last executing test programs: 1m10.883416877s ago: executing program 4 (id=5): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r1, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000040)=0x84) 1m10.696445422s ago: executing program 4 (id=19): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x79ad, 0x3180, 0x7ffd, 0x32c, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0x6, &(0x7f00000007c0)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) 1m9.774898103s ago: executing program 4 (id=21): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000004c0)={[{@resuid}, {@init_itable}, {@minixdf}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f00000001c0)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x3f, 0x0) 1m8.741485411s ago: executing program 4 (id=26): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000002200)=[{0x84, 0x77, 0x0, 0x0, @time={0x4, 0x8}, {}, {}, @raw32={[0x2]}}, {0x0, 0x0, 0x0, 0x83, @time={0x0, 0x7}, {}, {}, @note={0x81}}, {0x0, 0x0, 0x0, 0x2, @time, {}, {}, @ext={0x0, 0x0}}], 0x54) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) 1m8.174642155s ago: executing program 4 (id=29): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000040)={0x20, 0x2, 0x0, 0x8000, 0x10003}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1bbd3b3eb838c6ea}) 1m7.570572937s ago: executing program 32 (id=29): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000040)={0x20, 0x2, 0x0, 0x8000, 0x10003}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1bbd3b3eb838c6ea}) 10.747903849s ago: executing program 3 (id=366): mkdir(&(0x7f0000000300)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000240), 0x200000, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x800, 0x44040000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x115, 0xfb}}, 0x50) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xb3a406bdd74362ab, 0x4) 10.56346291s ago: executing program 3 (id=370): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="b70000000000000007000000000000009500000000000000a9171809f8dcf159569d5475991f7de1a0d0c119cfcf6b98741c23fb7f8d3002ec85db75af955427e91496087a51a0a78f269a9e216a0d0177c4fe3552396a180330807a5b6e8c79aa92038c78d1f16c1323f0e0c8d45c641a21757847cb22230e4321cc3581e40c62c4defee8cffe359cfeef7f58fffdb48647d28ae810f6d22d20271e9e88e94aa6982bf48356652b08e2fbd404e41e0058aae0478fbe542b648421d1b4486a542a7d478fbe6b5e000000293853f9c68e235184b7ad5b6c4fe70ec8320500db0db7fda3da6171a05509ffecef2cb9802d4f36c9a1ce46d3b355fec188ccfc2f0fc89e164561fb06ee9a0153981a47b5de9edd3536d5534f9a699f73b2c9341d2d05043748ce1f4577ed76cdf5b3c697089daa4abda69a8c0c992404610a6be9e103c972459065dec0488e85a6a0418fc87dd8019ef7bb4ef4fa6ee08d81797570578f2e8198e687012f25a69a90e7515e35f8abbddfa96c3f0485f01f0e9e144a2bd31c1b594c50de7c9efd826f1e19b7bd89ca4052b1985287bd13957a48467e0eeddf564d175bf4340885b63976df609806c3b2a3667539dfd66a7400000000003be6026e60205f761ce85cdf75cdb95ca5d32b5bf87eed4184d49f8f48181ef2419efe82ebb18ee55772d562b3b49551714e805a5211a3f4e8e703c03e23b2074bc573dbb66d59e269b722637c4a2efb5241cae2f14774609ad91d66724c438455dc4fcf0b4c8fc235f6c190b4c82bb2556d1fbcd4468369e98e900c743162ce2c7e60610acf0c8e4ba94a7e7127c7de0e6c35acecee1b8434fdca4579f9ebc6a515f7d910b466eb583fb0a7e65fbecb2b8ee0e9da33afb88aa5da8da3a5e0e58fcb48de6f165826b046a8951a47e040bd419d0efa0f54e8e3694085a7bde6f6494968d8200000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="b7000000ecffffff0c0000000000000095000000000000005e0c83dfb64a3eb1cdfa541cd3957aa8a96b9fa4591c1eb556e38defc504b011face5a06294c2115a9ad943bac350e8d7961537181f79ead9176dc7c3ed2d45004deb987fa0d"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r3 = dup2(r2, r0) setsockopt$sock_attach_bpf(r1, 0x1, 0x46, &(0x7f00000000c0)=r3, 0x4) 10.330585647s ago: executing program 3 (id=373): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000640)={0xa, 0x4e26, 0x7, @empty, 0xb}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x19}, 0x4e25, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {0x2, 0x9, 0x3, 0x6, 0x9, 0xbffffffffffffffd, 0x5, 0x2000000000000000}, {0x800000fa, 0x1000000000008, 0x2, 0x6}, 0x0, 0x0, 0x1, 0x0, 0x6, 0x2}, {{@in6=@empty, 0x4cb, 0x6c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x19}, 0x3503, 0x1, 0x0, 0x0, 0x4, 0x80000001}}, 0xe8) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) write$binfmt_script(r0, &(0x7f0000000a00)={'#! ', './file0'}, 0xb) 9.178242036s ago: executing program 3 (id=385): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000100)=ANY=[@ANYBLOB="696f636861727365743d170ddbbba28854f76e642c756d61736b3d30303030303030303030303030303030303030303030362c696f636861727365743d63703934392c6572726f72733d72656d6f756e742d726f2c7569643d", @ANYRESHEX=0x0, @ANYBLOB=',allow_utime=00000000000000000000003,gid=', @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,discard,errors=continue,\x00'], 0x5, 0x1510, &(0x7f00000037c0)="$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") mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000680)='./file0/../file0/../file0/../file0\x00', 0x0, 0x1333404, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') 8.757110017s ago: executing program 3 (id=388): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000000c0)='./file1\x00', 0x4490, &(0x7f0000000700)=ANY=[], 0x1, 0x282, &(0x7f0000000100)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) open(&(0x7f0000000000)='./file1\x00', 0x8042, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x5e02) r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 8.226723168s ago: executing program 3 (id=394): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="580000001000370401000000f8dbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c040031810000300012800900010069706970000000002000028008000200ac1414bb06000f000200000004001300050005000100000008"], 0x58}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000001680)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000680)="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", 0x5e8}], 0x1, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x37}, @multicast2}}}], 0x20}}], 0x1, 0x4040880) 7.757764022s ago: executing program 33 (id=394): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="580000001000370401000000f8dbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c040031810000300012800900010069706970000000002000028008000200ac1414bb06000f000200000004001300050005000100000008"], 0x58}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000001680)=[{{&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000680)="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", 0x5e8}], 0x1, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x37}, @multicast2}}}], 0x20}}], 0x1, 0x4040880) 3.809312994s ago: executing program 5 (id=430): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r3, 0x1, 0x28, &(0x7f0000000000)=0x101, 0x4) sendto$packet(r2, &(0x7f0000000180)='`', 0xca, 0x0, &(0x7f0000000240)={0x3a, 0x0, r1, 0x1, 0x0, 0x6, @random="4a99fee2a74d"}, 0x14) 3.784595737s ago: executing program 5 (id=431): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x8, '\t\x00'}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000580)={0x40, 0x8, 0x5, "4ffeed4f49"}, 0x0, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.421242643s ago: executing program 2 (id=438): r0 = fsopen(&(0x7f0000000240)='securityfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 3.348728225s ago: executing program 2 (id=439): syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x1, 0x1f3, &(0x7f0000000500)="$eJzsmb/L00AYx7+XtHl/IIqLg4uDL6jgmyapyrt0qOAoiFXUwaHYWKppK22EtiC0uLj4BwiuLo4ODk4O/gWuOqggONjRTTi5yyW9pmlppWjhfT7Qu28ud8/z3FPyHCQgCOLQ8u3rry/PLx/cOA/gCPawpcZ/mFHPj03P//zi8Q5KV16++fTqQ+vok3dpe0ys4cv7twC8L5sIwXLK49TqHU3vqf4mDJxT+hYY7Ej+5pzzvJRD+GC4o+Y80HQ7Nhj49r12ULvfCHxHNK5oPNEUdf8iqPGIoQZgW0bHOdPud/uDh9Ug8Dtpkeexn5lbq4pF+ZPxlQ2UEGePcwPA7WdPR+Ja5QYOjCR/Lgy4ShfBUFH6AFuwbXuSEm3/J3MT++Yy+/+/4rUUx/f/lVORYMEm7F0Iho0IY90ivxY7LD0iHuhk5MQ4roH6nO8r+rrLsDF/gSxcyIjn424QXP1LyyJjVkaiEjGpT4IzWn3KJaNAIWw+KnT7g/1Gs1r3637L84qXnAuOc9EryEIUtQvq37asT7vJSHwGzGIxCz3xoLo9IOy48roahh0varWKW3nb/inXGNfr0eLTUcfUmZUclCmY+hmyF+qsmT1zOHdPBEEQBEEQBEEQBEEQBEEQ2ZwCk29Z1YcqPgfvmnxD+ScAAP//+tFdLw==") socket$netlink(0x10, 0x3, 0x10) timer_create(0x2, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0) fadvise64(r0, 0x8000, 0x4101, 0x3) 3.089931877s ago: executing program 2 (id=440): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x12, &(0x7f0000000100)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.233989764s ago: executing program 0 (id=446): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000140)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@umask={'umask', 0x3d, 0x9}}, {@namecase}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x5275}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@errors_remount}, {@discard}, {@errors_continue}]}, 0x3, 0x1510, &(0x7f0000003640)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x202, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) r2 = dup2(r1, r0) read$FUSE(r2, &(0x7f0000001a40)={0x2020}, 0x2020) 2.191745381s ago: executing program 2 (id=447): syz_open_dev$sndmidi(0x0, 0x2, 0x141102) r0 = syz_open_dev$sndctrl(0x0, 0x6, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000008940)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0) ioctl$FITRIM(r1, 0x40406f06, &(0x7f0000000400)={0x0, 0x8000000000000001, 0x86ff}) 2.031399189s ago: executing program 0 (id=448): ioctl$EVIOCRMFF(0xffffffffffffffff, 0xc0085504, &(0x7f0000000140)=0xfffffffd) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r1, 0xff, 0x1, 0x0, &(0x7f0000000040)) 1.882196711s ago: executing program 0 (id=449): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3fa, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 1.815356882s ago: executing program 0 (id=450): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r2, 0x331, 0x70bd2a, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}}, 0x0) 1.598251859s ago: executing program 0 (id=452): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r2, 0x25, 0x2, @void}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff}}}}}}, 0x0) 1.466026065s ago: executing program 0 (id=453): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) ppoll(&(0x7f0000000280)=[{r1, 0x100}], 0x1, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002800)=[{{0x0, 0xffffffffffffffb6, 0x0}, 0xffff}], 0x1, 0x20, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) 1.338473011s ago: executing program 2 (id=454): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa01", 0x2a}], 0x1}, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7fff, 0x0) 1.246133048s ago: executing program 1 (id=455): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.083335256s ago: executing program 1 (id=456): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/306], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 1.011173836s ago: executing program 5 (id=457): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x6) syz_emit_ethernet(0x56, &(0x7f0000000340)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x3f}]}}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x96, &(0x7f0000000040)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa}]}}}}}}}}, 0x0) 894.216707ms ago: executing program 1 (id=458): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) read(r1, &(0x7f0000000200)=""/202, 0xca) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x4058534c, &(0x7f00000000c0)={0x80, 0x0, {0x3}}) tkill(r0, 0x7) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000000)={0x1, 0x2, 0x0, 'queue0\x00', 0x3}) 792.229571ms ago: executing program 5 (id=459): r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x5dc, {0x0, 0x6, "8cb02b", 0x4, 0x2f, 0x0, @loopback, @local, [@srh={0x2b, 0x0, 0x4, 0x0, 0x0, 0x10}]}}}}}}}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x8d}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 579.541666ms ago: executing program 1 (id=460): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f00000012c0)=""/4109, 0x100d) sendmmsg$alg(r1, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000000c0)="4789", 0x2}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x4000080) 374.033843ms ago: executing program 5 (id=461): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000280)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0xc2, 0x0, 0x0, 0x10, {[@mss={0x1e, 0x4, 0x8}, @exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) 357.62245ms ago: executing program 5 (id=462): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[], 0x27c}, 0x1, 0x0, 0x0, 0xc04}, 0x8080) recvmmsg$unix(r1, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000001d40)=""/4087, 0xff7}], 0x1}}], 0x1, 0x12040, 0x0) 251.809629ms ago: executing program 1 (id=463): syz_mount_image$hfsplus(&(0x7f0000003000), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x208000, &(0x7f0000003f80)=ANY=[@ANYBLOB="6e6c733d63703935302c6e6f626172726965722c666f7263652c756d61736b3d30303030303030303030303030303030303030313030302c00d01280f532b0f4cf3b36fd5c6ef64269a533fc6b052f92ffcac08ca18519d5b3711b97ec291e41355fa65d9c0d15e7c10c63ab0bba736f92ab9d30478ae1452a017be98c2a0507febf295db17e98d0fffc0d349264ce2acdedc0a61ae132d4024d39e11de2dc8679fac7efcb6137aa2e361c5f6cb851e3a60ba05f834666694667f27f0d632cf9a85fe247e27251acbd739ff85088cb201010900132000000000000000000002593d600000000"], 0xfd, 0x691, &(0x7f00000002c0)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) mkdir(&(0x7f0000000000)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') 145.175972ms ago: executing program 6 (id=396): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) unshare(0x8040600) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018}, './file1\x00'}) 70.256407ms ago: executing program 2 (id=464): r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) preadv(r0, &(0x7f00000001c0)=[{&(0x7f00000013c0)=""/4096, 0x1000}], 0x1, 0x5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000001c0)={0xe886c5ffc5249171, 0x4, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) 5.152091ms ago: executing program 1 (id=465): socket$kcm(0xa, 0x5, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x882) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 0s ago: executing program 6 (id=466): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) shutdown(r0, 0x1) kernel console output (not intermixed with test programs): 249 > 2 [ 71.934710][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 71.945036][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 71.953733][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 71.962191][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.974409][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.985722][ T5151] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.003512][ T5151] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.011177][ T5151] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.019167][ T5151] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.027049][ T5151] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.592713][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 72.635332][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 72.650230][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 72.724818][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 72.938829][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.946191][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.953603][ T5828] bridge_slave_0: entered allmulticast mode [ 72.961870][ T5828] bridge_slave_0: entered promiscuous mode [ 73.008249][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.016510][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.023672][ T5828] bridge_slave_1: entered allmulticast mode [ 73.031270][ T5828] bridge_slave_1: entered promiscuous mode [ 73.059310][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.066647][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.073781][ T5840] bridge_slave_0: entered allmulticast mode [ 73.080934][ T5840] bridge_slave_0: entered promiscuous mode [ 73.103319][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.110533][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.118043][ T5836] bridge_slave_0: entered allmulticast mode [ 73.125756][ T5836] bridge_slave_0: entered promiscuous mode [ 73.132974][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 73.154983][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.162170][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.169592][ T5840] bridge_slave_1: entered allmulticast mode [ 73.177417][ T5840] bridge_slave_1: entered promiscuous mode [ 73.196842][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.204105][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.211662][ T5836] bridge_slave_1: entered allmulticast mode [ 73.218817][ T5836] bridge_slave_1: entered promiscuous mode [ 73.251211][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.263702][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.284329][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.291620][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.299285][ T5832] bridge_slave_0: entered allmulticast mode [ 73.306262][ T5832] bridge_slave_0: entered promiscuous mode [ 73.361965][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.369327][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.376742][ T5832] bridge_slave_1: entered allmulticast mode [ 73.383691][ T5832] bridge_slave_1: entered promiscuous mode [ 73.393003][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.406375][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.441904][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.502389][ T5828] team0: Port device team_slave_0 added [ 73.511086][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.540300][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.569758][ T5828] team0: Port device team_slave_1 added [ 73.603952][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.616123][ T5836] team0: Port device team_slave_0 added [ 73.658204][ T5840] team0: Port device team_slave_0 added [ 73.680473][ T5836] team0: Port device team_slave_1 added [ 73.686938][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.694073][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.702084][ T5839] bridge_slave_0: entered allmulticast mode [ 73.709263][ T5839] bridge_slave_0: entered promiscuous mode [ 73.717176][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.724123][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.754388][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.768224][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.775523][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.801568][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.815565][ T5840] team0: Port device team_slave_1 added [ 73.856214][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.863380][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.871360][ T5839] bridge_slave_1: entered allmulticast mode [ 73.878392][ T5839] bridge_slave_1: entered promiscuous mode [ 73.885021][ T5151] Bluetooth: hci0: command tx timeout [ 73.949359][ T5832] team0: Port device team_slave_0 added [ 73.956074][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.963026][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.964344][ T5151] Bluetooth: hci1: command tx timeout [ 73.989324][ T5831] Bluetooth: hci2: command tx timeout [ 74.000816][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.012990][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.020142][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.046198][ T5831] Bluetooth: hci3: command tx timeout [ 74.046231][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.084818][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.094760][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.101714][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.128410][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.135318][ T5831] Bluetooth: hci4: command tx timeout [ 74.146993][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.153968][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.180165][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.193334][ T5832] team0: Port device team_slave_1 added [ 74.242254][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.298072][ T5836] hsr_slave_0: entered promiscuous mode [ 74.304619][ T5836] hsr_slave_1: entered promiscuous mode [ 74.325264][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.332220][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.358273][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.377278][ T5828] hsr_slave_0: entered promiscuous mode [ 74.383501][ T5828] hsr_slave_1: entered promiscuous mode [ 74.390125][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.398227][ T5828] Cannot create hsr debugfs directory [ 74.406233][ T5839] team0: Port device team_slave_0 added [ 74.413892][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.421294][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.447403][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.467574][ T5839] team0: Port device team_slave_1 added [ 74.563377][ T5840] hsr_slave_0: entered promiscuous mode [ 74.569622][ T5840] hsr_slave_1: entered promiscuous mode [ 74.576385][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.583978][ T5840] Cannot create hsr debugfs directory [ 74.632830][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.640317][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.666991][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.679323][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.686514][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.712532][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.794086][ T5832] hsr_slave_0: entered promiscuous mode [ 74.800415][ T5832] hsr_slave_1: entered promiscuous mode [ 74.807047][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.814915][ T5832] Cannot create hsr debugfs directory [ 74.978182][ T5839] hsr_slave_0: entered promiscuous mode [ 74.984688][ T5839] hsr_slave_1: entered promiscuous mode [ 74.990813][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.998523][ T5839] Cannot create hsr debugfs directory [ 75.336962][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 75.349180][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 75.378379][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 75.401875][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 75.496794][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.509175][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.536871][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.547339][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.631878][ T5836] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.644795][ T5836] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.669050][ T5836] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.681051][ T5836] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.783503][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.802811][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.828275][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.859537][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.896555][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.938789][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.964990][ T5831] Bluetooth: hci0: command tx timeout [ 75.978060][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.987092][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.000876][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.020210][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.027452][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.047205][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.054358][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.054518][ T5831] Bluetooth: hci1: command tx timeout [ 76.069905][ T5831] Bluetooth: hci2: command tx timeout [ 76.076110][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.088412][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.124451][ T5831] Bluetooth: hci3: command tx timeout [ 76.145940][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.182174][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.189370][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.204363][ T5831] Bluetooth: hci4: command tx timeout [ 76.244450][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.251564][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.333062][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.385312][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.429756][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.483641][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.521361][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.552665][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.560257][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.580998][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.600392][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.607574][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.683640][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.690855][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.722181][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.756197][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.763373][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.797684][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.804855][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.836463][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.843624][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.884045][ T5836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.923437][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.940981][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.141577][ T5840] veth0_vlan: entered promiscuous mode [ 77.172342][ T5840] veth1_vlan: entered promiscuous mode [ 77.190880][ T5828] veth0_vlan: entered promiscuous mode [ 77.231248][ T5828] veth1_vlan: entered promiscuous mode [ 77.329706][ T5840] veth0_macvtap: entered promiscuous mode [ 77.371619][ T5840] veth1_macvtap: entered promiscuous mode [ 77.427927][ T5828] veth0_macvtap: entered promiscuous mode [ 77.481093][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.492728][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.516450][ T5828] veth1_macvtap: entered promiscuous mode [ 77.551795][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.592518][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.627092][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.641684][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.665071][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.688148][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.712780][ T203] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.751862][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.767051][ T203] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.845857][ T203] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.901634][ T203] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.912897][ T203] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.945848][ T203] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.956883][ T5832] veth0_vlan: entered promiscuous mode [ 77.985211][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.993126][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.010349][ T5832] veth1_vlan: entered promiscuous mode [ 78.044498][ T5831] Bluetooth: hci0: command tx timeout [ 78.104058][ T5836] veth0_vlan: entered promiscuous mode [ 78.124953][ T5831] Bluetooth: hci2: command tx timeout [ 78.134962][ T5831] Bluetooth: hci1: command tx timeout [ 78.141335][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.150271][ T5836] veth1_vlan: entered promiscuous mode [ 78.156764][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.206486][ T5831] Bluetooth: hci3: command tx timeout [ 78.210520][ T5839] veth0_vlan: entered promiscuous mode [ 78.221681][ T5832] veth0_macvtap: entered promiscuous mode [ 78.235095][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.251096][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.268847][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.285101][ T5831] Bluetooth: hci4: command tx timeout [ 78.329399][ T5832] veth1_macvtap: entered promiscuous mode [ 78.347217][ T5839] veth1_vlan: entered promiscuous mode [ 78.423474][ T5836] veth0_macvtap: entered promiscuous mode [ 78.452083][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.470490][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.483279][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.486436][ T5836] veth1_macvtap: entered promiscuous mode [ 78.520477][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.548903][ T5839] veth0_macvtap: entered promiscuous mode [ 78.580411][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.601936][ T5839] veth1_macvtap: entered promiscuous mode [ 78.634698][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.643687][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.675620][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.695767][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.732174][ T5950] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 78.756465][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.773900][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.880551][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.895382][ T4472] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.905286][ T4472] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.914008][ T4472] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.993914][ T4472] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.007739][ T4472] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.022873][ T5956] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 79.074732][ T4472] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.086684][ T5959] sctp: [Deprecated]: syz.3.9 (pid 5959) Use of struct sctp_assoc_value in delayed_ack socket option. [ 79.086684][ T5959] Use struct sctp_sack_info instead [ 79.090819][ T4472] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.227636][ T4472] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.306681][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.352113][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.471192][ T4472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.484034][ T4472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.541344][ T4472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.563876][ T4472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.712369][ T5973] warning: `syz.3.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.745376][ T5975] loop0: detected capacity change from 0 to 16 [ 79.775897][ T5975] erofs (device loop0): mounted with root inode @ nid 36. [ 79.818723][ T5831] erofs (device loop0): failed to decompress 6887 in[4096, 0] out[9000] [ 79.831123][ T5975] erofs (device loop0): failed to decompress 6887 in[4096, 0] out[8192] [ 79.839770][ T5975] erofs (device loop0): read error -117 @ 1 of nid 89 [ 79.860867][ T30] audit: type=1800 audit(1751276283.140:2): pid=5975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 80.127318][ T5831] Bluetooth: hci0: command tx timeout [ 80.204573][ T5831] Bluetooth: hci1: command tx timeout [ 80.210063][ T5831] Bluetooth: hci2: command tx timeout [ 80.227531][ T203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.239892][ T4472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.290136][ T5831] Bluetooth: hci3: command tx timeout [ 80.291858][ T203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.317132][ T4472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.366059][ T5151] Bluetooth: hci4: command tx timeout [ 80.459296][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.527463][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.351805][ T5975] syz.0.1 (5975): drop_caches: 2 [ 81.610135][ T5992] loop0: detected capacity change from 0 to 128 [ 81.617907][ T5980] loop3: detected capacity change from 0 to 32768 [ 81.653019][ T5980] ======================================================= [ 81.653019][ T5980] WARNING: The mand mount option has been deprecated and [ 81.653019][ T5980] and is ignored by this kernel. Remove the mand [ 81.653019][ T5980] option from the mount to silence this warning. [ 81.653019][ T5980] ======================================================= [ 81.776628][ T5992] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 81.806816][ T5984] loop2: detected capacity change from 0 to 32768 [ 81.845201][ T5980] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 81.876253][ T5992] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 81.932035][ T5984] (syz.2.17,5984,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 81.997097][ T5992] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.0.20: bad entry in directory: rec_len is smaller than minimal - offset=1012, inode=128, rec_len=9, size=1024 fake=0 [ 82.055858][ T5984] (syz.2.17,5984,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 82.193175][ T6006] loop4: detected capacity change from 0 to 512 [ 82.202389][ T5984] JBD2: Ignoring recovery information on journal [ 82.231320][ T5992] EXT4-fs (loop0): Remounting filesystem read-only [ 82.280138][ T5988] loop1: detected capacity change from 0 to 32768 [ 82.290007][ T5988] XFS: attr2 mount option is deprecated. [ 82.314454][ T6006] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 82.318166][ T5988] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 82.384638][ T6006] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 82.431575][ T5980] XFS (loop3): Ending clean mount [ 82.436721][ T6006] EXT4-fs (loop4): 1 truncate cleaned up [ 82.443145][ T5984] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 82.475554][ T5832] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.512627][ T5988] XFS (loop1): Ending clean mount [ 82.520405][ T6006] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.529193][ T5980] XFS (loop3): Quotacheck needed: Please wait. [ 82.560095][ T5988] XFS (loop1): Quotacheck needed: Please wait. [ 82.631269][ T5980] XFS (loop3): Quotacheck: Done. [ 82.688393][ T5988] XFS (loop1): Quotacheck: Done. [ 82.747641][ T6020] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz.4.21: invalid fast symlink length 39 [ 82.832151][ T5840] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 83.050257][ T5839] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 83.253654][ T5828] ocfs2: Unmounting device (7,2) on (node local) [ 83.379926][ T6026] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.28'. [ 83.445551][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.829873][ T78] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.051258][ T78] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.180313][ T78] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.279166][ T6040] syzkaller1: entered promiscuous mode [ 84.305011][ T6040] syzkaller1: entered allmulticast mode [ 84.420177][ T78] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.599232][ T6046] loop3: detected capacity change from 0 to 4096 [ 84.841203][ T6046] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 84.865086][ T78] bridge_slave_1: left allmulticast mode [ 84.884966][ T78] bridge_slave_1: left promiscuous mode [ 84.902946][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.112647][ T6051] loop1: detected capacity change from 0 to 32768 [ 85.208250][ T78] bridge_slave_0: left allmulticast mode [ 85.260565][ T78] bridge_slave_0: left promiscuous mode [ 85.271377][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.327970][ T6051] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 85.327994][ T6051] allowing incompatible features above 0.0: (unknown version) [ 85.328005][ T6051] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 85.355754][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.356453][ T6051] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 85.372715][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.378024][ T6051] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 85.389585][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.393442][ T6051] bcachefs (loop1): Version upgrade required: [ 85.393442][ T6051] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 85.393442][ T6051] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 85.393442][ T6051] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 85.413028][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.481218][ C1] vkms_vblank_simulate: vblank timer overrun [ 85.511341][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.513956][ T6051] bcachefs (loop1): dropping and reconstructing all alloc info [ 85.579435][ T6051] bcachefs (loop1): accounting_read... done [ 85.657042][ T6051] bcachefs (loop1): alloc_read... done [ 85.710432][ T6051] bcachefs (loop1): snapshots_read... done [ 85.718271][ T6051] bcachefs (loop1): check_allocations... done [ 85.768372][ T6051] bcachefs (loop1): going read-write [ 85.793171][ T6051] bcachefs (loop1): done starting filesystem [ 85.940932][ T6051] bcachefs (loop1): going read-only [ 85.946762][ T6051] bcachefs (loop1): finished waiting for writes to stop [ 85.995252][ T6041] loop0: detected capacity change from 0 to 40427 [ 86.046425][ T6051] bcachefs (loop1): flushing journal and stopping allocators, journal seq 12 [ 86.061942][ T6051] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 12 [ 86.090921][ T6051] bcachefs (loop1): unclean shutdown complete, journal seq 13 [ 86.101725][ T6051] bcachefs (loop1): done going read-only, filesystem not clean [ 86.134367][ T6041] F2FS-fs (loop0): invalid crc value [ 86.160663][ T5839] bcachefs (loop1): shutting down [ 86.207928][ T6085] syz.3.40 uses obsolete (PF_INET,SOCK_PACKET) [ 86.290024][ T5839] bcachefs (loop1): shutdown complete [ 86.593539][ T6041] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 86.707342][ T1075] cfg80211: failed to load regulatory.db [ 87.041559][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.058528][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.090162][ T78] bond0 (unregistering): Released all slaves [ 87.573876][ T6092] loop2: detected capacity change from 0 to 32768 [ 87.574627][ T5831] Bluetooth: hci2: command tx timeout [ 87.648970][ T6092] [ 87.648970][ T6092] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.648970][ T6092] [ 87.839960][ T6092] [ 87.839960][ T6092] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.839960][ T6092] [ 87.895847][ T6092] [ 87.895847][ T6092] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.895847][ T6092] [ 87.950901][ T6092] [ 87.950901][ T6092] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 87.950901][ T6092] [ 88.009453][ T6092] [ 88.009453][ T6092] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.009453][ T6092] [ 88.026002][ T6092] [ 88.026002][ T6092] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.026002][ T6092] [ 88.038424][ T6092] [ 88.038424][ T6092] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.038424][ T6092] [ 88.064346][ T6092] [ 88.064346][ T6092] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.064346][ T6092] [ 88.089502][ T6092] [ 88.089502][ T6092] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.089502][ T6092] [ 88.110385][ T6114] [ 88.110385][ T6114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.110385][ T6114] [ 88.137528][ T6114] [ 88.137528][ T6114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.137528][ T6114] [ 88.150186][ T6114] [ 88.150186][ T6114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.150186][ T6114] [ 88.161252][ T6114] [ 88.161252][ T6114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.161252][ T6114] [ 88.171925][ T6114] [ 88.171925][ T6114] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.171925][ T6114] [ 88.197674][ T112] [ 88.197674][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.197674][ T112] [ 88.235197][ T6092] [ 88.235197][ T6092] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.235197][ T6092] [ 88.251227][ T6092] [ 88.251227][ T6092] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.251227][ T6092] [ 88.270115][ T78] hsr_slave_0: left promiscuous mode [ 88.287110][ T6092] [ 88.287110][ T6092] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.287110][ T6092] [ 88.307780][ T78] hsr_slave_1: left promiscuous mode [ 88.313943][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.359363][ T6092] [ 88.359363][ T6092] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.359363][ T6092] [ 88.366646][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.385912][ T6092] [ 88.385912][ T6092] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.385912][ T6092] [ 88.408232][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.421674][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.481715][ T5828] [ 88.481715][ T5828] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.481715][ T5828] [ 88.497248][ T78] veth1_macvtap: left promiscuous mode [ 88.515848][ T5828] [ 88.515848][ T5828] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 88.515848][ T5828] [ 88.516957][ T78] veth0_macvtap: left promiscuous mode [ 88.537653][ T978] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 88.548360][ T78] veth1_vlan: left promiscuous mode [ 88.567902][ T78] veth0_vlan: left promiscuous mode [ 88.731786][ T978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.762920][ T978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.803618][ T978] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 88.834187][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.877724][ T978] usb 1-1: config 0 descriptor?? [ 89.239162][ T6136] Bluetooth: MGMT ver 1.23 [ 89.322154][ T978] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 89.348079][ T978] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 89.372901][ T6126] netlink: 104 bytes leftover after parsing attributes in process `syz.3.48'. [ 89.410374][ T978] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0001/input/input5 [ 89.464987][ T6140] Bluetooth: MGMT ver 1.23 [ 89.526494][ T978] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 89.631385][ T978] usb 1-1: USB disconnect, device number 2 [ 89.645153][ T5831] Bluetooth: hci2: command tx timeout [ 89.838256][ T6141] fido_id[6141]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 89.950968][ T6138] loop2: detected capacity change from 0 to 32768 [ 89.978554][ T6138] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 90.008365][ T78] team0 (unregistering): Port device team_slave_1 removed [ 90.020080][ T6138] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 90.058514][ T78] team0 (unregistering): Port device team_slave_0 removed [ 90.157182][ T6138] syz.2.52 (6138) used greatest stack depth: 18232 bytes left [ 90.275923][ T5828] ocfs2: Unmounting device (7,2) on (node local) [ 90.909430][ T6157] loop0: detected capacity change from 0 to 256 [ 90.973853][ T6157] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d) [ 91.250982][ T6064] chnl_net:caif_netlink_parms(): no params data found [ 91.390342][ T6164] loop1: detected capacity change from 0 to 1024 [ 91.471447][ T6164] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.505287][ T6164] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.599796][ T6164] EXT4-fs error (device loop1): ext4_map_blocks:816: inode #15: block 3: comm syz.1.60: lblock 3 mapped to illegal pblock 3 (length 13) [ 91.691713][ T6164] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 91.714679][ T6164] EXT4-fs (loop1): This should not happen!! Data will be lost [ 91.714679][ T6164] [ 91.734345][ T5831] Bluetooth: hci2: command tx timeout [ 91.740862][ T6175] EXT4-fs error (device loop1): ext4_free_blocks:6587: comm syz.1.60: Freeing blocks not in datazone - block = 3, count = 1 [ 91.840394][ T5839] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.082976][ T6064] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.109955][ T6064] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.131908][ T6064] bridge_slave_0: entered allmulticast mode [ 92.166321][ T6064] bridge_slave_0: entered promiscuous mode [ 92.197307][ T6189] loop0: detected capacity change from 0 to 128 [ 92.224442][ T6064] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.231626][ T6064] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.248954][ T6064] bridge_slave_1: entered allmulticast mode [ 92.258322][ T6064] bridge_slave_1: entered promiscuous mode [ 92.328989][ T6189] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.366554][ T6189] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 92.420040][ T6064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.462107][ T6064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.610426][ T6064] team0: Port device team_slave_0 added [ 92.634998][ T5832] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.654269][ T1075] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 92.663439][ T6064] team0: Port device team_slave_1 added [ 92.807421][ T6064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.824232][ T1075] usb 2-1: Using ep0 maxpacket: 32 [ 92.829575][ T6064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.872221][ T1075] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 92.895265][ T1075] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.935708][ T1075] usb 2-1: config 0 descriptor?? [ 92.941265][ T6064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.961297][ T1075] gspca_main: sunplus-2.14.0 probing 041e:400b [ 92.972137][ T6064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.986611][ T6064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.044332][ T6064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.281003][ T6191] loop2: detected capacity change from 0 to 131072 [ 93.299122][ T6191] F2FS-fs (loop2): Invalid log sectorsize (67108873) [ 93.306218][ T6191] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 93.334734][ T6191] F2FS-fs (loop2): invalid crc value [ 93.409494][ T6064] hsr_slave_0: entered promiscuous mode [ 93.442826][ T6191] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 93.449549][ T6064] hsr_slave_1: entered promiscuous mode [ 93.450319][ T6191] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 93.540135][ T6191] F2FS-fs (loop2): inconsistent node block, node_type:2, nid:8, node_footer[nid:8,ino:8,ofs:0,cpver:5013063228981249506,blkaddr:100678662] [ 93.803442][ T1075] gspca_sunplus: reg_w_riv err -71 [ 93.817246][ T5831] Bluetooth: hci2: command tx timeout [ 93.823210][ T1075] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 93.847797][ T1075] usb 2-1: USB disconnect, device number 2 [ 94.260157][ T6222] netlink: 16 bytes leftover after parsing attributes in process `syz.0.71'. [ 94.305938][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 94.498192][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 94.528680][ T10] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 94.558424][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.577928][ T6064] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 94.584522][ T10] usb 3-1: Product: syz [ 94.601431][ T10] usb 3-1: Manufacturer: syz [ 94.622528][ T10] usb 3-1: SerialNumber: syz [ 94.645698][ T6064] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 94.670915][ T10] usb 3-1: config 0 descriptor?? [ 94.698197][ T10] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 94.716966][ T6064] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 94.769310][ T6230] loop1: detected capacity change from 0 to 4096 [ 94.781091][ T6064] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 94.792925][ T6233] loop0: detected capacity change from 0 to 256 [ 94.811104][ T6230] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 94.936980][ T6216] loop3: detected capacity change from 0 to 32768 [ 94.996994][ T6233] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 95.091180][ T6216] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 95.202731][ T6064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.226216][ T6064] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.248497][ T203] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.255751][ T203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.307751][ T6254] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000007) [ 95.319959][ T6254] exFAT-fs (loop0): Filesystem has been set read-only [ 95.362025][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.369252][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.432654][ T6216] XFS (loop3): Ending clean mount [ 95.466930][ T6216] XFS (loop3): Quotacheck needed: Please wait. [ 95.574273][ T6216] XFS (loop3): Quotacheck: Done. [ 95.740011][ T10] gspca_stk1135: reg_w 0x7 err -71 [ 95.765311][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 95.818304][ T10] gspca_stk1135: Sensor write failed [ 95.823650][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 95.882526][ T10] gspca_stk1135: Sensor write failed [ 95.890208][ T6265] input: syz1 as /devices/virtual/input/input6 [ 95.905818][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 95.922408][ T10] gspca_stk1135: Sensor read failed [ 95.922433][ T5840] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 95.942690][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 95.996208][ T10] gspca_stk1135: Sensor read failed [ 96.034898][ T10] gspca_stk1135: Detected sensor type unknown (0x0) [ 96.050582][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 96.065138][ T10] gspca_stk1135: Sensor read failed [ 96.081380][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 96.114364][ T10] gspca_stk1135: Sensor read failed [ 96.119624][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 96.184677][ T10] gspca_stk1135: Sensor write failed [ 96.190029][ T10] gspca_stk1135: serial bus timeout: status=0x00 [ 96.230550][ T10] gspca_stk1135: Sensor write failed [ 96.306049][ T10] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 96.326299][ T10] usb 3-1: USB disconnect, device number 2 [ 96.538361][ T6064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.244479][ T5877] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 97.416841][ T5877] usb 2-1: Using ep0 maxpacket: 32 [ 97.433343][ T6064] veth0_vlan: entered promiscuous mode [ 97.444356][ T5877] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.469694][ T5877] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.482711][ T6064] veth1_vlan: entered promiscuous mode [ 97.491567][ T5877] usb 2-1: config 0 interface 0 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.559786][ T5877] usb 2-1: config 0 interface 0 has no altsetting 0 [ 97.580405][ T5877] usb 2-1: New USB device found, idVendor=5543, idProduct=0781, bcdDevice= 0.00 [ 97.601856][ T6064] veth0_macvtap: entered promiscuous mode [ 97.630344][ T5877] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.643442][ T6064] veth1_macvtap: entered promiscuous mode [ 97.665016][ T5877] usb 2-1: config 0 descriptor?? [ 97.743940][ T6064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.794059][ T6064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.851715][ T78] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.906662][ T78] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.949126][ T4472] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.997393][ T78] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.150014][ T5877] uclogic 0003:5543:0781.0002: ignoring exceeding usage max [ 98.170285][ T5877] uclogic 0003:5543:0781.0002: unbalanced collection at end of report description [ 98.210576][ T5877] uclogic 0003:5543:0781.0002: parse failed [ 98.227289][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.240441][ T5877] uclogic 0003:5543:0781.0002: probe with driver uclogic failed with error -22 [ 98.251188][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.328855][ T5877] usb 2-1: USB disconnect, device number 3 [ 98.343400][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.361184][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.884257][ T5944] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 99.012775][ T1075] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.056364][ T5944] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 99.084551][ T5944] usb 6-1: config 0 has no interface number 0 [ 99.107302][ T5944] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 99.129023][ T5944] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 99.184341][ T5944] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 99.222236][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.234468][ T1075] usb 1-1: Using ep0 maxpacket: 8 [ 99.257758][ T1075] usb 1-1: config index 0 descriptor too short (expected 30482, got 18) [ 99.267131][ T5944] usb 6-1: config 0 descriptor?? [ 99.275036][ T6317] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 99.283122][ T1075] usb 1-1: config 0 has too many interfaces: 101, using maximum allowed: 32 [ 99.307312][ T1075] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 101 [ 99.326523][ T5944] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 99.348412][ T1075] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00 [ 99.371292][ T1075] usb 1-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0 [ 99.418037][ T1075] usb 1-1: Product: syz [ 99.428806][ T1075] usb 1-1: Manufacturer: syz [ 99.435259][ T5884] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 99.444493][ T1075] usb 1-1: config 0 descriptor?? [ 99.477210][ T1075] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 99.511165][ T1075] usb 1-1: Detected FT2232C/D [ 99.527542][ T24] usb 6-1: USB disconnect, device number 2 [ 99.533459][ C1] iowarrior 6-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 99.629263][ T5884] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 99.645510][ T5884] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.671965][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 99.683718][ T5884] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 99.695384][ T5884] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 99.708773][ T5884] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 99.718395][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.731932][ T5884] usb 2-1: config 0 descriptor?? [ 99.759128][ T6331] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 99.901498][ T1075] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 99.922290][ T1075] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 100.005077][ T1075] usb 1-1: USB disconnect, device number 3 [ 100.032828][ T6324] loop2: detected capacity change from 0 to 32768 [ 100.068480][ T1075] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 100.116771][ T1075] ftdi_sio 1-1:0.0: device disconnected [ 100.148924][ T6324] gfs2: fsid=l_}:)*\: Trying to join cluster "lock_nolock", "l_}:)*\" [ 100.190751][ T6324] gfs2: fsid=l_}:)*\: Now mounting FS (format 1801)... [ 100.231205][ T5884] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 100.248782][ T6324] gfs2: fsid=l_}:)*\.0: journal 0 mapped with 16 extents in 0ms [ 100.318046][ T978] gfs2: fsid=l_}:)*\.0: jid=0, already locked for use [ 100.337067][ T978] gfs2: fsid=l_}:)*\.0: jid=0: Looking at journal... [ 100.347659][ T5884] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 100.598773][ T5884] usb 2-1: USB disconnect, device number 4 [ 100.720939][ T978] gfs2: fsid=l_}:)*\.0: jid=0: Journal head lookup took 383ms [ 100.745749][ T6357] fido_id[6357]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 100.787874][ T978] gfs2: fsid=l_}:)*\.0: jid=0: Done [ 100.806772][ T6324] gfs2: fsid=l_}:)*\.0: first mount done, others may mount [ 101.432008][ T6386] loop5: detected capacity change from 0 to 16 [ 101.493691][ T6386] erofs (device loop5): mounted with root inode @ nid 36. [ 101.550826][ T5831] erofs (device loop5): failed to decompress 6887 in[4096, 0] out[9000] [ 101.560860][ T6386] erofs (device loop5): failed to decompress 6887 in[4096, 0] out[8192] [ 101.601518][ T6386] erofs (device loop5): read error -117 @ 1 of nid 89 [ 101.612849][ T30] audit: type=1800 audit(1751276304.890:3): pid=6386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.108" name="file3" dev="loop5" ino=89 res=0 errno=0 [ 101.791626][ T6397] loop2: detected capacity change from 0 to 128 [ 101.858933][ T6397] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 101.925443][ T6397] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 102.071306][ T6397] EXT4-fs error (device loop2): htree_dirblock_to_tree:1080: inode #2: block 4: comm syz.2.109: bad entry in directory: rec_len is smaller than minimal - offset=1012, inode=128, rec_len=9, size=1024 fake=0 [ 102.155499][ T6397] EXT4-fs (loop2): Remounting filesystem read-only [ 102.378836][ T5828] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.962869][ T6386] syz.5.108 (6386): drop_caches: 2 [ 103.086507][ T6404] loop3: detected capacity change from 0 to 32768 [ 103.124953][ T6404] (syz.3.110,6404,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 103.224297][ T6404] (syz.3.110,6404,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 103.387354][ T6404] JBD2: Ignoring recovery information on journal [ 103.445867][ T6409] loop1: detected capacity change from 0 to 32768 [ 103.614213][ T5944] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 103.646089][ T6409] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 103.699563][ T6404] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 103.774297][ T5944] usb 6-1: Using ep0 maxpacket: 32 [ 103.790528][ T6424] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.116'. [ 103.841431][ T5944] usb 6-1: unable to get BOS descriptor or descriptor too short [ 103.853781][ T5944] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 103.891063][ T5944] usb 6-1: can't read configurations, error -71 [ 103.939994][ T6409] XFS (loop1): Ending clean mount [ 104.019114][ T6409] XFS (loop1): Quotacheck needed: Please wait. [ 104.075278][ T6409] XFS (loop1): Quotacheck: Done. [ 104.224723][ T5839] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 104.234352][ T5840] ocfs2: Unmounting device (7,3) on (node local) [ 104.545340][ T5877] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 104.734251][ T5877] usb 3-1: Using ep0 maxpacket: 8 [ 104.751137][ T5877] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.767393][ T5877] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 104.792866][ T5877] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 104.801160][ T6456] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 104.814099][ T5877] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.814467][ T5891] IPVS: starting estimator thread 0... [ 104.833483][ T5877] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 104.872254][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.936273][ T6462] IPVS: using max 28 ests per chain, 67200 per kthread [ 104.964909][ T5944] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 105.114588][ T5877] usb 3-1: GET_CAPABILITIES returned 0 [ 105.135455][ T5877] usbtmc 3-1:16.0: can't read capabilities [ 105.156752][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.173026][ T6472] loop1: detected capacity change from 0 to 16 [ 105.186927][ T5944] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.214235][ T5944] usb 6-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 105.242495][ T6472] erofs (device loop1): mounted with root inode @ nid 36. [ 105.272638][ T5944] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.317896][ T5944] usb 6-1: config 0 descriptor?? [ 105.333106][ T5831] erofs (device loop1): failed to decompress 6887 in[4096, 0] out[9000] [ 105.343351][ T6472] erofs (device loop1): failed to decompress 6887 in[4096, 0] out[8192] [ 105.348390][ T1075] usb 3-1: USB disconnect, device number 3 [ 105.356331][ T6472] erofs (device loop1): read error -117 @ 1 of nid 89 [ 105.377676][ T30] audit: type=1800 audit(1751276308.650:4): pid=6472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.129" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 105.660113][ T6483] loop3: detected capacity change from 0 to 1024 [ 105.757383][ T5944] hid-steam 0003:28DE:1142.0004: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 105.844644][ T5944] hid-steam 0003:28DE:1142.0004: Steam wireless receiver connected [ 105.862460][ T203] hfsplus: b-tree write err: -5, ino 4 [ 105.939324][ T5944] hid-steam 0003:28DE:1142.0005: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.5-1/input0 [ 106.027363][ T6472] syz.1.129 (6472): drop_caches: 2 [ 106.359016][ T6497] mkiss: ax0: crc mode is auto. [ 106.649546][ T6492] loop0: detected capacity change from 0 to 32768 [ 106.671466][ T6492] (syz.0.133,6492,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 106.695355][ T6492] (syz.0.133,6492,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 106.737457][ T6492] JBD2: Ignoring recovery information on journal [ 106.810323][ T6492] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 106.906371][ T6494] loop2: detected capacity change from 0 to 32768 [ 107.019657][ T6494] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 107.443752][ T5832] ocfs2: Unmounting device (7,0) on (node local) [ 107.613323][ T6494] XFS (loop2): Ending clean mount [ 107.651700][ T6494] XFS (loop2): Quotacheck needed: Please wait. [ 107.715412][ T1075] usb 6-1: USB disconnect, device number 4 [ 107.717859][ T6530] loop3: detected capacity change from 0 to 16 [ 107.779056][ T6494] XFS (loop2): Quotacheck: Done. [ 107.785333][ T6530] erofs (device loop3): mounted with root inode @ nid 36. [ 107.859147][ T1075] hid-steam 0003:28DE:1142.0004: Steam wireless receiver disconnected [ 107.871476][ T5831] erofs (device loop3): failed to decompress 6887 in[4096, 0] out[9000] [ 107.907801][ T6530] erofs (device loop3): failed to decompress 6887 in[4096, 0] out[8192] [ 107.927297][ T6530] erofs (device loop3): read error -117 @ 1 of nid 89 [ 107.976744][ T30] audit: type=1800 audit(1751276311.240:5): pid=6530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.146" name="file3" dev="loop3" ino=89 res=0 errno=0 [ 108.037172][ T5828] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 108.084008][ T6535] syz.3.146 (6535): drop_caches: 2 [ 108.319404][ T5877] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 108.505518][ T5877] usb 1-1: Using ep0 maxpacket: 8 [ 108.525270][ T5877] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 108.554229][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.695294][ T5877] pvrusb2: Hardware description: Terratec Grabster AV400 [ 108.702361][ T5877] pvrusb2: ********** [ 108.724965][ T5877] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 108.754794][ T5877] pvrusb2: Important functionality might not be entirely working. [ 108.774404][ T6561] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 108.781177][ T6561] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 108.796117][ T5877] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 108.817443][ T6561] vhci_hcd vhci_hcd.0: Device attached [ 108.825225][ T5877] pvrusb2: ********** [ 108.865300][ T6565] vhci_hcd: connection closed [ 108.877252][ T36] vhci_hcd: stop threads [ 108.908481][ T2342] pvrusb2: Invalid write control endpoint [ 108.915753][ T36] vhci_hcd: release socket [ 108.920211][ T36] vhci_hcd: disconnect device [ 109.009925][ T2342] pvrusb2: Invalid write control endpoint [ 109.032495][ T2342] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 109.057184][ T2342] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 109.067419][ T2342] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 109.082870][ T2342] pvrusb2: Device being rendered inoperable [ 109.121123][ T6541] pvrusb2: Attempted to execute control transfer when device not ok [ 109.144263][ T2342] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 109.144322][ T6574] program syz.2.162 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.169079][ T2342] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 109.201772][ T2342] pvrusb2: Attached sub-driver cx25840 [ 109.215702][ T2342] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 109.230853][ T2342] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 109.265814][ T6578] loop2: detected capacity change from 0 to 16 [ 109.318661][ T6578] erofs (device loop2): mounted with root inode @ nid 36. [ 109.353207][ T5831] erofs (device loop2): failed to decompress 6887 in[4096, 0] out[9000] [ 109.354054][ T6580] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.384493][ T6578] erofs (device loop2): failed to decompress 6887 in[4096, 0] out[8192] [ 109.435873][ T6578] erofs (device loop2): read error -117 @ 1 of nid 89 [ 109.438338][ T6584] loop3: detected capacity change from 0 to 2048 [ 109.473504][ T30] audit: type=1800 audit(1751276313.750:6): pid=6578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.163" name="file3" dev="loop2" ino=89 res=0 errno=0 [ 109.502334][ T6581] syz.2.163 (6581): drop_caches: 2 [ 109.533769][ T6584] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.559626][ T6566] loop5: detected capacity change from 0 to 32768 [ 109.757778][ T5884] usb 1-1: USB disconnect, device number 4 [ 109.763793][ T5831] Bluetooth: Wrong link type (-71) [ 109.988948][ T6592] nbd: device at index 3 is going down [ 110.108847][ T6599] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 110.976354][ T6590] loop1: detected capacity change from 0 to 32768 [ 111.098827][ T6595] loop0: detected capacity change from 0 to 32768 [ 111.405272][ T6590] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 111.405293][ T6590] allowing incompatible features above 0.0: (unknown version) [ 111.405304][ T6590] features: atomic_nlink [ 111.483747][ T6595] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow [ 111.483773][ T6595] allowing incompatible features above 0.0: (unknown version) [ 111.483783][ T6595] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 111.483809][ T6595] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 111.483842][ T6595] bcachefs (loop0): initializing new filesystem [ 111.528105][ T6646] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 111.538804][ C1] vkms_vblank_simulate: vblank timer overrun [ 111.541206][ T6595] bcachefs (loop0): going read-write [ 111.624212][ T6590] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 111.694509][ T6590] bcachefs (loop1): initializing new filesystem [ 111.732210][ T6590] bcachefs (loop1): going read-write [ 111.778107][ T6595] bcachefs (loop0): marking superblocks [ 111.818108][ T6590] bcachefs (loop1): marking superblocks [ 111.821501][ T6616] loop2: detected capacity change from 0 to 32768 [ 111.896908][ T6616] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 111.911016][ T6595] bcachefs (loop0): initializing freespace [ 111.936330][ T6595] bcachefs (loop0): done initializing freespace [ 111.957152][ T6595] bcachefs (loop0): reading snapshots table [ 111.963010][ T6590] bcachefs (loop1): initializing freespace [ 111.970854][ T6595] bcachefs (loop0): reading snapshots done [ 112.005935][ T6590] bcachefs (loop1): done initializing freespace [ 112.010941][ T6595] bcachefs (loop0): done starting filesystem [ 112.015658][ T6590] bcachefs (loop1): reading snapshots table [ 112.024525][ T6590] bcachefs (loop1): reading snapshots done [ 112.062588][ T6616] XFS (loop2): Ending clean mount [ 112.093012][ T6590] bcachefs (loop1): done starting filesystem [ 112.273306][ T5828] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 112.338913][ T6595] syz.0.170 (6595) used greatest stack depth: 17800 bytes left [ 112.348855][ T6590] syz.1.169 (6590) used greatest stack depth: 17656 bytes left [ 112.566429][ T5839] bcachefs (loop1): shutting down [ 112.579687][ T5832] bcachefs (loop0): shutting down [ 112.594174][ T5839] bcachefs (loop1): going read-only [ 112.599603][ T5832] bcachefs (loop0): going read-only [ 112.614245][ T5832] bcachefs (loop0): finished waiting for writes to stop [ 112.630474][ T5839] bcachefs (loop1): finished waiting for writes to stop [ 112.646914][ T6669] loop5: detected capacity change from 0 to 32768 [ 112.653677][ T5832] bcachefs (loop0): flushing journal and stopping allocators, journal seq 14 [ 112.663457][ T5839] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3 [ 112.742975][ T6669] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 112.827588][ T6677] loop3: detected capacity change from 0 to 32768 [ 112.839468][ T5832] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 18 [ 112.851911][ T5839] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3 [ 112.884531][ T5839] bcachefs (loop1): clean shutdown complete, journal seq 4 [ 112.901360][ T5839] bcachefs (loop1): marking filesystem clean [ 112.905393][ T5832] bcachefs (loop0): clean shutdown complete, journal seq 19 [ 112.931833][ T6677] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 112.974999][ T5832] bcachefs (loop0): marking filesystem clean [ 113.119873][ T5839] bcachefs (loop1): shutdown complete [ 113.150616][ T6064] ocfs2: Unmounting device (7,5) on (node local) [ 113.181042][ T6677] XFS (loop3): Ending clean mount [ 113.196810][ T5832] bcachefs (loop0): shutdown complete [ 113.456900][ T5840] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 113.484603][ T5835] Bluetooth: hci0: command 0x0401 tx timeout [ 113.492048][ T5831] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 113.537106][ T6693] loop2: detected capacity change from 0 to 32768 [ 114.388449][ T6699] loop5: detected capacity change from 0 to 32768 [ 114.419246][ T6699] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 114.542771][ T6719] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.604197][ T6699] XFS (loop5): Ending clean mount [ 114.741870][ T6064] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 114.757876][ T6726] loop2: detected capacity change from 0 to 64 [ 114.811795][ T6729] netlink: 8 bytes leftover after parsing attributes in process `syz.3.200'. [ 115.227581][ T6736] loop3: detected capacity change from 0 to 2048 [ 115.284207][ T5944] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 115.297595][ T6736] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 115.306887][ T6736] UDF-fs: Scanning with blocksize 512 failed [ 115.341721][ T6736] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.353917][ T5201] udevd[5201]: worker [6214] terminated by signal 33 (Unknown signal 33) [ 115.492764][ T5944] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 115.535652][ T5944] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 115.564199][ T5835] Bluetooth: hci0: command 0x0401 tx timeout [ 115.629618][ T5944] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 115.664516][ T5944] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.874381][ T1075] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 115.919100][ T5944] usb 2-1: usb_control_msg returned -32 [ 115.933597][ T5944] usbtmc 2-1:16.0: can't read capabilities [ 115.993069][ T6750] program syz.3.207 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.055712][ T1075] usb 3-1: Using ep0 maxpacket: 16 [ 116.089934][ T1075] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.130255][ T1075] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.170989][ T1075] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 116.180086][ T6756] loop3: detected capacity change from 0 to 2048 [ 116.212180][ T1075] usb 3-1: config 0 interface 0 has no altsetting 0 [ 116.235293][ T6756] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.238434][ T1075] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 116.306621][ T1075] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.340188][ T1075] usb 3-1: config 0 descriptor?? [ 116.495803][ T6741] loop5: detected capacity change from 0 to 32768 [ 116.540640][ T6741] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 116.584071][ T6741] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 116.721122][ T6064] ocfs2: Unmounting device (7,5) on (node local) [ 117.058297][ T6773] loop3: detected capacity change from 0 to 40427 [ 117.066457][ T6773] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 117.075364][ T6773] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 117.096251][ T6773] F2FS-fs (loop3): invalid crc value [ 117.112438][ T1075] hid (null): report_id 0 is invalid [ 117.180242][ T5944] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 117.202372][ T1075] usb 3-1: USB disconnect, device number 4 [ 117.210553][ T6773] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 117.217729][ T6773] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 117.387461][ T6788] process 'syz.5.214' launched './file0' with NULL argv: empty string added [ 117.659481][ T6773] F2FS-fs (loop3): LFS is not compatible with ATGC [ 117.738551][ T5944] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 117.762661][ T5944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 117.781978][ T5944] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 117.810983][ T5944] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.854379][ T5944] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.876047][ T6799] loop5: detected capacity change from 0 to 1024 [ 117.892561][ T5944] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.916735][ T6799] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 117.931743][ T6797] loop2: detected capacity change from 0 to 8192 [ 117.936643][ T5944] usb 1-1: config 0 descriptor?? [ 117.976915][ T6799] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #11: comm syz.5.218: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 118.010954][ T6799] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.218: couldn't read orphan inode 11 (err -117) [ 118.029979][ T30] audit: type=1800 audit(1751276322.310:7): pid=6797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.216" name="file1" dev="loop2" ino=1048612 res=0 errno=0 [ 118.064029][ T6799] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.148417][ T5891] usb 2-1: USB disconnect, device number 5 [ 118.232393][ T6064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.362502][ T5944] plantronics 0003:047F:FFFF.0007: ignoring exceeding usage max [ 118.437145][ T5944] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 118.886905][ T6816] loop3: detected capacity change from 0 to 32768 [ 118.919526][ T6816] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 118.983105][ T6816] XFS (loop3): Ending clean mount [ 119.004820][ T6816] XFS (loop3): syz.3.217 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 119.095623][ T5840] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 119.251196][ T6808] loop1: detected capacity change from 0 to 32768 [ 119.270110][ T6811] loop5: detected capacity change from 0 to 32768 [ 119.312439][ T6811] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.220 (6811) [ 119.352682][ T6808] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 119.375088][ T6808] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 119.439227][ T6811] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 119.501051][ T6811] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm [ 119.558919][ T6811] BTRFS info (device loop5): using free-space-tree [ 119.592525][ T5839] ocfs2: Unmounting device (7,1) on (node local) [ 119.802630][ T6813] loop2: detected capacity change from 0 to 32768 [ 119.899461][ T6813] XFS (loop2): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 120.091458][ T6813] XFS (loop2): Ending clean mount [ 120.116574][ T6064] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 120.177306][ T6813] XFS (loop2): User initiated shutdown received. [ 120.184036][ T6813] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476). Shutting down filesystem. [ 120.229337][ T6813] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 120.380727][ T6842] loop3: detected capacity change from 0 to 32768 [ 120.391657][ T5828] XFS (loop2): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 120.478158][ T1075] usb 1-1: USB disconnect, device number 5 [ 120.917272][ T6842] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 120.917293][ T6842] allowing incompatible features above 0.0: (unknown version) [ 120.917304][ T6842] features: atomic_nlink [ 121.031729][ T6858] loop0: detected capacity change from 0 to 40427 [ 121.695148][ T6858] F2FS-fs (loop0): build fault injection rate: 19 [ 121.695333][ T6858] F2FS-fs (loop0): build fault injection type: 0x3bfe8c [ 122.064563][ T6842] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 122.072788][ T6842] bcachefs (loop3): initializing new filesystem [ 122.133485][ T6894] loop5: detected capacity change from 0 to 131072 [ 122.160427][ T6894] F2FS-fs (loop5): Invalid segment/section count (31, 24 x 150994945) [ 122.168734][ T6894] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 122.181411][ T6894] F2FS-fs (loop5): invalid crc value [ 122.187058][ T6858] F2FS-fs (loop0): invalid crc value [ 122.302303][ T6894] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 122.309477][ T6894] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 122.352330][ T6894] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 122.382129][ T6858] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970 [ 122.400398][ T6842] bcachefs (loop3): going read-write [ 122.416960][ T6894] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=8000000, run fsck to fix. [ 122.543487][ T6842] bcachefs (loop3): marking superblocks [ 122.672422][ T6842] bcachefs (loop3): initializing freespace [ 122.679453][ T6889] loop2: detected capacity change from 0 to 262144 [ 122.716093][ T6842] bcachefs (loop3): done initializing freespace [ 122.726024][ T6842] bcachefs (loop3): reading snapshots table [ 122.732009][ T6842] bcachefs (loop3): reading snapshots done [ 122.774567][ T6889] F2FS-fs (loop2): invalid crc value [ 122.868078][ T6842] bcachefs (loop3): done starting filesystem [ 122.877414][ T6858] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0 [ 122.892900][ T6889] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 122.973572][ T6842] syz.3.222 (6842) used greatest stack depth: 17016 bytes left [ 123.002872][ T6873] loop1: detected capacity change from 0 to 40427 [ 123.047088][ T5840] bcachefs (loop3): shutting down [ 123.058840][ T6873] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 123.066197][ T5840] bcachefs (loop3): going read-only [ 123.068953][ T6873] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 123.071962][ T5840] bcachefs (loop3): finished waiting for writes to stop [ 123.107889][ T5840] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3 [ 123.160427][ T6873] F2FS-fs (loop1): invalid crc value [ 123.193454][ T6873] F2FS-fs (loop1): Failed to start F2FS issue_checkpoint_thread (-4) [ 123.241968][ T5840] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3 [ 123.288551][ T5840] bcachefs (loop3): clean shutdown complete, journal seq 4 [ 123.346863][ T5840] bcachefs (loop3): marking filesystem clean [ 123.440929][ T5840] bcachefs (loop3): shutdown complete [ 125.525523][ T978] psmouse serio2: Failed to reset mouse on : -5 [ 126.314732][ T6941] loop5: detected capacity change from 0 to 262144 [ 126.326187][ T6941] F2FS-fs (loop5): invalid crc value [ 126.426804][ T6941] F2FS-fs (loop5): Start checkpoint disabled! [ 126.440653][ T6941] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 126.714409][ T5891] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 126.916605][ T5891] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 126.944360][ T5891] usb 2-1: config 0 has no interface number 0 [ 126.950531][ T5891] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 126.990240][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.017165][ T5891] usb 2-1: config 0 descriptor?? [ 127.064735][ T5891] cp210x 2-1:0.1: cp210x converter detected [ 127.467394][ T5891] cp210x 2-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 127.494260][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 127.657284][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.683399][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.695785][ T7013] netlink: 'syz.2.251': attribute type 10 has an invalid length. [ 127.703899][ T5891] usb 2-1: cp210x converter now attached to ttyUSB0 [ 127.708672][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 127.726017][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 127.735391][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.747666][ T24] usb 4-1: config 0 descriptor?? [ 127.773749][ T7013] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 127.792562][ T7012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.885663][ T5891] usb 2-1: USB disconnect, device number 6 [ 127.905153][ T5891] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 127.936169][ T5891] cp210x 2-1:0.1: device disconnected [ 128.171897][ T24] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 128.387720][ T7025] netlink: 4 bytes leftover after parsing attributes in process `syz.5.254'. [ 128.728200][ T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 128.763205][ T7027] loop2: detected capacity change from 0 to 32768 [ 128.894221][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 128.901226][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.913828][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.924214][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 128.939183][ T24] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 128.949130][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.951167][ T7027] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow [ 128.959781][ T24] usb 6-1: config 0 descriptor?? [ 128.980312][ T7027] allowing incompatible features above 0.0: (unknown version) [ 128.988969][ T7027] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 129.005791][ T5944] usb 4-1: USB disconnect, device number 2 [ 129.012224][ T7027] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0 [ 129.020689][ T7027] bcachefs (loop2): initializing new filesystem [ 129.039548][ T7027] bcachefs (loop2): going read-write [ 129.055183][ T7027] bcachefs (loop2): marking superblocks [ 129.073071][ T7027] bcachefs (loop2): initializing freespace [ 129.081461][ T7027] bcachefs (loop2): done initializing freespace [ 129.090080][ T7027] bcachefs (loop2): reading snapshots table [ 129.098466][ T7027] bcachefs (loop2): reading snapshots done [ 129.123049][ T7027] bcachefs (loop2): done starting filesystem [ 129.134399][ T5891] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 129.174280][ T978] misc userio: Buffer overflowed, userio client isn't keeping up [ 129.297761][ T5828] bcachefs (loop2): shutting down [ 129.302946][ T5891] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 129.311734][ T5828] bcachefs (loop2): going read-only [ 129.317197][ T5828] bcachefs (loop2): finished waiting for writes to stop [ 129.325765][ T5891] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 129.338646][ T5891] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 129.340051][ T5828] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3 [ 129.349072][ T5891] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 129.349101][ T5891] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 129.357851][ T5891] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 129.391117][ T5891] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 129.399282][ T5891] usb 2-1: Product: syz [ 129.403457][ T5891] usb 2-1: Manufacturer: syz [ 129.411241][ T24] HID 045e:07da: Invalid code 65791 type 1 [ 129.413425][ T5891] cdc_wdm 2-1:1.0: skipping garbage [ 129.423677][ T5891] cdc_wdm 2-1:1.0: skipping garbage [ 129.430260][ T5828] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 4 [ 129.441893][ T24] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0009/input/input9 [ 129.446899][ T5828] bcachefs (loop2): clean shutdown complete, journal seq 5 [ 129.459147][ T24] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 129.472671][ T5891] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 129.477247][ T5828] bcachefs (loop2): marking filesystem clean [ 129.485654][ T5891] cdc_wdm 2-1:1.0: Unknown control protocol [ 129.504190][ T5828] bcachefs (loop2): shutdown complete [ 129.622757][ T5891] usb 6-1: USB disconnect, device number 5 [ 129.625227][ T24] usb 2-1: USB disconnect, device number 7 [ 129.954577][ T7054] loop3: detected capacity change from 0 to 512 [ 129.961430][ T7054] EXT4-fs: Ignoring removed nomblk_io_submit option [ 129.980184][ T7054] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 129.992589][ T7054] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 130.006576][ T7054] EXT4-fs (loop3): 1 truncate cleaned up [ 130.013140][ T7054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.031925][ T7054] EXT4-fs (loop3): shut down requested (2) [ 130.059518][ T5840] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.227971][ T7062] netlink: 8 bytes leftover after parsing attributes in process `syz.5.267'. [ 130.244787][ T7064] loop1: detected capacity change from 0 to 2048 [ 130.258645][ T7064] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.393589][ T7070] input: syz0 as /devices/virtual/input/input10 [ 130.466333][ T978] input: PS/2 Generic Mouse as /devices/serio2/input/input8 [ 130.709838][ T978] psmouse serio2: Failed to enable mouse on [ 130.750588][ T7086] netlink: 16 bytes leftover after parsing attributes in process `syz.3.275'. [ 130.772087][ T7084] loop1: detected capacity change from 0 to 512 [ 130.786619][ T7084] EXT4-fs: Ignoring removed i_version option [ 130.850555][ T7084] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=e000c018, mo2=0002] [ 130.875524][ T7084] System zones: 0-2, 18-18, 34-35 [ 130.908099][ T7084] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.950852][ T7092] binder: 7091:7092 ioctl c0306201 200000000080 returned -14 [ 130.973326][ T7078] loop5: detected capacity change from 0 to 32768 [ 130.976871][ T7084] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.004513][ T7078] ocfs2: Slot 0 on device (7,5) was already allocated to this node! [ 131.024025][ T5839] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.066638][ T7078] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 131.248351][ T6064] ocfs2: Unmounting device (7,5) on (node local) [ 131.393015][ T7106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 131.431306][ T7106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 131.453965][ T7106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 131.459646][ T7104] loop1: detected capacity change from 0 to 4096 [ 131.477337][ T7106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 131.500716][ T7104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.556894][ T30] audit: type=1800 audit(1751276335.840:8): pid=7104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.282" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 131.689072][ T7115] EXT4-fs (loop1): shut down requested (2) [ 131.702195][ T30] audit: type=1800 audit(1751276335.980:9): pid=7114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.282" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 131.798494][ T5839] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.871979][ T7098] loop3: detected capacity change from 0 to 32768 [ 131.878247][ T7121] block nbd5: NBD_DISCONNECT [ 131.893534][ T7121] block nbd5: Send disconnect failed -22 [ 131.913721][ T7098] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 131.914548][ T7121] block nbd5: Send disconnect failed -22 [ 131.953173][ T7116] block nbd5: Disconnected due to user request. [ 131.976086][ T7116] block nbd5: shutting down sockets [ 131.990449][ T7129] Illegal XDP return value 4294967262 on prog (id 34) dev N/A, expect packet loss! [ 132.091599][ T7098] XFS (loop3): Ending clean mount [ 132.133748][ T7098] XFS (loop3): Quotacheck needed: Please wait. [ 132.240781][ T7098] XFS (loop3): Quotacheck: Done. [ 132.293625][ T7148] loop1: detected capacity change from 0 to 1024 [ 132.338864][ T5840] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 132.405675][ T30] audit: type=1800 audit(1751276336.680:10): pid=7148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.295" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 132.464062][ T7148] syz.1.295: attempt to access beyond end of device [ 132.464062][ T7148] loop1: rw=34817, sector=5778, nr_sectors = 2 limit=1024 [ 132.491944][ T7155] PKCS7: Unknown OID: [5] 0.0 [ 132.540835][ T7155] PKCS7: Only support pkcs7_signedData type [ 132.768993][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.775467][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.840153][ T7159] kvm: MWAIT instruction emulated as NOP! [ 132.871968][ T7163] loop3: detected capacity change from 0 to 256 [ 132.911391][ T7163] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 132.948494][ T7163] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 132.980810][ T7163] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 133.032749][ T7163] exFAT-fs (loop3): abnormal access to deleted dentry [ 133.456055][ T5945] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 133.574419][ T5831] Bluetooth: hci2: command tx timeout [ 133.694388][ T978] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 133.864426][ T978] usb 2-1: Using ep0 maxpacket: 32 [ 133.892089][ T978] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 133.909768][ T978] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 133.944241][ T978] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 133.980525][ T978] usb 2-1: config 1 has no interface number 0 [ 134.004169][ T978] usb 2-1: config 1 interface 1 altsetting 0 has an endpoint descriptor with address 0x48, changing to 0x8 [ 134.027939][ T978] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 134.042052][ T5945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.047556][ T978] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x8 has invalid maxpacket 33216, setting to 1024 [ 134.064152][ T5945] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.064177][ T5945] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 134.064219][ T5945] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 134.064239][ T5945] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.118868][ T978] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 134.120064][ T5945] usb 4-1: config 0 descriptor?? [ 134.132232][ T978] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 134.146229][ T978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.162255][ T978] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 134.365358][ T978] snd_usb_pod 2-1:1.1: endpoint not available, using fallback values [ 134.379088][ T978] snd_usb_pod 2-1:1.1: invalid control EP [ 134.389399][ T978] snd_usb_pod 2-1:1.1: cannot start listening: -22 [ 134.411338][ T978] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 134.445834][ T978] snd_usb_pod 2-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 134.571808][ T978] usb 2-1: USB disconnect, device number 8 [ 134.614070][ T5945] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 134.777869][ T7218] loop0: detected capacity change from 0 to 512 [ 134.808154][ T7218] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 134.834199][ T7218] UDF-fs: Scanning with blocksize 512 failed [ 134.841944][ T7218] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 134.870676][ T7218] UDF-fs: Scanning with blocksize 1024 failed [ 134.877593][ T7218] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found [ 134.904321][ T7218] UDF-fs: Scanning with blocksize 2048 failed [ 134.917723][ T7218] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 134.956836][ T7218] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 135.029633][ T7218] overlayfs: upper fs needs to support d_type. [ 135.044636][ T7218] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 135.057556][ T7218] overlayfs: failed to set xattr on upper [ 135.067610][ T7218] overlayfs: ...falling back to redirect_dir=nofollow. [ 135.090762][ T7218] overlayfs: ...falling back to index=off. [ 135.112273][ T7218] overlayfs: ...falling back to uuid=null. [ 135.760390][ T7233] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 135.804906][ C0] plantronics 0003:047F:FFFF.000A: usb_submit_urb(ctrl) failed: -1 [ 135.817438][ T5945] usb 4-1: USB disconnect, device number 3 [ 136.045834][ T7220] loop2: detected capacity change from 0 to 40427 [ 136.086581][ T7220] F2FS-fs (loop2): invalid crc value [ 136.305154][ T7220] F2FS-fs (loop2): Start checkpoint disabled! [ 136.348325][ T7220] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 136.488081][ T13] kworker/u8:1: attempt to access beyond end of device [ 136.488081][ T13] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 136.521867][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 136.521893][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 136.521904][ T13] Workqueue: writeback wb_workfn (flush-7:2) [ 136.521942][ T13] Call Trace: [ 136.521950][ T13] [ 136.521958][ T13] dump_stack_lvl+0x189/0x250 [ 136.521988][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.522009][ T13] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 136.522038][ T13] ? __pfx_queue_work_on+0x10/0x10 [ 136.522063][ T13] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 136.522085][ T13] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 136.522109][ T13] ? f2fs_hw_is_readonly+0x39b/0x470 [ 136.522136][ T13] f2fs_handle_critical_error+0x37c/0x540 [ 136.522164][ T13] f2fs_write_end_io+0x495/0x810 [ 136.522186][ T13] ? blkg_put+0x22/0x240 [ 136.522222][ T13] __submit_merged_bio+0x27a/0x6a0 [ 136.522249][ T13] __submit_merged_write_cond+0x255/0x530 [ 136.522278][ T13] f2fs_write_data_pages+0x261d/0x3000 [ 136.522334][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 136.522371][ T13] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 136.522431][ T13] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 136.522465][ T13] ? trace_f2fs_writepages+0x7f/0x200 [ 136.522487][ T13] ? f2fs_write_node_pages+0x478/0x6e0 [ 136.522513][ T13] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 136.522549][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 136.522572][ T13] do_writepages+0x32e/0x550 [ 136.522601][ T13] ? reacquire_held_locks+0x127/0x1d0 [ 136.522622][ T13] ? writeback_sb_inodes+0x384/0x1010 [ 136.522654][ T13] __writeback_single_inode+0x145/0xff0 [ 136.522676][ T13] ? do_raw_spin_unlock+0x122/0x240 [ 136.522698][ T13] writeback_sb_inodes+0x6c7/0x1010 [ 136.522728][ T13] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 136.522769][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 136.522834][ T13] ? rcu_is_watching+0x15/0xb0 [ 136.522867][ T13] wb_writeback+0x43b/0xaf0 [ 136.522902][ T13] ? queue_io+0x3d1/0x590 [ 136.522928][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 136.522960][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 136.522987][ T13] wb_workfn+0x409/0xef0 [ 136.523027][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 136.523052][ T13] ? __lock_acquire+0xab9/0xd20 [ 136.523083][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 136.523112][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 136.523132][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 136.523152][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 136.523175][ T13] process_scheduled_works+0xae1/0x17b0 [ 136.523224][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 136.523264][ T13] worker_thread+0x8a0/0xda0 [ 136.523310][ T13] kthread+0x70e/0x8a0 [ 136.523331][ T13] ? __pfx_worker_thread+0x10/0x10 [ 136.523350][ T13] ? __pfx_kthread+0x10/0x10 [ 136.523369][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 136.523390][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 136.523410][ T13] ? __pfx_kthread+0x10/0x10 [ 136.523428][ T13] ret_from_fork+0x3fc/0x770 [ 136.523453][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 136.523480][ T13] ? __switch_to_asm+0x39/0x70 [ 136.523496][ T13] ? __switch_to_asm+0x33/0x70 [ 136.523511][ T13] ? __pfx_kthread+0x10/0x10 [ 136.523528][ T13] ret_from_fork_asm+0x1a/0x30 [ 136.523562][ T13] [ 136.876328][ T13] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 136.883319][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 136.883342][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 136.883353][ T13] Workqueue: writeback wb_workfn (flush-7:2) [ 136.883380][ T13] Call Trace: [ 136.883388][ T13] [ 136.883396][ T13] dump_stack_lvl+0x189/0x250 [ 136.883426][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.883447][ T13] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 136.883470][ T13] ? __pfx_queue_work_on+0x10/0x10 [ 136.883495][ T13] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 136.883517][ T13] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 136.883542][ T13] ? f2fs_hw_is_readonly+0x39b/0x470 [ 136.883571][ T13] f2fs_handle_critical_error+0x37c/0x540 [ 136.883601][ T13] f2fs_write_end_io+0x495/0x810 [ 136.883622][ T13] ? blkg_put+0x22/0x240 [ 136.883662][ T13] __submit_merged_bio+0x27a/0x6a0 [ 136.883692][ T13] __submit_merged_write_cond+0x255/0x530 [ 136.883723][ T13] f2fs_write_data_pages+0x261d/0x3000 [ 136.883820][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 136.883860][ T13] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 136.883928][ T13] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 136.883966][ T13] ? trace_f2fs_writepages+0x7f/0x200 [ 136.883988][ T13] ? f2fs_write_node_pages+0x478/0x6e0 [ 136.884016][ T13] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 136.884055][ T13] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 136.884079][ T13] do_writepages+0x32e/0x550 [ 136.884111][ T13] ? reacquire_held_locks+0x127/0x1d0 [ 136.884131][ T13] ? writeback_sb_inodes+0x384/0x1010 [ 136.884163][ T13] __writeback_single_inode+0x145/0xff0 [ 136.884187][ T13] ? do_raw_spin_unlock+0x122/0x240 [ 136.884210][ T13] writeback_sb_inodes+0x6c7/0x1010 [ 136.884242][ T13] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 136.884286][ T13] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 136.884362][ T13] ? rcu_is_watching+0x15/0xb0 [ 136.884397][ T13] wb_writeback+0x43b/0xaf0 [ 136.884431][ T13] ? queue_io+0x3d1/0x590 [ 136.884458][ T13] ? __pfx_wb_writeback+0x10/0x10 [ 136.884492][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 136.884522][ T13] wb_workfn+0x409/0xef0 [ 136.884561][ T13] ? __pfx_wb_workfn+0x10/0x10 [ 136.884588][ T13] ? __lock_acquire+0xab9/0xd20 [ 136.884622][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 136.884652][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 136.884673][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 136.884693][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 136.884717][ T13] process_scheduled_works+0xae1/0x17b0 [ 136.884782][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 136.884826][ T13] worker_thread+0x8a0/0xda0 [ 136.884882][ T13] kthread+0x70e/0x8a0 [ 136.884904][ T13] ? __pfx_worker_thread+0x10/0x10 [ 136.884925][ T13] ? __pfx_kthread+0x10/0x10 [ 136.884945][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 136.884966][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 136.884987][ T13] ? __pfx_kthread+0x10/0x10 [ 136.885005][ T13] ret_from_fork+0x3fc/0x770 [ 136.885032][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 136.885061][ T13] ? __switch_to_asm+0x39/0x70 [ 136.885077][ T13] ? __switch_to_asm+0x33/0x70 [ 136.885092][ T13] ? __pfx_kthread+0x10/0x10 [ 136.885111][ T13] ret_from_fork_asm+0x1a/0x30 [ 136.885149][ T13] [ 137.257703][ T13] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 137.304181][ T5945] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 137.393615][ T7255] loop1: detected capacity change from 0 to 1024 [ 137.462985][ T7255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.465842][ T5945] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 137.483592][ T5945] usb 4-1: config 0 has no interface number 0 [ 137.489775][ T5945] usb 4-1: config 0 interface 230 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 137.494398][ T978] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 137.500668][ T5945] usb 4-1: config 0 interface 230 altsetting 2 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 137.519087][ T5945] usb 4-1: config 0 interface 230 has no altsetting 0 [ 137.526252][ T7255] ext4 filesystem being mounted at /70/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.545119][ T5945] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 137.554942][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.562951][ T5945] usb 4-1: Product: syz [ 137.574746][ T5945] usb 4-1: Manufacturer: syz [ 137.597927][ T5945] usb 4-1: SerialNumber: syz [ 137.615393][ T5945] usb 4-1: config 0 descriptor?? [ 137.648530][ T7251] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 137.657739][ T7251] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 137.672997][ T203] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 137.685874][ T5945] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 137.699223][ T203] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 137.711889][ T203] EXT4-fs (loop1): This should not happen!! Data will be lost [ 137.711889][ T203] [ 137.724956][ T203] EXT4-fs (loop1): Total free blocks count 0 [ 137.726518][ T5945] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 137.732114][ T203] EXT4-fs (loop1): Free/Dirty block details [ 137.749329][ T978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 137.762475][ T978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.786714][ T203] EXT4-fs (loop1): free_blocks=4293918720 [ 137.792556][ T978] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 137.811066][ T203] EXT4-fs (loop1): dirty_blocks=16 [ 137.827154][ T203] EXT4-fs (loop1): Block reservation details [ 137.833218][ T978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.848304][ T203] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 137.871753][ T978] usb 1-1: config 0 descriptor?? [ 137.879749][ T5839] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.182068][ T7268] loop5: detected capacity change from 0 to 512 [ 138.237172][ T7268] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.249993][ T7268] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.308313][ T978] isku 0003:1E7D:319C.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 138.345545][ T7277] loop2: detected capacity change from 0 to 4096 [ 138.362399][ T6064] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.429276][ T7279] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 138.460563][ T30] audit: type=1800 audit(1751276342.740:11): pid=7277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.343" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 138.503116][ T978] isku 0003:1E7D:319C.000B: couldn't init struct isku_device [ 138.511024][ T978] isku 0003:1E7D:319C.000B: couldn't install keyboard [ 138.520359][ T978] isku 0003:1E7D:319C.000B: probe with driver isku failed with error -71 [ 138.537056][ T978] usb 1-1: USB disconnect, device number 6 [ 138.844665][ T7288] loop2: detected capacity change from 0 to 32768 [ 138.861040][ T7288] JBD2: Ignoring recovery information on journal [ 138.890583][ T7288] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 138.946394][ T5828] ocfs2: Unmounting device (7,2) on (node local) [ 139.217048][ T7301] loop2: detected capacity change from 0 to 1024 [ 139.761581][ T7309] loop1: detected capacity change from 0 to 32768 [ 139.775132][ T7309] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.355 (7309) [ 139.795970][ T7309] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 139.812859][ T7309] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm [ 139.822080][ T7309] BTRFS info (device loop1): using free-space-tree [ 139.898905][ T7311] loop2: detected capacity change from 0 to 32768 [ 139.910796][ T7311] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.356 (7311) [ 139.932381][ T7311] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 139.942666][ T7311] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm [ 139.967756][ T7311] BTRFS info (device loop2): using free-space-tree [ 140.009899][ T7328] loop0: detected capacity change from 0 to 1024 [ 140.042273][ T5945] ums-usbat 4-1:0.230: probe with driver ums-usbat failed with error -5 [ 140.079670][ T7328] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.083334][ T5839] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 140.102506][ T7328] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.123066][ T30] audit: type=1800 audit(1751276344.400:12): pid=7311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.356" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 140.144673][ T7328] EXT4-fs error (device loop0): ext4_map_blocks:816: inode #15: block 3: comm syz.0.357: lblock 3 mapped to illegal pblock 3 (length 13) [ 140.179269][ T7328] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117 [ 140.218834][ T5945] usb 4-1: USB disconnect, device number 4 [ 140.225879][ T7328] EXT4-fs (loop0): This should not happen!! Data will be lost [ 140.225879][ T7328] [ 140.283877][ T7349] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #15: block 3: comm syz.0.357: lblock 3 mapped to illegal pblock 3 (length 1) [ 140.321711][ T7349] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #15: block 4: comm syz.0.357: lblock 4 mapped to illegal pblock 4 (length 1) [ 140.351851][ T5828] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 140.374547][ T7349] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #15: block 5: comm syz.0.357: lblock 5 mapped to illegal pblock 5 (length 1) [ 140.402400][ T7349] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #15: block 6: comm syz.0.357: lblock 6 mapped to illegal pblock 6 (length 1) [ 140.418505][ T7349] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #15: block 7: comm syz.0.357: lblock 7 mapped to illegal pblock 7 (length 1) [ 140.440183][ T7349] EXT4-fs error (device loop0): ext4_map_blocks:780: inode #15: block 8: comm syz.0.357: lblock 8 mapped to illegal pblock 8 (length 1) [ 140.487755][ T30] audit: type=1800 audit(1751276344.770:13): pid=7349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.357" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 140.596246][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.684240][ T5831] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 140.884029][ T7360] loop5: detected capacity change from 0 to 4096 [ 140.930673][ T7360] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 140.944200][ T5891] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 140.960854][ T7360] ntfs3(loop5): Failed to load $Extend (-22). [ 140.968341][ T7360] ntfs3(loop5): Failed to initialize $Extend. [ 141.017991][ T7370] loop1: detected capacity change from 0 to 128 [ 141.056356][ T7370] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 141.137135][ T5891] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 141.182380][ T7375] loop2: detected capacity change from 0 to 1024 [ 141.183735][ T7370] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.216207][ T5891] usb 1-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 141.232681][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.240027][ T7375] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.244452][ T7380] capability: warning: `syz.3.370' uses deprecated v2 capabilities in a way that may be insecure [ 141.267541][ T5891] usb 1-1: config 0 descriptor?? [ 141.277289][ T5891] smsusb:smsusb_probe: board id=8, interface number 0 [ 141.284954][ T7375] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.288248][ T5891] smsusb:smsusb_probe: Device initialized with return code -19 [ 141.422029][ T7385] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.371: bg 0: block 393: padding at end of block bitmap is not set [ 141.459626][ T5839] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.475744][ T7385] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 496 with error 117 [ 141.486932][ T5891] usb 1-1: USB disconnect, device number 7 [ 141.489174][ T7385] EXT4-fs (loop2): This should not happen!! Data will be lost [ 141.489174][ T7385] [ 141.567953][ T7385] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 28 [ 141.584081][ T7385] EXT4-fs (loop2): This should not happen!! Data will be lost [ 141.584081][ T7385] [ 141.597721][ T7385] EXT4-fs (loop2): Total free blocks count 0 [ 141.603777][ T7385] EXT4-fs (loop2): Free/Dirty block details [ 141.611469][ T7385] EXT4-fs (loop2): free_blocks=0 [ 141.618035][ T7385] EXT4-fs (loop2): dirty_blocks=32 [ 141.632552][ T7385] EXT4-fs (loop2): Block reservation details [ 141.849864][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 142.705521][ T7453] loop3: detected capacity change from 0 to 256 [ 142.764686][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.386'. [ 142.764985][ T7453] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 142.825998][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.386'. [ 143.641940][ T7443] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.801268][ T7443] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.930162][ T7443] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.934996][ T7465] loop2: detected capacity change from 0 to 32768 [ 143.981618][ T7478] loop1: detected capacity change from 0 to 128 [ 143.995539][ T7465] XFS: ikeep mount option is deprecated. [ 144.041713][ T7443] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.073149][ T7478] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 144.102410][ T7465] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 144.113062][ T7478] ext4 filesystem being mounted at /88/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 144.226593][ T7478] EXT4-fs warning (device loop1): verify_group_input:156: Last group not full [ 144.302406][ T7443] bridge_slave_1: left allmulticast mode [ 144.309614][ T7443] bridge_slave_1: left promiscuous mode [ 144.310834][ T7465] XFS (loop2): Ending clean mount [ 144.317558][ T7443] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.342559][ T7494] netlink: 4 bytes leftover after parsing attributes in process `syz.0.400'. [ 144.352569][ T7443] bridge_slave_0: left allmulticast mode [ 144.360519][ T7465] XFS (loop2): Quotacheck needed: Please wait. [ 144.368551][ T5839] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.380116][ T7443] bridge_slave_0: left promiscuous mode [ 144.390445][ T7443] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.432462][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 144.443628][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 144.448653][ T7465] XFS (loop2): Quotacheck: Done. [ 144.458846][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 144.471545][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 144.482283][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 144.540862][ T7498] kvm: user requested TSC rate below hardware speed [ 144.565452][ T5828] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 144.779772][ T7501] loop1: detected capacity change from 0 to 128 [ 144.810187][ T7501] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 144.856951][ T7501] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.059683][ T5839] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 145.127278][ T5877] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 145.158243][ T7443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.189438][ T7443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.213732][ T7443] bond0 (unregistering): Released all slaves [ 145.306277][ T5877] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 145.326328][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.381332][ T5877] usb 3-1: config 0 descriptor?? [ 145.401608][ T5877] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 145.467637][ T7521] netlink: 'syz.0.408': attribute type 4 has an invalid length. [ 145.828569][ T7495] chnl_net:caif_netlink_parms(): no params data found [ 145.889959][ T7443] hsr_slave_0: left promiscuous mode [ 145.897000][ T7443] hsr_slave_1: left promiscuous mode [ 145.903065][ T7443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.912361][ T7443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.921472][ T7443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.929347][ T7443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.959904][ T7531] loop1: detected capacity change from 0 to 256 [ 145.961166][ T7443] veth1_macvtap: left promiscuous mode [ 145.972073][ T7443] veth0_macvtap: left promiscuous mode [ 145.978258][ T7443] veth1_vlan: left promiscuous mode [ 145.983749][ T7443] veth0_vlan: left promiscuous mode [ 146.419023][ T5877] usb 3-1: USB disconnect, device number 5 [ 146.534306][ T5835] Bluetooth: hci4: command tx timeout [ 147.339620][ T7443] team0 (unregistering): Port device team_slave_1 removed [ 147.402068][ T7443] team0 (unregistering): Port device team_slave_0 removed [ 147.997065][ T7555] netlink: 14593 bytes leftover after parsing attributes in process `syz.0.420'. [ 148.178818][ T5877] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 148.238617][ T7495] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.253278][ T7495] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.281631][ T7495] bridge_slave_0: entered allmulticast mode [ 148.295411][ T7495] bridge_slave_0: entered promiscuous mode [ 148.314609][ T7495] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.321806][ T7495] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.329717][ T7495] bridge_slave_1: entered allmulticast mode [ 148.339194][ T7495] bridge_slave_1: entered promiscuous mode [ 148.346888][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.364366][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.376627][ T7600] loop2: detected capacity change from 0 to 16 [ 148.383948][ T5877] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 148.387759][ T7600] erofs (device loop2): mounted with root inode @ nid 36. [ 148.397700][ T5877] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.423647][ T7600] erofs (device loop2): corrupted dir block 8200 @ nid 36 [ 148.428622][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.439548][ T7600] erofs (device loop2): readahead error at folio 12 @ nid 36 [ 148.442481][ T5877] usb 6-1: config 0 descriptor?? [ 148.452074][ T7600] erofs (device loop2): readahead error at folio 9 @ nid 36 [ 148.456560][ T7495] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.470374][ T7600] syz.2.439: attempt to access beyond end of device [ 148.470374][ T7600] loop2: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 148.484836][ T5891] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 148.498860][ T7600] syz.2.439: attempt to access beyond end of device [ 148.498860][ T7600] loop2: rw=524288, sector=720, nr_sectors = 8 limit=16 [ 148.499161][ T7495] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.570861][ T7495] team0: Port device team_slave_0 added [ 148.571477][ T7443] IPVS: stop unused estimator thread 0... [ 148.581598][ T7495] team0: Port device team_slave_1 added [ 148.604224][ T5835] Bluetooth: hci4: command tx timeout [ 148.636564][ T7495] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 148.643603][ T7495] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.669784][ T7495] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.687485][ T5891] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 148.699303][ T7495] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.707374][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.716639][ T7495] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.743897][ T7495] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.755627][ T5891] usb 2-1: config 0 descriptor?? [ 148.763665][ T5891] cp210x 2-1:0.0: cp210x converter detected [ 148.828892][ T7495] hsr_slave_0: entered promiscuous mode [ 148.836270][ T7495] hsr_slave_1: entered promiscuous mode [ 148.842681][ T7495] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.850883][ T7495] Cannot create hsr debugfs directory [ 148.903253][ T5877] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 149.100306][ T7495] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 149.121216][ T7495] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 149.139853][ T7495] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 149.156078][ T7495] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 149.170948][ T7596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.183225][ T7596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.204064][ T5891] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 149.235477][ T5891] usb 2-1: cp210x converter now attached to ttyUSB0 [ 149.261344][ T7619] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 149.375953][ T7495] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.400690][ T7495] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.418891][ T7443] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.426093][ T7443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.436033][ T5877] usb 2-1: USB disconnect, device number 9 [ 149.452775][ T5877] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 149.473928][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.481120][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.502218][ T7623] loop0: detected capacity change from 0 to 256 [ 149.504710][ T5877] cp210x 2-1:0.0: device disconnected [ 149.511262][ T7623] exfat: Deprecated parameter 'namecase' [ 149.538689][ T7623] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 149.590283][ T7623] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 149.989490][ T7495] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.026472][ T7637] loop1: detected capacity change from 0 to 1024 [ 150.072198][ T7637] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.151832][ T7625] loop2: detected capacity change from 0 to 32768 [ 150.183051][ T7637] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 150.200172][ T7637] EXT4-fs (loop1): This should not happen!! Data will be lost [ 150.200172][ T7637] [ 150.229618][ T7637] EXT4-fs (loop1): Total free blocks count 0 [ 150.249341][ T7625] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 150.265164][ T7637] EXT4-fs (loop1): Free/Dirty block details [ 150.277404][ T7637] EXT4-fs (loop1): free_blocks=0 [ 150.304043][ T7637] EXT4-fs (loop1): dirty_blocks=0 [ 150.317234][ T7637] EXT4-fs (loop1): Block reservation details [ 150.333516][ T7637] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 150.374167][ T5828] ocfs2: Unmounting device (7,2) on (node local) [ 150.417639][ T5839] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.512398][ T7495] veth0_vlan: entered promiscuous mode [ 150.548419][ T7495] veth1_vlan: entered promiscuous mode [ 150.635982][ T7495] veth0_macvtap: entered promiscuous mode [ 150.682657][ T7495] veth1_macvtap: entered promiscuous mode [ 150.689009][ T5835] Bluetooth: hci4: command tx timeout [ 150.733061][ T7495] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.767424][ T7495] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.803806][ T78] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.876274][ T78] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.900504][ T78] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.976345][ T5884] usb 6-1: USB disconnect, device number 6 [ 150.992730][ T78] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.316529][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.332167][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.380261][ T203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.400438][ T203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.531037][ T7683] loop1: detected capacity change from 0 to 1024 [ 151.652414][ T7689] BUG: sleeping function called from invalid context at ./include/linux/sched/mm.h:321 [ 151.684310][ T7689] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 7689, name: syz.2.464 [ 151.693456][ T7689] preempt_count: 0, expected: 0 [ 151.700080][ T7689] RCU nest depth: 1, expected: 0 [ 151.707504][ T7689] 2 locks held by syz.2.464/7689: [ 151.712607][ T7689] #0: ffffffff8e13bee0 (rcu_read_lock){....}-{1:3}, at: query_vma_setup+0x18/0x110 [ 151.723616][ T7689] #1: ffff88801df45948 (vm_lock){++++}-{0:0}, at: lock_next_vma+0x146/0xdc0 [ 151.736658][ T7689] CPU: 0 UID: 0 PID: 7689 Comm: syz.2.464 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 151.736683][ T7689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 151.736694][ T7689] Call Trace: [ 151.736701][ T7689] [ 151.736709][ T7689] dump_stack_lvl+0x189/0x250 [ 151.736742][ T7689] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.736777][ T7689] ? print_lock_name+0xde/0x100 [ 151.736803][ T7689] __might_resched+0x495/0x610 [ 151.736834][ T7689] ? __pfx___might_resched+0x10/0x10 [ 151.736869][ T7689] ? __kmalloc_noprof+0xa3/0x4f0 [ 151.736898][ T7689] __kmalloc_noprof+0xbc/0x4f0 [ 151.736920][ T7689] ? procfs_procmap_ioctl+0x877/0xd10 [ 151.736948][ T7689] procfs_procmap_ioctl+0x877/0xd10 [ 151.736978][ T7689] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 151.737014][ T7689] ? __fget_files+0x2a/0x420 [ 151.737034][ T7689] ? __fget_files+0x2a/0x420 [ 151.737049][ T7689] ? __fget_files+0x3a0/0x420 [ 151.737065][ T7689] ? __fget_files+0x2a/0x420 [ 151.737086][ T7689] ? bpf_lsm_file_ioctl+0x9/0x20 [ 151.737109][ T7689] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 151.737135][ T7689] __se_sys_ioctl+0xfc/0x170 [ 151.737161][ T7689] do_syscall_64+0xfa/0x3b0 [ 151.737177][ T7689] ? lockdep_hardirqs_on+0x9c/0x150 [ 151.737203][ T7689] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.737221][ T7689] ? clear_bhb_loop+0x60/0xb0 [ 151.737239][ T7689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.737254][ T7689] RIP: 0033:0x7f78dd18e929 [ 151.737282][ T7689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.737298][ T7689] RSP: 002b:00007f78ddfa0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 151.737318][ T7689] RAX: ffffffffffffffda RBX: 00007f78dd3b5fa0 RCX: 00007f78dd18e929 [ 151.737331][ T7689] RDX: 0000200000000180 RSI: 00000000c0686611 RDI: 0000000000000004 [ 151.737343][ T7689] RBP: 00007f78dd210b39 R08: 0000000000000000 R09: 0000000000000000 [ 151.737356][ T7689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.737367][ T7689] R13: 0000000000000000 R14: 00007f78dd3b5fa0 R15: 00007ffdbfe2dd38 [ 151.737398][ T7689] [ 152.774447][ T5835] Bluetooth: hci4: command tx timeout