last executing test programs: 58.26837976s ago: executing program 1 (id=120): r0 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x4, 0x354}, &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000200)=[@ioring_restriction_register_op={0x0, 0x18}], 0x1) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f00000002c0)={0x7, r0, 0x18, {0x4, 0xdca0}, 0x6}, 0x1) 57.628431973s ago: executing program 1 (id=123): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x60, 0x0, 0x8}]}) write$ppp(r0, &(0x7f0000000280)='R\r', 0x2) 57.353793212s ago: executing program 1 (id=124): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) iopl(0x3) 56.912430598s ago: executing program 2 (id=128): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x197f, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000005540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/12, 0xc}, 0x7ff}], 0x1, 0x2020, 0x0) 56.486873933s ago: executing program 2 (id=130): unshare(0x22020600) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x8, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x6, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0x0, 0x1004, 0x7, 0x20003, 0x4, 0x2, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3f, 0x18e, 0x200006, 0x6, 0x454f, 0x6, 0x80004, 0x8, 0x7, 0x80, 0x0, 0x5, 0xc, 0x8, 0x8002, 0x1, 0x40], [0x10000007, 0x3, 0x8000012f, 0x8004, 0x5, 0xfffffff7, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x4, 0xfffffff8, 0x5, 0x0, 0x3, 0x5, 0x2f, 0xe, 0x1, 0x7, 0xea4, 0x100, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0x2, 0x200004e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x2, 0x1, 0xfe000000, 0xa, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x8, 0x0, 0x3, 0xbc45, 0x65, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xffffffff, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x2, 0x3, 0x107, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80aaed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x4, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x2, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0xffffffff, 0x2000002, 0x14c, 0x60a7, 0x6, 0xa, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xb0, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x2800000, 0xa1f, 0xf40, 0xa, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x1, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) syz_open_dev$media(&(0x7f00000012c0), 0xffffffffffffff80, 0x180502) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 56.340974089s ago: executing program 2 (id=131): syz_mount_image$ntfs3(&(0x7f0000000040), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='sparse,acl,nohidden,iocharset=cp12500x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0009000000080026000816"], 0x40}}, 0x0) 53.637359204s ago: executing program 33 (id=145): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0009000000080026000816"], 0x40}}, 0x0) 5.518081355s ago: executing program 4 (id=387): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000800)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44e}}, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000002c0)={0x1, 0x0, 0x8, &(0x7f0000000240)={0x1b, "4e9a3e6fc6d288049300000a000000000000e879956b404b0aaa5efb7a18d6b800"}}) 5.151838038s ago: executing program 0 (id=391): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x3d, 0x800000, 0x8, 0x7, 0x2, 0x81}) write$bt_hci(r0, &(0x7f0000000080)=ANY=[], 0x6) 4.673566915s ago: executing program 0 (id=394): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) modify_ldt$write(0x1, &(0x7f00000000c0)={0xb03}, 0x10) modify_ldt$read(0x0, &(0x7f0000002200)=""/229, 0xe5) 3.492273726s ago: executing program 4 (id=398): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000400)={0x20, 0x1, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000780)={0x20, 0xe}, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000500)={0x40, 0x14, 0x1, 'P'}, 0x0, 0x0, 0x0, 0x0}) 3.014676814s ago: executing program 0 (id=401): r0 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000102105a8b140000102030109021b000101000000090400ff020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0xffffff04, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x4}}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) readv(r1, &(0x7f0000000740)=[{&(0x7f0000000000)=""/21, 0x15}], 0x1) 2.024419509s ago: executing program 5 (id=407): socket$kcm(0xa, 0x922000000003, 0x11) r0 = socket$kcm(0x10, 0x2, 0x4) socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000140081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x20040008) 1.726106109s ago: executing program 5 (id=409): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f00000000c0)={0x7fff, 0x1, 0x80000001, 0x7fffffff, 0x1b, "48b429d2ee13ed2ee2f41900"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000026c0)=0x3d) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xffffffef, 0xee0, 0x9, 0x7ffd, 0x90, "99000100000000060000000000008000"}) 1.629507353s ago: executing program 3 (id=410): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000280)=[{0x20, 0x0, 0x8, 0xfffff00c}, {0x48}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000640)={&(0x7f0000000680)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x801) 1.527930386s ago: executing program 5 (id=411): syz_mount_image$vfat(&(0x7f0000000540), &(0x7f0000000040)='./file4\x00', 0xa18c14, &(0x7f0000000440)={[{@fat=@nfs}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@shortname_mixed}, {@rodir}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@shortname_lower}, {@uni_xlateno}, {@rodir}, {@numtail}, {@shortname_lower}]}, 0x88, 0x29b, &(0x7f0000000180)="$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") write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a40)='memory.swap.current\x00', 0x275a, 0x0) 1.472790038s ago: executing program 3 (id=412): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000180)={[{@grpid}, {@noauto_da_alloc}, {@user_xattr}, {@journal_dev={'journal_dev', 0x3d, 0x83e}}]}, 0x26, 0x76a, &(0x7f0000002b00)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.258168926s ago: executing program 5 (id=413): r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) r1 = epoll_create(0x9) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) epoll_pwait(r1, &(0x7f0000000240)=[{}], 0x1, 0x0, 0x0, 0x0) 1.12431397s ago: executing program 4 (id=414): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0xc0011023, 0x0, 0xa15}]}) 1.103093631s ago: executing program 5 (id=415): r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f00000002c0)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.018369144s ago: executing program 0 (id=416): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x100001, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 879.025609ms ago: executing program 3 (id=417): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000040000000c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r1}, 0xc) 789.153793ms ago: executing program 0 (id=418): syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x3008003, &(0x7f0000002ac0)=ANY=[], 0x2, 0x200, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r0, 0xe0ffff, 0x19, 0x3) mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', 0x0, 0x400, 0x0) 739.640364ms ago: executing program 5 (id=419): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000fe00850000008200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 561.375781ms ago: executing program 4 (id=420): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x13, r0, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r1, 0x110, 0x4, &(0x7f0000002880)=0x2, 0x4) 560.506461ms ago: executing program 3 (id=421): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000140), &(0x7f00000007c0)={'syz', 0x0}, &(0x7f0000000400)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ed547a66c800e10000000096cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb3543f8429e3d9d6211c5fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b913", 0xc0, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f00000000c0)={r0, r1, r0}, &(0x7f0000001380)=""/4093, 0xffd, 0x0) 312.383089ms ago: executing program 3 (id=422): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@private1, 0x1, 0x0, 0xfe, 0x5, 0x2, 0x9}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 206.512403ms ago: executing program 4 (id=423): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @mcast1, 0x4}, 0x1c) connect$netlink(r0, &(0x7f00000000c0)=@unspec, 0xc) syz_emit_ethernet(0x7e, &(0x7f0000000240)={@random="5b685c7e778f", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00g\x00', 0x48, 0x11, 0x1, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "ac847a8d6a70500317a6ff633b2d873b3538b7a94d5194cc", "7a124682524e9cc26482e0daa35cc98a6f80be6351aa0bb5bd6db9e9548e79fb"}}}}}}}, 0x0) 122.464746ms ago: executing program 0 (id=424): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018030000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000a02"], 0x0, 0x96}, 0x28) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x51, 0x0}}, 0x10) 57.046198ms ago: executing program 3 (id=425): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000440)={@multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) 0s ago: executing program 4 (id=426): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xfb, 0x2, 0x7fff7ffc}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc0004}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.62' (ED25519) to the list of known hosts. [ 81.614359][ T5758] cgroup: Unknown subsys name 'net' [ 81.763881][ T5758] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.452404][ T5758] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.202275][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.211132][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.220152][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.228341][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.236871][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.245298][ T5780] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.253230][ T5780] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.260747][ T5780] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.298283][ T5783] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.308809][ T5785] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.318645][ T5086] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.331785][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.339840][ T5086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.347620][ T5785] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.348401][ T5086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.369196][ T5086] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.376769][ T5086] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.384196][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.392938][ T5086] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.400629][ T5086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.407797][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.415275][ T5086] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.422828][ T5086] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.430284][ T5787] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.869441][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 85.933791][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 86.042853][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 86.136485][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.144269][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.151846][ T5771] bridge_slave_0: entered allmulticast mode [ 86.159637][ T5771] bridge_slave_0: entered promiscuous mode [ 86.168747][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 86.196751][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.203999][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.211576][ T5771] bridge_slave_1: entered allmulticast mode [ 86.218963][ T5771] bridge_slave_1: entered promiscuous mode [ 86.280477][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.287805][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.295694][ T5770] bridge_slave_0: entered allmulticast mode [ 86.303105][ T5770] bridge_slave_0: entered promiscuous mode [ 86.331566][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.341103][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.353531][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.360880][ T5770] bridge_slave_1: entered allmulticast mode [ 86.368646][ T5770] bridge_slave_1: entered promiscuous mode [ 86.418515][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.447055][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.459446][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.519606][ T5771] team0: Port device team_slave_0 added [ 86.528973][ T5771] team0: Port device team_slave_1 added [ 86.551648][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.560189][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.567576][ T5774] bridge_slave_0: entered allmulticast mode [ 86.575416][ T5774] bridge_slave_0: entered promiscuous mode [ 86.610057][ T5770] team0: Port device team_slave_0 added [ 86.619228][ T5770] team0: Port device team_slave_1 added [ 86.637414][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.644713][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.652097][ T5774] bridge_slave_1: entered allmulticast mode [ 86.659531][ T5774] bridge_slave_1: entered promiscuous mode [ 86.678087][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.685298][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.711422][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.749209][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.756414][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.782454][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.823058][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.832953][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.861817][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.874239][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.881849][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.908067][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.928020][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.936027][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.943419][ T5773] bridge_slave_0: entered allmulticast mode [ 86.951004][ T5773] bridge_slave_0: entered promiscuous mode [ 86.960384][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.967948][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.975326][ T5773] bridge_slave_1: entered allmulticast mode [ 86.982401][ T5773] bridge_slave_1: entered promiscuous mode [ 86.991778][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.034415][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.115858][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.169795][ T5770] hsr_slave_0: entered promiscuous mode [ 87.195621][ T5770] hsr_slave_1: entered promiscuous mode [ 87.215660][ T5771] hsr_slave_0: entered promiscuous mode [ 87.223145][ T5771] hsr_slave_1: entered promiscuous mode [ 87.234902][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.242845][ T5771] Cannot create hsr debugfs directory [ 87.273257][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.317785][ T5774] team0: Port device team_slave_0 added [ 87.332603][ T5774] team0: Port device team_slave_1 added [ 87.355662][ T5782] Bluetooth: hci1: command tx timeout [ 87.426984][ T5773] team0: Port device team_slave_0 added [ 87.443724][ T5773] team0: Port device team_slave_1 added [ 87.450849][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.458463][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.485386][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.498992][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.506419][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.533394][ T5782] Bluetooth: hci3: command tx timeout [ 87.539268][ T5782] Bluetooth: hci2: command tx timeout [ 87.545848][ T5782] Bluetooth: hci0: command tx timeout [ 87.567519][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.701288][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.714712][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.744778][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.799664][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.807074][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.834223][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.906865][ T5774] hsr_slave_0: entered promiscuous mode [ 87.913565][ T5774] hsr_slave_1: entered promiscuous mode [ 87.920262][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.927937][ T5774] Cannot create hsr debugfs directory [ 87.983255][ T5773] hsr_slave_0: entered promiscuous mode [ 87.990211][ T5773] hsr_slave_1: entered promiscuous mode [ 87.997244][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.005957][ T5773] Cannot create hsr debugfs directory [ 88.256285][ T5770] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.299781][ T5770] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.310969][ T5770] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.346096][ T5770] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.407675][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.437384][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.448122][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.460629][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.551699][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.563608][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.583760][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.615369][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.701254][ T5773] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.712927][ T5773] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.729019][ T5773] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.747077][ T5773] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.838557][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.869363][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.880962][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.910808][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.918332][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.948396][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.955625][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.019185][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.041298][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.066278][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.073438][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.118625][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.125847][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.154442][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.176225][ T1119] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.183459][ T1119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.201883][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.239793][ T1119] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.247028][ T1119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.358151][ T5774] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 89.371480][ T5774] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.401685][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.422117][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.436179][ T51] Bluetooth: hci1: command tx timeout [ 89.516139][ T1133] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.523479][ T1133] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.540469][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.547795][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.595139][ T51] Bluetooth: hci0: command tx timeout [ 89.596953][ T5782] Bluetooth: hci2: command tx timeout [ 89.600873][ T51] Bluetooth: hci3: command tx timeout [ 89.719335][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.759800][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.819084][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.963753][ T5770] veth0_vlan: entered promiscuous mode [ 90.010184][ T5770] veth1_vlan: entered promiscuous mode [ 90.022545][ T5774] veth0_vlan: entered promiscuous mode [ 90.085886][ T5774] veth1_vlan: entered promiscuous mode [ 90.131155][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.179284][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.210935][ T5770] veth0_macvtap: entered promiscuous mode [ 90.224529][ T5770] veth1_macvtap: entered promiscuous mode [ 90.235759][ T5774] veth0_macvtap: entered promiscuous mode [ 90.247512][ T5774] veth1_macvtap: entered promiscuous mode [ 90.322316][ T5771] veth0_vlan: entered promiscuous mode [ 90.339768][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.354521][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.369306][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.380392][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.393377][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.406020][ T5771] veth1_vlan: entered promiscuous mode [ 90.422399][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.434268][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.451047][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.464368][ T5770] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.474142][ T5770] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.484150][ T5770] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.493295][ T5770] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.506114][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.517887][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.526690][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.536745][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.595904][ T5773] veth0_vlan: entered promiscuous mode [ 90.627365][ T5771] veth0_macvtap: entered promiscuous mode [ 90.667050][ T5773] veth1_vlan: entered promiscuous mode [ 90.723518][ T5771] veth1_macvtap: entered promiscuous mode [ 90.769227][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.781232][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.870025][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.882106][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.893044][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.903903][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.918905][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.931203][ T3495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.947830][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.949298][ T3495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.968909][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.993432][ T5773] veth0_macvtap: entered promiscuous mode [ 91.034313][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.051987][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.063183][ T5771] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.073881][ T5771] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.090927][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.107209][ T3495] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.121635][ T3495] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.130443][ T5773] veth1_macvtap: entered promiscuous mode [ 91.170039][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.181051][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.192760][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.204016][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.214405][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.225506][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.238829][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.253301][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.273516][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.291130][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.301082][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.338322][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.356829][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.372847][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.385625][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.395855][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.406866][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.419580][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.523451][ T51] Bluetooth: hci1: command tx timeout [ 91.541048][ T5773] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.566320][ T5844] syz.1.2[5844]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 91.578532][ T5773] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.589551][ T5773] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.600577][ T5773] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.675129][ T51] Bluetooth: hci3: command tx timeout [ 91.680643][ T5787] Bluetooth: hci2: command tx timeout [ 91.680654][ T5782] Bluetooth: hci0: command tx timeout [ 91.712910][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.764925][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.887506][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.912141][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.063010][ T1119] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.076771][ T1119] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.159957][ T967] cfg80211: failed to load regulatory.db [ 92.212423][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.247314][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.432292][ T5844] loop1: detected capacity change from 0 to 32768 [ 92.467937][ T5844] ======================================================= [ 92.467937][ T5844] WARNING: The mand mount option has been deprecated and [ 92.467937][ T5844] and is ignored by this kernel. Remove the mand [ 92.467937][ T5844] option from the mount to silence this warning. [ 92.467937][ T5844] ======================================================= [ 92.691852][ T5844] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 92.706327][ T5852] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5'. [ 92.744424][ T5844] JBD2: Ignoring recovery information on journal [ 92.815193][ T967] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 92.909033][ T5844] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 92.978154][ T5848] loop3: detected capacity change from 0 to 32768 [ 93.029708][ T967] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 93.080233][ T5848] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 93.107510][ T967] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.145012][ T967] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 93.153101][ T967] usb 3-1: SerialNumber: syz [ 93.195220][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 93.242619][ T5844] syz.1.2 (5844) used greatest stack depth: 18896 bytes left [ 93.354602][ T5848] XFS (loop3): Ending clean mount [ 93.374846][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 93.391033][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.421610][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.436442][ T5848] XFS (loop3): Quotacheck needed: Please wait. [ 93.467761][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 93.474062][ T5774] ocfs2: Unmounting device (7,1) on (node local) [ 93.504720][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.523470][ T9] usb 1-1: Product: syz [ 93.529385][ T9] usb 1-1: Manufacturer: syz [ 93.534293][ T9] usb 1-1: SerialNumber: syz [ 93.567805][ T5848] XFS (loop3): Quotacheck: Done. [ 93.595087][ T5782] Bluetooth: hci1: command tx timeout [ 93.755765][ T5782] Bluetooth: hci0: command tx timeout [ 93.761348][ T5782] Bluetooth: hci3: command tx timeout [ 93.766882][ T51] Bluetooth: hci2: command tx timeout [ 93.895421][ T5771] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 93.998511][ T9] usb 1-1: 0:2 : does not exist [ 94.428051][ T9] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 94.455273][ T5840] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.501318][ T5877] loop3: detected capacity change from 0 to 128 [ 94.506171][ T9] usb 1-1: USB disconnect, device number 2 [ 94.649644][ T5772] udevd[5772]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 94.674941][ T5840] usb 2-1: Using ep0 maxpacket: 16 [ 94.691493][ T5840] usb 2-1: config 1 has an invalid descriptor of length 142, skipping remainder of the config [ 94.707014][ T5840] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.720811][ T5840] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 94.739669][ T5840] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.751998][ T5840] usb 2-1: Product: syz [ 94.768944][ T5840] usb 2-1: Manufacturer: syz [ 94.779074][ T5840] usb 2-1: SerialNumber: syz [ 95.023328][ T5840] usb 2-1: 0:2 : does not exist [ 95.040422][ T5840] usb 2-1: unit 9 not found! [ 95.055999][ T5840] usb 2-1: 4:0: cannot get min/max values for control 1 (id 4) [ 95.070823][ T5840] usb 2-1: 4:0: cannot get min/max values for control 3 (id 4) [ 95.084443][ T5840] usb 2-1: 4:0: cannot get min/max values for control 4 (id 4) [ 95.099126][ T5840] usb 2-1: 4:0: cannot get min/max values for control 5 (id 4) [ 95.112418][ T5840] usb 2-1: 4:0: cannot get min/max values for control 6 (id 4) [ 95.158874][ T5840] usb 2-1: 4:0: cannot get min/max values for control 7 (id 4) [ 95.193484][ T5840] usb 2-1: 4:0: cannot get min/max values for control 8 (id 4) [ 95.243124][ T5840] usb 2-1: USB disconnect, device number 2 [ 95.330300][ T5772] udevd[5772]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.549562][ T967] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 95.615893][ T967] usb 3-1: USB disconnect, device number 2 [ 96.025576][ T5890] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.057194][ T5882] loop0: detected capacity change from 0 to 32768 [ 96.077990][ T967] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 96.103187][ T5882] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 96.118484][ T5882] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 96.274828][ T5882] XFS (loop0): Ending clean mount [ 96.305925][ T5882] XFS (loop0): Quotacheck needed: Please wait. [ 96.318193][ T967] usb 3-1: Using ep0 maxpacket: 32 [ 96.355524][ T967] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 96.392132][ T967] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 96.405930][ T5882] XFS (loop0): Quotacheck: Done. [ 96.455151][ T967] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 96.493917][ T967] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 96.521271][ T967] usb 3-1: config 0 interface 0 has no altsetting 0 [ 96.528969][ T28] audit: type=1800 audit(1774710762.239:2): pid=5882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.14" name="file2" dev="loop0" ino=4423 res=0 errno=0 [ 96.566862][ T967] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 96.590612][ T967] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 96.614739][ T967] usb 3-1: Product: syz [ 96.618994][ T967] usb 3-1: Manufacturer: syz [ 96.632657][ T967] usb 3-1: SerialNumber: syz [ 96.665582][ T967] usb 3-1: config 0 descriptor?? [ 96.694030][ T967] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 96.726736][ T967] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 96.746031][ T5770] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 96.978963][ T5888] loop3: detected capacity change from 0 to 40427 [ 97.003824][ T967] usb 3-1: USB disconnect, device number 3 [ 97.023640][ T967] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 97.084867][ T5888] F2FS-fs (loop3): invalid crc value [ 97.359531][ T5888] F2FS-fs (loop3): Start checkpoint disabled! [ 97.384216][ T5888] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 97.653086][ T5904] loop1: detected capacity change from 0 to 40427 [ 97.663927][ T5904] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 97.679692][ T5904] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 97.689397][ T33] kworker/u4:2: attempt to access beyond end of device [ 97.689397][ T33] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 97.729009][ T33] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 97.751440][ T5904] F2FS-fs (loop1): Found nat_bits in checkpoint [ 97.923362][ T5904] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 97.936248][ T5904] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 98.089430][ T5904] F2FS-fs (loop1): Stopped filesystem due to reason: 0 [ 98.269114][ T5927] netlink: 200 bytes leftover after parsing attributes in process `syz.2.28'. [ 98.719189][ T5938] Zero length message leads to an empty skb [ 98.811351][ T5940] loop2: detected capacity change from 0 to 256 [ 99.114025][ T5946] loop0: detected capacity change from 0 to 8 [ 99.180677][ T23] Process accounting resumed [ 99.199420][ T5948] Process accounting resumed [ 99.757442][ T5968] netlink: 76 bytes leftover after parsing attributes in process `syz.2.44'. [ 100.400866][ T5981] loop2: detected capacity change from 0 to 4096 [ 100.419602][ T5981] EXT4-fs: inline encryption not supported [ 100.750703][ T5981] EXT4-fs (loop2): Test dummy encryption mode enabled [ 100.792235][ T5981] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 100.829581][ T5981] System zones: 0-5 [ 100.862325][ T5981] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.062177][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.170011][ T5989] loop1: detected capacity change from 0 to 512 [ 101.216467][ T5991] batadv_slave_0: entered promiscuous mode [ 101.247181][ T5989] EXT4-fs (loop1): 1 truncate cleaned up [ 101.257535][ T5991] batman_adv: batadv0: Adding interface: macvtap1 [ 101.267880][ T5989] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.281574][ T5991] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.369959][ T5991] batman_adv: batadv0: Interface activated: macvtap1 [ 101.383587][ T28] audit: type=1800 audit(1774710767.099:3): pid=5989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.49" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 101.660444][ T5998] loop3: detected capacity change from 0 to 1024 [ 101.671578][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.881102][ T6002] loop1: detected capacity change from 0 to 256 [ 101.927921][ T6002] exfat: Deprecated parameter 'utf8' [ 101.933489][ T6002] exfat: Deprecated parameter 'namecase' [ 102.004894][ T6002] exfat: Deprecated parameter 'namecase' [ 102.041857][ T6002] exfat: Deprecated parameter 'utf8' [ 102.091499][ T6002] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 102.790177][ T6023] loop2: detected capacity change from 0 to 512 [ 102.857268][ T6023] EXT4-fs (loop2): 1 truncate cleaned up [ 102.863965][ T6023] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.005670][ T28] audit: type=1800 audit(1774710768.729:4): pid=6023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.62" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 103.360736][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.526844][ T6032] capability: warning: `syz.2.64' uses deprecated v2 capabilities in a way that may be insecure [ 103.975025][ T786] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 103.986065][ T6036] loop3: detected capacity change from 0 to 512 [ 104.004949][ T6036] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 104.019120][ T6036] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 104.053986][ T6036] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 104.112901][ T6036] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 104.146124][ T6036] EXT4-fs (loop3): 1 truncate cleaned up [ 104.152790][ T6036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.222801][ T786] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 104.232775][ T786] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.267732][ T786] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 104.296612][ T786] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 104.334697][ T786] usb 3-1: Manufacturer: syz [ 104.345883][ T786] usb 3-1: config 0 descriptor?? [ 104.438236][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.517700][ T786] rc_core: IR keymap rc-hauppauge not found [ 104.534819][ T786] Registered IR keymap rc-empty [ 104.542234][ T786] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 104.586912][ T786] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5 [ 104.653490][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 104.690106][ T786] usb 3-1: USB disconnect, device number 4 [ 104.886289][ T6055] loop0: detected capacity change from 0 to 256 [ 104.966183][ T28] audit: type=1800 audit(1774710770.689:5): pid=6055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.74" name="file2" dev="loop0" ino=1048596 res=0 errno=0 [ 104.996902][ T6055] FAT-fs (loop0): error, clusters badly computed (2 != 1) [ 105.028698][ T6055] FAT-fs (loop0): Filesystem has been set read-only [ 105.500755][ T6052] loop1: detected capacity change from 0 to 32768 [ 105.864571][ T6055] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 198) [ 106.132401][ T6066] capability: warning: `syz.0.80' uses 32-bit capabilities (legacy support in use) [ 106.148549][ T6066] program syz.0.80 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.399386][ T6062] loop2: detected capacity change from 0 to 32768 [ 106.479215][ T6062] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 106.536507][ T6062] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 106.679513][ T6081] loop3: detected capacity change from 0 to 2048 [ 106.744833][ T6062] XFS (loop2): Ending clean mount [ 106.779750][ T6081] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.815755][ T6062] XFS (loop2): Quotacheck needed: Please wait. [ 106.862822][ T6081] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 106.945182][ T6062] XFS (loop2): Quotacheck: Done. [ 107.022572][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.061859][ T28] audit: type=1800 audit(1774710772.779:6): pid=6062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.77" name="file2" dev="loop2" ino=4423 res=0 errno=0 [ 107.210756][ T5773] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 107.311425][ T6093] loop0: detected capacity change from 0 to 8192 [ 107.425511][ T6093] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 107.527518][ T6093] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 107.565858][ T6093] REISERFS (device loop0): using ordered data mode [ 107.572550][ T6093] reiserfs: using flush barriers [ 107.621977][ T6093] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 107.694815][ T6093] REISERFS (device loop0): checking transaction log (loop0) [ 107.921582][ T6106] loop3: detected capacity change from 0 to 512 [ 107.965392][ T6093] REISERFS (device loop0): Using r5 hash to sort names [ 107.987641][ T6093] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 107.994139][ T6106] EXT4-fs (loop3): 1 truncate cleaned up [ 108.013486][ T6106] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.148935][ T28] audit: type=1800 audit(1774710773.869:7): pid=6106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.94" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 108.373456][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.728286][ T6118] loop0: detected capacity change from 0 to 128 [ 108.754542][ T6118] EXT4-fs: Ignoring removed nomblk_io_submit option [ 108.794085][ T6118] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 108.822277][ T6118] ext4 filesystem being mounted at /25/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.061234][ T5770] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 109.563454][ T6141] netlink: 28 bytes leftover after parsing attributes in process `syz.3.108'. [ 109.598821][ T6141] netlink: 24 bytes leftover after parsing attributes in process `syz.3.108'. [ 109.768455][ T6147] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.944773][ T23] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 110.088501][ T786] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 110.147306][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.161075][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 110.171273][ T23] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 110.180895][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.193360][ T23] usb 1-1: config 0 descriptor?? [ 110.208292][ T23] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 110.223684][ T23] dvb-usb: bulk message failed: -22 (3/0) [ 110.235239][ T6152] bridge_slave_0: default FDB implementation only supports local addresses [ 110.260366][ T23] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 110.272914][ T23] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 110.281954][ T23] usb 1-1: media controller created [ 110.292235][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.300782][ T786] usb 4-1: Using ep0 maxpacket: 8 [ 110.311447][ T786] usb 4-1: unable to get BOS descriptor or descriptor too short [ 110.346185][ T786] usb 4-1: config 0 has an invalid interface number: 42 but max is 0 [ 110.357246][ T23] dvb-usb: bulk message failed: -22 (6/0) [ 110.363517][ T23] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 110.371594][ T786] usb 4-1: config 0 has no interface number 0 [ 110.377852][ T786] usb 4-1: config 0 interface 42 has no altsetting 0 [ 110.388359][ T23] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 110.422037][ T786] usb 4-1: New USB device found, idVendor=04da, idProduct=250c, bcdDevice= 1.8c [ 110.447028][ T6145] dibusb: i2c wr: len=90 is too big! [ 110.447028][ T6145] [ 110.456300][ T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.476013][ T23] dvb-usb: schedule remote query interval to 150 msecs. [ 110.504385][ T786] usb 4-1: Product: syz [ 110.509295][ T786] usb 4-1: Manufacturer: syz [ 110.513953][ T786] usb 4-1: SerialNumber: syz [ 110.519139][ T23] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 110.543054][ T786] usb 4-1: config 0 descriptor?? [ 110.549403][ T23] usb 1-1: USB disconnect, device number 3 [ 110.628672][ T23] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 110.788612][ T786] usb 4-1: bad CDC descriptors [ 110.813533][ T786] usb 4-1: USB disconnect, device number 2 [ 111.072656][ T6154] loop1: detected capacity change from 0 to 32768 [ 111.103147][ T6154] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 111.113874][ T6154] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 111.202677][ T6154] XFS (loop1): Ending clean mount [ 111.218057][ T5840] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 111.229833][ T6154] XFS (loop1): Quotacheck needed: Please wait. [ 111.253853][ T1133] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x10 [ 111.271335][ T1133] XFS (loop1): Unmount and run xfs_repair [ 111.290658][ T1133] XFS (loop1): First 128 bytes of corrupted metadata buffer: [ 111.302961][ T1133] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 111.318314][ T1133] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10 ................ [ 111.333159][ T1133] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 111.342209][ T1133] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02 .... ......N.... [ 111.357772][ T1133] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00 ...`............ [ 111.369266][ T1133] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00 ................ [ 111.394956][ T1133] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 111.410671][ T1133] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 111.430961][ T5840] usb 3-1: Using ep0 maxpacket: 16 [ 111.442273][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.464308][ T1133] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x10 len 8 error 74 [ 111.476497][ T5840] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.497702][ T5840] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 111.527022][ T6154] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 111.545066][ T5840] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 111.583060][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.604713][ T28] audit: type=1800 audit(1774710777.319:8): pid=6154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.114" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 111.625879][ T5840] usb 3-1: config 0 descriptor?? [ 111.693408][ T28] audit: type=1800 audit(1774710777.329:9): pid=6154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.114" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 111.789572][ T5774] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 111.849978][ T6174] loop0: detected capacity change from 0 to 512 [ 111.900257][ T6174] EXT4-fs (loop0): 1 truncate cleaned up [ 111.928813][ T6174] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.054488][ T5840] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 112.067946][ T28] audit: type=1800 audit(1774710777.789:10): pid=6174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.121" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 112.096672][ T5840] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 112.121943][ T5840] microsoft 0003:045E:07DA.0001: usage index exceeded [ 112.148005][ T5840] microsoft 0003:045E:07DA.0001: item 0 4 2 2 parsing failed [ 112.166945][ T5840] microsoft 0003:045E:07DA.0001: parse failed [ 112.173283][ T5840] microsoft: probe of 0003:045E:07DA.0001 failed with error -22 [ 112.264329][ T786] usb 3-1: USB disconnect, device number 5 [ 112.445525][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.561350][ T6170] loop3: detected capacity change from 0 to 32768 [ 112.593799][ T6170] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 112.788870][ T6170] XFS (loop3): Starting recovery (logdev: internal) [ 112.862786][ T6170] XFS (loop3): Ending recovery (logdev: internal) [ 112.983875][ T6200] loop0: detected capacity change from 0 to 1024 [ 113.064095][ T5771] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 113.081523][ T6200] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000c01c, mo2=0002] [ 113.141449][ T6200] System zones: 0-1, 3-36 [ 113.160303][ T6200] EXT4-fs error (device loop0): ext4_orphan_get:1424: comm syz.0.126: bad orphan inode 134217728 [ 113.188968][ T6200] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 113.258945][ T6200] EXT4-fs (loop0): shut down requested (2) [ 113.417177][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.904752][ T786] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 113.975863][ T6214] loop2: detected capacity change from 0 to 4096 [ 114.104965][ T786] usb 4-1: Using ep0 maxpacket: 32 [ 114.113608][ T786] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 114.146989][ T786] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 114.173198][ T786] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 114.190655][ T6217] loop1: detected capacity change from 0 to 512 [ 114.202848][ T786] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 114.232139][ T786] usb 4-1: config 0 interface 0 has no altsetting 0 [ 114.237967][ T6217] EXT4-fs: Ignoring removed orlov option [ 114.261320][ T786] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 114.275923][ T786] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 114.293281][ T786] usb 4-1: Product: syz [ 114.299566][ T786] usb 4-1: Manufacturer: syz [ 114.304271][ T786] usb 4-1: SerialNumber: syz [ 114.321765][ T786] usb 4-1: config 0 descriptor?? [ 114.337976][ T786] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 114.347921][ T6217] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 114.368149][ T786] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 114.403823][ T6217] EXT4-fs (loop1): 1 truncate cleaned up [ 114.427205][ T6217] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.643617][ T23] usb 4-1: USB disconnect, device number 3 [ 114.678190][ T23] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 114.819211][ T6225] loop0: detected capacity change from 0 to 1024 [ 114.836651][ T6225] EXT4-fs: inline encryption not supported [ 114.853799][ T6227] loop2: detected capacity change from 0 to 1024 [ 114.864162][ T6225] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 114.887795][ T6227] EXT4-fs: Ignoring removed bh option [ 114.930282][ T6227] EXT4-fs (loop2): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 114.947822][ T6225] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 114.977306][ T6227] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.046663][ T28] audit: type=1800 audit(1774710780.769:11): pid=6225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.136" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 115.096400][ T5774] EXT4-fs error (device loop1): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 46 (inode size 256) [ 115.146311][ T5774] EXT4-fs error (device loop1): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 46 (inode size 256) [ 115.238534][ T6235] EXT4-fs error (device loop2): ext4_find_dest_de:2115: inode #12: block 7: comm syz.2.135: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 115.338206][ T6225] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4059: comm syz.0.136: Allocating blocks 497-513 which overlap fs metadata [ 115.365517][ T6235] EXT4-fs (loop2): Remounting filesystem read-only [ 115.398870][ T6225] EXT4-fs (loop0): Remounting filesystem read-only [ 115.459603][ T6224] EXT4-fs (loop0): pa ffff88805a8dc570: logic 256, phys. 385, len 8 [ 115.595718][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.677436][ T5774] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.907131][ T5773] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.218156][ T6243] loop0: detected capacity change from 0 to 8 [ 116.687576][ T3495] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.773577][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 116.789410][ T5840] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 116.805561][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 116.813679][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 116.821600][ T3495] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.823292][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 116.858610][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 116.868406][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 116.929070][ T3495] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.996775][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 117.005975][ T5840] usb 4-1: Using ep0 maxpacket: 16 [ 117.020861][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 117.024221][ T5840] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 117.042216][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 117.050950][ T5840] usb 4-1: config 0 has no interface number 0 [ 117.058198][ T3495] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.072535][ T5840] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.085073][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 117.088372][ T5840] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.108759][ T5840] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 117.109302][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 117.131339][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.132468][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 117.152801][ T5840] usb 4-1: config 0 descriptor?? [ 117.496632][ T3495] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.535702][ T6249] chnl_net:caif_netlink_parms(): no params data found [ 117.606982][ T5840] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input2 [ 117.650066][ T3495] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.777858][ T3495] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.819013][ T23] usb 4-1: USB disconnect, device number 4 [ 117.868641][ T3495] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.886811][ T6249] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.894019][ T6249] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.907532][ T6249] bridge_slave_0: entered allmulticast mode [ 117.916476][ T6249] bridge_slave_0: entered promiscuous mode [ 117.929088][ T6249] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.944582][ T6249] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.952567][ T6249] bridge_slave_1: entered allmulticast mode [ 117.970241][ T6249] bridge_slave_1: entered promiscuous mode [ 118.075730][ T6249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.087003][ T6251] chnl_net:caif_netlink_parms(): no params data found [ 118.110253][ T6249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.196845][ T6249] team0: Port device team_slave_0 added [ 118.239617][ T6249] team0: Port device team_slave_1 added [ 118.361782][ T6249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.404847][ T6249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.450407][ T6249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.471282][ T6249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.478676][ T6249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.505814][ T6249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.718377][ T6249] hsr_slave_0: entered promiscuous mode [ 118.735404][ T6249] hsr_slave_1: entered promiscuous mode [ 118.751961][ T6249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.759877][ T6249] Cannot create hsr debugfs directory [ 118.885268][ T6251] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.904836][ T6251] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.912065][ T6251] bridge_slave_0: entered allmulticast mode [ 118.926666][ T6251] bridge_slave_0: entered promiscuous mode [ 118.942223][ T6251] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.949595][ T6251] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.956854][ T5782] Bluetooth: hci2: command tx timeout [ 118.964952][ T6251] bridge_slave_1: entered allmulticast mode [ 118.972441][ T6251] bridge_slave_1: entered promiscuous mode [ 119.169807][ T6251] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 119.188837][ T6251] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.204855][ T5782] Bluetooth: hci3: command tx timeout [ 119.301111][ T6251] team0: Port device team_slave_0 added [ 119.360769][ T6251] team0: Port device team_slave_1 added [ 119.426495][ T6251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.433614][ T6251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.467732][ T6251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.514892][ T6251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.522815][ T6251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.549394][ T6251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.734262][ T6251] hsr_slave_0: entered promiscuous mode [ 119.746104][ T6251] hsr_slave_1: entered promiscuous mode [ 119.752629][ T6251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 119.769777][ T6251] Cannot create hsr debugfs directory [ 119.883466][ T6249] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 119.940982][ T6249] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 120.060776][ T6249] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 120.090584][ T6249] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 120.319473][ C1] Illegal XDP return value 16128 on prog (id 7) dev veth0_to_bond, expect packet loss! [ 120.512066][ T6251] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 120.561175][ T6251] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 120.607956][ T6251] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 120.624281][ T6251] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 120.643906][ T6249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.667584][ T3495] hsr_slave_0: left promiscuous mode [ 120.673822][ T3495] hsr_slave_1: left promiscuous mode [ 120.681452][ T3495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.689119][ T3495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.698946][ T3495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.706907][ T3495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.714876][ T3495] bridge_slave_1: left allmulticast mode [ 120.720616][ T3495] bridge_slave_1: left promiscuous mode [ 120.728007][ T3495] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.741208][ T3495] bridge_slave_0: left allmulticast mode [ 120.749213][ T3495] bridge_slave_0: left promiscuous mode [ 120.755337][ T3495] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.771739][ T3495] hsr_slave_0: left promiscuous mode [ 120.778482][ T3495] hsr_slave_1: left promiscuous mode [ 120.784390][ T3495] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 120.791916][ T3495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 120.801354][ T3495] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 120.809128][ T3495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 120.817714][ T3495] bridge_slave_1: left allmulticast mode [ 120.823464][ T3495] bridge_slave_1: left promiscuous mode [ 120.829581][ T3495] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.843300][ T3495] bridge_slave_0: left allmulticast mode [ 120.850380][ T3495] bridge_slave_0: left promiscuous mode [ 120.856545][ T3495] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.901447][ T3495] veth1_macvtap: left promiscuous mode [ 120.907938][ T3495] veth0_macvtap: left promiscuous mode [ 120.914343][ T3495] veth1_vlan: left promiscuous mode [ 120.921684][ T3495] veth0_vlan: left promiscuous mode [ 120.933208][ T3495] veth1_macvtap: left promiscuous mode [ 120.940128][ T3495] veth0_macvtap: left promiscuous mode [ 120.946269][ T3495] veth1_vlan: left promiscuous mode [ 120.951640][ T3495] veth0_vlan: left promiscuous mode [ 121.034804][ T5782] Bluetooth: hci2: command tx timeout [ 121.275258][ T5782] Bluetooth: hci3: command tx timeout [ 121.753968][ T3495] team0 (unregistering): Port device team_slave_1 removed [ 121.804028][ T3495] team0 (unregistering): Port device team_slave_0 removed [ 121.862931][ T3495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.912051][ T3495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 122.254495][ T3495] bond0 (unregistering): Released all slaves [ 122.817247][ T3495] team0 (unregistering): Port device team_slave_1 removed [ 122.860777][ T3495] team0 (unregistering): Port device team_slave_0 removed [ 122.911881][ T3495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 122.960640][ T3495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.115552][ T5782] Bluetooth: hci2: command tx timeout [ 123.310712][ T3495] bond0 (unregistering): Released all slaves [ 123.355674][ T5782] Bluetooth: hci3: command tx timeout [ 123.439706][ T6249] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.480575][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.487815][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.521200][ T1133] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.529352][ T1133] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.790812][ T6251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.887444][ T6251] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.913889][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.921169][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.958818][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.966120][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.216433][ T6249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.533068][ T6251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.842875][ T6249] veth0_vlan: entered promiscuous mode [ 124.871421][ T6249] veth1_vlan: entered promiscuous mode [ 124.937810][ T6249] veth0_macvtap: entered promiscuous mode [ 124.955552][ T6249] veth1_macvtap: entered promiscuous mode [ 125.005768][ T6249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.034069][ T6249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.054670][ T6249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.074175][ T6249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.087229][ T6249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.114160][ T6249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.131780][ T6249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.145471][ T6249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.161852][ T6249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.174134][ T6249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.196685][ T5782] Bluetooth: hci2: command tx timeout [ 125.232997][ T6249] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.250110][ T6249] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.260310][ T6249] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.274799][ T6249] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.343732][ T6251] veth0_vlan: entered promiscuous mode [ 125.436166][ T5782] Bluetooth: hci3: command tx timeout [ 125.456028][ T6251] veth1_vlan: entered promiscuous mode [ 125.467031][ T2959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.494210][ T2959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.568791][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.574489][ T6251] veth0_macvtap: entered promiscuous mode [ 125.590657][ T6251] veth1_macvtap: entered promiscuous mode [ 125.596934][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.657791][ T6251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.693964][ T6251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.704914][ T6251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.719657][ T6251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.730739][ T6251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.741757][ T6251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.756414][ T6251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.802798][ T6251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.815300][ T6251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.825707][ T6251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.869719][ T6251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.899178][ T6251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.924751][ T6251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.965530][ T6251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.071217][ T6251] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.119276][ T6251] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.148912][ T6251] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.163742][ T6357] loop4: detected capacity change from 0 to 512 [ 126.180338][ T6251] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.230799][ T6357] EXT4-fs (loop4): 1 truncate cleaned up [ 126.288147][ T6357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.383669][ T28] audit: type=1800 audit(1774710792.099:12): pid=6357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.148" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 126.407706][ T6363] loop3: detected capacity change from 0 to 8 [ 126.604983][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.612899][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.636078][ T6363] SQUASHFS error: Failed to read block 0x2fc: -5 [ 126.672270][ T6363] SQUASHFS error: Unable to read metadata cache entry [2fa] [ 126.686129][ T6363] SQUASHFS error: Unable to read directory block [2fa:0] [ 126.736117][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.744064][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.927826][ T6249] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.473401][ T6358] loop0: detected capacity change from 0 to 32768 [ 127.526640][ T6358] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.158 (6358) [ 127.632364][ T6358] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 127.668331][ T6358] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 127.706393][ T6358] BTRFS info (device loop0): using free space tree [ 128.052740][ T6358] BTRFS info (device loop0): enabling ssd optimizations [ 128.071550][ T6358] BTRFS info (device loop0): auto enabling async discard [ 128.356640][ T6358] BTRFS error (device loop0): balance: invalid convert data profile single [ 128.716625][ T6385] loop4: detected capacity change from 0 to 32768 [ 128.765596][ T6385] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.157 (6385) [ 128.780960][ T5770] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 128.836954][ T6385] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 128.892322][ T6385] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 128.925788][ T6385] BTRFS info (device loop4): using free space tree [ 129.259220][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 129.269349][ T6385] BTRFS info (device loop4): enabling ssd optimizations [ 129.294747][ T6385] BTRFS info (device loop4): auto enabling async discard [ 129.466536][ T9] usb 6-1: config 0 has no interfaces? [ 129.472126][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.504965][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.579962][ T9] usb 6-1: config 0 descriptor?? [ 129.608164][ T786] hid-generic 0005:15C2:0000.0003: item fetching failed at offset 0/1 [ 129.636163][ T786] hid-generic: probe of 0005:15C2:0000.0003 failed with error -22 [ 130.032576][ T6412] loop3: detected capacity change from 0 to 40427 [ 130.047466][ T6249] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 130.079276][ T6412] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 130.128320][ T6412] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 130.159284][ T5840] usb 6-1: USB disconnect, device number 2 [ 130.191834][ T6412] F2FS-fs (loop3): Found nat_bits in checkpoint [ 130.464444][ T6412] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 130.503490][ T6412] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 130.674997][ T967] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 130.894681][ T967] usb 1-1: Using ep0 maxpacket: 32 [ 130.926820][ T967] usb 1-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.969796][ T967] usb 1-1: config 1 interface 0 has no altsetting 0 [ 131.012515][ T967] usb 1-1: New USB device found, idVendor=0b05, idProduct=1822, bcdDevice= 0.40 [ 131.039736][ T967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.058312][ T967] usb 1-1: Product: syz [ 131.063678][ T967] usb 1-1: Manufacturer: syz [ 131.068898][ T967] usb 1-1: SerialNumber: syz [ 131.316785][ T967] usbhid 1-1:1.0: can't add hid device: -71 [ 131.337826][ T967] usbhid: probe of 1-1:1.0 failed with error -71 [ 131.383155][ T967] usb 1-1: USB disconnect, device number 4 [ 132.477260][ T6502] netlink: 32 bytes leftover after parsing attributes in process `syz.3.177'. [ 132.613029][ T6506] IPv6: NLM_F_CREATE should be specified when creating new route [ 132.883914][ T6518] netlink: 'syz.4.184': attribute type 32 has an invalid length. [ 132.883986][ T6518] netlink: 20 bytes leftover after parsing attributes in process `syz.4.184'. [ 132.884079][ T6518] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 133.122645][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.130584][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.709352][ T6512] loop3: detected capacity change from 0 to 32768 [ 134.172444][ T6523] loop0: detected capacity change from 0 to 32768 [ 134.272004][ T6523] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 134.411067][ T6523] XFS (loop0): Ending clean mount [ 134.629546][ T28] audit: type=1804 audit(1774710800.339:13): pid=6523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.185" name="/newroot/49/file1/file1" dev="loop0" ino=6150 res=1 errno=0 [ 134.840353][ T5770] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 135.399069][ T6579] loop3: detected capacity change from 0 to 4096 [ 136.582091][ T6609] loop5: detected capacity change from 0 to 4096 [ 137.616592][ T6637] loop0: detected capacity change from 0 to 256 [ 137.670106][ T6637] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x32e3664b, utbl_chksum : 0xe619d30d) [ 138.044482][ T6647] loop0: detected capacity change from 0 to 512 [ 138.056391][ T6647] EXT4-fs: Ignoring removed nomblk_io_submit option [ 138.110168][ T6647] EXT4-fs error (device loop0): ext4_orphan_get:1398: inode #15: comm syz.0.221: iget: bad extended attribute block 262144 [ 138.139356][ T6647] EXT4-fs error (device loop0): ext4_orphan_get:1403: comm syz.0.221: couldn't read orphan inode 15 (err -117) [ 138.170112][ T6647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.378181][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.422347][ T5820] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 138.614759][ T5820] usb 6-1: Using ep0 maxpacket: 8 [ 138.636859][ T5820] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 138.654774][ T5820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.697586][ T5820] pvrusb2: Hardware description: Terratec Grabster AV400 [ 138.726331][ T5820] pvrusb2: ********** [ 138.740144][ T5820] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 138.784736][ T5820] pvrusb2: Important functionality might not be entirely working. [ 138.813174][ T5820] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 138.831553][ T6667] loop0: detected capacity change from 0 to 2048 [ 138.838879][ T5820] pvrusb2: ********** [ 138.918032][ T2321] pvrusb2: Invalid write control endpoint [ 138.963309][ T6669] loop3: detected capacity change from 0 to 2048 [ 138.969927][ T6667] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 139.021797][ T5978] udevd[5978]: incorrect nilfs2 checksum on /dev/loop0 [ 139.045488][ T6669] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 139.087133][ T6669] NILFS (loop3): mounting unchecked fs [ 139.126592][ T6673] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 139.196009][ T6669] NILFS (loop3): recovery complete [ 139.221203][ T2321] pvrusb2: Invalid write control endpoint [ 139.234809][ T2321] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 139.246124][ T6674] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 139.286634][ T2321] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 139.311053][ T2321] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 139.325248][ T2321] pvrusb2: Device being rendered inoperable [ 139.354478][ T6650] pvrusb2: Attempted to execute control transfer when device not ok [ 139.387145][ T2321] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 139.398389][ T5819] usb 6-1: USB disconnect, device number 3 [ 139.418557][ T2321] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 139.475748][ T2321] pvrusb2: Attached sub-driver cx25840 [ 139.505027][ T2321] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 139.549341][ T2321] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 139.678619][ T6681] input: syz0 as /devices/virtual/input/input7 [ 139.917670][ T6663] loop4: detected capacity change from 0 to 32768 [ 140.039643][ T6663] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 140.236710][ T6663] XFS (loop4): Ending clean mount [ 140.389888][ T6249] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 140.594988][ T6707] loop5: detected capacity change from 0 to 4096 [ 140.863249][ T6718] comedi: valid board names for 8255 driver are: [ 140.905058][ T6707] ntfs3: loop5: Failed to initialize $Extend/$ObjId. [ 140.913586][ T6718] 8255 [ 140.919059][ T6718] comedi: valid board names for vmk80xx driver are: [ 140.975020][ T6718] vmk80xx [ 140.984920][ T6718] comedi: valid board names for usbduxsigma driver are: [ 141.009500][ T6718] usbduxsigma [ 141.031477][ T6718] comedi: valid board names for usbduxfast driver are: [ 141.055038][ T6718] usbduxfast [ 141.068357][ T6718] comedi: valid board names for usbdux driver are: [ 141.099584][ T6718] usbdux [ 141.105024][ T6718] comedi: valid board names for ni6501 driver are: [ 141.148236][ T6718] ni6501 [ 141.154558][ T6718] comedi: valid board names for dt9812 driver are: [ 141.174722][ T6718] dt9812 [ 141.188031][ T6718] comedi: valid board names for ni_labpc_cs driver are: [ 141.224905][ T6718] ni_labpc_cs [ 141.248645][ T6718] comedi: valid board names for ni_daq_700 driver are: [ 141.272556][ T6718] ni_daq_700 [ 141.285106][ T6718] comedi: valid board names for labpc_pci driver are: [ 141.314059][ T6718] labpc_pci [ 141.327918][ T6718] comedi: valid board names for adl_pci9118 driver are: [ 141.363023][ T6718] pci9118dg [ 141.374819][ T6718] pci9118hg [ 141.385042][ T6718] pci9118hr [ 141.399267][ T6718] comedi: valid board names for 8255_pci driver are: [ 141.416443][ T6718] 8255_pci [ 141.439147][ T6718] comedi: valid board names for s526 driver are: [ 141.460784][ T6718] s526 [ 141.470903][ T6718] comedi: valid board names for multiq3 driver are: [ 141.510211][ T6718] multiq3 [ 141.515832][ T6718] comedi: valid board names for pcmuio driver are: [ 141.535440][ T6730] loop4: detected capacity change from 0 to 1024 [ 141.546419][ T6718] pcmuio48 [ 141.550006][ T6718] pcmuio96 [ 141.560963][ T6718] comedi: valid board names for pcmmio driver are: [ 141.599985][ T6718] pcmmio [ 141.637689][ T6718] comedi: valid board names for pcmda12 driver are: [ 141.683087][ T6718] pcmda12 [ 141.692488][ T6730] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 141.706335][ T6718] comedi: valid board names for pcmad driver are: [ 141.744884][ T6730] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 141.757835][ T6718] pcmad12 [ 141.760929][ T6718] pcmad16 [ 141.764004][ T6718] comedi: valid board names for ni_labpc driver are: [ 141.792147][ T6730] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.242: Failed to acquire dquot type 0 [ 141.794936][ T6718] lab-pc-1200 [ 141.828257][ T6718] lab-pc-1200ai [ 141.831905][ T6718] lab-pc+ [ 141.835879][ T6718] comedi: valid board names for atmio16 driver are: [ 141.845827][ T6712] loop0: detected capacity change from 0 to 40427 [ 141.847950][ T6730] EXT4-fs error (device loop4): mb_free_blocks:1970: group 0, inode 13: block 160:freeing already freed block (bit 10); block bitmap corrupt. [ 141.867470][ T6718] atmio16 [ 141.867485][ T6718] atmio16d [ 141.873709][ T6718] comedi: valid board names for ni_at_ao driver are: [ 141.889275][ T6712] F2FS-fs (loop0): Insane cp_payload (553648128 >= 504) [ 141.901291][ T6712] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 141.909936][ T6718] at-ao-6 [ 141.920816][ T6718] at-ao-10 [ 141.924015][ T6718] comedi: valid board names for ni_at_a2150 driver are: [ 141.947923][ T6730] EXT4-fs (loop4): 1 truncate cleaned up [ 141.952696][ T6712] F2FS-fs (loop0): invalid crc value [ 141.964561][ T6718] ni_at_a2150 [ 141.969856][ T6730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.972409][ T6718] comedi: valid board names for adq12b driver are: [ 142.007957][ T6712] F2FS-fs (loop0): Found nat_bits in checkpoint [ 142.045233][ T6718] adq12b [ 142.048264][ T6718] comedi: valid board names for mpc624 driver are: [ 142.056106][ T6730] Quota error (device loop4): do_check_range: Getting block 64 out of range 1-5 [ 142.084868][ T6718] mpc624 [ 142.087898][ T6718] comedi: valid board names for c6xdigio driver are: [ 142.098051][ T6730] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 142.120145][ T6718] c6xdigio [ 142.123338][ T6718] comedi: valid board names for aio_iiro_16 driver are: [ 142.165118][ T6730] EXT4-fs error (device loop4): ext4_acquire_dquot:6949: comm syz.4.242: Failed to acquire dquot type 0 [ 142.173050][ T6718] aio_iiro_16 [ 142.193300][ T6718] comedi: valid board names for aio_aio12_8 driver are: [ 142.224334][ T6718] aio_aio12_8 [ 142.239760][ T6718] aio_ai12_8 [ 142.243139][ T6718] aio_ao12_4 [ 142.260324][ T6712] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 142.268445][ T6718] comedi: valid board names for fl512 driver are: [ 142.294890][ T6712] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 142.304771][ T6718] fl512 [ 142.310316][ T6718] comedi: valid board names for dmm32at driver are: [ 142.346628][ T6718] dmm32at [ 142.349755][ T6718] comedi: valid board names for dt282x driver are: [ 142.393826][ T6718] dt2821 [ 142.414733][ T6718] dt2821-f [ 142.417940][ T6718] dt2821-g [ 142.421104][ T6718] dt2823 [ 142.432444][ T6249] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.448939][ T6718] dt2824-pgh [ 142.452314][ T6718] dt2824-pgl [ 142.499509][ T6718] dt2825 [ 142.502539][ T6718] dt2827 [ 142.535273][ T6718] dt2828 [ 142.538345][ T6718] dt2829 [ 142.577597][ T6718] dt21-ez [ 142.580721][ T6718] dt23-ez [ 142.583785][ T6718] dt24-ez [ 142.610192][ T6718] dt24-ez-pgl [ 142.613711][ T6718] comedi: valid board names for dt2817 driver are: [ 142.635341][ T6718] dt2817 [ 142.638384][ T6718] comedi: valid board names for dt2815 driver are: [ 142.654841][ T6718] dt2815 [ 142.663545][ T6718] comedi: valid board names for dt2814 driver are: [ 142.670632][ T6718] dt2814 [ 142.673705][ T6718] comedi: valid board names for dt2811 driver are: [ 142.675333][ T8] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 142.686082][ T5770] syz-executor: attempt to access beyond end of device [ 142.686082][ T5770] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 142.709629][ T6718] dt2811-pgh [ 142.713002][ T6718] dt2811-pgl [ 142.721453][ T5770] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 142.732639][ T6718] comedi: valid board names for dt2801 driver are: [ 142.765420][ T6718] dt2801 [ 142.768620][ T6718] comedi: valid board names for das6402 driver are: [ 142.777957][ T6718] das6402-12 [ 142.786358][ T6718] das6402-16 [ 142.798209][ T6718] comedi: valid board names for das1800 driver are: [ 142.814317][ T6718] das-1701st [ 142.830380][ T6718] das-1701st-da [ 142.834017][ T6718] das-1702st [ 142.841468][ T6718] das-1702st-da [ 142.857335][ T6718] das-1702hr [ 142.865867][ T6718] das-1702hr-da [ 142.874342][ T6718] das-1701ao [ 142.882273][ T6718] das-1702ao [ 142.891588][ T6718] das-1801st [ 142.901739][ T6718] das-1801st-da [ 142.905513][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 142.910797][ T6718] das-1802st [ 142.916748][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.944095][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 142.956611][ T6718] das-1802st-da [ 142.960233][ T6718] das-1802hr [ 142.963555][ T6718] das-1802hr-da [ 142.972612][ T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 142.982581][ T6718] das-1801hc [ 142.988778][ T6718] das-1802hc [ 142.992127][ T6718] das-1801ao [ 143.008252][ T6718] das-1802ao [ 143.011599][ T6718] comedi: valid board names for das800 driver are: [ 143.025904][ T8] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 143.045441][ T6718] das-800 [ 143.054683][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.076614][ T6718] cio-das800 [ 143.079984][ T6718] das-801 [ 143.093321][ T6718] cio-das801 [ 143.098208][ T6718] das-802 [ 143.101315][ T6718] cio-das802 [ 143.115614][ T6718] cio-das802/16 [ 143.120531][ T8] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 143.134768][ T6718] comedi: valid board names for isa-das08 driver are: [ 143.141720][ T8] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 143.154690][ T6718] isa-das08 [ 143.158867][ T6718] das08-pgm [ 143.172341][ T8] usb 6-1: Manufacturer: syz [ 143.177794][ T6718] das08-pgh [ 143.181058][ T6718] das08-pgl [ 143.194586][ T6718] das08-aoh [ 143.198352][ T6718] das08-aol [ 143.201590][ T6718] das08-aom [ 143.206604][ T8] usb 6-1: config 0 descriptor?? [ 143.224430][ T6718] das08/jr-ao [ 143.234789][ T6718] das08jr-16-ao [ 143.247806][ T6718] pc104-das08 [ 143.273367][ T6718] das08jr/16 [ 143.284921][ T6718] comedi: valid board names for das16m1 driver are: [ 143.291611][ T6718] das16m1 [ 143.319036][ T6718] comedi: valid board names for dac02 driver are: [ 143.334681][ T6718] dac02 [ 143.345430][ T6718] comedi: valid board names for rti802 driver are: [ 143.372841][ T6718] rti802 [ 143.384860][ T6718] comedi: valid board names for rti800 driver are: [ 143.391435][ T6718] rti800 [ 143.394411][ T6718] rti815 [ 143.419167][ T6718] comedi: valid board names for pcm3724 driver are: [ 143.426656][ T6718] pcm3724 [ 143.429955][ T6718] comedi: valid board names for pcl818 driver are: [ 143.444573][ T6718] pcl818l [ 143.455754][ T6718] pcl818h [ 143.458942][ T6718] pcl818hd [ 143.462084][ T6718] pcl818hg [ 143.467576][ T6747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.495063][ T6718] pcl818 [ 143.498084][ T6718] pcl718 [ 143.506493][ T6747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.519786][ T6718] pcm3718 [ 143.522881][ T6718] comedi: valid board names for pcl816 driver are: [ 143.556092][ T6718] pcl816 [ 143.565166][ T6718] pcl814b [ 143.579888][ T6718] comedi: valid board names for pcl812 driver are: [ 143.595292][ T6718] pcl812 [ 143.605431][ T6718] pcl812pg [ 143.608630][ T6718] acl8112pg [ 143.622133][ T6718] acl8112dg [ 143.634986][ T6718] acl8112hg [ 143.638269][ T6718] a821pgl [ 143.641333][ T6718] a821pglnda [ 143.690755][ T6718] a821pgh [ 143.693869][ T6718] a822pgl [ 143.698322][ T6718] a822pgh [ 143.701556][ T6718] a823pgl [ 143.708179][ T6718] a823pgh [ 143.711283][ T6718] pcl813 [ 143.714354][ T6718] pcl813b [ 143.724483][ T6718] acl8113 [ 143.735768][ T6718] iso813 [ 143.738770][ T6718] acl8216 [ 143.741830][ T6718] a826pg [ 143.750418][ T6718] comedi: valid board names for pcl730 driver are: [ 143.764287][ T6718] pcl730 [ 143.778027][ T6718] iso730 [ 143.781350][ T6718] acl7130 [ 143.795012][ T8] rc_core: IR keymap rc-hauppauge not found [ 143.800689][ T6718] pcm3730 [ 143.806900][ T8] Registered IR keymap rc-empty [ 143.812016][ T6718] pcl725 [ 143.819494][ T6718] p8r8dio [ 143.822585][ T6718] acl7225b [ 143.829714][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 143.843758][ T6718] p16r16dio [ 143.852892][ T6718] pcl733 [ 143.864747][ T6718] pcl734 [ 143.867760][ T6718] opmm-1616-xt [ 143.886917][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 143.888399][ T6718] pearl-mm-p [ 143.923450][ T6718] ir104-pbf [ 143.936510][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 143.937298][ T6718] comedi: valid board names for pcl726 driver are: [ 143.993890][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input8 [ 144.017263][ T6718] pcl726 [ 144.020364][ T6718] pcl727 [ 144.023343][ T6718] pcl728 [ 144.036036][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 144.043851][ T6718] acl6126 [ 144.047619][ T6718] acl6128 [ 144.050702][ T6718] comedi: valid board names for pcl724 driver are: [ 144.069128][ T6718] pcl724 [ 144.072165][ T6718] pcl722 [ 144.088989][ T6718] pcl731 [ 144.092011][ T6718] acl7122 [ 144.109010][ T6718] acl7124 [ 144.112191][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 144.139383][ T6718] pet48dio [ 144.150454][ T6718] pcmio48 [ 144.164797][ T6718] onyx-mm-dio [ 144.175067][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 144.184711][ T6718] comedi: valid board names for pcl711 driver are: [ 144.211847][ T6769] loop0: detected capacity change from 0 to 4096 [ 144.221827][ T6718] pcl711 [ 144.233097][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 144.235614][ T6718] pcl711b [ 144.269835][ T6718] acl8112hg [ 144.273118][ T6718] acl8112dg [ 144.285370][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 144.289990][ T6718] comedi: valid board names for amplc_pc263 driver are: [ 144.336762][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 144.340432][ T6718] pc263 [ 144.355000][ T6718] comedi: valid board names for amplc_pc236 driver are: [ 144.362111][ T6718] pc36at [ 144.374365][ T6718] comedi: valid board names for amplc_dio200 driver are: [ 144.384933][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 144.402526][ T6718] pc212e [ 144.405970][ T6718] pc214e [ 144.411802][ T6718] pc215e [ 144.415942][ T6718] pc218e [ 144.418934][ T6718] pc272e [ 144.425814][ T6718] comedi: valid board names for comedi_parport driver are: [ 144.443459][ T6718] comedi_parport [ 144.454488][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 144.471091][ T6718] comedi: valid board names for comedi_test driver are: [ 144.503434][ T6718] comedi_test [ 144.514825][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 144.528344][ T6718] comedi: valid board names for comedi_bond driver are: [ 144.550918][ T6718] comedi_bond [ 144.562522][ T8] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 144.626939][ T8] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 144.685326][ T8] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 144.748947][ T8] usb 6-1: USB disconnect, device number 4 [ 145.057558][ T6789] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 145.369834][ T28] audit: type=1107 audit(1774710811.089:14): pid=6799 uid=0 auid=0 ses=1 subj=unconfined msg='' [ 145.831608][ T6816] loop0: detected capacity change from 0 to 256 [ 145.876638][ T6815] C: renamed from team_slave_0 (while UP) [ 145.916636][ T6815] netlink: 'syz.4.263': attribute type 4 has an invalid length. [ 145.942310][ T6784] loop3: detected capacity change from 0 to 32768 [ 145.942722][ T6816] FAT-fs (loop0): Directory bread(block 64) failed [ 145.955318][ T6815] netlink: 116 bytes leftover after parsing attributes in process `syz.4.263'. [ 145.977597][ T6816] FAT-fs (loop0): Directory bread(block 65) failed [ 145.987741][ T6815] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 146.019999][ T6816] FAT-fs (loop0): Directory bread(block 66) failed [ 146.028643][ T6816] FAT-fs (loop0): Directory bread(block 67) failed [ 146.035764][ T6816] FAT-fs (loop0): Directory bread(block 68) failed [ 146.042499][ T6816] FAT-fs (loop0): Directory bread(block 69) failed [ 146.050143][ T6816] FAT-fs (loop0): Directory bread(block 70) failed [ 146.057173][ T6816] FAT-fs (loop0): Directory bread(block 71) failed [ 146.063854][ T6816] FAT-fs (loop0): Directory bread(block 72) failed [ 146.071259][ T6816] FAT-fs (loop0): Directory bread(block 73) failed [ 146.148167][ T6784] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 146.250281][ T6833] netlink: 8 bytes leftover after parsing attributes in process `syz.5.266'. [ 146.582733][ T6784] XFS (loop3): Starting recovery (logdev: internal) [ 146.650143][ T6840] loop5: detected capacity change from 0 to 128 [ 146.700052][ T6840] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 146.743224][ T6840] hpfs: filesystem error: improperly stopped [ 146.749724][ T6840] hpfs: You really don't want any checks? You are crazy... [ 146.764853][ T6784] XFS (loop3): Ending recovery (logdev: internal) [ 146.816974][ T6840] hpfs: hpfs_map_sector(): read error [ 146.822879][ T6840] hpfs: code page support is disabled [ 146.864591][ T6840] hpfs: hpfs_map_4sectors(): unaligned read [ 146.925653][ T6840] hpfs: hpfs_map_4sectors(): unaligned read [ 146.931684][ T6840] hpfs: filesystem error: unable to find root dir [ 147.023852][ T6847] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.271'. [ 147.308669][ T5771] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 148.220439][ T6846] loop4: detected capacity change from 0 to 32768 [ 148.350139][ T6846] read_mapping_page failed! [ 148.375868][ T6846] ERROR: (device loop4): txCommit: [ 148.375868][ T6846] [ 148.431666][ T6881] jfs_unlink: dtDelete returned -116 [ 148.469904][ T6881] jfs_unlink: dtDelete returned -116 [ 149.097074][ T6872] loop5: detected capacity change from 0 to 32768 [ 149.160877][ T6893] loop4: detected capacity change from 0 to 1024 [ 149.213382][ T6893] EXT4-fs: Ignoring removed nomblk_io_submit option [ 149.253724][ T6893] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 149.285938][ T6893] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 149.340921][ T6893] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0003] [ 149.429333][ T6893] System zones: 0-1, 3-36 [ 149.480682][ T6893] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.496874][ T6900] netlink: 'syz.3.288': attribute type 29 has an invalid length. [ 149.515437][ T6900] netlink: 'syz.3.288': attribute type 29 has an invalid length. [ 149.538053][ T6902] netlink: 'syz.3.288': attribute type 29 has an invalid length. [ 149.604885][ T6900] netlink: 'syz.3.288': attribute type 29 has an invalid length. [ 149.623061][ T6905] loop0: detected capacity change from 0 to 512 [ 149.694814][ T6905] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 149.748531][ T6905] EXT4-fs (loop0): 1 truncate cleaned up [ 149.796011][ T6905] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.163900][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.279088][ T6249] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.947763][ T6941] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 150.956318][ T6941] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 150.964374][ T6941] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 150.972417][ T6941] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 150.980439][ T6941] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 150.988476][ T6941] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 150.996471][ T6941] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 151.004436][ T6941] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 151.012462][ T6941] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 151.020513][ T6941] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 151.028612][ T6941] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 151.036611][ T6941] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 151.044708][ T6941] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 151.052686][ T6941] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 151.060712][ T6941] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 151.068692][ T6941] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 151.256157][ T6951] loop4: detected capacity change from 0 to 256 [ 151.268686][ T6949] sp0: Synchronizing with TNC [ 151.563545][ T6960] loop4: detected capacity change from 0 to 1024 [ 151.616303][ T6960] EXT4-fs: Ignoring removed orlov option [ 151.640950][ T6960] EXT4-fs (loop4): stripe (9) is not aligned with cluster size (16), stripe is disabled [ 151.733737][ T6960] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.206171][ T6249] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.417868][ T6986] sctp: [Deprecated]: syz.0.314 (pid 6986) Use of struct sctp_assoc_value in delayed_ack socket option. [ 152.417868][ T6986] Use struct sctp_sack_info instead [ 152.597304][ T6992] process 'syz.3.315' launched './file1' with NULL argv: empty string added [ 152.709187][ T6994] loop0: detected capacity change from 0 to 256 [ 152.998515][ T6958] loop5: detected capacity change from 0 to 40427 [ 153.056703][ T6958] F2FS-fs (loop5): heap/no_heap options were deprecated [ 153.108344][ T6958] F2FS-fs (loop5): Image doesn't support compression [ 153.145858][ T6958] F2FS-fs (loop5): heap/no_heap options were deprecated [ 153.198133][ T6958] F2FS-fs (loop5): invalid crc value [ 153.207781][ T7004] loop0: detected capacity change from 0 to 512 [ 153.234830][ T6958] F2FS-fs (loop5): Found nat_bits in checkpoint [ 153.302979][ T7004] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 153.368038][ T7004] EXT4-fs (loop0): 1 truncate cleaned up [ 153.388335][ T7004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.565457][ T6958] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 153.752830][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.940145][ T6251] syz-executor: attempt to access beyond end of device [ 153.940145][ T6251] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 153.982624][ T6251] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 154.339051][ T6996] loop4: detected capacity change from 0 to 40427 [ 154.391751][ T6996] F2FS-fs (loop4): invalid crc value [ 154.749567][ T6996] F2FS-fs (loop4): Start checkpoint disabled! [ 154.760285][ T6996] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 155.226684][ T7055] netlink: 56 bytes leftover after parsing attributes in process `syz.5.324'. [ 155.638444][ T7044] loop0: detected capacity change from 0 to 32768 [ 155.674946][ T7044] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.330 (7044) [ 155.724130][ T7044] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 155.750575][ T7044] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 155.781376][ T7044] BTRFS info (device loop0): enabling auto defrag [ 155.793708][ T7044] BTRFS info (device loop0): use no compression [ 155.808300][ T7044] BTRFS info (device loop0): force clearing of disk cache [ 155.825513][ T7044] BTRFS info (device loop0): max_inline at 4096 [ 155.837579][ T7044] BTRFS info (device loop0): disabling free space tree [ 156.114554][ T7044] BTRFS info (device loop0): enabling ssd optimizations [ 156.169380][ T7044] BTRFS info (device loop0): auto enabling async discard [ 156.226401][ T7044] BTRFS info (device loop0): rebuilding free space tree [ 156.413836][ T7044] BTRFS info (device loop0): disabling free space tree [ 156.445068][ T7044] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 156.482729][ T7044] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 157.012651][ T5770] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 157.110095][ T5819] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 157.315379][ T5819] usb 5-1: Using ep0 maxpacket: 16 [ 157.322715][ T5819] usb 5-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.348511][ T5819] usb 5-1: config 0 interface 0 has no altsetting 0 [ 157.348998][ T967] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 157.367697][ T5819] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 157.377327][ T5819] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.409775][ T5819] usb 5-1: config 0 descriptor?? [ 157.587961][ T967] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 157.612606][ T967] usb 4-1: config 0 has no interface number 0 [ 157.644974][ T967] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 157.679383][ T967] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 157.694819][ T967] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 157.721378][ T967] usb 4-1: Manufacturer: syz [ 157.739521][ T7127] loop0: detected capacity change from 0 to 1024 [ 157.744748][ T967] usb 4-1: SerialNumber: syz [ 157.763298][ T967] usb 4-1: config 0 descriptor?? [ 157.842473][ T7127] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.878309][ T5819] mcp2221 0003:04D8:00DD.0004: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 158.393192][ T967] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.214/input/input9 [ 158.407729][ T5822] usb 5-1: USB disconnect, device number 2 [ 158.681658][ T5819] usb 4-1: USB disconnect, device number 5 [ 158.745440][ T28] audit: type=1800 audit(1774710824.469:15): pid=7127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.343" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 158.855790][ T5820] IPVS: starting estimator thread 0... [ 158.880850][ T7150] net_ratelimit: 38 callbacks suppressed [ 158.880873][ T7150] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 158.934517][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 158.958553][ T7151] IPVS: using max 19 ests per chain, 45600 per kthread [ 159.864716][ T786] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 160.080142][ T786] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 160.111120][ T786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.142755][ T786] usb 5-1: config 0 descriptor?? [ 160.173873][ T786] cp210x 5-1:0.0: cp210x converter detected [ 160.344180][ T7169] loop3: detected capacity change from 0 to 32768 [ 160.463145][ T7169] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 160.606478][ T786] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 160.646218][ T786] usb 5-1: cp210x converter now attached to ttyUSB0 [ 160.924434][ T786] usb 5-1: USB disconnect, device number 3 [ 160.960209][ T7207] loop7: detected capacity change from 0 to 7 [ 160.982107][ T786] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 161.018249][ T7207] Dev loop7: unable to read RDB block 7 [ 161.046609][ T786] cp210x 5-1:0.0: device disconnected [ 161.065849][ T7207] loop7: unable to read partition table [ 161.072128][ T7207] loop7: partition table beyond EOD, truncated [ 161.101799][ T7207] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 161.112462][ T7169] XFS (loop3): Ending clean mount [ 161.147549][ T7169] XFS (loop3): Quotacheck needed: Please wait. [ 161.232886][ T7169] XFS (loop3): Quotacheck: Done. [ 161.372503][ T28] audit: type=1800 audit(1774710827.079:16): pid=7169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.356" name="file1" dev="loop3" ino=9286 res=0 errno=0 [ 161.439074][ T28] audit: type=1800 audit(1774710827.079:17): pid=7169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.356" name="file1" dev="loop3" ino=9286 res=0 errno=0 [ 161.547263][ T5771] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 162.335257][ T7237] nbd: socks must be embedded in a SOCK_ITEM attr [ 162.352383][ T7237] block nbd0: shutting down sockets [ 162.387550][ T7239] loop3: detected capacity change from 0 to 512 [ 162.517507][ T7225] loop0: detected capacity change from 0 to 32768 [ 162.556015][ T7239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 162.601088][ T7239] ext4 filesystem being mounted at /89/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.646496][ T7225] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 162.875847][ T7225] XFS (loop0): Ending clean mount [ 162.925707][ T7225] XFS (loop0): Quotacheck needed: Please wait. [ 162.966889][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 163.044826][ T967] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 163.061207][ T7225] XFS (loop0): Quotacheck: Done. [ 163.202601][ T5770] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 163.249253][ T967] usb 5-1: Using ep0 maxpacket: 16 [ 163.263720][ T967] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 163.283360][ T967] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 163.294313][ T967] usb 5-1: Product: syz [ 163.298911][ T967] usb 5-1: Manufacturer: syz [ 163.303564][ T967] usb 5-1: SerialNumber: syz [ 163.325658][ T967] usb 5-1: config 0 descriptor?? [ 163.534666][ T7267] program syz.5.377 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.741840][ T967] usb 5-1: USB disconnect, device number 4 [ 163.759589][ T7271] loop5: detected capacity change from 0 to 256 [ 163.787990][ T7271] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 163.913545][ T7273] loop0: detected capacity change from 0 to 4096 [ 164.001903][ T7276] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.678229][ T7296] loop0: detected capacity change from 0 to 1024 [ 164.713822][ T7296] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 164.738175][ T7296] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.840642][ T7296] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.388: bg 0: block 112: padding at end of block bitmap is not set [ 164.893820][ T11] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #15: block 3: comm kworker/u4:0: lblock 3 mapped to illegal pblock 3 (length 3) [ 164.911429][ T786] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 164.929793][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 164.965244][ T11] EXT4-fs (loop0): This should not happen!! Data will be lost [ 164.965244][ T11] [ 164.981406][ T11] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #15: block 8: comm kworker/u4:0: lblock 8 mapped to illegal pblock 8 (length 5) [ 164.998828][ T11] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 165.011766][ T11] EXT4-fs (loop0): This should not happen!! Data will be lost [ 165.011766][ T11] [ 165.026901][ T5770] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 165.051791][ T7305] loop3: detected capacity change from 0 to 2048 [ 165.095321][ T786] usb 5-1: Using ep0 maxpacket: 16 [ 165.116302][ T786] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 165.141581][ T786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.150656][ T7305] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 165.169960][ T786] usb 5-1: Product: syz [ 165.195140][ T786] usb 5-1: Manufacturer: syz [ 165.199835][ T786] usb 5-1: SerialNumber: syz [ 165.217229][ T7308] Bluetooth: MGMT ver 1.22 [ 165.256847][ T7305] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.504533][ T786] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 165.555562][ T786] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 165.587118][ T786] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 165.607883][ T786] usb 5-1: media controller created [ 165.702022][ T786] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 165.794428][ T786] zl10353_read_register: readreg error (reg=127, ret==-71) [ 165.809132][ T7313] loop5: detected capacity change from 0 to 8192 [ 165.840421][ T7321] loop3: detected capacity change from 0 to 1024 [ 165.843638][ T7313] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 165.928873][ T7321] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 165.971645][ T7313] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 165.985044][ T7313] REISERFS (device loop5): using ordered data mode [ 165.991665][ T7313] reiserfs: using flush barriers [ 166.003795][ T786] dvb_usb_gl861: probe of 5-1:157.0 failed with error -5 [ 166.011800][ T7321] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.021214][ T786] usb 5-1: USB disconnect, device number 5 [ 166.087225][ T7313] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 166.108549][ T7313] REISERFS (device loop5): checking transaction log (loop5) [ 166.186557][ T7321] EXT4-fs error (device loop3): ext4_free_blocks:6694: comm syz.3.396: Freeing blocks not in datazone - block = 0, count = 16 [ 166.252543][ T7321] EXT4-fs (loop3): Remounting filesystem read-only [ 166.370315][ T7313] REISERFS (device loop5): Using tea hash to sort names [ 166.387493][ T7313] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 166.422083][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 167.005171][ T967] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 167.234413][ T967] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 167.254799][ T967] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 167.291661][ T967] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 167.319280][ T967] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.344706][ T967] usb 5-1: Product: syz [ 167.348962][ T967] usb 5-1: Manufacturer: syz [ 167.353607][ T967] usb 5-1: SerialNumber: syz [ 167.388353][ T967] usb 5-1: config 0 descriptor?? [ 167.409069][ T967] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 167.424949][ T786] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 167.615083][ T786] usb 1-1: Using ep0 maxpacket: 16 [ 167.627228][ T786] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 167.654893][ T786] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 167.674883][ T786] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.715277][ T786] usb 1-1: config 1 interface 0 has no altsetting 0 [ 167.737653][ T786] usb 1-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 167.748763][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.767929][ T786] usb 1-1: Product: syz [ 167.776150][ T786] usb 1-1: Manufacturer: syz [ 167.784938][ T786] usb 1-1: SerialNumber: syz [ 167.794572][ T7369] loop5: detected capacity change from 0 to 1024 [ 167.844390][ T7369] EXT4-fs: Ignoring removed orlov option [ 167.872736][ T7369] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.981300][ T6251] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.053724][ T786] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 168.270901][ T967] usb 5-1: USB disconnect, device number 6 [ 168.319503][ T7382] netlink: 'syz.3.408': attribute type 4 has an invalid length. [ 168.339649][ T5820] usb 1-1: USB disconnect, device number 5 [ 168.384687][ T5820] usblp0: removed [ 168.645460][ T7391] loop5: detected capacity change from 0 to 256 [ 168.742284][ T7395] loop3: detected capacity change from 0 to 2048 [ 168.842630][ T7395] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.885110][ T7395] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 168.988948][ T7395] fs-verity: sha512 using implementation "sha512-avx2" [ 168.998969][ T7395] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.412: bg 0: block 433: padding at end of block bitmap is not set [ 169.051918][ T7395] fs-verity (loop3, inode 13): ext4_end_enable_verity() failed with err -117 [ 169.196313][ T5771] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.412928][ T7415] loop0: detected capacity change from 0 to 16 [ 169.528790][ T7415] erofs: (device loop0): mounted with root inode @ nid 36. [ 169.642441][ T7415] syz.0.418: attempt to access beyond end of device [ 169.642441][ T7415] loop0: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 169.689294][ T7415] syz.0.418: attempt to access beyond end of device [ 169.689294][ T7415] loop0: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 169.748533][ T7426] syz.0.418: attempt to access beyond end of device [ 169.748533][ T7426] loop0: rw=0, sector=8, nr_sectors = 32 limit=16 [ 169.931402][ T7431] warning: `syz.3.422' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 170.085048][ T5770] BUG: Bad page state in process syz-executor pfn:57c50 [ 170.093518][ T5770] page:ffffea00015f1400 refcount:0 mapcount:0 mapping:ffff88805f0087c8 index:0x2 pfn:0x57c50 [ 170.103931][ T5770] aops:z_erofs_cache_aops ino:0 [ 170.109072][ T5770] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 170.116924][ T5770] page_type: 0xffffffff() [ 170.121309][ T5770] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805f0087c8 [ 170.130008][ T5770] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 170.138753][ T5770] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 170.146338][ T5770] page_owner tracks the page as allocated [ 170.152644][ T5770] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7415, tgid 7413 (syz.0.418), ts 169641828582, free_ts 169442245473 [ 170.175015][ T5770] post_alloc_hook+0x1c1/0x200 [ 170.179851][ T5770] get_page_from_freelist+0x1951/0x19e0 [ 170.185601][ T5770] __alloc_pages+0x1f0/0x460 [ 170.190270][ T5770] z_erofs_do_read_page+0x2181/0x36b0 [ 170.196771][ T5770] z_erofs_readahead+0x88b/0xda0 [ 170.201966][ T5770] read_pages+0x189/0x850 [ 170.206497][ T5770] page_cache_ra_unbounded+0x68a/0x770 [ 170.211999][ T5770] force_page_cache_ra+0x2c1/0x320 [ 170.217207][ T5770] generic_fadvise+0x47e/0x780 [ 170.222032][ T5770] __x64_sys_fadvise64+0x140/0x180 [ 170.227231][ T5770] do_syscall_64+0x55/0xa0 [ 170.231707][ T5770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.237810][ T5770] page last free stack trace: [ 170.242526][ T5770] free_unref_page_prepare+0x7b2/0x8c0 [ 170.248115][ T5770] free_unref_page_list+0xbe/0x860 [ 170.253297][ T5770] release_pages+0x1f7a/0x2200 [ 170.258202][ T5770] tlb_flush_mmu+0x379/0x510 [ 170.262860][ T5770] tlb_finish_mmu+0xf9/0x220 [ 170.267567][ T5770] exit_mmap+0x428/0xb90 [ 170.271873][ T5770] __mmput+0x118/0x3c0 [ 170.276054][ T5770] exit_mm+0x1f2/0x2c0 [ 170.280191][ T5770] do_exit+0x8dd/0x2460 [ 170.284426][ T5770] do_group_exit+0x21b/0x2d0 [ 170.289149][ T5770] __x64_sys_exit_group+0x3f/0x40 [ 170.295079][ T5770] do_syscall_64+0x55/0xa0 [ 170.299580][ T5770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.305681][ T5770] Modules linked in: [ 170.309666][ T5770] CPU: 0 PID: 5770 Comm: syz-executor Not tainted syzkaller #0 [ 170.317264][ T5770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 170.327384][ T5770] Call Trace: [ 170.330710][ T5770] [ 170.333681][ T5770] dump_stack_lvl+0x18c/0x250 [ 170.338428][ T5770] ? show_regs_print_info+0x20/0x20 [ 170.343673][ T5770] ? swiotlb_print_info+0x70/0x70 [ 170.348911][ T5770] bad_page+0x14b/0x170 [ 170.353115][ T5770] free_unref_page_prepare+0x85f/0x8c0 [ 170.358631][ T5770] free_unref_page+0x32/0x2e0 [ 170.363360][ T5770] ? __folio_put+0xef/0x210 [ 170.367902][ T5770] erofs_try_to_free_all_cached_pages+0x295/0x5f0 [ 170.374364][ T5770] erofs_shrink_workstation+0x11f/0x290 [ 170.379961][ T5770] ? erofs_shrinker_unregister+0x170/0x170 [ 170.385813][ T5770] ? io_schedule+0xd0/0xd0 [ 170.390280][ T5770] ? kobject_put+0x428/0x460 [ 170.394915][ T5770] erofs_shrinker_unregister+0x5d/0x170 [ 170.400516][ T5770] erofs_put_super+0x4e/0x150 [ 170.405243][ T5770] ? erofs_free_inode+0xb0/0xb0 [ 170.410145][ T5770] generic_shutdown_super+0x134/0x2b0 [ 170.415559][ T5770] kill_block_super+0x44/0x90 [ 170.420289][ T5770] erofs_kill_sb+0x4c/0x140 [ 170.424832][ T5770] deactivate_locked_super+0x97/0x100 [ 170.430243][ T5770] cleanup_mnt+0x43b/0x4d0 [ 170.434700][ T5770] task_work_run+0x1d4/0x260 [ 170.439354][ T5770] ? task_work_cancel+0x220/0x220 [ 170.444430][ T5770] ? exit_to_user_mode_loop+0x3b/0x110 [ 170.449935][ T5770] exit_to_user_mode_loop+0xe6/0x110 [ 170.455257][ T5770] exit_to_user_mode_prepare+0xee/0x180 [ 170.460838][ T5770] syscall_exit_to_user_mode+0x1a/0x50 [ 170.466329][ T5770] do_syscall_64+0x61/0xa0 [ 170.470786][ T5770] ? clear_bhb_loop+0x40/0x90 [ 170.475490][ T5770] ? clear_bhb_loop+0x40/0x90 [ 170.480204][ T5770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.486128][ T5770] RIP: 0033:0x7f4c9a99da57 [ 170.490625][ T5770] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 170.510267][ T5770] RSP: 002b:00007ffd2bec49b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 170.518715][ T5770] RAX: 0000000000000000 RBX: 00007f4c9aa32048 RCX: 00007f4c9a99da57 [ 170.526712][ T5770] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd2bec4a70 [ 170.534715][ T5770] RBP: 00007ffd2bec4a70 R08: 00007ffd2bec5a70 R09: 00000000ffffffff [ 170.542713][ T5770] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd2bec5b00 [ 170.550712][ T5770] R13: 00007f4c9aa32048 R14: 0000000000029749 R15: 00007ffd2bec5b40 [ 170.558725][ T5770] [ 170.563392][ T5770] Disabling lock debugging due to kernel taint [ 170.569711][ T5770] BUG: Bad page state in process syz-executor pfn:5f98b [ 170.576820][ T5770] page:ffffea00017e62c0 refcount:0 mapcount:0 mapping:ffff88805f0087c8 index:0x3 pfn:0x5f98b [ 170.587109][ T5770] aops:z_erofs_cache_aops ino:0 [ 170.592013][ T5770] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 170.599818][ T5770] page_type: 0xffffffff() [ 170.604897][ T5770] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805f0087c8 [ 170.613740][ T5770] raw: 0000000000000003 0000000000000000 00000000ffffffff 0000000000000000 [ 170.622512][ T5770] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 170.629859][ T5770] page_owner tracks the page as allocated [ 170.635660][ T5770] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7415, tgid 7413 (syz.0.418), ts 169641847022, free_ts 169442230570 [ 170.657722][ T5770] post_alloc_hook+0x1c1/0x200 [ 170.662619][ T5770] get_page_from_freelist+0x1951/0x19e0 [ 170.668248][ T5770] __alloc_pages+0x1f0/0x460 [ 170.672886][ T5770] z_erofs_do_read_page+0x2181/0x36b0 [ 170.678350][ T5770] z_erofs_readahead+0x88b/0xda0 [ 170.683329][ T5770] read_pages+0x189/0x850 [ 170.687722][ T5770] page_cache_ra_unbounded+0x68a/0x770 [ 170.693215][ T5770] force_page_cache_ra+0x2c1/0x320 [ 170.698401][ T5770] generic_fadvise+0x47e/0x780 [ 170.703298][ T5770] __x64_sys_fadvise64+0x140/0x180 [ 170.709191][ T5770] do_syscall_64+0x55/0xa0 [ 170.713653][ T5770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.719790][ T5770] page last free stack trace: [ 170.724485][ T5770] free_unref_page_prepare+0x7b2/0x8c0 [ 170.730032][ T5770] free_unref_page_list+0xbe/0x860 [ 170.735243][ T5770] release_pages+0x1f7a/0x2200 [ 170.740049][ T5770] tlb_flush_mmu+0x379/0x510 [ 170.744722][ T5770] tlb_finish_mmu+0xf9/0x220 [ 170.749534][ T5770] exit_mmap+0x428/0xb90 [ 170.753824][ T5770] __mmput+0x118/0x3c0 [ 170.757979][ T5770] exit_mm+0x1f2/0x2c0 [ 170.762102][ T5770] do_exit+0x8dd/0x2460 [ 170.766337][ T5770] do_group_exit+0x21b/0x2d0 [ 170.770977][ T5770] __x64_sys_exit_group+0x3f/0x40 [ 170.776116][ T5770] do_syscall_64+0x55/0xa0 [ 170.780589][ T5770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.786580][ T5770] Modules linked in: [ 170.790506][ T5770] CPU: 0 PID: 5770 Comm: syz-executor Tainted: G B syzkaller #0 [ 170.799558][ T5770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 170.809654][ T5770] Call Trace: [ 170.812962][ T5770] [ 170.815921][ T5770] dump_stack_lvl+0x18c/0x250 [ 170.820658][ T5770] ? show_regs_print_info+0x20/0x20 [ 170.825924][ T5770] ? swiotlb_print_info+0x70/0x70 [ 170.831009][ T5770] bad_page+0x14b/0x170 [ 170.835227][ T5770] free_unref_page_prepare+0x85f/0x8c0 [ 170.840735][ T5770] free_unref_page+0x32/0x2e0 [ 170.845462][ T5770] ? __folio_put+0xef/0x210 [ 170.850003][ T5770] erofs_try_to_free_all_cached_pages+0x295/0x5f0 [ 170.856497][ T5770] erofs_shrink_workstation+0x11f/0x290 [ 170.862095][ T5770] ? erofs_shrinker_unregister+0x170/0x170 [ 170.867939][ T5770] ? io_schedule+0xd0/0xd0 [ 170.872428][ T5770] ? kobject_put+0x428/0x460 [ 170.877072][ T5770] erofs_shrinker_unregister+0x5d/0x170 [ 170.882663][ T5770] erofs_put_super+0x4e/0x150 [ 170.887392][ T5770] ? erofs_free_inode+0xb0/0xb0 [ 170.892296][ T5770] generic_shutdown_super+0x134/0x2b0 [ 170.897715][ T5770] kill_block_super+0x44/0x90 [ 170.902440][ T5770] erofs_kill_sb+0x4c/0x140 [ 170.907017][ T5770] deactivate_locked_super+0x97/0x100 [ 170.912441][ T5770] cleanup_mnt+0x43b/0x4d0 [ 170.916912][ T5770] task_work_run+0x1d4/0x260 [ 170.921556][ T5770] ? task_work_cancel+0x220/0x220 [ 170.926632][ T5770] ? exit_to_user_mode_loop+0x3b/0x110 [ 170.932139][ T5770] exit_to_user_mode_loop+0xe6/0x110 [ 170.937479][ T5770] exit_to_user_mode_prepare+0xee/0x180 [ 170.943075][ T5770] syscall_exit_to_user_mode+0x1a/0x50 [ 170.948674][ T5770] do_syscall_64+0x61/0xa0 [ 170.953142][ T5770] ? clear_bhb_loop+0x40/0x90 [ 170.957870][ T5770] ? clear_bhb_loop+0x40/0x90 [ 170.962590][ T5770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 170.968542][ T5770] RIP: 0033:0x7f4c9a99da57 [ 170.973005][ T5770] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 170.992663][ T5770] RSP: 002b:00007ffd2bec49b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 171.001127][ T5770] RAX: 0000000000000000 RBX: 00007f4c9aa32048 RCX: 00007f4c9a99da57 [ 171.009148][ T5770] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd2bec4a70 [ 171.017160][ T5770] RBP: 00007ffd2bec4a70 R08: 00007ffd2bec5a70 R09: 00000000ffffffff [ 171.025180][ T5770] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd2bec5b00 [ 171.033191][ T5770] R13: 00007f4c9aa32048 R14: 0000000000029749 R15: 00007ffd2bec5b40 [ 171.041215][ T5770] [ 171.045406][ T5770] BUG: Bad page state in process syz-executor pfn:62e83 [ 171.052481][ T5770] page:ffffea00018ba0c0 refcount:0 mapcount:0 mapping:ffff88805f0087c8 index:0x4 pfn:0x62e83 [ 171.062942][ T5770] aops:z_erofs_cache_aops ino:0 [ 171.067874][ T5770] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 171.075671][ T5770] page_type: 0xffffffff() [ 171.080042][ T5770] raw: 00fff00000000001 dead000000000100 dead000000000122 ffff88805f0087c8 [ 171.088705][ T5770] raw: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 171.097455][ T5770] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 171.104821][ T5770] page_owner tracks the page as allocated [ 171.110573][ T5770] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7415, tgid 7413 (syz.0.418), ts 169641865525, free_ts 169442215793 [ 171.133327][ T5770] post_alloc_hook+0x1c1/0x200 [ 171.138279][ T5770] get_page_from_freelist+0x1951/0x19e0 [ 171.143875][ T5770] __alloc_pages+0x1f0/0x460 [ 171.148548][ T5770] z_erofs_do_read_page+0x2181/0x36b0 [ 171.153969][ T5770] z_erofs_readahead+0x88b/0xda0 [ 171.159007][ T5770] read_pages+0x189/0x850 [ 171.163378][ T5770] page_cache_ra_unbounded+0x68a/0x770 [ 171.168940][ T5770] force_page_cache_ra+0x2c1/0x320 [ 171.174095][ T5770] generic_fadvise+0x47e/0x780 [ 171.178996][ T5770] __x64_sys_fadvise64+0x140/0x180 [ 171.184162][ T5770] do_syscall_64+0x55/0xa0 [ 171.188668][ T5770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.194686][ T5770] page last free stack trace: [ 171.199434][ T5770] free_unref_page_prepare+0x7b2/0x8c0 [ 171.204995][ T5770] free_unref_page_list+0xbe/0x860 [ 171.210161][ T5770] release_pages+0x1f7a/0x2200 [ 171.215030][ T5770] tlb_flush_mmu+0x379/0x510 [ 171.220382][ T5770] tlb_finish_mmu+0xf9/0x220 [ 171.225165][ T5770] exit_mmap+0x428/0xb90 [ 171.226195][ T28] audit: type=1326 audit(1774710836.939:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7439 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb319c819 code=0x7ffc0000 [ 171.229448][ T5770] __mmput+0x118/0x3c0 [ 171.255690][ T5770] exit_mm+0x1f2/0x2c0 [ 171.259805][ T5770] do_exit+0x8dd/0x2460 [ 171.264010][ T5770] do_group_exit+0x21b/0x2d0 [ 171.268692][ T5770] __x64_sys_exit_group+0x3f/0x40 [ 171.273768][ T5770] do_syscall_64+0x55/0xa0 [ 171.278284][ T5770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.284324][ T5770] Modules linked in: [ 171.288319][ T5770] CPU: 0 PID: 5770 Comm: syz-executor Tainted: G B syzkaller #0 [ 171.297380][ T5770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 171.307480][ T5770] Call Trace: [ 171.310791][ T5770] [ 171.313763][ T5770] dump_stack_lvl+0x18c/0x250 [ 171.318500][ T5770] ? show_regs_print_info+0x20/0x20 [ 171.323761][ T5770] ? swiotlb_print_info+0x70/0x70 [ 171.328841][ T5770] bad_page+0x14b/0x170 [ 171.333036][ T5770] free_unref_page_prepare+0x85f/0x8c0 [ 171.338538][ T5770] free_unref_page+0x32/0x2e0 [ 171.343250][ T5770] ? __folio_put+0xef/0x210 [ 171.347780][ T5770] erofs_try_to_free_all_cached_pages+0x295/0x5f0 [ 171.354228][ T5770] erofs_shrink_workstation+0x11f/0x290 [ 171.359801][ T5770] ? erofs_shrinker_unregister+0x170/0x170 [ 171.365628][ T5770] ? io_schedule+0xd0/0xd0 [ 171.370072][ T5770] ? kobject_put+0x428/0x460 [ 171.374775][ T5770] erofs_shrinker_unregister+0x5d/0x170 [ 171.380340][ T5770] erofs_put_super+0x4e/0x150 [ 171.385049][ T5770] ? erofs_free_inode+0xb0/0xb0 [ 171.389924][ T5770] generic_shutdown_super+0x134/0x2b0 [ 171.395327][ T5770] kill_block_super+0x44/0x90 [ 171.400023][ T5770] erofs_kill_sb+0x4c/0x140 [ 171.404547][ T5770] deactivate_locked_super+0x97/0x100 [ 171.409946][ T5770] cleanup_mnt+0x43b/0x4d0 [ 171.414393][ T5770] task_work_run+0x1d4/0x260 [ 171.419016][ T5770] ? task_work_cancel+0x220/0x220 [ 171.424073][ T5770] ? exit_to_user_mode_loop+0x3b/0x110 [ 171.429593][ T5770] exit_to_user_mode_loop+0xe6/0x110 [ 171.434933][ T5770] exit_to_user_mode_prepare+0xee/0x180 [ 171.440515][ T5770] syscall_exit_to_user_mode+0x1a/0x50 [ 171.446003][ T5770] do_syscall_64+0x61/0xa0 [ 171.450447][ T5770] ? clear_bhb_loop+0x40/0x90 [ 171.455152][ T5770] ? clear_bhb_loop+0x40/0x90 [ 171.459859][ T5770] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 171.465775][ T5770] RIP: 0033:0x7f4c9a99da57 [ 171.470219][ T5770] Code: a2 c7 05 9c fc 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 171.489845][ T5770] RSP: 002b:00007ffd2bec49b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 171.498281][ T5770] RAX: 0000000000000000 RBX: 00007f4c9aa32048 RCX: 00007f4c9a99da57 [ 171.506285][ T5770] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd2bec4a70 [ 171.514270][ T5770] RBP: 00007ffd2bec4a70 R08: 00007ffd2bec5a70 R09: 00000000ffffffff [ 171.522257][ T5770] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd2bec5b00 [ 171.530254][ T5770] R13: 00007f4c9aa32048 R14: 0000000000029749 R15: 00007ffd2bec5b40 [ 171.538253][ T5770] [ 171.563630][ T28] audit: type=1326 audit(1774710836.979:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7439 comm="syz.4.426" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fecb319c819 code=0x7ffc0000