last executing test programs: 5.745082535s ago: executing program 0 (id=300): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 5.562998174s ago: executing program 0 (id=301): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x8000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000803)=0x4) 5.331510954s ago: executing program 0 (id=303): munmap(&(0x7f0000cc9000/0x2000)=nil, 0x2000) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1001}, @flat=@binder={0x73622a85, 0x1001}, @flat=@handle={0x73682a85, 0x110b, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 5.149455593s ago: executing program 0 (id=305): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 4.899453714s ago: executing program 0 (id=307): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050202000200070582020002"], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, &(0x7f0000000100)) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="9101000000112233445500"/64) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 1.758245529s ago: executing program 0 (id=329): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) gettid() getpid() getpid() clock_gettime(0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x20040084) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42400, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x17c00}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x9, 0x8, 0xfffffffd, 0x526}, 0xd7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x42) close(r3) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000540)=@xdp={0x2c, 0x8, r5, 0x10042}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000480)="34059136f8843de6d224e7ece9f899206b6c", 0x12}], 0x1}, 0x0) 1.606915296s ago: executing program 1 (id=331): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ttyUSB0\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="10151003", 0x4) 1.139199617s ago: executing program 2 (id=333): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x46, 0xc11, &(0x7f0000000d00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='+', 0x1) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r0, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unlink(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) 1.026902953s ago: executing program 1 (id=335): sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x24, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x44040080) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000017c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x11, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x13e) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x1d2f0, 0x402000, 0xf, 0xadea, 0x800000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000340)=ANY=[], 0x700, 0x0) 934.636167ms ago: executing program 1 (id=337): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff000000070501020002000705810200020007050202000200070582020002"], 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x20, &(0x7f0000000100)="900100"/32) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000300)="9101000000112233445500"/64) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 885.457379ms ago: executing program 2 (id=338): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001b40)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 833.491981ms ago: executing program 3 (id=339): r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) 778.843724ms ago: executing program 2 (id=340): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000040)="46fdd046a1", 0x5, 0x5) 726.944177ms ago: executing program 3 (id=341): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 678.795688ms ago: executing program 2 (id=342): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x402, 0x0) write(r0, &(0x7f0000000500)='dum', 0x3) 608.543632ms ago: executing program 2 (id=343): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ttyUSB0\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)="10151003", 0x4) 600.118052ms ago: executing program 3 (id=344): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 507.891676ms ago: executing program 3 (id=345): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x73682a85, 0x1001}, @flat=@binder={0x73622a85, 0x1001}, @flat=@handle={0x73682a85, 0x110b, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 388.679322ms ago: executing program 3 (id=346): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x46, 0xc11, &(0x7f0000000d00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='+p', 0x2) renameat2(0xffffffffffffff9c, 0x0, r0, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) unlink(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0) 298.658376ms ago: executing program 1 (id=347): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000300)="0400000000000000000000009001000038010000010000000000000000000000000000000000000000000000000000006d70617468300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000580000006d756c746970617468") 208.65159ms ago: executing program 3 (id=348): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000001b40)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 158.839213ms ago: executing program 1 (id=349): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0xfffffffc, 0x80000004, 0x100003, 0x80002, 0x1, 0x2}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfe, 0x7ffcffff}]}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_MASTER(0xffffffffffffffff, 0x641e) 121.666594ms ago: executing program 1 (id=350): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x10004, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/dynamic_debug/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='+p', 0x2) syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000001340)='./file4\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x25, 0x555f, &(0x7f000000ae40)="$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") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x224e}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 0s ago: executing program 2 (id=351): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) symlinkat(0x0, 0xffffffffffffff9c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint\x00', 0x402, 0x0) write(r0, &(0x7f0000000500)='dum', 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.48' (ED25519) to the list of known hosts. [ 82.260560][ T5762] cgroup: Unknown subsys name 'net' [ 82.374389][ T5762] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.101974][ T5762] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.392235][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.401039][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.410573][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.419865][ T5781] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.420265][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.435614][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.437725][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.451560][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.454721][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.459056][ T5781] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.470092][ T5780] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.477888][ T5781] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.488673][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.494891][ T5780] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.499260][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.511310][ T5781] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.519683][ T5086] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.520066][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.534445][ T5086] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.541894][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.551878][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.598037][ T5086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.606100][ T5086] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.613522][ T5086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.190402][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 87.294891][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 87.318206][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 87.448791][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 87.563215][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.571297][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.579219][ T5775] bridge_slave_0: entered allmulticast mode [ 87.587075][ T5775] bridge_slave_0: entered promiscuous mode [ 87.616644][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.623948][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.631134][ T5774] bridge_slave_0: entered allmulticast mode [ 87.638919][ T5774] bridge_slave_0: entered promiscuous mode [ 87.670052][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.677477][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.684774][ T5775] bridge_slave_1: entered allmulticast mode [ 87.692278][ T5775] bridge_slave_1: entered promiscuous mode [ 87.710747][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.718195][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.728589][ T5774] bridge_slave_1: entered allmulticast mode [ 87.736010][ T5774] bridge_slave_1: entered promiscuous mode [ 87.746670][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.754593][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.762071][ T5776] bridge_slave_0: entered allmulticast mode [ 87.772695][ T5776] bridge_slave_0: entered promiscuous mode [ 87.791283][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.798602][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.806086][ T5776] bridge_slave_1: entered allmulticast mode [ 87.813363][ T5776] bridge_slave_1: entered promiscuous mode [ 87.871314][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.895050][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.912338][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.945841][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.969938][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.012435][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.047409][ T5775] team0: Port device team_slave_0 added [ 88.064214][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.071580][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.079050][ T5773] bridge_slave_0: entered allmulticast mode [ 88.086681][ T5773] bridge_slave_0: entered promiscuous mode [ 88.097610][ T5776] team0: Port device team_slave_0 added [ 88.108467][ T5775] team0: Port device team_slave_1 added [ 88.117596][ T5774] team0: Port device team_slave_0 added [ 88.135517][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.142659][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.150244][ T5773] bridge_slave_1: entered allmulticast mode [ 88.157951][ T5773] bridge_slave_1: entered promiscuous mode [ 88.166368][ T5776] team0: Port device team_slave_1 added [ 88.205143][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.212116][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.238306][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.253392][ T5774] team0: Port device team_slave_1 added [ 88.295816][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.302839][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.329859][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.352924][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.364652][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.371637][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.397736][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.410912][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.418028][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.444472][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.471820][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.493898][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.500897][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.527022][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.543087][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.550150][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.576394][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.634750][ T5779] Bluetooth: hci2: command tx timeout [ 88.644131][ T5779] Bluetooth: hci1: command tx timeout [ 88.649807][ T5779] Bluetooth: hci3: command tx timeout [ 88.669999][ T5773] team0: Port device team_slave_0 added [ 88.679377][ T5773] team0: Port device team_slave_1 added [ 88.691594][ T5775] hsr_slave_0: entered promiscuous mode [ 88.698539][ T5775] hsr_slave_1: entered promiscuous mode [ 88.716275][ T5779] Bluetooth: hci0: command tx timeout [ 88.730691][ T5776] hsr_slave_0: entered promiscuous mode [ 88.738604][ T5776] hsr_slave_1: entered promiscuous mode [ 88.745260][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.753065][ T5776] Cannot create hsr debugfs directory [ 88.804063][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.811070][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.837296][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.872443][ T5774] hsr_slave_0: entered promiscuous mode [ 88.880011][ T5774] hsr_slave_1: entered promiscuous mode [ 88.886736][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.894964][ T5774] Cannot create hsr debugfs directory [ 88.901270][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.908722][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.934958][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.064534][ T5773] hsr_slave_0: entered promiscuous mode [ 89.071304][ T5773] hsr_slave_1: entered promiscuous mode [ 89.077844][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.085522][ T5773] Cannot create hsr debugfs directory [ 89.461071][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.489616][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.500569][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.528065][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.575257][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.597148][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.616194][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.648723][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.707742][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.721414][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.733279][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.744258][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.876201][ T5774] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.890217][ T5774] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.902433][ T5774] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.930456][ T5774] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.030396][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.083509][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.120654][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.135417][ T2972] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.142825][ T2972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.162037][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.179183][ T2972] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.186357][ T2972] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.224736][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.246147][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.259391][ T994] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.266599][ T994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.327733][ T2943] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.334954][ T2943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.347235][ T2943] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.354432][ T2943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.368512][ T2943] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.375712][ T2943] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.407095][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.472069][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.501965][ T2943] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.509269][ T2943] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.536801][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.544081][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.569507][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.715491][ T5779] Bluetooth: hci3: command tx timeout [ 90.720967][ T5779] Bluetooth: hci1: command tx timeout [ 90.726050][ T5086] Bluetooth: hci2: command tx timeout [ 90.795191][ T5086] Bluetooth: hci0: command tx timeout [ 91.013119][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.194746][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.203361][ T5775] veth0_vlan: entered promiscuous mode [ 91.241687][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.279980][ T5775] veth1_vlan: entered promiscuous mode [ 91.329168][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.387000][ T5776] veth0_vlan: entered promiscuous mode [ 91.411583][ T5775] veth0_macvtap: entered promiscuous mode [ 91.446504][ T5775] veth1_macvtap: entered promiscuous mode [ 91.455350][ T5773] veth0_vlan: entered promiscuous mode [ 91.509529][ T5776] veth1_vlan: entered promiscuous mode [ 91.521232][ T5774] veth0_vlan: entered promiscuous mode [ 91.539731][ T5773] veth1_vlan: entered promiscuous mode [ 91.566062][ T5774] veth1_vlan: entered promiscuous mode [ 91.582096][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.621125][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.655428][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.667812][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.681698][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.691796][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.733398][ T5773] veth0_macvtap: entered promiscuous mode [ 91.755750][ T5776] veth0_macvtap: entered promiscuous mode [ 91.770611][ T5773] veth1_macvtap: entered promiscuous mode [ 91.816738][ T5776] veth1_macvtap: entered promiscuous mode [ 91.826192][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.839803][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.852194][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.897953][ T5774] veth0_macvtap: entered promiscuous mode [ 91.929015][ T5774] veth1_macvtap: entered promiscuous mode [ 91.943537][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.955622][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.967628][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.980505][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.990191][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.997586][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.010634][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.019812][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.032076][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.085802][ T28] cfg80211: failed to load regulatory.db [ 92.097366][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.109075][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.121281][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.132058][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.143804][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.156971][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.169707][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.180397][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.190937][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.201334][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.212453][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.226355][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.250591][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.262174][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.272392][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.283020][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.295203][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.309151][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.321292][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.331659][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.342555][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.352856][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.364013][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.375791][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.400876][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.411749][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.413300][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.430298][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.433884][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.447610][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.468678][ T5774] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.480053][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.489573][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.499533][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.660121][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.684614][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.772866][ T2972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.796737][ T5086] Bluetooth: hci1: command tx timeout [ 92.802269][ T5086] Bluetooth: hci3: command tx timeout [ 92.803841][ T5779] Bluetooth: hci2: command tx timeout [ 92.839739][ T2972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.874404][ T5779] Bluetooth: hci0: command tx timeout [ 92.901397][ T2943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.909875][ T2972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.927436][ T2943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.929557][ T2972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.020457][ T2943] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.044155][ T2943] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.154266][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.162166][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.371299][ T5852] syz.1.2[5852]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.461867][ T5854] device-mapper: table: 248:0: multipath: invalid number of feature args (-EINVAL) [ 93.504490][ T5854] device-mapper: ioctl: error adding target to table [ 93.891519][ T5860] netlink: 14 bytes leftover after parsing attributes in process `syz.3.7'. [ 94.639127][ T5865] loop0: detected capacity change from 0 to 32768 [ 94.651903][ T5863] loop2: detected capacity change from 0 to 32768 [ 94.665489][ T5865] ======================================================= [ 94.665489][ T5865] WARNING: The mand mount option has been deprecated and [ 94.665489][ T5865] and is ignored by this kernel. Remove the mand [ 94.665489][ T5865] option from the mount to silence this warning. [ 94.665489][ T5865] ======================================================= [ 94.782275][ T5852] loop1: detected capacity change from 0 to 32768 [ 94.869601][ T5863] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 94.878691][ T5779] Bluetooth: hci3: command tx timeout [ 94.878744][ T5779] Bluetooth: hci1: command tx timeout [ 94.878779][ T5779] Bluetooth: hci2: command tx timeout [ 94.937003][ T5865] JBD2: Ignoring recovery information on journal [ 94.954183][ T5787] Bluetooth: hci0: command tx timeout [ 94.982382][ T5852] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 95.093102][ T5865] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 95.251886][ T5863] XFS (loop2): Ending clean mount [ 95.281018][ T5863] XFS (loop2): Quotacheck needed: Please wait. [ 95.331194][ T27] audit: type=1800 audit(1789701531.849:2): pid=5865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 95.399524][ T5852] XFS (loop1): Ending clean mount [ 95.407084][ T27] audit: type=1800 audit(1789701531.919:3): pid=5865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 95.461186][ T5863] XFS (loop2): Quotacheck: Done. [ 95.532561][ T5852] XFS (loop1): Quotacheck needed: Please wait. [ 95.577837][ T27] audit: type=1800 audit(1789701532.099:4): pid=5884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9" name="bus" dev="loop0" ino=17058 res=0 errno=0 [ 95.632627][ T5865] syz.0.9 (5865) used greatest stack depth: 19480 bytes left [ 95.686972][ T5852] XFS (loop1): Quotacheck: Done. [ 95.711843][ T5776] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 96.070468][ T5775] ocfs2: Unmounting device (7,0) on (node local) [ 96.715093][ T28] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.945659][ T28] usb 3-1: config 0 has no interfaces? [ 96.951515][ T28] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 97.001317][ T28] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.056849][ T28] usb 3-1: config 0 descriptor?? [ 97.134578][ T5773] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 97.423374][ T2943] Bluetooth: hci4: Frame reassembly failed (-84) [ 98.054023][ T968] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.171241][ T5915] loop0: detected capacity change from 0 to 32768 [ 98.190504][ T5915] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 98.208610][ T5915] JBD2: Ignoring recovery information on journal [ 98.269105][ T968] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.293159][ T968] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 98.304672][ T968] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.321652][ T968] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 98.330973][ T968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 98.339011][ T968] usb 2-1: Product: syz [ 98.339054][ T968] usb 2-1: Manufacturer: syz [ 98.353427][ T5915] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 98.394596][ T5920] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 98.422619][ T968] garmin_gps 2-1:1.0: Garmin GPS usb/tty converter detected [ 98.496528][ T968] usb 2-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 98.664368][ T968] usb 2-1: USB disconnect, device number 2 [ 98.769864][ T968] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 98.799053][ T968] garmin_gps 2-1:1.0: device disconnected [ 98.835391][ T5775] ocfs2: Unmounting device (7,0) on (node local) [ 99.240683][ T5933] overlayfs: upper fs does not support tmpfile. [ 99.434291][ T5787] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 99.563638][ T23] usb 3-1: USB disconnect, device number 2 [ 99.593886][ C0] net_ratelimit: 75 callbacks suppressed [ 99.605787][ T5937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.722280][ T5940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.746497][ T5937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.923388][ T5944] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.220065][ T5953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32'. [ 100.262151][ T5953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 100.482847][ T5946] loop2: detected capacity change from 0 to 32768 [ 100.500650][ T5946] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.29 (5946) [ 100.541852][ T5946] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 100.554212][ T5946] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 100.565369][ T5946] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 100.575987][ T5946] BTRFS info (device loop2): use zstd compression, level 3 [ 100.583292][ T5946] BTRFS info (device loop2): using free space tree [ 100.655810][ T968] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 100.668616][ T5946] BTRFS info (device loop2): enabling ssd optimizations [ 100.680092][ T5946] BTRFS info (device loop2): auto enabling async discard [ 100.703818][ T5818] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 100.885092][ T968] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.903872][ T968] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 100.928602][ T968] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 100.956901][ T5818] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 100.967798][ T5818] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 100.990960][ T968] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 101.015247][ T5818] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.028755][ T968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 101.056779][ T968] usb 4-1: Product: syz [ 101.061670][ T968] usb 4-1: Manufacturer: syz [ 101.078644][ T5818] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 101.089530][ T5818] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 101.101259][ T5956] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 101.113041][ T968] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 101.123184][ T5818] usb 1-1: Product: syz [ 101.148798][ T5818] usb 1-1: Manufacturer: syz [ 101.154553][ T27] audit: type=1804 audit(1789701537.669:5): pid=5977 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.29" name="/newroot/5/file0/bus" dev="loop2" ino=263 res=1 errno=0 [ 101.187046][ T5958] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 101.212570][ T5976] loop1: detected capacity change from 0 to 512 [ 101.221534][ T5818] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 101.239820][ T968] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 101.260570][ T5976] ext4: Unknown parameter 'fsname' [ 101.277903][ T5818] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB1 [ 101.310903][ T5945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.386437][ T5818] usb 4-1: USB disconnect, device number 2 [ 101.455473][ T5818] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 101.505873][ T968] usb 1-1: USB disconnect, device number 2 [ 101.524561][ T5818] garmin_gps 4-1:1.0: device disconnected [ 101.578528][ T968] garmin_gps ttyUSB1: Garmin GPS usb/tty converter now disconnected from ttyUSB1 [ 101.622823][ T968] garmin_gps 1-1:1.0: device disconnected [ 102.049863][ T5987] loop1: detected capacity change from 0 to 1024 [ 102.079769][ T5989] bridge_slave_0: left allmulticast mode [ 102.104606][ T5989] bridge_slave_0: left promiscuous mode [ 102.124250][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.147778][ T5776] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 102.257646][ T5989] bridge_slave_1: left allmulticast mode [ 102.263372][ T5989] bridge_slave_1: left promiscuous mode [ 102.320247][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.437010][ T5989] bond0: (slave bond_slave_0): Releasing backup interface [ 102.537046][ T5989] bond0: (slave bond_slave_1): Releasing backup interface [ 102.686962][ T5989] team0: Port device team_slave_0 removed [ 102.735017][ T5989] team0: Port device team_slave_1 removed [ 102.781832][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.796353][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.818860][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.829994][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.958690][ T5990] netlink: 'syz.3.38': attribute type 10 has an invalid length. [ 103.028445][ T6006] Bluetooth: MGMT ver 1.22 [ 103.058935][ T5990] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 103.315665][ T6013] loop0: detected capacity change from 0 to 512 [ 103.343490][ T6013] ext4: Unknown parameter 'fsname' [ 103.665075][ T6019] FAULT_INJECTION: forcing a failure. [ 103.665075][ T6019] name failslab, interval 1, probability 0, space 0, times 1 [ 103.702548][ T6019] CPU: 1 PID: 6019 Comm: syz.0.45 Not tainted syzkaller #0 [ 103.709843][ T6019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 103.720062][ T6019] Call Trace: [ 103.723386][ T6019] [ 103.726442][ T6019] dump_stack_lvl+0x18c/0x250 [ 103.726486][ T6019] ? show_regs_print_info+0x20/0x20 [ 103.736712][ T6019] ? load_image+0x420/0x420 [ 103.741273][ T6019] ? __lock_acquire+0x7d80/0x7d80 [ 103.746467][ T6019] ? kasan_set_track+0x5f/0x70 [ 103.751280][ T6019] ? kasan_save_free_info+0x28/0x40 [ 103.756539][ T6019] ? ____kasan_slab_free+0x126/0x1f0 [ 103.761891][ T6019] ? slab_free_freelist_hook+0x130/0x1a0 [ 103.767589][ T6019] should_fail_ex+0x394/0x4c0 [ 103.772414][ T6019] should_failslab+0x9/0x20 [ 103.776970][ T6019] slab_pre_alloc_hook+0x59/0x300 [ 103.782060][ T6019] ? blk_mq_init_tags+0x75/0x280 [ 103.787078][ T6019] __kmem_cache_alloc_node+0x53/0x250 [ 103.792513][ T6019] ? blk_mq_init_tags+0x75/0x280 [ 103.797531][ T6019] kmalloc_node_trace+0x26/0xe0 [ 103.802448][ T6019] blk_mq_init_tags+0x75/0x280 [ 103.807252][ T6019] blk_mq_alloc_map_and_rqs+0xc5/0x910 [ 103.807287][ T6019] ? kasan_quarantine_put+0xd8/0x220 [ 103.812941][ T6019] ? lockdep_hardirqs_on+0x98/0x150 [ 103.812983][ T6019] blk_mq_alloc_set_map_and_rqs+0x1a0/0x800 [ 103.829822][ T6019] blk_mq_alloc_tag_set+0x868/0x1020 [ 103.835226][ T6019] loop_add+0x2eb/0x990 [ 103.839535][ T6019] loop_control_ioctl+0x128/0x590 [ 103.844600][ T6019] ? loop_set_hw_queue_depth+0x110/0x110 [ 103.844638][ T6019] ? bpf_lsm_file_ioctl+0x9/0x10 [ 103.844664][ T6019] ? security_file_ioctl+0x80/0xa0 [ 103.850503][ T6019] ? loop_set_hw_queue_depth+0x110/0x110 [ 103.860750][ T6019] __se_sys_ioctl+0xfd/0x170 [ 103.871455][ T6019] do_syscall_64+0x55/0xb0 [ 103.875914][ T6019] ? clear_bhb_loop+0x40/0x90 [ 103.875951][ T6019] ? clear_bhb_loop+0x40/0x90 [ 103.875983][ T6019] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 103.876013][ T6019] RIP: 0033:0x7fe6b4d9e159 [ 103.876045][ T6019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.876065][ T6019] RSP: 002b:00007fe6b5d55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 103.876089][ T6019] RAX: ffffffffffffffda RBX: 00007fe6b5025fa0 RCX: 00007fe6b4d9e159 [ 103.876108][ T6019] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000005 [ 103.876123][ T6019] RBP: 00007fe6b4e3506b R08: 0000000000000000 R09: 0000000000000000 [ 103.876138][ T6019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.876151][ T6019] R13: 00007fe6b5026038 R14: 00007fe6b5025fa0 R15: 00007ffe4cf7b488 [ 103.876182][ T6019] [ 103.974306][ T6019] blk-mq: reduced tag depth (128 -> 64) [ 104.017409][ T6002] loop1: detected capacity change from 0 to 32768 [ 104.068442][ T6002] (syz.1.42,6002,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 104.104629][ T968] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 104.115952][ T6002] (syz.1.42,6002,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 104.257991][ T6002] JBD2: Ignoring recovery information on journal [ 104.331082][ T6002] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 104.359874][ T968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 104.401661][ T968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 104.434975][ T968] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 104.459137][ T968] usb 4-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 104.483931][ T968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.512426][ T968] usb 4-1: config 0 descriptor?? [ 104.527300][ T6020] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 104.773735][ T5817] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 104.879219][ C0] net_ratelimit: 54 callbacks suppressed [ 104.889152][ T6024] loop0: detected capacity change from 0 to 32768 [ 104.917617][ T6024] (syz.0.47,6024,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 104.940149][ T6024] (syz.0.47,6024,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 104.956193][ T6001] ocfs2: Unmounting device (7,1) on (node local) [ 104.987267][ T6024] JBD2: Ignoring recovery information on journal [ 104.998572][ T5817] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.998661][ T5817] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 105.050484][ T968] gt683r_led 0003:1770:FF00.0001: hidraw0: USB HID v0.00 Device [HID 1770:ff00] on usb-dummy_hcd.3-1/input0 [ 105.109840][ T5817] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.138678][ T6024] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 105.172109][ T5817] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 105.228513][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 105.238142][ T5817] usb 3-1: Product: syz [ 105.242557][ T5817] usb 3-1: Manufacturer: syz [ 105.320951][ T6027] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 105.341316][ T5817] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 105.378658][ T968] usb 4-1: USB disconnect, device number 3 [ 105.393981][ T5817] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 105.446481][ T5818] gt683r_led 0003:1770:FF00.0001: failed to send set report request: -19 [ 105.493741][ T5818] gt683r_led 0003:1770:FF00.0001: failed to send set report request: -19 [ 105.508036][ T6031] fido_id[6031]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 105.616363][ T5817] usb 3-1: USB disconnect, device number 3 [ 105.692457][ T27] audit: type=1804 audit(1789701542.209:6): pid=6034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.47" name="/newroot/17/file0/bus" dev="loop0" ino=16979 res=1 errno=0 [ 105.716046][ T5817] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 105.749279][ T5817] garmin_gps 3-1:1.0: device disconnected [ 105.965432][ T5775] ocfs2: Unmounting device (7,0) on (node local) [ 106.999189][ T6045] loop3: detected capacity change from 0 to 32768 [ 107.033782][ T6045] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.54 (6045) [ 107.091784][ T6045] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 107.119843][ T6045] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 107.149152][ T6045] BTRFS info (device loop3): setting nodatasum [ 107.164776][ T6045] BTRFS info (device loop3): force zlib compression, level 3 [ 107.208579][ T6045] BTRFS info (device loop3): turning on flush-on-commit [ 107.225954][ T6045] BTRFS info (device loop3): max_inline at 4096 [ 107.232314][ T6045] BTRFS info (device loop3): using free space tree [ 107.427397][ T6049] loop2: detected capacity change from 0 to 40427 [ 107.455493][ T6061] loop0: detected capacity change from 0 to 32768 [ 107.462699][ T6045] BTRFS info (device loop3): enabling ssd optimizations [ 107.522158][ T6049] F2FS-fs (loop2): build fault injection attr: rate: 174, type: 0x7ffff [ 107.543978][ T5788] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 107.880079][ T5787] Bluetooth: hci1: unexpected cc 0x206e length: 4 > 3 [ 107.915926][ T6088] loop2: detected capacity change from 0 to 512 [ 107.951033][ T6088] ext4: Unknown parameter 'fsname' [ 108.534067][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 108.775389][ T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.793937][ T8] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 108.805230][ T6101] loop2: detected capacity change from 0 to 128 [ 108.818531][ T8] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 108.845450][ T8] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 108.863933][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 108.872065][ T8] usb 1-1: Product: syz [ 108.876456][ T8] usb 1-1: Manufacturer: syz [ 108.892040][ T6094] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 108.918791][ T8] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 108.946795][ T2972] tipc: Subscription rejected, illegal request [ 108.974462][ T8] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 109.160259][ T8] usb 1-1: USB disconnect, device number 3 [ 109.208783][ T8] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 109.235081][ T8] garmin_gps 1-1:1.0: device disconnected [ 109.478684][ T5774] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 110.313654][ C0] net_ratelimit: 46 callbacks suppressed [ 110.779997][ T6120] loop2: detected capacity change from 0 to 32768 [ 110.790764][ T6142] loop0: detected capacity change from 0 to 512 [ 110.811212][ T6120] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.77 (6120) [ 110.827878][ T6142] ext4: Unknown parameter 'fsname' [ 110.867137][ T6120] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 110.881618][ T6120] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 110.898621][ T6120] BTRFS info (device loop2): force clearing of disk cache [ 110.907940][ T5980] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 110.913041][ T6120] BTRFS info (device loop2): use zlib compression, level 3 [ 110.934034][ T6120] BTRFS info (device loop2): enabling ssd optimizations [ 110.941184][ T6120] BTRFS info (device loop2): using spread ssd allocation scheme [ 110.957667][ T6120] BTRFS info (device loop2): using free space tree [ 111.050644][ T6120] BTRFS info (device loop2): auto enabling async discard [ 111.089745][ T6120] BTRFS info (device loop2): rebuilding free space tree [ 111.188681][ T6120] BTRFS info (device loop2): checking UUID tree [ 111.500983][ T6144] loop3: detected capacity change from 0 to 32768 [ 111.602147][ T6144] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 111.938622][ T5776] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 111.941293][ T6144] XFS (loop3): Ending clean mount [ 112.030702][ T6144] XFS (loop3): Quotacheck needed: Please wait. [ 112.149272][ T6144] XFS (loop3): Quotacheck: Done. [ 112.364244][ T5774] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 112.569099][ T5980] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 11 /dev/loop2 scanned by udevd (5980) [ 113.271779][ T6196] gadgetfs: bound to dummy_udc driver [ 113.573812][ T5817] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 113.584046][ C1] gadgetfs: connected [ 113.590364][ T5817] gadgetfs: disconnected [ 113.698220][ T6190] loop2: detected capacity change from 0 to 32768 [ 113.717577][ T6192] loop0: detected capacity change from 0 to 32768 [ 113.728618][ T6190] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.96 (6190) [ 113.749845][ T6192] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 scanned by syz.0.97 (6192) [ 113.779092][ T6190] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 113.799528][ T6192] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 113.810237][ T6190] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 113.819155][ T6192] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 113.838909][ T6190] BTRFS info (device loop2): setting nodatacow, compression disabled [ 113.853762][ T6192] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 113.873104][ T6190] BTRFS info (device loop2): setting datasum, datacow enabled [ 113.910724][ T6192] BTRFS info (device loop0): use zstd compression, level 3 [ 113.920823][ T6190] BTRFS info (device loop2): force clearing of disk cache [ 113.930188][ T6190] BTRFS info (device loop2): enabling ssd optimizations [ 113.947476][ T6190] BTRFS info (device loop2): using spread ssd allocation scheme [ 113.948960][ T6192] BTRFS info (device loop0): using free space tree [ 113.957055][ T6190] BTRFS info (device loop2): turning on sync discard [ 114.009080][ T6190] BTRFS info (device loop2): turning on flush-on-commit [ 114.026793][ T6190] BTRFS info (device loop2): not using ssd optimizations [ 114.048835][ T6190] BTRFS info (device loop2): not using spread ssd allocation scheme [ 114.099514][ T6211] loop3: detected capacity change from 0 to 512 [ 114.116085][ T6190] BTRFS info (device loop2): using free space tree [ 114.130566][ T6211] ext4: Unknown parameter 'fsname' [ 114.202739][ T6192] BTRFS info (device loop0): enabling ssd optimizations [ 114.213717][ T6192] BTRFS info (device loop0): auto enabling async discard [ 114.320152][ T6190] BTRFS info (device loop2): rebuilding free space tree [ 114.626145][ T6190] loop2: detected capacity change from 32768 to 0 [ 114.691481][ T6243] syz.2.96: attempt to access beyond end of device [ 114.691481][ T6243] loop2: rw=6145, sector=10496, nr_sectors = 8 limit=0 [ 114.789618][ T6243] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 114.827237][ T6243] syz.2.96: attempt to access beyond end of device [ 114.827237][ T6243] loop2: rw=6145, sector=10488, nr_sectors = 8 limit=0 [ 114.884079][ T6243] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 114.934362][ T994] kworker/u4:5: attempt to access beyond end of device [ 114.934362][ T994] loop2: rw=67112961, sector=10464, nr_sectors = 8 limit=0 [ 114.982567][ T994] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 [ 115.046551][ T994] kworker/u4:5: attempt to access beyond end of device [ 115.046551][ T994] loop2: rw=67112961, sector=10472, nr_sectors = 8 limit=0 [ 115.079100][ T6243] BTRFS error (device loop2: state AL): Transaction aborted (error -5) [ 115.103863][ T994] BTRFS error (device loop2: state AL): bdev /dev/loop2 errs: wr 4, rd 0, flush 0, corrupt 0, gen 0 [ 115.148994][ T994] kworker/u4:5: attempt to access beyond end of device [ 115.148994][ T994] loop2: rw=67112961, sector=10480, nr_sectors = 8 limit=0 [ 115.180506][ T6243] BTRFS: error (device loop2: state AL) in free_log_tree:3319: errno=-5 IO failure [ 115.224213][ T994] BTRFS error (device loop2: state AL): bdev /dev/loop2 errs: wr 5, rd 0, flush 0, corrupt 0, gen 0 [ 115.237606][ T6243] BTRFS info (device loop2: state EAL): forced readonly [ 115.253980][ T994] kworker/u4:5: attempt to access beyond end of device [ 115.253980][ T994] loop2: rw=67112961, sector=10504, nr_sectors = 8 limit=0 [ 115.275240][ T6243] BTRFS: error (device loop2: state EAL) in free_log_tree:3319: errno=-5 IO failure [ 115.313758][ T994] BTRFS error (device loop2: state EAL): bdev /dev/loop2 errs: wr 6, rd 0, flush 0, corrupt 0, gen 0 [ 115.327142][ T6243] BTRFS warning (device loop2: state EAL): Skipping commit of aborted transaction. [ 115.359575][ T994] kworker/u4:5: attempt to access beyond end of device [ 115.359575][ T994] loop2: rw=67112961, sector=10512, nr_sectors = 8 limit=0 [ 115.373815][ T6243] BTRFS: error (device loop2: state EAL) in cleanup_transaction:2022: errno=-5 IO failure [ 115.416421][ T994] BTRFS error (device loop2: state EAL): bdev /dev/loop2 errs: wr 7, rd 0, flush 0, corrupt 0, gen 0 [ 115.513660][ C1] net_ratelimit: 52 callbacks suppressed [ 115.690108][ T5776] BTRFS info (device loop2: state EAL): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 116.102658][ T6250] loop3: detected capacity change from 0 to 32768 [ 116.151571][ T6250] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.105 (6250) [ 116.202596][ T5775] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 116.341143][ T6251] loop0: detected capacity change from 32768 to 0 [ 116.393137][ T5980] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (5980) [ 117.395771][ T6257] syz.2.108 (6257) used greatest stack depth: 17832 bytes left [ 117.813755][ T5817] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 117.882846][ T6259] loop0: detected capacity change from 0 to 32768 [ 117.948429][ T6259] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 118.011487][ T5817] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 118.055002][ T5817] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 118.087353][ T5817] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 118.112873][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.209576][ T6259] XFS (loop0): Ending clean mount [ 118.229387][ T6259] XFS (loop0): Quotacheck needed: Please wait. [ 118.365721][ T6259] XFS (loop0): Quotacheck: Done. [ 118.380371][ T5817] cxacru 3-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 118.409658][ T5817] cxacru: probe of 3-1:1.0 failed with error -22 [ 118.537725][ T5775] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 119.035657][ T6279] loop3: detected capacity change from 0 to 32768 [ 119.099738][ T6279] JBD2: Ignoring recovery information on journal [ 119.215584][ T6279] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 119.363831][ T28] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 119.580685][ T28] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.607587][ T28] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 119.639012][ T28] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.687933][ T28] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 119.712346][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 119.723893][ T5774] ocfs2: Unmounting device (7,3) on (node local) [ 119.731715][ T28] usb 1-1: Product: syz [ 119.743999][ T28] usb 1-1: Manufacturer: syz [ 119.758785][ T6287] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 119.782149][ T28] garmin_gps 1-1:1.0: Garmin GPS usb/tty converter detected [ 119.814696][ T28] usb 1-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 120.016332][ T8] usb 1-1: USB disconnect, device number 5 [ 120.085857][ T8] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 120.123432][ T8] garmin_gps 1-1:1.0: device disconnected [ 120.601167][ T28] usb 3-1: USB disconnect, device number 4 [ 120.713779][ C1] net_ratelimit: 59 callbacks suppressed [ 120.742471][ T6329] Zero length message leads to an empty skb [ 120.826639][ T6333] device-mapper: table: 248:0: multipath: invalid number of feature args (-EINVAL) [ 120.842466][ T6333] device-mapper: ioctl: error adding target to table [ 121.228723][ T6341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.137'. [ 121.255124][ T6341] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.501673][ T6331] loop2: detected capacity change from 0 to 40427 [ 121.521883][ T6331] F2FS-fs (loop2): build fault injection attr: rate: 174, type: 0x7ffff [ 121.713695][ T8] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 121.931036][ T8] usb 1-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 121.950831][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.232266][ T8] cxacru 1-1:1.0: invalid response length to cm 0x90: 0 [ 122.296694][ T6365] cxacru 1-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -2 [ 122.323674][ T6365] cxacru 1-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 122.686120][ T6358] loop2: detected capacity change from 0 to 32768 [ 122.717882][ T6358] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.145 (6358) [ 122.748867][ T6358] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 122.778084][ T6358] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 122.800021][ T6358] BTRFS info (device loop2): enabling ssd optimizations [ 122.829501][ T6358] BTRFS info (device loop2): using spread ssd allocation scheme [ 122.849674][ T6358] BTRFS error (device loop2): unrecognized mount option 'fragment=data' [ 122.898231][ T6358] BTRFS error (device loop2): open_ctree failed: -22 [ 122.978242][ T5980] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (5980) [ 123.860649][ T6369] loop3: detected capacity change from 0 to 65536 [ 123.930598][ T6369] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 123.977023][ T6369] XFS (loop3): Ending clean mount [ 123.990039][ T6369] XFS (loop3): Quotacheck needed: Please wait. [ 124.002624][ T5818] XFS (loop3): Metadata CRC error detected at xfs_agi_read_verify+0x196/0x260, xfs_agi block 0x8002 [ 124.026387][ T5818] XFS (loop3): Unmount and run xfs_repair [ 124.032549][ T5818] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 124.042039][ T5818] 00000000: 58 41 47 49 00 00 00 01 00 00 00 01 00 00 40 00 XAGI..........@. [ 124.070714][ T5818] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 00 ................ [ 124.087569][ T5818] 00000020: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 124.098054][ T5818] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 124.107552][ T6394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.154'. [ 124.131906][ T5818] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 124.147339][ T5818] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 124.170163][ T5818] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 124.192510][ T5818] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 124.202134][ T994] XFS (loop3): metadata I/O error in "xfs_read_agi+0x27e/0x5d0" at daddr 0x8002 len 1 error 74 [ 124.215732][ T5818] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_cntbt block 0x6 [ 124.231822][ T6391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.245140][ T5818] XFS (loop3): Unmount and run xfs_repair [ 124.250925][ T5818] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 124.266355][ T5818] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff AB3C............ [ 124.281588][ T5818] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10 ................ [ 124.293448][ T5818] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 124.302950][ T5818] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03 .....J.......... [ 124.312646][ T5818] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 124.322702][ T5818] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00 ...........?.... [ 124.331997][ T5818] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 124.341368][ T5818] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 124.355829][ T12] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x6 len 2 error 74 [ 124.403354][ T6369] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 124.455920][ T23] usb 1-1: USB disconnect, device number 6 [ 124.659847][ T5774] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 125.090638][ T6411] binder_alloc: 6410: binder_alloc_buf, no vma [ 125.766926][ T6426] autofs4:pid:6426:autofs_fill_super: called with bogus options [ 125.866576][ T6428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.170'. [ 125.895687][ T6428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.913638][ C1] net_ratelimit: 48 callbacks suppressed [ 126.143008][ T6418] loop2: detected capacity change from 0 to 32768 [ 126.170922][ T6418] (syz.2.166,6418,0):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "hear [ 126.170922][ T6418] " or missing value [ 126.194507][ T6418] (syz.2.166,6418,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 126.319051][ T6435] binder_alloc: 6434: binder_alloc_buf, no vma [ 127.005360][ T6455] FAULT_INJECTION: forcing a failure. [ 127.005360][ T6455] name failslab, interval 1, probability 0, space 0, times 0 [ 127.018773][ T6455] CPU: 0 PID: 6455 Comm: syz.3.181 Not tainted syzkaller #0 [ 127.026214][ T6455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 127.036334][ T6455] Call Trace: [ 127.039764][ T6455] [ 127.042732][ T6455] dump_stack_lvl+0x18c/0x250 [ 127.047460][ T6455] ? __lock_acquire+0x7d80/0x7d80 [ 127.052551][ T6455] ? show_regs_print_info+0x20/0x20 [ 127.057804][ T6455] ? load_image+0x420/0x420 [ 127.062367][ T6455] should_fail_ex+0x394/0x4c0 [ 127.067119][ T6455] should_failslab+0x9/0x20 [ 127.071674][ T6455] slab_pre_alloc_hook+0x59/0x300 [ 127.076760][ T6455] ? hash_net4_add+0x1d61/0x2690 [ 127.081750][ T6455] ? hash_net4_add+0x1d61/0x2690 [ 127.086763][ T6455] __kmem_cache_alloc_node+0x53/0x250 [ 127.092216][ T6455] ? hash_net4_add+0x1d61/0x2690 [ 127.097209][ T6455] __kmalloc+0xa7/0x240 [ 127.101514][ T6455] ? hash_net4_add+0x803/0x2690 [ 127.106532][ T6455] hash_net4_add+0x1d61/0x2690 [ 127.111469][ T6455] hash_net4_uadt+0x747/0x930 [ 127.116203][ T6455] ? hash_net4_uadt+0x930/0x930 [ 127.121203][ T6455] ? hash_net4_kadt+0x550/0x550 [ 127.126191][ T6455] ? __nla_validate_parse+0x25fa/0x2fd0 [ 127.131814][ T6455] ? __lock_acquire+0x1262/0x7d80 [ 127.136908][ T6455] call_ad+0x185/0xb30 [ 127.141037][ T6455] ? ip_set_ad+0x9c0/0x9c0 [ 127.145529][ T6455] ? __nla_parse+0x40/0x50 [ 127.150012][ T6455] ip_set_ad+0x81a/0x9c0 [ 127.154324][ T6455] ? ip_set_dump_done+0x320/0x320 [ 127.159398][ T6455] ? rcu_is_watching+0x15/0xb0 [ 127.164253][ T6455] nfnetlink_rcv_msg+0xcaf/0x1290 [ 127.169327][ T6455] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.175446][ T6455] ? nfnetlink_rcv_msg+0x228/0x1290 [ 127.180718][ T6455] ? nfnetlink_unbind+0x160/0x160 [ 127.185820][ T6455] ? __dev_queue_xmit+0x1be8/0x37e0 [ 127.191064][ T6455] ? __netlink_deliver_tap+0x579/0x7f0 [ 127.196576][ T6455] ? netlink_deliver_tap+0x19c/0x1b0 [ 127.201910][ T6455] ? netlink_unicast+0x77b/0x930 [ 127.206901][ T6455] ? netlink_sendmsg+0x8d0/0xbf0 [ 127.211893][ T6455] ? ____sys_sendmsg+0x61b/0x980 [ 127.216968][ T6455] ? ___sys_sendmsg+0x2a6/0x360 [ 127.221867][ T6455] ? __se_sys_sendmsg+0x1d0/0x2c0 [ 127.227985][ T6455] ? do_syscall_64+0x55/0xb0 [ 127.232641][ T6455] netlink_rcv_skb+0x235/0x4c0 [ 127.237459][ T6455] ? nfnetlink_unbind+0x160/0x160 [ 127.242619][ T6455] ? netlink_ack+0x1160/0x1160 [ 127.247442][ T6455] ? apparmor_capable+0x137/0x1a0 [ 127.252519][ T6455] ? bpf_lsm_capable+0x9/0x10 [ 127.257240][ T6455] ? security_capable+0x89/0xb0 [ 127.262151][ T6455] nfnetlink_rcv+0x2c9/0x2490 [ 127.266892][ T6455] ? __local_bh_enable_ip+0x13a/0x1c0 [ 127.272313][ T6455] ? lockdep_hardirqs_on+0x98/0x150 [ 127.277532][ T6455] ? __local_bh_enable_ip+0x13a/0x1c0 [ 127.283229][ T6455] ? _local_bh_enable+0xa0/0xa0 [ 127.288113][ T6455] ? __dev_queue_xmit+0x272/0x37e0 [ 127.288140][ T6455] ? __dev_queue_xmit+0x1329/0x37e0 [ 127.288162][ T6455] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 127.288191][ T6455] ? __dev_queue_xmit+0x272/0x37e0 [ 127.288232][ T6455] ? ref_tracker_free+0x686/0x830 [ 127.293531][ T6455] ? refcount_inc+0x70/0x70 [ 127.293562][ T6455] ? __asan_memcpy+0x40/0x70 [ 127.304585][ T6455] ? __skb_clone+0x5c/0x6c0 [ 127.304626][ T6455] ? __skb_clone+0x446/0x6c0 [ 127.333187][ T6455] ? netlink_deliver_tap+0x2e/0x1b0 [ 127.338448][ T6455] ? __lock_acquire+0x7d80/0x7d80 [ 127.343546][ T6455] ? netlink_deliver_tap+0x2e/0x1b0 [ 127.348804][ T6455] netlink_unicast+0x7b1/0x930 [ 127.353630][ T6455] netlink_sendmsg+0x8d0/0xbf0 [ 127.358459][ T6455] ? netlink_getsockopt+0x590/0x590 [ 127.363722][ T6455] ? apparmor_socket_sendmsg+0x170/0x330 [ 127.369496][ T6455] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 127.374874][ T6455] ? security_socket_sendmsg+0x80/0xa0 [ 127.380465][ T6455] ? netlink_getsockopt+0x590/0x590 [ 127.385721][ T6455] ____sys_sendmsg+0x61b/0x980 [ 127.390556][ T6455] ? __asan_memset+0x22/0x40 [ 127.395206][ T6455] ? __sys_sendmsg_sock+0x30/0x30 [ 127.400298][ T6455] ? __import_iovec+0x5f2/0x850 [ 127.405223][ T6455] ? import_iovec+0x73/0xa0 [ 127.409790][ T6455] ___sys_sendmsg+0x2a6/0x360 [ 127.414554][ T6455] ? __sys_sendmsg+0x2b0/0x2b0 [ 127.419451][ T6455] __se_sys_sendmsg+0x1d0/0x2c0 [ 127.424366][ T6455] ? __x64_sys_sendmsg+0x80/0x80 [ 127.429381][ T6455] ? lockdep_hardirqs_on+0x98/0x150 [ 127.434636][ T6455] do_syscall_64+0x55/0xb0 [ 127.439227][ T6455] ? clear_bhb_loop+0x40/0x90 [ 127.443962][ T6455] ? clear_bhb_loop+0x40/0x90 [ 127.448700][ T6455] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 127.454660][ T6455] RIP: 0033:0x7ffa5ad9e159 [ 127.459121][ T6455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.478784][ T6455] RSP: 002b:00007ffa5bd03028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 127.487272][ T6455] RAX: ffffffffffffffda RBX: 00007ffa5b025fa0 RCX: 00007ffa5ad9e159 [ 127.495468][ T6455] RDX: 00000000240008c4 RSI: 0000200000000000 RDI: 0000000000000008 [ 127.503493][ T6455] RBP: 00007ffa5ae3506b R08: 0000000000000000 R09: 0000000000000000 [ 127.511508][ T6455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.519499][ T6455] R13: 00007ffa5b026038 R14: 00007ffa5b025fa0 R15: 00007fffea4ad568 [ 127.519540][ T6455] [ 127.932338][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.183'. [ 127.945983][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.795027][ T6478] process 'syz.1.190' launched './file2' with NULL argv: empty string added [ 129.251135][ T6451] loop2: detected capacity change from 0 to 131072 [ 129.282084][ T6451] F2FS-fs (loop2): invalid crc value [ 129.315759][ T6451] F2FS-fs (loop2): Found nat_bits in checkpoint [ 129.485261][ T6451] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 129.644642][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.195'. [ 129.724676][ T6497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.742546][ T6501] F2FS-fs (loop2): Stopped filesystem due to reason: 0 [ 130.231667][ T6504] loop0: detected capacity change from 0 to 32768 [ 130.295621][ T6504] JBD2: Ignoring recovery information on journal [ 130.416535][ T6504] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 130.726372][ T5775] ocfs2: Unmounting device (7,0) on (node local) [ 131.113649][ C1] net_ratelimit: 55 callbacks suppressed [ 131.275303][ T6533] netlink: 4 bytes leftover after parsing attributes in process `syz.1.211'. [ 131.308752][ T6533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.725749][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 131.926614][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.949036][ T8] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 131.983761][ T8] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.012594][ T8] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 132.029422][ T6554] FAULT_INJECTION: forcing a failure. [ 132.029422][ T6554] name failslab, interval 1, probability 0, space 0, times 0 [ 132.042362][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 132.062608][ T8] usb 4-1: Product: syz [ 132.067208][ T8] usb 4-1: Manufacturer: syz [ 132.072781][ T6554] CPU: 0 PID: 6554 Comm: syz.0.217 Not tainted syzkaller #0 [ 132.080177][ T6554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 132.090359][ T6554] Call Trace: [ 132.093661][ T6554] [ 132.093673][ T6554] dump_stack_lvl+0x18c/0x250 [ 132.093712][ T6554] ? show_regs_print_info+0x20/0x20 [ 132.093743][ T6554] ? load_image+0x420/0x420 [ 132.093773][ T6554] ? __might_sleep+0xe0/0xe0 [ 132.093801][ T6554] ? __lock_acquire+0x7d80/0x7d80 [ 132.121336][ T6554] should_fail_ex+0x394/0x4c0 [ 132.126080][ T6554] should_failslab+0x9/0x20 [ 132.130649][ T6554] slab_pre_alloc_hook+0x59/0x300 [ 132.135745][ T6554] kmem_cache_alloc+0x5a/0x2c0 [ 132.140563][ T6554] ? __kernfs_new_node+0xe5/0x7f0 [ 132.145651][ T6554] __kernfs_new_node+0xe5/0x7f0 [ 132.150572][ T6554] ? kernfs_new_node+0x260/0x260 [ 132.155707][ T6554] ? up_write+0x1be/0x410 [ 132.160083][ T6554] kernfs_new_node+0x14c/0x260 [ 132.164887][ T6554] __kernfs_create_file+0x4b/0x2e0 [ 132.170042][ T6554] sysfs_add_file_mode_ns+0x237/0x2f0 [ 132.175447][ T6554] internal_create_group+0x431/0xd10 [ 132.180785][ T6554] ? kernfs_add_one+0x149/0x6b0 [ 132.185686][ T6554] ? sysfs_create_group+0x20/0x20 [ 132.190743][ T6554] ? sysfs_create_dir_ns+0x16b/0x2a0 [ 132.196066][ T6554] ? sysfs_warn_dup+0xa0/0xa0 [ 132.200796][ T6554] sysfs_create_groups+0x59/0x120 [ 132.205850][ T6554] kobject_add_internal+0x65e/0xc90 [ 132.211082][ T6554] kobject_init_and_add+0x12c/0x1a0 [ 132.216314][ T6554] ? tun_attach+0x1181/0x1540 [ 132.221025][ T6554] ? tun_set_iff+0x474/0xea0 [ 132.225647][ T6554] ? __tun_chr_ioctl+0x7e0/0x2070 [ 132.230700][ T6554] ? __se_sys_ioctl+0xfd/0x170 [ 132.235500][ T6554] ? kobject_add+0x240/0x240 [ 132.240117][ T6554] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 132.246128][ T6554] ? __lock_acquire+0x7d80/0x7d80 [ 132.251184][ T6554] netdev_queue_update_kobjects+0x1fd/0x480 [ 132.257204][ T6554] netif_set_real_num_tx_queues+0x164/0x970 [ 132.263141][ T6554] tun_attach+0x1181/0x1540 [ 132.267685][ T6554] ? __lock_acquire+0x7d80/0x7d80 [ 132.272736][ T6554] ? full_name_hash+0x92/0xe0 [ 132.277437][ T6554] ? tun_not_capable+0x14d/0x1f0 [ 132.282422][ T6554] tun_set_iff+0x474/0xea0 [ 132.286901][ T6554] __tun_chr_ioctl+0x7e0/0x2070 [ 132.291793][ T6554] ? tun_flow_create+0x310/0x310 [ 132.296799][ T6554] ? bpf_lsm_file_ioctl+0x9/0x10 [ 132.301770][ T6554] ? security_file_ioctl+0x80/0xa0 [ 132.306931][ T6554] ? tun_chr_poll+0x630/0x630 [ 132.311648][ T6554] __se_sys_ioctl+0xfd/0x170 [ 132.316278][ T6554] do_syscall_64+0x55/0xb0 [ 132.320737][ T6554] ? clear_bhb_loop+0x40/0x90 [ 132.325529][ T6554] ? clear_bhb_loop+0x40/0x90 [ 132.330247][ T6554] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 132.336171][ T6554] RIP: 0033:0x7fe6b4d9e159 [ 132.340614][ T6554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.360367][ T6554] RSP: 002b:00007fe6b5d55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 132.368821][ T6554] RAX: ffffffffffffffda RBX: 00007fe6b5025fa0 RCX: 00007fe6b4d9e159 [ 132.368842][ T6554] RDX: 00002000000002c0 RSI: 00000000400454ca RDI: 0000000000000005 [ 132.384815][ T6554] RBP: 00007fe6b4e3506b R08: 0000000000000000 R09: 0000000000000000 [ 132.384834][ T6554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.384849][ T6554] R13: 00007fe6b5026038 R14: 00007fe6b5025fa0 R15: 00007ffe4cf7b488 [ 132.384914][ T6554] [ 132.478525][ T6554] kobject: kobject_add_internal failed for tx-1 (error: -12 parent: queues) [ 132.499295][ T6541] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 132.555398][ T8] garmin_gps 4-1:1.0: Garmin GPS usb/tty converter detected [ 132.590932][ T8] usb 4-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 132.645955][ T5788] udevd[5788]: inotify_add_watch(7, /dev/loop2, 10) failed: No such file or directory [ 132.784358][ T968] usb 4-1: USB disconnect, device number 4 [ 132.872779][ T968] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 132.924678][ T968] garmin_gps 4-1:1.0: device disconnected [ 133.038665][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.048564][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.788594][ T6556] overlayfs: failed to clone upperpath [ 133.960108][ T6590] loop0: detected capacity change from 0 to 512 [ 133.998979][ T6590] ext4: Unknown parameter 'fsname' [ 134.186424][ T6595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.226'. [ 134.226604][ T6595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.286376][ T6600] binder: BINDER_SET_CONTEXT_MGR already set [ 134.292886][ T6600] binder: 6597:6600 ioctl 4018620d 200000004a80 returned -16 [ 134.643366][ T6609] netlink: 'syz.2.230': attribute type 10 has an invalid length. [ 134.667498][ T6609] syz_tun: entered promiscuous mode [ 134.699706][ T6609] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 134.735840][ T61] bond0: (slave bond_slave_0): interface is now down [ 134.757093][ T61] bond0: (slave bond_slave_1): interface is now down [ 134.774479][ T61] bond0: (slave syz_tun): interface is now down [ 134.807180][ T61] bond0: now running without any active interface! [ 135.797824][ T6606] loop3: detected capacity change from 0 to 32768 [ 135.838911][ T6606] OCFS2: ERROR (device loop3): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #17: signature = INO [ 135.870913][ T6620] loop0: detected capacity change from 0 to 32768 [ 135.888041][ T6606] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 135.964850][ T6606] OCFS2: File system is now read-only. [ 135.970418][ T6606] (syz.3.229,6606,0):ocfs2_read_locked_inode:554 ERROR: status = -30 [ 135.980060][ T6620] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 136.020478][ T6620] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 136.031051][ T6606] (syz.3.229,6606,0):ocfs2_init_global_system_inodes:440 ERROR: status = -30 [ 136.053786][ T6620] BTRFS info (device loop0): enabling ssd optimizations [ 136.060811][ T6620] BTRFS info (device loop0): using spread ssd allocation scheme [ 136.073807][ T6606] (syz.3.229,6606,0):ocfs2_init_global_system_inodes:472 ERROR: status = -30 [ 136.082653][ T6606] (syz.3.229,6606,0):ocfs2_initialize_super:2252 ERROR: status = -30 [ 136.114404][ T6620] BTRFS error (device loop0): unrecognized mount option 'fragment=data' [ 136.123223][ T6606] (syz.3.229,6606,0):ocfs2_fill_super:1178 ERROR: status = -30 [ 136.147052][ T6620] BTRFS error (device loop0): open_ctree failed: -22 [ 136.233405][ T5788] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (5788) [ 136.246350][ T2972] net_ratelimit: 53 callbacks suppressed [ 137.012501][ T6635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.240'. [ 137.029107][ T6635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.040861][ T6638] mmap: syz.1.241 (6638) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 137.490845][ T6647] netlink: 4 bytes leftover after parsing attributes in process `syz.1.245'. [ 137.552086][ T6647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.245678][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.258'. [ 138.259888][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.2.258'. [ 138.430883][ T6663] loop3: detected capacity change from 0 to 32768 [ 138.463594][ T6663] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 138.483191][ T6663] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 138.502522][ T6663] BTRFS info (device loop3): disabling tree log [ 138.515839][ T6663] BTRFS info (device loop3): using free space tree [ 138.650076][ T6663] BTRFS info (device loop3): enabling ssd optimizations [ 138.724280][ T6663] BTRFS info (device loop3): auto enabling async discard [ 139.128768][ T6705] binder: BINDER_SET_CONTEXT_MGR already set [ 139.136817][ T6705] binder: 6704:6705 ioctl 4018620d 200000004a80 returned -16 [ 140.232657][ T6663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.253'. [ 141.040088][ T5774] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 141.753653][ C1] net_ratelimit: 51 callbacks suppressed [ 141.900387][ T6728] binder: BINDER_SET_CONTEXT_MGR already set [ 141.906947][ T6728] binder: 6727:6728 ioctl 4018620d 200000004a80 returned -16 [ 142.326524][ T6734] device-mapper: table: 248:0: multipath: invalid number of feature args (-EINVAL) [ 142.341214][ T6734] device-mapper: ioctl: error adding target to table [ 142.429238][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'. [ 142.805495][ T6730] loop3: detected capacity change from 0 to 32768 [ 142.832885][ T6730] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.276 (6730) [ 142.870739][ T6730] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 142.881296][ T6730] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 142.915352][ T6730] BTRFS info (device loop3): enabling ssd optimizations [ 142.922400][ T6730] BTRFS info (device loop3): using spread ssd allocation scheme [ 142.943687][ T6730] BTRFS error (device loop3): unrecognized mount option 'fragment=data' [ 142.965061][ T6730] BTRFS error (device loop3): open_ctree failed: -22 [ 143.059235][ T5980] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (5980) [ 143.999574][ T6766] device-mapper: table: 248:0: multipath: invalid number of feature args (-EINVAL) [ 144.013416][ T6766] device-mapper: ioctl: error adding target to table [ 145.044064][ T28] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 145.236037][ T28] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 145.257478][ T28] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.320202][ T28] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.330108][ T28] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 145.345553][ T28] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 145.356477][ T28] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 145.365202][ T28] usb 4-1: Manufacturer: syz [ 145.381140][ T28] usb 4-1: config 0 descriptor?? [ 146.124122][ T28] usbhid 4-1:0.0: can't add hid device: -71 [ 146.131020][ T28] usbhid: probe of 4-1:0.0 failed with error -71 [ 146.156577][ T28] usb 4-1: USB disconnect, device number 5 [ 146.953673][ C1] net_ratelimit: 57 callbacks suppressed [ 146.971932][ T6722] Set syz1 is full, maxelem 65536 reached [ 147.118147][ T6824] loop3: detected capacity change from 0 to 32768 [ 147.126693][ T6824] (syz.3.309,6824,0):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "hear [ 147.126693][ T6824] " or missing value [ 147.145074][ T6824] (syz.3.309,6824,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 147.241191][ T27] audit: type=1326 audit(1789701583.759:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.3.311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5ad9e159 code=0x7ffc0000 [ 147.269138][ T27] audit: type=1326 audit(1789701583.789:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.3.311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa5ad5e98e code=0x7ffc0000 [ 147.305642][ T27] audit: type=1326 audit(1789701583.789:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.3.311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5ad9e159 code=0x7ffc0000 [ 147.338135][ T27] audit: type=1326 audit(1789701583.789:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.3.311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffa5ad5e98e code=0x7ffc0000 [ 147.370168][ T27] audit: type=1326 audit(1789701583.789:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.3.311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5ad9e159 code=0x7ffc0000 [ 147.400486][ T5813] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 147.429172][ T27] audit: type=1326 audit(1789701583.789:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.3.311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5ad9e159 code=0x7ffc0000 [ 147.462315][ T27] audit: type=1326 audit(1789701583.789:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.3.311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffa5ad9e159 code=0x7ffc0000 [ 147.502636][ T27] audit: type=1326 audit(1789701583.789:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.3.311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5ad9e159 code=0x7ffc0000 [ 147.554736][ T27] audit: type=1326 audit(1789701583.789:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6827 comm="syz.3.311" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffa5ad9e159 code=0x7ffc0000 [ 147.646852][ T5813] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 147.660609][ T5813] usb 3-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 147.692821][ T5813] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 147.708959][ T5813] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 147.732807][ T5813] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 147.755985][ T5813] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 147.775858][ T5813] usb 3-1: Product: syz [ 147.780190][ T5813] usb 3-1: Manufacturer: syz [ 147.792979][ T5813] cdc_wdm 3-1:1.0: skipping garbage [ 147.810056][ T5813] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 148.262227][ T28] usb 3-1: USB disconnect, device number 5 [ 149.140604][ T6867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.326'. [ 149.993774][ T5779] Bluetooth: hci4: command 0x1003 tx timeout [ 150.000911][ T5787] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 150.367832][ T6888] device-mapper: table: 248:0: multipath: invalid number of feature args (-EINVAL) [ 150.379775][ T6888] device-mapper: ioctl: error adding target to table [ 150.615801][ T27] audit: type=1800 audit(1789701587.139:16): pid=6898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.342" name="no_out_endpoint" dev="configfs" ino=9937 res=0 errno=0 [ 150.896784][ T6908] loop3: detected capacity change from 0 to 2048 [ 150.932551][ T6908] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 151.345940][ T968] ------------[ cut here ]------------ [ 151.351796][ T968] sysfs group 'byte_queue_limits' not found for kobject 'tx-0' [ 151.365549][ T968] WARNING: CPU: 0 PID: 968 at fs/sysfs/group.c:284 sysfs_remove_group+0x17b/0x290 [ 151.375084][ T968] Modules linked in: [ 151.379058][ T968] CPU: 0 PID: 968 Comm: kworker/0:2 Not tainted syzkaller #0 [ 151.386530][ T968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.396795][ T968] Workqueue: events delete_netdev [ 151.401887][ T968] [ 151.404282][ T968] RIP: 0010:sysfs_remove_group+0x17b/0x290 [ 151.410118][ T968] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 97 21 c9 ff 49 8b 17 48 c7 c7 00 c0 da 8a 48 89 de e8 65 59 3a ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4f 95 70 ff [ 151.410144][ T968] RSP: 0018:ffffc90004317840 EFLAGS: 00010246 [ 151.436225][ T968] RAX: 00b7fc90abd3ab00 RBX: ffffffff8bc599a0 RCX: ffff8880224e3c00 [ 151.444834][ T968] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 151.453137][ T968] RBP: 0000000000000059 R08: ffffc90004317447 R09: 1ffff92000862e88 [ 151.461170][ T968] R10: dffffc0000000000 R11: fffff52000862e89 R12: 1ffffffff178b230 [ 151.461192][ T968] R13: dffffc0000000000 R14: ffff8880605b62e8 R15: ffff888022029020 [ 151.469249][ T968] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 151.486642][ T968] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 151.493253][ T968] CR2: 00007f5315d5da08 CR3: 0000000062bf7000 CR4: 00000000003506f0 [ 151.493281][ T968] Call Trace: [ 151.504783][ T968] [ 151.507738][ T968] ? netdev_queue_update_kobjects+0x3a6/0x480 [ 151.513890][ T968] netdev_queue_update_kobjects+0x3e1/0x480 [ 151.519897][ T968] netdev_unregister_kobject+0x108/0x250 [ 151.525714][ T968] unregister_netdevice_many_notify+0x1449/0x1910 [ 151.532210][ T968] ? trace_raw_output_contention_end+0xd0/0xd0 [ 151.539203][ T968] ? unregister_netdevice_many+0x20/0x20 [ 151.544984][ T968] ? rcu_is_watching+0x15/0xb0 [ 151.549818][ T968] ? trace_contention_end+0x39/0xe0 [ 151.555163][ T968] ? __mutex_lock+0x30d/0xc80 [ 151.559906][ T968] unregister_netdevice_queue+0x2e9/0x330 [ 151.565808][ T968] ? list_netdevice+0x730/0x730 [ 151.570748][ T968] ? read_lock_is_recursive+0x20/0x20 [ 151.576217][ T968] lowpan_unregister_netdev+0x1c/0x30 [ 151.581648][ T968] unregister_dev+0x70/0x1a0 [ 151.586402][ T968] ? process_scheduled_works+0x975/0x1600 [ 151.592177][ T968] process_scheduled_works+0xa60/0x1600 [ 151.601196][ T968] ? worker_attach_to_pool+0x370/0x370 [ 151.607203][ T968] ? assign_work+0x3cc/0x5d0 [ 151.611865][ T968] worker_thread+0xa5e/0xfe0 [ 151.616591][ T968] ? _raw_spin_unlock+0x40/0x40 [ 151.621543][ T968] ? __kthread_parkme+0x71/0x1c0 [ 151.626634][ T968] kthread+0x2fa/0x390 [ 151.630749][ T968] ? pr_cont_work+0x550/0x550 [ 151.635616][ T968] ? kthread_blkcg+0xd0/0xd0 [ 151.640258][ T968] ret_from_fork+0x48/0x80 [ 151.644764][ T968] ? kthread_blkcg+0xd0/0xd0 [ 151.649427][ T968] ret_from_fork_asm+0x11/0x20 [ 151.654326][ T968] [ 151.657418][ T968] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 151.662036][ T6916] kcov: kcov_task_exit: t = ffff88801baf5a00, kcov->t = ffff88801baf5a00 [ 151.673145][ T968] CPU: 0 PID: 968 Comm: kworker/0:2 Not tainted syzkaller #0 [ 151.680552][ T968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.690631][ T968] Workqueue: events delete_netdev [ 151.695706][ T968] Call Trace: [ 151.699010][ T968] [ 151.701960][ T968] dump_stack_lvl+0x18c/0x250 [ 151.706676][ T968] ? show_regs_print_info+0x20/0x20 [ 151.711900][ T968] ? load_image+0x420/0x420 [ 151.716467][ T968] panic+0x2ca/0x720 [ 151.720397][ T968] ? bpf_jit_dump+0xd0/0xd0 [ 151.724928][ T968] ? ret_from_fork_asm+0x11/0x20 [ 151.729894][ T968] __warn+0x2e0/0x470 [ 151.733906][ T968] ? sysfs_remove_group+0x17b/0x290 [ 151.739146][ T968] ? sysfs_remove_group+0x17b/0x290 [ 151.744374][ T968] report_bug+0x2be/0x4f0 [ 151.748829][ T968] ? sysfs_remove_group+0x17b/0x290 [ 151.754240][ T968] ? sysfs_remove_group+0x17b/0x290 [ 151.759470][ T968] ? sysfs_remove_group+0x17d/0x290 [ 151.764684][ T968] handle_bug+0xcf/0x120 [ 151.768950][ T968] exc_invalid_op+0x1a/0x50 [ 151.773483][ T968] asm_exc_invalid_op+0x1a/0x20 [ 151.778384][ T968] RIP: 0010:sysfs_remove_group+0x17b/0x290 [ 151.784217][ T968] Code: 8b 1b 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 4c 89 ff e8 97 21 c9 ff 49 8b 17 48 c7 c7 00 c0 da 8a 48 89 de e8 65 59 3a ff <0f> 0b 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4f 95 70 ff [ 151.803845][ T968] RSP: 0018:ffffc90004317840 EFLAGS: 00010246 [ 151.809943][ T968] RAX: 00b7fc90abd3ab00 RBX: ffffffff8bc599a0 RCX: ffff8880224e3c00 [ 151.817932][ T968] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 151.825920][ T968] RBP: 0000000000000059 R08: ffffc90004317447 R09: 1ffff92000862e88 [ 151.833908][ T968] R10: dffffc0000000000 R11: fffff52000862e89 R12: 1ffffffff178b230 [ 151.841931][ T968] R13: dffffc0000000000 R14: ffff8880605b62e8 R15: ffff888022029020 [ 151.849962][ T968] ? netdev_queue_update_kobjects+0x3a6/0x480 [ 151.856060][ T968] netdev_queue_update_kobjects+0x3e1/0x480 [ 151.861995][ T968] netdev_unregister_kobject+0x108/0x250 [ 151.867656][ T968] unregister_netdevice_many_notify+0x1449/0x1910 [ 151.874196][ T968] ? trace_raw_output_contention_end+0xd0/0xd0 [ 151.880368][ T968] ? unregister_netdevice_many+0x20/0x20 [ 151.886023][ T968] ? rcu_is_watching+0x15/0xb0 [ 151.890814][ T968] ? trace_contention_end+0x39/0xe0 [ 151.896029][ T968] ? __mutex_lock+0x30d/0xc80 [ 151.900732][ T968] unregister_netdevice_queue+0x2e9/0x330 [ 151.906490][ T968] ? list_netdevice+0x730/0x730 [ 151.911359][ T968] ? read_lock_is_recursive+0x20/0x20 [ 151.916754][ T968] lowpan_unregister_netdev+0x1c/0x30 [ 151.922174][ T968] unregister_dev+0x70/0x1a0 [ 151.926800][ T968] ? process_scheduled_works+0x975/0x1600 [ 151.932545][ T968] process_scheduled_works+0xa60/0x1600 [ 151.938189][ T968] ? worker_attach_to_pool+0x370/0x370 [ 151.943691][ T968] ? assign_work+0x3cc/0x5d0 [ 151.948308][ T968] worker_thread+0xa5e/0xfe0 [ 151.953048][ T968] ? _raw_spin_unlock+0x40/0x40 [ 151.957695][ C1] virtqueue callback for ffff888023a0a400 (ffffffff85c745d0) [ 151.957881][ C1] No more buffers in queue [ 151.957930][ C1] Receiving skb proto 0x0806 len 28 type 1 [ 151.957996][ C1] No more buffers in queue [ 151.958881][ C1] No more buffers in queue [ 151.958909][ C1] eth0: xmit ffff88802cc64dc0 42:01:0a:80:00:01 [ 151.958967][ C1] Added buffer head 0 to ffff888023a0a600 [ 151.959021][ C1] virtqueue callback for ffff888023a0a600 (ffffffff85c746c0) [ 151.959157][ C1] Sent skb ffff88802cc64dc0 [ 151.959243][ C1] No more buffers in queue [ 152.012732][ T968] ? __kthread_parkme+0x71/0x1c0 [ 152.017705][ T968] kthread+0x2fa/0x390 [ 152.021791][ T968] ? pr_cont_work+0x550/0x550 [ 152.026490][ T968] ? kthread_blkcg+0xd0/0xd0 [ 152.031115][ T968] ret_from_fork+0x48/0x80 [ 152.035557][ T968] ? kthread_blkcg+0xd0/0xd0 [ 152.040192][ T968] ret_from_fork_asm+0x11/0x20 [ 152.044990][ T968] [ 152.048599][ T968] Kernel Offset: disabled [ 152.053017][ T968] Rebooting in 86400 seconds..