] Bluetooth: hci1: command tx timeout [ 113.874323][ T6777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.950546][ T6777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.129427][ T5833] usb 3-1: Firmware version (0.0) predates our first public release. [ 114.146824][ T5833] usb 3-1: Please update to version 0.2 or newer [ 114.165843][ T6777] team0: Port device team_slave_0 added [ 114.181595][ T6851] syzkaller1: entered promiscuous mode [ 114.189948][ T6851] syzkaller1: entered allmulticast mode [ 114.232579][ T6777] team0: Port device team_slave_1 added [ 114.272708][ T5833] usb 3-1: USB disconnect, device number 3 [ 114.286957][ T6861] loop1: detected capacity change from 0 to 256 [ 114.305105][ T6861] FAT-fs (loop1): bogus number of FAT sectors [ 114.315114][ T6861] FAT-fs (loop1): Can't find a valid FAT filesystem [ 114.333562][ T6777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.340741][ T6777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.366879][ T6777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.416092][ T3501] hsr_slave_0: left promiscuous mode [ 114.443185][ T3501] hsr_slave_1: left promiscuous mode [ 114.503043][ T3501] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.528305][ T3501] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.553877][ T3501] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.571702][ T3501] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.588063][ T3501] bridge_slave_1: left allmulticast mode [ 114.593886][ T3501] bridge_slave_1: left promiscuous mode [ 114.603012][ T3501] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.619939][ T3501] bridge_slave_0: left allmulticast mode [ 114.630127][ T3501] bridge_slave_0: left promiscuous mode [ 114.637943][ T3501] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.719720][ T3501] veth1_macvtap: left promiscuous mode [ 114.727330][ T3501] veth0_macvtap: left promiscuous mode [ 114.739113][ T3501] veth1_vlan: left promiscuous mode [ 114.744899][ T3501] veth0_vlan: left promiscuous mode [ 114.798929][ T6877] skbuff: bad partial csum: csum=65506/2 headroom=98 headlen=65526 [ 114.990344][ T6883] netlink: 28 bytes leftover after parsing attributes in process `syz.2.330'. [ 115.177644][ T3501] bond1 (unregistering): Released all slaves [ 115.312348][ T6892] loop3: detected capacity change from 0 to 16 [ 115.348282][ T6892] erofs: (device loop3): mounted with root inode @ nid 36. [ 115.815565][ T3501] team0 (unregistering): Port device team_slave_1 removed [ 115.849379][ T5795] Bluetooth: hci1: command tx timeout [ 115.868016][ T3501] team0 (unregistering): Port device team_slave_0 removed [ 115.910235][ T3501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.957818][ T3501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.395185][ T3501] bond0 (unregistering): Released all slaves [ 116.490862][ T6777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.498609][ T6777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.526714][ T6777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.760167][ T6777] hsr_slave_0: entered promiscuous mode [ 116.785813][ T6777] hsr_slave_1: entered promiscuous mode [ 116.802909][ T6777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.831313][ T6777] Cannot create hsr debugfs directory [ 117.216608][ T6917] loop3: detected capacity change from 0 to 1024 [ 117.430314][ T6917] hfsplus: invalid extended attribute record [ 117.453152][ T6917] hfsplus: can't free extent [ 117.612837][ T1068] hfsplus: b-tree write err: -5, ino 4 [ 117.844204][ T5861] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 117.937064][ T5795] Bluetooth: hci1: command tx timeout [ 117.974837][ T6937] loop3: detected capacity change from 0 to 1024 [ 118.056603][ T5861] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 118.078677][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.079296][ T6937] hfsplus: xattr searching failed [ 118.097506][ T6777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 118.117765][ T5861] usb 2-1: config 0 descriptor?? [ 118.126230][ T5861] cp210x 2-1:0.0: cp210x converter detected [ 118.147177][ T6777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 118.175851][ T6777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 118.207678][ T6777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 118.452536][ T6777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.499820][ T6777] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.532294][ T5861] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 118.566302][ T5861] cp210x 2-1:0.0: GPIO initialisation failed: -524 [ 118.577243][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.584428][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.621147][ T5861] usb 2-1: cp210x converter now attached to ttyUSB0 [ 118.631605][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.638804][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.662525][ T6931] loop2: detected capacity change from 0 to 32768 [ 118.722283][ T6931] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 118.777788][ T5861] usb 2-1: USB disconnect, device number 5 [ 118.804053][ T5861] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 118.815409][ T5861] cp210x 2-1:0.0: device disconnected [ 118.870592][ T6964] netlink: 4 bytes leftover after parsing attributes in process `syz.3.352'. [ 118.930179][ T6931] XFS (loop2): Ending clean mount [ 119.121857][ T5789] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 119.144489][ T6971] warning: `syz.3.353' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 119.240062][ T6777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.442476][ T6777] veth0_vlan: entered promiscuous mode [ 119.526935][ T6777] veth1_vlan: entered promiscuous mode [ 119.601462][ T6777] veth0_macvtap: entered promiscuous mode [ 119.648181][ T6777] veth1_macvtap: entered promiscuous mode [ 119.736582][ T6777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.771396][ T6777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.793976][ T6777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.813970][ T6777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.824208][ T6777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.853989][ T6777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.875316][ T6777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.901941][ T6777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.914692][ T5174] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 119.945783][ T6777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.967611][ T6991] loop1: detected capacity change from 0 to 2048 [ 119.977136][ T6777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.989525][ T6777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.003226][ T6777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.014443][ T5795] Bluetooth: hci1: command tx timeout [ 120.064830][ T6777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.076955][ T6777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.100331][ T6991] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.121425][ T6777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.137185][ T5174] usb 3-1: Using ep0 maxpacket: 16 [ 120.153565][ T6777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.167968][ T5174] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.212210][ T6777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.226368][ T5174] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 120.255015][ T6777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.268021][ T6977] loop3: detected capacity change from 0 to 32768 [ 120.274865][ T5174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.293164][ T6991] EXT4-fs (loop1): shut down requested (0) [ 120.317932][ T5174] usb 3-1: config 0 descriptor?? [ 120.325761][ T6977] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.355 (6977) [ 120.410222][ T6977] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 120.456107][ T6977] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 120.493853][ T6977] BTRFS info (device loop3): enabling ssd optimizations [ 120.510630][ T6977] BTRFS info (device loop3): using spread ssd allocation scheme [ 120.522133][ T5799] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.531251][ T1068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.548959][ T1068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.560182][ T6977] BTRFS info (device loop3): using free space tree [ 120.710761][ T3501] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.761655][ T3501] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.807523][ T5174] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 120.822467][ T6977] BTRFS info (device loop3): auto enabling async discard [ 120.837258][ T5174] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 120.848052][ T5174] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 120.874432][ T5174] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 120.885115][ T5174] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 120.899283][ T5174] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 121.124502][ T5174] usb 3-1: USB disconnect, device number 4 [ 121.237184][ T5787] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 121.664256][ T7040] netlink: 36 bytes leftover after parsing attributes in process `syz.1.363'. [ 121.764238][ T7042] netlink: 52 bytes leftover after parsing attributes in process `syz.3.364'. [ 122.114180][ T5861] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 122.321560][ T5861] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 122.344121][ T5861] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.352144][ T5861] usb 2-1: Product: syz [ 122.361263][ T5861] usb 2-1: Manufacturer: syz [ 122.367004][ T5861] usb 2-1: SerialNumber: syz [ 122.385092][ T5861] usb 2-1: config 0 descriptor?? [ 122.398504][ T5861] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 123.421945][ T5861] gspca_sunplus: reg_w_riv err -71 [ 123.446411][ T5861] sunplus: probe of 2-1:0.0 failed with error -71 [ 123.489138][ T5861] usb 2-1: USB disconnect, device number 6 [ 123.496290][ T7107] loop3: detected capacity change from 0 to 512 [ 123.525046][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.579016][ T7107] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.603735][ T7107] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.808387][ T5787] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.822457][ T7098] loop2: detected capacity change from 0 to 32768 [ 123.873285][ T7098] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.373 (7098) [ 123.984012][ T7098] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 124.036251][ T7098] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 124.054117][ T7098] BTRFS info (device loop2): turning off barriers [ 124.060599][ T7098] BTRFS info (device loop2): setting nodatasum [ 124.097362][ T7098] BTRFS info (device loop2): enabling auto defrag [ 124.103852][ T7098] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 124.161572][ T7098] BTRFS info (device loop2): use zstd compression, level 3 [ 124.171686][ T7098] BTRFS info (device loop2): using free space tree [ 124.267243][ T7130] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 124.477911][ T7098] BTRFS info (device loop2): auto enabling async discard [ 124.578668][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.824877][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.841202][ T5803] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 124.854255][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 124.862222][ T5803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 124.878526][ T5803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 124.881683][ T5789] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 124.915075][ T5803] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 124.925089][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 125.115895][ T5781] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (5781) [ 125.140996][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.210789][ T7160] input: syz1 as /devices/virtual/input/input10 [ 125.361055][ T7143] loop1: detected capacity change from 0 to 32768 [ 125.482415][ T7143] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 125.668293][ T7143] XFS (loop1): Ending clean mount [ 125.750354][ T7143] XFS (loop1): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 125.766441][ T7177] loop3: detected capacity change from 0 to 64 [ 126.063561][ T5799] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 126.106977][ T7177] syz.3.388: attempt to access beyond end of device [ 126.106977][ T7177] loop3: rw=2049, sector=75, nr_sectors = 1 limit=64 [ 126.180092][ T7177] Buffer I/O error on dev loop3, logical block 75, lost async page write [ 126.203155][ T7177] syz.3.388: attempt to access beyond end of device [ 126.203155][ T7177] loop3: rw=2049, sector=76, nr_sectors = 1 limit=64 [ 126.227714][ T7177] Buffer I/O error on dev loop3, logical block 76, lost async page write [ 126.314032][ T7177] syz.3.388: attempt to access beyond end of device [ 126.314032][ T7177] loop3: rw=2049, sector=77, nr_sectors = 1 limit=64 [ 126.340406][ T7177] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 126.353805][ T7177] syz.3.388: attempt to access beyond end of device [ 126.353805][ T7177] loop3: rw=2049, sector=78, nr_sectors = 1 limit=64 [ 126.381312][ T7152] chnl_net:caif_netlink_parms(): no params data found [ 126.423273][ T7177] Buffer I/O error on dev loop3, logical block 78, lost async page write [ 126.963271][ T7152] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.974508][ T5795] Bluetooth: hci1: command tx timeout [ 126.991068][ T7152] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.998749][ T7152] bridge_slave_0: entered allmulticast mode [ 127.009537][ T7152] bridge_slave_0: entered promiscuous mode [ 127.053619][ T7152] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.070593][ T7152] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.079219][ T7216] loop1: detected capacity change from 0 to 4096 [ 127.090932][ T7152] bridge_slave_1: entered allmulticast mode [ 127.110865][ T7152] bridge_slave_1: entered promiscuous mode [ 127.111113][ T7216] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 127.225425][ T27] audit: type=1800 audit(1752708215.404:21): pid=7216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.396" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 127.323553][ T7216] ntfs3: loop1: ino=1e, "file3" ntfs3_write_inode failed, -22. [ 127.381629][ T7152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.418723][ T7152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.578800][ T7152] team0: Port device team_slave_0 added [ 127.599493][ T7152] team0: Port device team_slave_1 added [ 127.714571][ T5888] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 127.747631][ T7152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.758464][ T7152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.790757][ T7152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.810507][ T7230] netlink: 'syz.2.401': attribute type 2 has an invalid length. [ 127.828159][ T7152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.837247][ T7152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.873250][ T7152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.934233][ T5888] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 127.943607][ T5888] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.971032][ T5888] usb 4-1: Product: syz [ 127.989730][ T5888] usb 4-1: Manufacturer: syz [ 128.002183][ T5888] usb 4-1: SerialNumber: syz [ 128.033141][ T5888] usb 4-1: config 0 descriptor?? [ 128.055620][ T5888] ch341 4-1:0.0: ch341-uart converter detected [ 128.056914][ T7241] sctp: [Deprecated]: syz.2.402 (pid 7241) Use of struct sctp_assoc_value in delayed_ack socket option. [ 128.056914][ T7241] Use struct sctp_sack_info instead [ 128.095426][ T12] hsr_slave_0: left promiscuous mode [ 128.101600][ T12] hsr_slave_1: left promiscuous mode [ 128.114276][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.121840][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.135557][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.149066][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.157502][ T12] bridge_slave_1: left allmulticast mode [ 128.163277][ T12] bridge_slave_1: left promiscuous mode [ 128.174544][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.191131][ T12] bridge_slave_0: left allmulticast mode [ 128.198259][ T12] bridge_slave_0: left promiscuous mode [ 128.210045][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.251340][ T12] veth1_macvtap: left promiscuous mode [ 128.263531][ T12] veth0_macvtap: left promiscuous mode [ 128.270005][ T12] veth1_vlan: left promiscuous mode [ 128.277832][ T12] veth0_vlan: left promiscuous mode [ 128.980133][ T12] team0 (unregistering): Port device team_slave_1 removed [ 129.052158][ T5795] Bluetooth: hci1: command tx timeout [ 129.062219][ T12] team0 (unregistering): Port device team_slave_0 removed [ 129.064681][ T5888] ch341-uart ttyUSB0: failed to read break control: -71 [ 129.093811][ T5888] ch341-uart: probe of ttyUSB0 failed with error -71 [ 129.142018][ T5888] usb 4-1: USB disconnect, device number 6 [ 129.153537][ T5888] ch341 4-1:0.0: device disconnected [ 129.221211][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.289415][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.806472][ T12] bond0 (unregistering): Released all slaves [ 129.958228][ T7152] hsr_slave_0: entered promiscuous mode [ 129.965381][ T7152] hsr_slave_1: entered promiscuous mode [ 129.973621][ T7152] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.981497][ T7152] Cannot create hsr debugfs directory [ 130.029295][ T7255] netlink: 14 bytes leftover after parsing attributes in process `syz.2.406'. [ 130.053860][ T7255] bond_slave_0: left promiscuous mode [ 130.059776][ T7255] bond_slave_1: left promiscuous mode [ 130.331952][ T7267] loop6: detected capacity change from 0 to 4 [ 130.350893][ C0] blk_print_req_error: 11 callbacks suppressed [ 130.350914][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 130.367844][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.384404][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.393617][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.406057][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.415282][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.433310][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.442512][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.471175][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.480435][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.505071][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 130.514292][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 130.711343][ T7255] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.730276][ T7255] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.753460][ T7255] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 130.780594][ T7255] bond0 (unregistering): Released all slaves [ 131.110578][ T7270] loop3: detected capacity change from 0 to 32768 [ 131.127772][ T5795] Bluetooth: hci1: command tx timeout [ 131.194460][ T7270] loop3: p9 p11 p16 [ 131.393591][ T7285] netlink: 16 bytes leftover after parsing attributes in process `syz.1.416'. [ 131.835520][ T7299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.421'. [ 131.862497][ T7299] tipc: Started in network mode [ 131.871364][ T7299] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 131.900221][ T5781] udevd[5781]: inotify_add_watch(7, /dev/loop3p11, 10) failed: No such file or directory [ 131.902166][ T5796] udevd[5796]: inotify_add_watch(7, /dev/loop3p16, 10) failed: No such file or directory [ 131.918715][ T7178] udevd[7178]: inotify_add_watch(7, /dev/loop3p9, 10) failed: No such file or directory [ 131.921818][ T7299] tipc: Enabled bearer , priority 10 [ 131.984890][ T7300] netlink: 14 bytes leftover after parsing attributes in process `syz.3.421'. [ 132.022723][ T7300] tipc: Resetting bearer [ 132.152419][ T7300] tipc: Disabling bearer [ 132.419027][ T7316] input: syz0 as /devices/virtual/input/input11 [ 132.682756][ T7152] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 132.718413][ T7152] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 132.750269][ T7152] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 132.819137][ T7152] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 132.960858][ T7310] loop1: detected capacity change from 0 to 32768 [ 132.971842][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.981549][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.058665][ T7310] XFS (loop1): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 133.121709][ T786] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 133.172294][ T7337] loop2: detected capacity change from 0 to 2048 [ 133.189628][ T7152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.204910][ T5795] Bluetooth: hci1: command tx timeout [ 133.206747][ T786] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 133.231560][ T7337] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.326294][ T7152] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.377039][ T3422] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.384225][ T3422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.426753][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.434025][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.457539][ T7310] XFS (loop1): Starting recovery (logdev: internal) [ 133.558256][ T7310] XFS (loop1): Ending recovery (logdev: internal) [ 133.625246][ T7323] loop3: detected capacity change from 0 to 32768 [ 133.647407][ T27] audit: type=1800 audit(1752708221.824:22): pid=7310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.424" name="file2" dev="loop1" ino=7431 res=0 errno=0 [ 133.667860][ C1] vkms_vblank_simulate: vblank timer overrun [ 133.723079][ T7323] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 133.779869][ T5799] XFS (loop1): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 134.002334][ T7152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.054129][ T7323] XFS (loop3): Ending clean mount [ 134.109416][ T7323] XFS (loop3): Quotacheck needed: Please wait. [ 134.149155][ T7152] veth0_vlan: entered promiscuous mode [ 134.195669][ T7152] veth1_vlan: entered promiscuous mode [ 134.235989][ T7323] XFS (loop3): Quotacheck: Done. [ 134.340144][ T7152] veth0_macvtap: entered promiscuous mode [ 134.392547][ T7152] veth1_macvtap: entered promiscuous mode [ 134.480934][ T7152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.481375][ T5787] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 134.492628][ T7152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.523963][ T7152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.543405][ T7152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.584941][ T7152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 134.595293][ T7372] loop1: detected capacity change from 0 to 8192 [ 134.600379][ T7152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.629208][ T7372] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 134.677463][ T7372] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 134.738061][ T7152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.754935][ T7372] REISERFS (device loop1): using ordered data mode [ 134.761483][ T7372] reiserfs: using flush barriers [ 134.808139][ T7152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.852967][ T7152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.873530][ T7152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.894747][ T7372] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 134.914167][ T7152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 134.933969][ T7152] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 134.954986][ T7372] REISERFS (device loop1): checking transaction log (loop1) [ 134.970694][ T7152] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.003252][ T7152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.015128][ T7372] REISERFS (device loop1): Using r5 hash to sort names [ 135.026375][ T7372] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 135.048038][ T7372] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 135.120031][ T7152] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.140126][ T7152] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.149137][ T7152] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.159597][ T7152] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.204763][ T5861] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 135.284597][ T5795] Bluetooth: hci1: command tx timeout [ 135.402859][ T1068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.411160][ T5861] usb 4-1: Using ep0 maxpacket: 8 [ 135.425354][ T1068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.434571][ T5861] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.451799][ T5861] usb 4-1: config 0 has no interfaces? [ 135.472992][ T5861] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 135.503589][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.523851][ T5861] usb 4-1: Product: syz [ 135.531608][ T5861] usb 4-1: Manufacturer: syz [ 135.543743][ T5861] usb 4-1: SerialNumber: syz [ 135.560997][ T5861] usb 4-1: config 0 descriptor?? [ 135.617056][ T1118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.633805][ T1118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.789493][ T5861] usb 4-1: USB disconnect, device number 7 [ 136.082306][ T785] kernel write not supported for file bpf-prog (pid: 785 comm: kworker/1:2) [ 136.210705][ T7419] tipc: Started in network mode [ 136.219934][ T7419] tipc: Node identity ff75fd7589343b37, cluster identity 4711 [ 136.230082][ T7419] tipc: Enabling of bearer rejected, failed to enable media [ 136.630747][ T7439] loop2: detected capacity change from 0 to 1024 [ 136.671118][ T7439] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.684084][ T785] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 136.898403][ T785] usb 2-1: Using ep0 maxpacket: 16 [ 136.909930][ T785] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 136.928466][ T785] usb 2-1: config 0 has no interface number 0 [ 136.938905][ T785] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 136.965092][ T785] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 136.995039][ T785] usb 2-1: config 0 interface 41 has no altsetting 0 [ 137.017176][ T785] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 137.038141][ T785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.067942][ T785] usb 2-1: Product: syz [ 137.072157][ T785] usb 2-1: Manufacturer: syz [ 137.085186][ T785] usb 2-1: SerialNumber: syz [ 137.101125][ T785] usb 2-1: config 0 descriptor?? [ 137.125669][ T7428] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 137.133088][ T7428] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 137.270525][ T7437] loop3: detected capacity change from 0 to 32768 [ 137.310643][ T7437] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 137.374602][ T7428] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 137.418863][ T7428] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 137.502757][ T7437] XFS (loop3): Ending clean mount [ 137.520020][ T7437] XFS (loop3): Quotacheck needed: Please wait. [ 137.589881][ T7437] XFS (loop3): Quotacheck: Done. [ 137.633611][ T7437] XFS (loop3): User initiated shutdown received. [ 137.641061][ T7437] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501). Shutting down filesystem. [ 137.666500][ T7437] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 137.826362][ T5787] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 137.845922][ T785] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00 [ 137.863168][ T3422] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.251544][ T785] dm9601 2-1:0.41 (unnamed net_device) (uninitialized): Error reading chip ID [ 138.319888][ T785] sr9700: probe of 2-1:0.41 failed with error -71 [ 138.355505][ T785] usb 2-1: USB disconnect, device number 7 [ 138.545818][ T7467] loop2: detected capacity change from 0 to 32768 [ 138.644319][ T7467] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 138.886771][ T7494] loop3: detected capacity change from 0 to 256 [ 138.956479][ T3422] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.080956][ T7467] XFS (loop2): Ending clean mount [ 139.216668][ T3422] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.286034][ T5803] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 139.346147][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 139.356513][ T5803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 139.366605][ T5803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 139.375215][ T5803] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 139.382660][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 139.571137][ T5789] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 139.587812][ T3422] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.968670][ T785] IPVS: starting estimator thread 0... [ 139.995072][ T5888] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 140.075309][ T7520] IPVS: using max 19 ests per chain, 45600 per kthread [ 140.200130][ T5888] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 140.221127][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.299202][ T5888] usb 4-1: config 0 descriptor?? [ 140.308857][ T5888] cp210x 4-1:0.0: cp210x converter detected [ 140.351009][ T7503] chnl_net:caif_netlink_parms(): no params data found [ 140.719679][ T7539] loop1: detected capacity change from 0 to 8192 [ 140.731696][ T5888] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 140.742701][ T28] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 140.759359][ T28] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 140.761752][ T7539] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 140.793142][ T7539] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 140.805385][ T7539] REISERFS (device loop1): using ordered data mode [ 140.811970][ T7539] reiserfs: using flush barriers [ 140.828841][ T7539] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 140.882956][ T7539] REISERFS (device loop1): checking transaction log (loop1) [ 140.946787][ T7539] REISERFS (device loop1): Using r5 hash to sort names [ 140.975562][ T7503] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.979899][ T7539] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 140.982686][ T7503] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.034572][ T5888] usb 4-1: cp210x converter now attached to ttyUSB0 [ 141.049151][ T7503] bridge_slave_0: entered allmulticast mode [ 141.086028][ T7503] bridge_slave_0: entered promiscuous mode [ 141.118037][ T7503] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.145736][ T7503] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.158425][ T7503] bridge_slave_1: entered allmulticast mode [ 141.179621][ T5888] usb 4-1: USB disconnect, device number 8 [ 141.195450][ T7503] bridge_slave_1: entered promiscuous mode [ 141.203392][ T5888] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 141.250533][ T5888] cp210x 4-1:0.0: device disconnected [ 141.444214][ T5803] Bluetooth: hci1: command tx timeout [ 141.511388][ T7503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.570776][ T7503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.707149][ T7503] team0: Port device team_slave_0 added [ 141.736353][ T7503] team0: Port device team_slave_1 added [ 141.935296][ T7503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.950574][ T7503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.023965][ T7503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.171127][ T7503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.209196][ T7503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.279928][ T7503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.388624][ T7582] loop1: detected capacity change from 0 to 2048 [ 142.457707][ T7582] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.803452][ T7503] hsr_slave_0: entered promiscuous mode [ 142.836907][ T7503] hsr_slave_1: entered promiscuous mode [ 142.858403][ T7503] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.878973][ T7503] Cannot create hsr debugfs directory [ 142.989201][ T7601] loop1: detected capacity change from 0 to 64 [ 142.993713][ T7575] loop2: detected capacity change from 0 to 32768 [ 143.060744][ T7601] UBIFS error (pid: 7601): cannot open "./file0", error -22 [ 143.099236][ T7575] JBD2: Ignoring recovery information on journal [ 143.182876][ T7575] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 143.307791][ T7575] (syz.2.475,7575,1):ocfs2_remove_inode_range:1793 ERROR: status = -22 [ 143.361063][ T7575] (syz.2.475,7575,1):__ocfs2_change_file_space:2044 ERROR: status = -22 [ 143.383507][ T3422] hsr_slave_0: left promiscuous mode [ 143.392579][ T3422] hsr_slave_1: left promiscuous mode [ 143.405445][ T3422] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.412878][ T3422] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.440549][ T3422] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.458502][ T3422] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.459199][ T7613] vivid-003: disconnect [ 143.472028][ T5789] ocfs2: Unmounting device (7,2) on (node local) [ 143.475982][ T7612] vivid-003: reconnect [ 143.493326][ T3422] bridge_slave_1: left allmulticast mode [ 143.502349][ T3422] bridge_slave_1: left promiscuous mode [ 143.508432][ T3422] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.522335][ T3422] bridge_slave_0: left allmulticast mode [ 143.531090][ T5803] Bluetooth: hci1: command tx timeout [ 143.554029][ T3422] bridge_slave_0: left promiscuous mode [ 143.559931][ T3422] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.631780][ T3422] veth1_macvtap: left promiscuous mode [ 143.637521][ T3422] veth0_macvtap: left promiscuous mode [ 143.645677][ T3422] veth1_vlan: left promiscuous mode [ 143.651091][ T3422] veth0_vlan: left promiscuous mode [ 144.432861][ T7632] loop2: detected capacity change from 0 to 2048 [ 144.495768][ T7632] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.594016][ T3501] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 144.612490][ T3501] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 144.650392][ T3501] EXT4-fs (loop2): This should not happen!! Data will be lost [ 144.650392][ T3501] [ 144.660268][ T3501] EXT4-fs (loop2): Total free blocks count 0 [ 144.666462][ T3501] EXT4-fs (loop2): Free/Dirty block details [ 144.677725][ T3501] EXT4-fs (loop2): free_blocks=2415919104 [ 144.683539][ T3501] EXT4-fs (loop2): dirty_blocks=16 [ 144.689647][ T3501] EXT4-fs (loop2): Block reservation details [ 144.708409][ T3501] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 144.730220][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.756537][ T3422] team0 (unregistering): Port device team_slave_1 removed [ 144.853775][ T3422] team0 (unregistering): Port device team_slave_0 removed [ 144.929249][ T3422] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.938264][ T7643] input: syz1 as /devices/virtual/input/input12 [ 145.003083][ T3422] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.156518][ T7647] loop2: detected capacity change from 0 to 64 [ 145.269204][ T3501] ------------[ cut here ]------------ [ 145.274845][ T3501] kernel BUG at fs/hfs/inode.c:449! [ 145.280193][ T3501] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 145.286284][ T3501] CPU: 0 PID: 3501 Comm: kworker/u4:10 Not tainted 6.6.98-syzkaller #0 [ 145.294527][ T3501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.304578][ T3501] Workqueue: writeback wb_workfn (flush-7:2) [ 145.310555][ T3501] RIP: 0010:hfs_write_inode+0x7c4/0x7d0 [ 145.316086][ T3501] Code: c7 c1 00 03 ef 96 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 00 03 ef 96 e8 36 08 86 ff e9 6c fe ff ff e8 6c 59 2d ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 41 57 41 56 41 [ 145.335677][ T3501] RSP: 0018:ffffc9000ca77360 EFLAGS: 00010293 [ 145.341720][ T3501] RAX: ffffffff82584d04 RBX: ffff8880318c35a8 RCX: ffff88802ee2bc00 [ 145.349671][ T3501] RDX: 0000000000000000 RSI: ffffffff8cf3a260 RDI: 0000000000000000 [ 145.357622][ T3501] RBP: ffffc9000ca774f0 R08: ffff88802ee2bc00 R09: 0000000000000003 [ 145.365572][ T3501] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 145.373521][ T3501] R13: 1ffff9200194ee70 R14: ffff8880318c3558 R15: 0000000000000000 [ 145.381474][ T3501] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 145.390382][ T3501] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.396944][ T3501] CR2: 00005555810fd5c8 CR3: 00000000618c2000 CR4: 00000000003506f0 [ 145.404898][ T3501] Call Trace: [ 145.408158][ T3501] [ 145.411067][ T3501] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 145.416445][ T3501] ? __rwlock_init+0x150/0x150 [ 145.421189][ T3501] __writeback_single_inode+0x705/0xee0 [ 145.426713][ T3501] writeback_sb_inodes+0x77c/0xef0 [ 145.431805][ T3501] ? queue_io+0x560/0x560 [ 145.436124][ T3501] ? rcu_is_watching+0x15/0xb0 [ 145.440873][ T3501] wb_writeback+0x450/0xba0 [ 145.445371][ T3501] ? queue_io+0x2f1/0x560 [ 145.449693][ T3501] ? percpu_ref_tryget+0x250/0x250 [ 145.454792][ T3501] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 145.460769][ T3501] ? _raw_spin_unlock_irq+0x23/0x50 [ 145.465945][ T3501] wb_workfn+0x3ff/0xe20 [ 145.470173][ T3501] ? inode_wait_for_writeback+0x200/0x200 [ 145.475884][ T3501] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 145.481847][ T3501] ? read_lock_is_recursive+0x20/0x20 [ 145.487204][ T3501] ? _raw_spin_unlock_irq+0x23/0x50 [ 145.492382][ T3501] ? process_scheduled_works+0x957/0x15b0 [ 145.498084][ T3501] ? process_scheduled_works+0x957/0x15b0 [ 145.503782][ T3501] process_scheduled_works+0xa45/0x15b0 [ 145.509312][ T3501] ? assign_work+0x400/0x400 [ 145.513882][ T3501] ? assign_work+0x39e/0x400 [ 145.518465][ T3501] worker_thread+0xa55/0xfc0 [ 145.523131][ T3501] kthread+0x2fa/0x390 [ 145.527177][ T3501] ? pr_cont_work+0x560/0x560 [ 145.531833][ T3501] ? kthread_blkcg+0xd0/0xd0 [ 145.536421][ T3501] ret_from_fork+0x48/0x80 [ 145.540834][ T3501] ? kthread_blkcg+0xd0/0xd0 [ 145.545404][ T3501] ret_from_fork_asm+0x11/0x20 [ 145.550151][ T3501] [ 145.553157][ T3501] Modules linked in: [ 145.566930][ T3501] ---[ end trace 0000000000000000 ]--- [ 145.572424][ T3501] RIP: 0010:hfs_write_inode+0x7c4/0x7d0 [ 145.578950][ T3501] Code: c7 c1 00 03 ef 96 80 e1 07 80 c1 03 38 c1 0f 8c 7d fe ff ff 48 c7 c7 00 03 ef 96 e8 36 08 86 ff e9 6c fe ff ff e8 6c 59 2d ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 55 41 57 41 56 41 [ 145.598959][ T3501] RSP: 0018:ffffc9000ca77360 EFLAGS: 00010293 [ 145.605106][ T3501] RAX: ffffffff82584d04 RBX: ffff8880318c35a8 RCX: ffff88802ee2bc00 [ 145.612236][ T5803] Bluetooth: hci1: command tx timeout [ 145.613122][ T3501] RDX: 0000000000000000 RSI: ffffffff8cf3a260 RDI: 0000000000000000 [ 145.626742][ T3501] RBP: ffffc9000ca774f0 R08: ffff88802ee2bc00 R09: 0000000000000003 [ 145.634795][ T3501] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 145.643193][ T3501] R13: 1ffff9200194ee70 R14: ffff8880318c3558 R15: 0000000000000000 [ 145.651305][ T3501] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 145.661593][ T3501] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 145.670245][ T3501] CR2: 00005555810fd5c8 CR3: 00000000618c2000 CR4: 00000000003506f0 [ 145.680660][ T3501] Kernel panic - not syncing: Fatal exception [ 145.690238][ T3501] Kernel Offset: disabled [ 145.694553][ T3501] Rebooting in 86400 seconds..