last executing test programs: 1m25.263135132s ago: executing program 1 (id=2): r0 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)=ANY=[@ANYBLOB="12011001000000202505a8a4720b1c25030109021f000101ff8008090400fd010701010109050102"], 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003620000000003"]}, 0x0) syz_usb_control_io(r0, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000001480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40b}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003d00)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000003a00)={0x20, 0x0, 0x4, {0x2, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m22.827415727s ago: executing program 1 (id=31): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)) 1m21.458268837s ago: executing program 1 (id=42): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000002e40)=ANY=[@ANYBLOB="00020201"], 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x810, 0x0, 0x0) 1m21.200902661s ago: executing program 1 (id=45): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c646d61736b3d30313737373737373737373737373737373737373737332c73686f72746e616d653d6c6f7765722c636865636b3d7374726963742c2c756e695f786c6174653d302c726f6469722c726f6469722c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c756e695f786c6174653d312c756e695f786c6174653d312c6572726f72733d636f6e74696e75650000000000000003667365743d30121df478303030383030303030303030303465302c757466383d302c0077b5b28056fc4549d277ed7fab6b0be27ef17f888ccab55cccc917ad315c8ea56f5a89c104f92d058b92f5881e69e06002f5914c03fefbeb09121733eaf5ded73df976fbd4cfcb8b70b0bf44da1b46bc3935431d5e60a641f9e4ebbf71c77fc9a810ce726b8c6d6295a5f2e2b069b95ba8ecce52ded99b82923228c37d5e1ec11cdbcabb8a89cbf2cf2771d69e3cf0e676cc6e5b2e542e426bceaab9b2cf261046247bce0565d13a6ca8137aba85fe39756814fda1f0624b33a2025792a477ccfff09befb1d0cf1599d272628028b9786e1fbfb3d637c2561421488c9de8d3739a94bf13ac582f6b67de0cad933631794271b2259fe5d73a74ad7da615c31505c7c0c168052d38e5b64c4bb7d0599e5dcf0000000000000000000000000000002790cf17418aa278cfc0c9d1c81c63e58b877706a4b7eed8a5aff253298db2939adc0efdab4745ab0e09ef8beaaf04e5374c2e7e4656e47fe5a25502919954242f8d771fc2acf14f2cee04696a9d84091f20646210edf871d3f20ad66fcf4b816323b8abb307381d32da887dcc71e35f364baa1b93fd5ee36c02aa4628511442992ced893ab924472440b53fc08cc41403e167b1f2605e04d5f0c16ed49969b59d650d88642b10c7893f64421a40f4822ffcc284dfe9ae1c6e4a04293c970f2dae776decf07b085eb5fdeda7d365b0f86c7fcd8df00a87f4dbbf8e623667e3b65e4c487055a2e5cd64402a4de537bf113fc7370099e4faebe6ea9d4f155f8f5f4c5f9b205ce1bbc8c0002a19457e05a210d9e9820bc7f318ebfdfcc22f83150503b2c7fb0340a249135057f87882717e166ef509c14fdcf38f63141e4ed36737c6e55498b350f41c8caed3e347c149162b4c6ed629be8eaaa25d59747816197aff2cf68a42d73e8146c72fedb130521de285872a4ca5353cc354a0b0e2ce57275b34276d28d91b2c0c2fa1041f818ea96f65a3000057dfb8858cfd194f7431e4b734f848268c5a000f01000000010000000360236584faaf1a4d4fabd3b68929729fd006fa91186ac3d0d222e00c77ad726cdc16c8456d6f598254bda7c72b24a6b213162cd6e6f205d16a083b5bf85cd0ea669c5fb5535a49d95389c186be0d5d6aaf673c3b675e34dbc89407aa23b2cd4f0d7674421b4896983d7958b0cf1c7c1322b944e316711ed73c720ac25fea464ea96fdf6be3f67430188cb9f1ea81316df61c875ff59c8ffa9ffe954ccb28f037ca003109618cff0ec917fc7abe19b6a10a0eae6c72b067e29580d666042466d68ce5d192fae5bdea0b94a9bfbd0efae746ff081eb028e5566a25db8f43ddd07c39db9bed54a8a9d5763d42", @ANYRESOCT], 0xfc, 0x2b6, &(0x7f0000000480)="$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") mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) 1m20.794195837s ago: executing program 1 (id=47): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 1m20.277881934s ago: executing program 1 (id=52): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mem_exclusive\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x4) 1m19.790765231s ago: executing program 32 (id=52): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.mem_exclusive\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x4) 5.349645642s ago: executing program 5 (id=622): r0 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{}]}, 0xc) pwrite64(r0, &(0x7f0000000040)="ab", 0x1, 0x2) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 5.280373894s ago: executing program 2 (id=624): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 5.043078037s ago: executing program 2 (id=626): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4b4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1003, 0x20, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4, 0x2}}}}}]}}]}}, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000800)={0x24, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) 5.032652607s ago: executing program 5 (id=627): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000300)={0x1, 0x6, 0x2, 0x9, 0xe22, 0x7}) 4.284321448s ago: executing program 4 (id=631): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@min_batch_time}, {@inlinecrypt}, {@grpquota}, {@grpid}]}, 0x1, 0x79b, &(0x7f0000000180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @b}}) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x4) 3.632361527s ago: executing program 4 (id=636): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000100)=ANY=[@ANYBLOB="00300400000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.128817025s ago: executing program 5 (id=640): io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0xa139, 0x8000, 0x3}) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) r0 = io_uring_setup(0x2c4c, &(0x7f00000000c0)={0x0, 0x2, 0x1000, 0x1000000, 0x4}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x18, &(0x7f0000000000), 0x1) 2.997220646s ago: executing program 0 (id=641): add_key$user(0x0, 0x0, &(0x7f0000000280)="24790406", 0x4, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0xcc0, 0xfffffffffffffde6, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b9900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.891949988s ago: executing program 0 (id=642): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@bridge_setlink={0x40, 0x13, 0xa2f, 0xfffffff9, 0x0, {0x7, 0x0, 0x68, r1, 0x10900, 0x2953}, [@IFLA_LINKINFO={0x20, 0x1a, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x3}}}}]}, 0x40}}, 0x4050) 2.797926789s ago: executing program 0 (id=643): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 2.786581879s ago: executing program 2 (id=644): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0xffffffff, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r1}) 2.661098612s ago: executing program 2 (id=645): r0 = io_uring_setup(0x60f8, &(0x7f0000000a40)={0x0, 0x1, 0x2, 0xfffffffe, 0x40003bd}) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000140)={0x1, 0x0, [{}]}) close_range(r0, 0xffffffffffffffff, 0x0) 2.09580077s ago: executing program 5 (id=657): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0x4e26, 0x80000, @mcast2, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@rthdr={{0x38, 0x29, 0x39, {0x32, 0x4, 0x2, 0x8, 0x0, [@loopback, @private1]}}}], 0x38}, 0x4011) 2.09525961s ago: executing program 2 (id=648): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000002580)={&(0x7f00000002c0)=[{0x99, 0x4200, 0x0, 0x0}], 0x1}) 1.986512291s ago: executing program 5 (id=649): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000005bc0)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f0000005d00)="$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") r0 = open(&(0x7f0000000100)='./file1\x00', 0x109042, 0x88) fallocate(r0, 0x10, 0x0, 0x7000000) rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000080)='./file2\x00') 1.827363683s ago: executing program 0 (id=650): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x0, 0xbea, &(0x7f00000007c0)=ANY=[@ANYBLOB="120101020d500920"], 0x0) ioctl$EVIOCRMFF(r0, 0x83c0550b, 0x0) 1.38922978s ago: executing program 4 (id=651): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="eb", 0x1}], 0x1, 0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.236286632s ago: executing program 4 (id=652): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x20000010) 1.233978702s ago: executing program 5 (id=653): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) chmod(0x0, 0x0) 1.112679574s ago: executing program 3 (id=654): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f00000004c0)={0x3, 0x8, "5cffd3", 0x8, 0x9}) 833.251228ms ago: executing program 3 (id=655): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100feffffff000000003900000008000300", @ANYRES32=r2, @ANYBLOB="1c005a8018000080050005"], 0x38}}, 0x0) 833.004908ms ago: executing program 4 (id=656): r0 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) write$binfmt_script(r0, &(0x7f00000000c0)={'#! ', './file0', [{}]}, 0xc) pwrite64(r0, &(0x7f0000000040)="ab", 0x1, 0x2) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 719.522979ms ago: executing program 3 (id=658): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) 646.62226ms ago: executing program 4 (id=659): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) readlink(0x0, &(0x7f0000000200)=""/155, 0x9b) 562.648842ms ago: executing program 3 (id=660): r0 = io_uring_setup(0x60f8, &(0x7f0000000a40)={0x0, 0x1, 0x2, 0xfffffffe, 0x40003bd}) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r1, 0x5761, &(0x7f0000000140)={0x1, 0x0, [{}]}) close_range(r0, 0xffffffffffffffff, 0x0) 468.036303ms ago: executing program 0 (id=661): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f00000000c0)='./file0\x00') fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 361.757375ms ago: executing program 3 (id=662): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000003c0)='./file1\x00', 0x8680, &(0x7f0000020b00)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES8], 0xfd, 0x2a1, &(0x7f0000000100)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000007c0)) rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus\x00') 275.514056ms ago: executing program 0 (id=663): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0xffffffff, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r1}) 275.294406ms ago: executing program 2 (id=664): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 0s ago: executing program 3 (id=665): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@bridge_setlink={0x40, 0x13, 0xa2f, 0xfffffff9, 0x0, {0x7, 0x0, 0x68, r1, 0x10900, 0x2953}, [@IFLA_LINKINFO={0x20, 0x1a, 0x0, 0x1, @bond_slave={{0xf}, {0xc, 0x5, 0x0, 0x1, @IFLA_BOND_SLAVE_QUEUE_ID={0x6, 0x5, 0x3}}}}]}, 0x40}}, 0x4050) kernel console output (not intermixed with test programs): MTU to 1560 would solve the problem. [ 78.130389][ T4260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.154045][ T4251] team0: Port device team_slave_0 added [ 78.168395][ T4257] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.175515][ T4257] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.183934][ T4257] device bridge_slave_0 entered promiscuous mode [ 78.193199][ T4260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.200650][ T4260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.226771][ T4260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.239826][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.250460][ T4251] team0: Port device team_slave_1 added [ 78.257861][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.275698][ T4257] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.284085][ T4257] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.292222][ T4257] device bridge_slave_1 entered promiscuous mode [ 78.336095][ T4263] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.381040][ T4263] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.401226][ T4257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.411011][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.417980][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.444228][ T4251] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.458492][ T4250] team0: Port device team_slave_0 added [ 78.483408][ T4257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.493066][ T4251] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.500322][ T4251] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.526734][ T4251] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.539556][ T4250] team0: Port device team_slave_1 added [ 78.553855][ T4260] device hsr_slave_0 entered promiscuous mode [ 78.561426][ T4260] device hsr_slave_1 entered promiscuous mode [ 78.572049][ T4263] team0: Port device team_slave_0 added [ 78.612120][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.619321][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.645879][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.670245][ T4263] team0: Port device team_slave_1 added [ 78.680615][ T4257] team0: Port device team_slave_0 added [ 78.697823][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.705586][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.732055][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.761207][ T4257] team0: Port device team_slave_1 added [ 78.787714][ T4251] device hsr_slave_0 entered promiscuous mode [ 78.794751][ T4251] device hsr_slave_1 entered promiscuous mode [ 78.801617][ T4251] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.809576][ T4251] Cannot create hsr debugfs directory [ 78.832669][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.839965][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.866093][ T4263] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.879100][ T4263] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.886077][ T4263] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.913340][ T4266] Bluetooth: hci0: command 0x0409 tx timeout [ 78.913699][ T4263] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.982916][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.988386][ T4266] Bluetooth: hci1: command 0x0409 tx timeout [ 78.990113][ T4255] Bluetooth: hci4: command 0x0409 tx timeout [ 78.996193][ T4266] Bluetooth: hci3: command 0x0409 tx timeout [ 79.008924][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.036036][ T4257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.060219][ T4250] device hsr_slave_0 entered promiscuous mode [ 79.067746][ T4250] device hsr_slave_1 entered promiscuous mode [ 79.074690][ T4250] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.081086][ T4266] Bluetooth: hci2: command 0x0409 tx timeout [ 79.082477][ T4250] Cannot create hsr debugfs directory [ 79.109344][ T4257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.116364][ T4257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.142837][ T4257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.201476][ T4263] device hsr_slave_0 entered promiscuous mode [ 79.208506][ T4263] device hsr_slave_1 entered promiscuous mode [ 79.215158][ T4263] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.222936][ T4263] Cannot create hsr debugfs directory [ 79.324357][ T4257] device hsr_slave_0 entered promiscuous mode [ 79.332088][ T4257] device hsr_slave_1 entered promiscuous mode [ 79.339147][ T4257] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.346727][ T4257] Cannot create hsr debugfs directory [ 79.521582][ T4260] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.534131][ T4260] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.570297][ T4260] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.601140][ T4260] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.697378][ T4251] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.719473][ T4251] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.730554][ T4251] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.759176][ T4251] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.791667][ T4250] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.822400][ T4250] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.832215][ T4250] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.847950][ T4250] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.865782][ T4263] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.883790][ T4263] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.893681][ T4263] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.910548][ T4263] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.999253][ T4260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.020908][ T4257] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.031224][ T4257] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.066023][ T4257] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.083896][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.094880][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.131771][ T4260] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.139103][ T4257] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.160730][ T4251] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.174192][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.204326][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.213505][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.231847][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.243796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.253906][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.261273][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.271711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.285748][ T4250] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.314101][ T4263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.322846][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.332130][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.341216][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.348463][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.360941][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.369069][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.376928][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.388910][ T4251] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.421954][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.432134][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.441723][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.448920][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.456797][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.466459][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.475702][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.482839][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.491698][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.501156][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.509481][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.549210][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.557305][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.566052][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.576787][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.586595][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.596863][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.607043][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.614213][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.623000][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.632043][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.641157][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.650114][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.659021][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.667568][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.676499][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.687847][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.696941][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.705961][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.713118][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.721688][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.730728][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.739782][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.750195][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.761535][ T4263] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.787470][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.801633][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.810966][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.818179][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.826471][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.835756][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.845061][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.855326][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.864695][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.874127][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.882881][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.891688][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.912561][ T4260] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.938675][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.947577][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.962999][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.970322][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.986192][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.994272][ T4267] Bluetooth: hci0: command 0x041b tx timeout [ 81.006844][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.016729][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.030003][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.039126][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.049165][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.069232][ T4266] Bluetooth: hci4: command 0x041b tx timeout [ 81.071738][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.075322][ T4266] Bluetooth: hci1: command 0x041b tx timeout [ 81.089276][ T4267] Bluetooth: hci3: command 0x041b tx timeout [ 81.111854][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.126006][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.137158][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.147278][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.155331][ T4266] Bluetooth: hci2: command 0x041b tx timeout [ 81.162938][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.191615][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.203873][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.215133][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.232742][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.249823][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.259847][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.269317][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.278029][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.287504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.306894][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.323389][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.340135][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.376063][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.404829][ T4257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.416616][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.425571][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.452581][ T4260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.475586][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.500755][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.552586][ T4257] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.593670][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.619011][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.659688][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.694466][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.726685][ T4310] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.733904][ T4310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.779921][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.791012][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.843795][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.862147][ T4310] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.869382][ T4310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.883995][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.910370][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.929463][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.962877][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.991915][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.005156][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.040475][ T4260] device veth0_vlan entered promiscuous mode [ 82.050096][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.089602][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.110655][ T4260] device veth1_vlan entered promiscuous mode [ 82.124107][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.159424][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.173752][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.199658][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.222516][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.231372][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.289677][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.299664][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.318392][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.339004][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.346546][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.359395][ T4257] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.377360][ T4263] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.399993][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.407526][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.425187][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.436090][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.464172][ T4260] device veth0_macvtap entered promiscuous mode [ 82.483642][ T4251] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.515236][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.539321][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.560613][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.583489][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.604274][ T4260] device veth1_macvtap entered promiscuous mode [ 82.635069][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.649121][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.752634][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.786218][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.799521][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.829226][ T4251] device veth0_vlan entered promiscuous mode [ 82.838738][ T4260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.875622][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.898952][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.918793][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.938291][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.947269][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.956555][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.976502][ T4260] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.986199][ T4260] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.003164][ T4260] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.013309][ T4260] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.043593][ T4251] device veth1_vlan entered promiscuous mode [ 83.057096][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.067559][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.068376][ T4267] Bluetooth: hci0: command 0x040f tx timeout [ 83.075846][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.148415][ T4266] Bluetooth: hci4: command 0x040f tx timeout [ 83.155478][ T4266] Bluetooth: hci1: command 0x040f tx timeout [ 83.155487][ T4267] Bluetooth: hci3: command 0x040f tx timeout [ 83.178183][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.186540][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.208992][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.217857][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.226649][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.236751][ T4266] Bluetooth: hci2: command 0x040f tx timeout [ 83.265027][ T4251] device veth0_macvtap entered promiscuous mode [ 83.302499][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.345236][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.355744][ T4250] device veth0_vlan entered promiscuous mode [ 83.381959][ T4251] device veth1_macvtap entered promiscuous mode [ 83.401263][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.410481][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.453548][ T4257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.466568][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.478445][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.487343][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.495039][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.510502][ T4250] device veth1_vlan entered promiscuous mode [ 83.562916][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.574196][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.586371][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.598961][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.607368][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.616097][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.625190][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.635010][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.644050][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.653646][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.662697][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.680834][ T4263] device veth0_vlan entered promiscuous mode [ 83.702068][ T4251] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.716880][ T4251] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.729000][ T4251] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.743364][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.755003][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.764474][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.773723][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.801984][ T4251] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.811461][ T4251] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.820606][ T4251] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.829573][ T4251] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.847369][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.857367][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.867150][ T4250] device veth0_macvtap entered promiscuous mode [ 83.887381][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.891882][ T4263] device veth1_vlan entered promiscuous mode [ 83.902538][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.912242][ T4257] device veth0_vlan entered promiscuous mode [ 83.931414][ T4250] device veth1_macvtap entered promiscuous mode [ 83.940124][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.951847][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.960686][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.970440][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.979640][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.016892][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.025470][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.037395][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.043527][ T4257] device veth1_vlan entered promiscuous mode [ 84.051804][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.062786][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.072396][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.089827][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.106526][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.118562][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.129081][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.142200][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.187323][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.204777][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.213900][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.227507][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.239681][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.250281][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.263700][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.276656][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.293832][ T4263] device veth0_macvtap entered promiscuous mode [ 84.308692][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.322106][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.336138][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.347371][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.385280][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.429527][ T4250] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.441985][ T4250] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.451540][ T4250] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.460723][ T4250] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.477830][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.496122][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.510468][ T4263] device veth1_macvtap entered promiscuous mode [ 84.534426][ T4257] device veth0_macvtap entered promiscuous mode [ 84.545576][ T4342] loop3: detected capacity change from 0 to 256 [ 84.550642][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.556407][ T4342] ======================================================= [ 84.556407][ T4342] WARNING: The mand mount option has been deprecated and [ 84.556407][ T4342] and is ignored by this kernel. Remove the mand [ 84.556407][ T4342] option from the mount to silence this warning. [ 84.556407][ T4342] ======================================================= [ 84.583715][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.613005][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.635745][ T4342] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 84.658954][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.667482][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.736368][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.736440][ T4257] device veth1_macvtap entered promiscuous mode [ 84.766509][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.778700][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.790071][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.800546][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.811340][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.821840][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.833668][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.845978][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.869637][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.877681][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.919215][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.957397][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.981382][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.993686][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.005685][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.018869][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.030134][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.040643][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.051751][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.072839][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.088959][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.102357][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.120038][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.135398][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.147684][ T4263] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.158675][ T4266] Bluetooth: hci0: command 0x0419 tx timeout [ 85.176189][ T4263] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.188619][ T4263] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.203822][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.219199][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.230127][ T4255] Bluetooth: hci3: command 0x0419 tx timeout [ 85.230142][ T4266] Bluetooth: hci1: command 0x0419 tx timeout [ 85.236162][ T4255] Bluetooth: hci4: command 0x0419 tx timeout [ 85.249766][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.259316][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.281070][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.308819][ T4255] Bluetooth: hci2: command 0x0419 tx timeout [ 85.332207][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.343039][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.354012][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.364253][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.375422][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.395737][ T4257] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.406554][ T4257] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.418682][ T4257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.434031][ T4263] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.460909][ T4263] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.492710][ T4263] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.515030][ T4263] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.531938][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.541619][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.556623][ T4257] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.578211][ T4257] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.586968][ T4257] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.608183][ T4257] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.652790][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.668289][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.713054][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 85.796022][ T4350] loop3: detected capacity change from 0 to 256 [ 85.875658][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.905301][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.946247][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.988794][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.996862][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.056188][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.093191][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.130522][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.155566][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.253014][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.265061][ T4315] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.288941][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.298817][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.325890][ T4315] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.344932][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.444493][ T4348] loop0: detected capacity change from 0 to 40427 [ 86.456678][ T4348] F2FS-fs (loop0): Fix alignment : internally, start(4096) end(16896) block(12288) [ 86.482686][ T4348] F2FS-fs (loop0): invalid crc value [ 86.494104][ T4348] F2FS-fs (loop0): invalid crc value [ 86.532981][ T4348] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 86.598215][ T4301] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 86.759601][ T14] cfg80211: failed to load regulatory.db [ 86.803614][ T4301] usb 2-1: config index 0 descriptor too short (expected 31, got 27) [ 86.812818][ T4301] usb 2-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid wMaxPacketSize 0 [ 86.823115][ T4301] usb 2-1: config 1 interface 0 has no altsetting 0 [ 86.844918][ T4301] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.72 [ 86.864472][ T4301] usb 2-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 86.891512][ T4301] usb 2-1: Product: syz [ 86.895735][ T4301] usb 2-1: Manufacturer: syz [ 86.931678][ T4301] usb 2-1: SerialNumber: syz [ 87.424876][ T4381] netlink: 'syz.4.18': attribute type 10 has an invalid length. [ 87.665842][ T4301] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 87.954963][ T4301] usb 2-1: USB disconnect, device number 2 [ 87.989199][ T4301] usblp0: removed [ 88.745856][ T4415] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.898201][ T4297] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.015229][ T4421] loop4: detected capacity change from 0 to 512 [ 89.029526][ T4423] loop0: detected capacity change from 0 to 128 [ 89.069684][ T4421] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 89.101851][ T4423] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 89.108250][ T4297] usb 4-1: Using ep0 maxpacket: 16 [ 89.137791][ T4297] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.158156][ T4297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 89.169477][ T4297] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 89.179290][ T4297] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 89.190281][ T4297] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.204728][ T4297] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 89.231220][ T4297] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 89.231547][ T4421] Quota error (device loop4): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 89.248015][ T4297] usb 4-1: Manufacturer: syz [ 89.276170][ T4297] usb 4-1: config 0 descriptor?? [ 89.325621][ T4421] EXT4-fs warning (device loop4): ext4_enable_quotas:7054: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 89.527210][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 89.778356][ T4297] rc_core: IR keymap rc-hauppauge not found [ 89.797613][ T4297] Registered IR keymap rc-empty [ 89.825304][ T4297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 89.870320][ T4417] loop2: detected capacity change from 0 to 40427 [ 89.872714][ T4297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 89.902545][ T4417] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3ffff [ 89.936063][ T4438] netlink: 12 bytes leftover after parsing attributes in process `syz.0.40'. [ 89.946875][ T4297] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 89.981774][ T4297] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 89.984662][ T4417] F2FS-fs (loop2): invalid crc value [ 90.058412][ T4297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 90.068952][ T4417] F2FS-fs (loop2): Found nat_bits in checkpoint [ 90.109947][ T4297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 90.168317][ T4297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 90.198251][ T4297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 90.238254][ T4297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 90.288413][ T4297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 90.320671][ T4417] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 90.321675][ T4450] loop1: detected capacity change from 0 to 256 [ 90.334784][ T4297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 90.378348][ T4297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 90.418236][ T4297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 90.472261][ T4297] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 90.511254][ T4297] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 90.528241][ T4301] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.540553][ T4297] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 90.578483][ T4297] usb 4-1: USB disconnect, device number 2 [ 90.597289][ T4250] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 90.650094][ T4250] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 90.683485][ T4257] syz-executor: attempt to access beyond end of device [ 90.683485][ T4257] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 90.739205][ T4301] usb 1-1: Using ep0 maxpacket: 16 [ 90.754560][ T4301] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 90.811903][ T4301] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 90.838219][ T4301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.846271][ T4301] usb 1-1: Product: syz [ 90.864473][ T4301] usb 1-1: Manufacturer: syz [ 90.869200][ T4301] usb 1-1: SerialNumber: syz [ 90.923010][ T4301] usb 1-1: config 0 descriptor?? [ 90.967816][ T4301] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 90.999657][ T4301] usb 1-1: Detected FT232R [ 91.174431][ T4301] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 91.197595][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.348276][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.435395][ T4301] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 91.522596][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.667961][ T4297] usb 1-1: USB disconnect, device number 2 [ 91.692647][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.743516][ T4297] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 91.771117][ T4470] loop2: detected capacity change from 0 to 256 [ 91.791728][ T4297] ftdi_sio 1-1:0.0: device disconnected [ 92.377957][ T4480] binder: 4479:4480 ioctl 4018620d 0 returned -22 [ 92.740386][ T4267] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.750699][ T4267] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.764024][ T4266] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.773562][ T4266] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.789527][ T4266] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.797287][ T4266] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.725526][ T4521] loop3: detected capacity change from 0 to 4096 [ 94.090072][ T26] audit: type=1804 audit(1748868647.208:2): pid=4535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.71" name="/newroot/16/file0/file0" dev="loop3" ino=0 res=1 errno=0 [ 94.115979][ T4494] chnl_net:caif_netlink_parms(): no params data found [ 94.182723][ T26] audit: type=1800 audit(1748868647.258:3): pid=4521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.71" name="file0" dev="loop3" ino=0 res=0 errno=0 [ 94.280673][ T51] device hsr_slave_0 left promiscuous mode [ 94.319513][ T51] device hsr_slave_1 left promiscuous mode [ 94.352312][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.396202][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.455715][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.478156][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.517781][ T51] device bridge_slave_1 left promiscuous mode [ 94.548789][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.552746][ T4518] loop2: detected capacity change from 0 to 32768 [ 94.618033][ T51] device bridge_slave_0 left promiscuous mode [ 94.661687][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.665083][ T4518] XFS (loop2): Mounting V5 Filesystem [ 94.806834][ T51] device veth1_macvtap left promiscuous mode [ 94.828357][ T4266] Bluetooth: hci0: command 0x0409 tx timeout [ 94.835942][ T51] device veth0_macvtap left promiscuous mode [ 94.842351][ T51] device veth1_vlan left promiscuous mode [ 94.848509][ T51] device veth0_vlan left promiscuous mode [ 94.924221][ T4518] XFS (loop2): Ending clean mount [ 94.977132][ T4518] XFS (loop2): Quotacheck needed: Please wait. [ 95.062469][ T4518] XFS (loop2): Quotacheck: Done. [ 95.167357][ T4532] loop4: detected capacity change from 0 to 32768 [ 95.465231][ T4257] XFS (loop2): Unmounting Filesystem [ 96.086388][ T4566] loop4: detected capacity change from 0 to 256 [ 96.119593][ T4566] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.131962][ T4566] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 96.147520][ T4566] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 96.187827][ T4566] exFAT-fs (loop4): hint_cluster is invalid (17) [ 96.390411][ T51] team0 (unregistering): Port device team_slave_1 removed [ 96.449718][ T51] team0 (unregistering): Port device team_slave_0 removed [ 96.506599][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.584239][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.921594][ T4266] Bluetooth: hci0: command 0x041b tx timeout [ 97.196208][ T51] bond0 (unregistering): Released all slaves [ 97.277015][ T4552] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 97.368477][ T4301] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 97.425650][ T4588] loop2: detected capacity change from 0 to 512 [ 97.432862][ T4588] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.440479][ T4588] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 97.506098][ T4494] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.560446][ T4494] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.568374][ T4301] usb 5-1: Using ep0 maxpacket: 16 [ 97.579851][ T4301] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 97.580828][ T4494] device bridge_slave_0 entered promiscuous mode [ 97.616815][ T4588] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 97.621933][ T4301] usb 5-1: config 0 has no interface number 0 [ 97.649279][ T4494] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.656498][ T4494] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.664378][ T4588] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 97.682374][ T4301] usb 5-1: config 0 interface 29 altsetting 0 bulk endpoint 0xA has invalid maxpacket 16 [ 97.689881][ T4494] device bridge_slave_1 entered promiscuous mode [ 97.720019][ T4301] usb 5-1: config 0 interface 29 altsetting 0 endpoint 0x82 has invalid maxpacket 1104, setting to 1024 [ 97.742768][ T4588] EXT4-fs (loop2): 1 truncate cleaned up [ 97.770970][ T4588] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 97.771968][ T4301] usb 5-1: config 0 interface 29 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 97.834021][ T4301] usb 5-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0 [ 97.883585][ T4301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.888934][ T4588] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #2: block 4: comm syz.2.95: lblock 0 mapped to illegal pblock 4 (length 1) [ 97.912545][ T4301] usb 5-1: Product: syz [ 97.916816][ T4301] usb 5-1: Manufacturer: syz [ 97.919208][ T4494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.937403][ T4301] usb 5-1: SerialNumber: syz [ 97.954060][ T4494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.969255][ T4301] usb 5-1: config 0 descriptor?? [ 97.975693][ T4588] EXT4-fs (loop2): Remounting filesystem read-only [ 97.975862][ T4583] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 98.007450][ T4588] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #2: block 4: comm syz.2.95: lblock 0 mapped to illegal pblock 4 (length 1) [ 98.023623][ T4583] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 98.055796][ T4588] EXT4-fs (loop2): Remounting filesystem read-only [ 98.159003][ T4494] team0: Port device team_slave_0 added [ 98.199728][ T4494] team0: Port device team_slave_1 added [ 98.210760][ T4607] loop3: detected capacity change from 0 to 64 [ 98.290342][ T4257] EXT4-fs (loop2): unmounting filesystem. [ 98.329501][ T4494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.336505][ T4494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.466991][ T22] usb 5-1: USB disconnect, device number 2 [ 98.534799][ T4494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.578820][ T4494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.596028][ T4494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.708497][ T4494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.875127][ T4494] device hsr_slave_0 entered promiscuous mode [ 98.926707][ T4494] device hsr_slave_1 entered promiscuous mode [ 98.944016][ T4494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.968848][ T4494] Cannot create hsr debugfs directory [ 98.999768][ T4266] Bluetooth: hci0: command 0x040f tx timeout [ 99.367699][ T4494] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 99.400189][ T4494] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 99.443766][ T4494] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 99.458216][ T4299] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 99.496903][ T4494] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 99.606265][ T4616] loop2: detected capacity change from 0 to 32768 [ 99.658303][ T4299] usb 5-1: Using ep0 maxpacket: 8 [ 99.667052][ T4299] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 99.684486][ T4299] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 99.695308][ T4299] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 99.708996][ T4616] XFS (loop2): Mounting V5 Filesystem [ 99.756510][ T4299] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 99.806766][ T4494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.837896][ T4299] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.886481][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.889354][ T4299] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 99.911310][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.944738][ T4494] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.954307][ T4299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.996697][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.017749][ T4616] XFS (loop2): Ending clean mount [ 100.027123][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.046318][ T4616] XFS (loop2): Quotacheck needed: Please wait. [ 100.047643][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.059828][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.126856][ T4616] XFS (loop2): Quotacheck: Done. [ 100.145121][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.172728][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.202506][ T4299] usb 5-1: GET_CAPABILITIES returned 0 [ 100.204672][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.208030][ T4299] usbtmc 5-1:16.0: can't read capabilities [ 100.259490][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.267585][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.316583][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.367368][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.396459][ T4257] XFS (loop2): Unmounting Filesystem [ 100.403173][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.434073][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.495106][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.526456][ T4299] usb 5-1: USB disconnect, device number 3 [ 100.528952][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.586525][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.615563][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.648835][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.704407][ T4494] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.739144][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.770365][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.790047][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.068224][ T4266] Bluetooth: hci0: command 0x0419 tx timeout [ 101.233770][ T4648] loop3: detected capacity change from 0 to 32768 [ 101.574904][ T4682] capability: warning: `syz.0.121' uses deprecated v2 capabilities in a way that may be insecure [ 101.788815][ T4689] loop4: detected capacity change from 0 to 1024 [ 101.856929][ T4494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.909242][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.916869][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.010128][ T4691] tipc: Started in network mode [ 102.015157][ T4691] tipc: Node identity , cluster identity 4711 [ 102.058209][ T4691] tipc: Failed to set node id, please configure manually [ 102.065331][ T4691] tipc: Enabling of bearer rejected, failed to enable media [ 102.826132][ T4717] loop4: detected capacity change from 0 to 16 [ 102.893115][ T4717] erofs: (device loop4): mounted with root inode @ nid 36. [ 102.948826][ T4717] erofs: (device loop4): z_erofs_readahead: readahead error at page 12 @ nid 36 [ 102.972309][ T4717] erofs: (device loop4): z_erofs_readahead: readahead error at page 9 @ nid 36 [ 102.999805][ T4717] erofs: (device loop4): z_erofs_readahead: readahead error at page 8 @ nid 36 [ 103.029865][ T4717] erofs: (device loop4): z_erofs_pcluster_readmore: readmore error at page 8 @ nid 36 [ 103.075051][ T4717] syz.4.131: attempt to access beyond end of device [ 103.075051][ T4717] loop4: rw=524288, sector=67108872, nr_sectors = 16 limit=16 [ 103.152229][ T4717] syz.4.131: attempt to access beyond end of device [ 103.152229][ T4717] loop4: rw=524288, sector=720, nr_sectors = 8 limit=16 [ 103.176084][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 103.211791][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.266025][ T4494] device veth0_vlan entered promiscuous mode [ 103.293489][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 103.308981][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.368782][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.388964][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.445791][ T4494] device veth1_vlan entered promiscuous mode [ 103.578003][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 103.599295][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 103.627098][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.639910][ T4738] sctp: [Deprecated]: syz.2.137 (pid 4738) Use of int in max_burst socket option. [ 103.639910][ T4738] Use struct sctp_assoc_value instead [ 103.670336][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.699872][ T4494] device veth0_macvtap entered promiscuous mode [ 103.746511][ T4494] device veth1_macvtap entered promiscuous mode [ 103.811063][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.857606][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.903664][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.950240][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.971268][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.013412][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.043967][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.076044][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.130515][ T4494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.171830][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.208508][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.239971][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.257865][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.284387][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.298457][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.308823][ T4494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.328217][ T4494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.365579][ T4494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.381010][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.389671][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.397967][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.426602][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.446024][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.466046][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.518965][ T4494] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.538020][ T4494] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.568264][ T4494] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.599067][ T4494] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.833247][ T4315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.867506][ T4315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.954124][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.971140][ T4302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.000548][ T4302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.041464][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 105.333441][ T4758] loop2: detected capacity change from 0 to 32768 [ 105.386479][ T4758] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 scanned by syz.2.145 (4758) [ 105.544152][ T4758] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 105.601287][ T4758] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 105.662745][ T4758] BTRFS info (device loop2): using free space tree [ 106.008240][ T4758] BTRFS info (device loop2): enabling ssd optimizations [ 106.198315][ T4296] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 106.337722][ T4257] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 106.418389][ T4296] usb 1-1: Using ep0 maxpacket: 16 [ 106.425617][ T4296] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.439240][ T4824] netlink: 'syz.4.161': attribute type 2 has an invalid length. [ 106.467381][ T4296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 106.482072][ T4824] netlink: 132 bytes leftover after parsing attributes in process `syz.4.161'. [ 106.543087][ T4296] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 106.576047][ T4296] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 106.686148][ T4296] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.757063][ T4296] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 106.820071][ T4296] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 106.845040][ T4296] usb 1-1: Manufacturer: syz [ 106.891781][ T4296] usb 1-1: config 0 descriptor?? [ 107.418353][ T4296] rc_core: IR keymap rc-hauppauge not found [ 107.424459][ T4296] Registered IR keymap rc-empty [ 107.447279][ T4296] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 107.508327][ T4296] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 107.538987][ T4296] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 107.592743][ T4296] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 107.615776][ T4788] loop3: detected capacity change from 0 to 32768 [ 107.661328][ T4296] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 107.710422][ T4296] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 107.748298][ T4296] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 107.798191][ T4296] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 107.848217][ T4296] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 107.898198][ T4296] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 107.948336][ T4296] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 107.989286][ T4296] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 108.018260][ T4296] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 108.062493][ T4296] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 108.078435][ T4861] netlink: 8 bytes leftover after parsing attributes in process `syz.5.168'. [ 108.109355][ T4296] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 108.117773][ T4861] netlink: 4 bytes leftover after parsing attributes in process `syz.5.168'. [ 108.137873][ T4296] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 108.202939][ T4296] usb 1-1: USB disconnect, device number 3 [ 109.218155][ T126] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 109.418209][ T126] usb 5-1: Using ep0 maxpacket: 32 [ 109.437022][ T126] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 109.466586][ T126] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 109.502316][ T126] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 109.540085][ T126] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 109.564925][ T126] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 109.616236][ T126] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 109.664113][ T4873] loop5: detected capacity change from 0 to 40427 [ 109.670964][ T126] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 109.700440][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.714488][ T4873] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x3ffff [ 109.743085][ T4875] loop3: detected capacity change from 0 to 32768 [ 109.749352][ T4873] F2FS-fs (loop5): build fault injection attr: rate: 0, type: 0x4 [ 109.769292][ T126] usb 5-1: config 0 descriptor?? [ 109.829454][ T4873] F2FS-fs (loop5): invalid crc value [ 109.881321][ T4873] F2FS-fs (loop5): Found nat_bits in checkpoint [ 109.919876][ T4875] XFS (loop3): Mounting V5 Filesystem [ 109.983994][ T126] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 110.153023][ T4875] XFS (loop3): Ending clean mount [ 110.170619][ T4875] XFS (loop3): Quotacheck needed: Please wait. [ 110.190949][ T4873] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 110.255170][ T126] usb 5-1: USB disconnect, device number 4 [ 110.281841][ T126] usblp0: removed [ 110.316132][ T4875] XFS (loop3): Quotacheck: Done. [ 110.479608][ T4260] XFS (loop3): Unmounting Filesystem [ 110.584189][ T4494] syz-executor: attempt to access beyond end of device [ 110.584189][ T4494] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 111.357462][ T4942] loop4: detected capacity change from 0 to 32768 [ 111.393591][ T4942] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 111.403470][ T4942] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 111.502999][ T4942] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 111.519918][ T4351] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 111.534451][ T4351] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 111.690125][ T4351] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 155ms [ 111.730213][ T4351] gfs2: fsid=syz:syz.0: jid=0: Done [ 111.736755][ T4942] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 112.254572][ T4938] loop2: detected capacity change from 0 to 32768 [ 112.389654][ T26] audit: type=1800 audit(1748868665.508:4): pid=4938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.192" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 113.044132][ T4975] netlink: 4 bytes leftover after parsing attributes in process `syz.0.200'. [ 113.306150][ T4979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.203'. [ 113.474524][ T4984] loop5: detected capacity change from 0 to 2048 [ 113.595755][ T4984] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.653149][ T4994] netlink: 20 bytes leftover after parsing attributes in process `syz.3.207'. [ 114.462715][ T5022] loop5: detected capacity change from 0 to 256 [ 114.496342][ T5022] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 115.391199][ T5049] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.608228][ T126] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 115.702838][ T5060] loop4: detected capacity change from 0 to 512 [ 115.800909][ T126] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 242, using maximum allowed: 30 [ 115.849443][ T126] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 115.861131][ T5060] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 115.878187][ T126] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 242 [ 115.891374][ T126] usb 6-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 115.900603][ T126] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.919935][ T5060] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.923997][ T126] usb 6-1: config 0 descriptor?? [ 116.233049][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 116.377611][ T126] zydacron 0003:13EC:0006.0001: hidraw0: USB HID v0.03 Device [HID 13ec:0006] on usb-dummy_hcd.5-1/input0 [ 116.633208][ T126] usb 6-1: USB disconnect, device number 2 [ 116.867765][ T5084] fido_id[5084]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 117.108218][ T4351] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 117.298332][ T4351] usb 3-1: Using ep0 maxpacket: 32 [ 117.305615][ T4351] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 117.336278][ T4351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.360316][ T4351] usb 3-1: config 0 descriptor?? [ 117.417774][ T4351] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 117.771500][ T5096] loop4: detected capacity change from 0 to 32768 [ 117.800293][ T5096] XFS: ikeep mount option is deprecated. [ 117.908656][ T5096] XFS (loop4): Mounting V5 Filesystem [ 117.958909][ T5119] binder: BINDER_SET_CONTEXT_MGR already set [ 117.971584][ T5119] binder: 5118:5119 ioctl 4018620d 200000000040 returned -16 [ 118.000159][ T4351] gspca_vc032x: reg_w err -71 [ 118.005010][ T4351] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.016166][ T4351] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.028928][ T4351] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.039835][ T4351] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.045317][ T4351] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.053689][ T4351] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.060620][ T4351] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.066292][ T4351] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.071824][ T4351] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.077282][ T4351] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.082961][ T4351] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.088488][ T4351] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.094553][ T4351] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.100205][ T4351] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.105670][ T4351] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.114527][ T4351] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.120216][ T4351] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.125803][ T4351] gspca_vc032x: I2c Bus Busy Wait 00 [ 118.131365][ T4351] gspca_vc032x: Unknown sensor... [ 118.136752][ T4351] vc032x: probe of 3-1:0.0 failed with error -22 [ 118.158324][ T4351] usb 3-1: USB disconnect, device number 2 [ 118.182991][ T5096] XFS (loop4): Ending clean mount [ 118.254064][ T5096] XFS (loop4): Quotacheck needed: Please wait. [ 118.405398][ T5096] XFS (loop4): Quotacheck: Done. [ 118.448524][ T4299] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 118.533378][ T4767] Bluetooth: hci5: Frame reassembly failed (-84) [ 118.569559][ T5127] Bluetooth: hci5: Frame reassembly failed (-84) [ 118.627658][ T4263] XFS (loop4): Unmounting Filesystem [ 118.638975][ T4299] usb 1-1: Using ep0 maxpacket: 8 [ 118.651172][ T4299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.695620][ T4299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.736238][ T4299] usb 1-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 118.772597][ T4299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.813305][ T4299] usb 1-1: config 0 descriptor?? [ 119.247926][ T4299] logitech 0003:046D:C20E.0002: rdesc size test failed for formula gp [ 119.276928][ T4299] logitech 0003:046D:C20E.0002: hidraw0: USB HID v0.00 Device [HID 046d:c20e] on usb-dummy_hcd.0-1/input0 [ 119.395787][ T5145] loop2: detected capacity change from 0 to 1024 [ 119.404921][ T5143] loop3: detected capacity change from 0 to 1024 [ 119.419498][ T5145] EXT4-fs: Ignoring removed orlov option [ 119.527272][ T4299] usb 1-1: USB disconnect, device number 4 [ 119.534857][ T5145] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 119.657017][ T5144] fido_id[5144]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 119.736710][ T33] hfsplus: b-tree write err: -5, ino 4 [ 119.792199][ T4257] EXT4-fs (loop2): unmounting filesystem. [ 120.128526][ T5166] Zero length message leads to an empty skb [ 120.323875][ T5170] netlink: 16 bytes leftover after parsing attributes in process `syz.4.269'. [ 120.511709][ T4299] kernel read not supported for file /dsp1 (pid: 4299 comm: kworker/1:5) [ 120.588213][ T4266] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 120.590763][ T4255] Bluetooth: hci5: command 0x1003 tx timeout [ 121.320271][ T5206] netlink: 248 bytes leftover after parsing attributes in process `syz.5.279'. [ 121.570638][ T5211] loop5: detected capacity change from 0 to 512 [ 121.632183][ T5211] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 121.657662][ T5211] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.850435][ T26] audit: type=1800 audit(1748868674.968:5): pid=5211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.281" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 121.924466][ T26] audit: type=1800 audit(1748868675.038:6): pid=5211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.281" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 122.050304][ T4494] EXT4-fs (loop5): unmounting filesystem. [ 122.581388][ T5217] loop3: detected capacity change from 0 to 32768 [ 122.595382][ T5236] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 122.705997][ T5217] XFS (loop3): Mounting V5 Filesystem [ 122.803643][ T5217] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 122.933393][ T5217] XFS (loop3): Starting recovery (logdev: internal) [ 123.010075][ T5217] XFS (loop3): Ending recovery (logdev: internal) [ 123.195450][ T26] audit: type=1800 audit(1748868676.308:7): pid=5217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.283" name="bus" dev="loop3" ino=4425 res=0 errno=0 [ 123.212351][ T5263] device lo entered promiscuous mode [ 123.254622][ T5263] netlink: 12 bytes leftover after parsing attributes in process `syz.5.297'. [ 123.297360][ T5263] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.331263][ T4260] XFS (loop3): Unmounting Filesystem [ 123.679433][ T5278] Debayer A: ================= START STATUS ================= [ 123.687237][ T5278] Debayer A: Debayer Mean Window Size: 3 [ 123.725215][ T5278] Debayer A: ================== END STATUS ================== [ 123.972805][ T5286] netlink: 20 bytes leftover after parsing attributes in process `syz.2.309'. [ 124.021339][ T5286] netlink: 20 bytes leftover after parsing attributes in process `syz.2.309'. [ 124.423626][ T5303] Bluetooth: MGMT ver 1.22 [ 124.451288][ T5303] Bluetooth: hci0: load_link_keys: too big key_count value 5888 [ 124.516609][ T5306] loop2: detected capacity change from 0 to 64 [ 124.601793][ T5306] MINIX-fs: mounting file system with errors, running fsck is recommended [ 125.183916][ T5325] loop2: detected capacity change from 0 to 64 [ 125.329819][ T5304] loop4: detected capacity change from 0 to 32768 [ 125.373222][ T5304] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.317 (5304) [ 125.470225][ T5304] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 125.510300][ T5304] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 125.544829][ T5304] BTRFS info (device loop4): force clearing of disk cache [ 125.575127][ T5304] BTRFS info (device loop4): enabling auto defrag [ 125.583565][ T5331] Driver unsupported XDP return value 0 on prog (id 30) dev N/A, expect packet loss! [ 125.600865][ T5304] BTRFS info (device loop4): max_inline at 0 [ 125.606924][ T5304] BTRFS info (device loop4): enabling disk space caching [ 125.631406][ T5304] BTRFS info (device loop4): disk space caching is enabled [ 125.693078][ T5312] loop5: detected capacity change from 0 to 32768 [ 125.976032][ T5304] BTRFS info (device loop4): enabling ssd optimizations [ 126.004698][ T5312] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 126.021252][ T5304] BTRFS info (device loop4): rebuilding free space tree [ 126.169537][ T5304] BTRFS info (device loop4): disabling free space tree [ 126.207025][ T5304] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 126.235538][ T5304] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 126.696489][ T4494] ocfs2: Unmounting device (7,5) on (node local) [ 126.714862][ T51] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 127.095124][ T4263] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 127.756356][ T5395] loop5: detected capacity change from 0 to 64 [ 128.759678][ T5409] loop4: detected capacity change from 0 to 512 [ 128.770216][ T5388] loop3: detected capacity change from 0 to 32768 [ 128.816393][ T5409] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 128.870816][ T5409] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 128.885388][ T5409] EXT4-fs (loop4): orphan cleanup on readonly fs [ 128.911576][ T5388] XFS (loop3): Mounting V5 Filesystem [ 128.928390][ T5409] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: comm syz.4.345: inode #255: comm syz.4.345: iget: illegal inode # [ 128.947073][ T5409] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.345: error while reading EA inode 255 err=-117 [ 128.974295][ T5409] EXT4-fs (loop4): 1 orphan inode deleted [ 129.025865][ T5409] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 129.187577][ T5409] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1432: inode #12: block 7: comm syz.4.345: path (unknown): bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0 [ 129.188627][ T5388] XFS (loop3): Ending clean mount [ 129.222243][ T5426] capability: warning: `syz.2.339' uses 32-bit capabilities (legacy support in use) [ 129.292454][ T5388] XFS (loop3): Quotacheck needed: Please wait. [ 129.389378][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 129.426016][ T5388] XFS (loop3): Quotacheck: Done. [ 129.612240][ T5435] Bluetooth: hci1: Opcode 0x080f failed: -4 [ 129.801609][ T4260] XFS (loop3): Unmounting Filesystem [ 130.306005][ T5429] loop5: detected capacity change from 0 to 32768 [ 130.405144][ T5429] XFS (loop5): Mounting V5 Filesystem [ 130.514753][ T5429] XFS (loop5): Ending clean mount [ 130.595229][ T5436] loop4: detected capacity change from 0 to 32768 [ 130.782924][ T4494] XFS (loop5): Unmounting Filesystem [ 131.412963][ T5445] loop2: detected capacity change from 0 to 40427 [ 131.419746][ T5469] loop5: detected capacity change from 0 to 256 [ 131.482196][ T5469] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 131.511969][ T5445] F2FS-fs (loop2): Found nat_bits in checkpoint [ 131.608366][ T26] audit: type=1800 audit(1748868684.728:8): pid=5469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.359" name="file1" dev="loop5" ino=1048608 res=0 errno=0 [ 131.629400][ T4266] Bluetooth: hci1: command 0x080f tx timeout [ 131.718230][ T5445] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 131.885499][ T5463] loop3: detected capacity change from 0 to 40427 [ 131.902846][ T4257] syz-executor: attempt to access beyond end of device [ 131.902846][ T4257] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 131.935044][ T5463] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504) [ 131.957386][ T5463] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 131.971488][ T5463] F2FS-fs (loop3): build fault injection attr: rate: 17008, type: 0x3ffff [ 132.032092][ T5463] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x1f8 [ 132.072939][ T5463] F2FS-fs (loop3): invalid crc value [ 132.125929][ T5463] F2FS-fs (loop3): Found nat_bits in checkpoint [ 132.184444][ T5480] overlayfs: failed to resolve './file0': -2 [ 132.283506][ T5482] loop4: detected capacity change from 0 to 4096 [ 132.346804][ T5463] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 132.397307][ T5463] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 132.405678][ T5482] NILFS (loop4): invalid segment: Checksum error in segment payload [ 132.478212][ T5482] NILFS (loop4): trying rollback from an earlier position [ 132.534155][ T5469] syz.5.359: attempt to access beyond end of device [ 132.534155][ T5469] loop5: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 132.584700][ T5482] NILFS (loop4): recovery complete [ 132.632672][ T5490] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 132.664821][ T5489] debugfs: Directory 'ptm0' with parent 'caif_serial' already present! [ 132.802929][ T4260] syz-executor: attempt to access beyond end of device [ 132.802929][ T4260] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 132.832359][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.839860][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.415020][ T5497] block device autoloading is deprecated and will be removed. [ 133.424678][ T5505] loop2: detected capacity change from 0 to 256 [ 133.498564][ T5505] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 133.564195][ T5505] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 133.614979][ T5505] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 133.668138][ T5505] UDF-fs: Scanning with blocksize 512 failed [ 133.690671][ T5505] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 133.730834][ T5505] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 133.833291][ T5507] loop4: detected capacity change from 0 to 8192 [ 133.915289][ T5507] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 133.988234][ T5507] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 133.997621][ T5507] REISERFS (device loop4): using ordered data mode [ 134.026897][ T5507] reiserfs: using flush barriers [ 134.058179][ T5507] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 134.099115][ T5507] REISERFS (device loop4): checking transaction log (loop4) [ 134.150601][ T5507] REISERFS (device loop4): Using r5 hash to sort names [ 134.199757][ T5520] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.206161][ T5507] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 134.609357][ T5528] sp0: Synchronizing with TNC [ 134.943740][ T5512] loop5: detected capacity change from 0 to 32768 [ 134.955522][ T5532] loop2: detected capacity change from 0 to 4096 [ 134.998519][ T5532] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 135.084408][ T5512] XFS (loop5): Mounting V5 Filesystem [ 135.213761][ T5532] ntfs: (device loop2): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 135.235059][ T5512] XFS (loop5): Ending clean mount [ 135.256690][ T5512] XFS (loop5): Quotacheck needed: Please wait. [ 135.288010][ T5532] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 135.360653][ T5532] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 135.404357][ T5532] ntfs: volume version 3.1. [ 135.409398][ T5512] XFS (loop5): Quotacheck: Done. [ 135.600606][ T4494] XFS (loop5): Unmounting Filesystem [ 135.623629][ T5548] loop3: detected capacity change from 0 to 4096 [ 135.725773][ T5548] ntfs: volume version 3.1. [ 135.757534][ T4257] ntfs: (device loop2): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 136.566824][ T5573] netlink: 28 bytes leftover after parsing attributes in process `syz.3.398'. [ 136.599312][ T5573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.398'. [ 136.918963][ T5583] loop3: detected capacity change from 0 to 64 [ 137.658639][ T5589] vxcan1: tx address claim with dest, not broadcast [ 137.686610][ T5567] loop4: detected capacity change from 0 to 40427 [ 137.736518][ T5567] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 137.783213][ T5567] F2FS-fs (loop4): invalid crc value [ 137.824361][ T5567] F2FS-fs (loop4): Found nat_bits in checkpoint [ 137.834594][ T5593] loop5: detected capacity change from 0 to 1024 [ 137.892740][ T5591] loop2: detected capacity change from 0 to 4096 [ 137.909897][ T5593] EXT4-fs: Ignoring removed orlov option [ 137.915609][ T5593] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.993037][ T5591] ntfs: volume version 3.1. [ 138.012567][ T5567] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 138.079159][ T5593] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 138.300254][ T4310] kworker/u4:6: attempt to access beyond end of device [ 138.300254][ T4310] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 138.645713][ T5607] loop2: detected capacity change from 0 to 256 [ 138.702786][ T5607] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 138.807769][ T26] audit: type=1800 audit(1748868691.918:9): pid=5607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.411" name="file1" dev="loop2" ino=1048609 res=0 errno=0 [ 138.883535][ T4494] EXT4-fs (loop5): unmounting filesystem. [ 139.285324][ T5623] loop5: detected capacity change from 0 to 128 [ 139.344869][ T5623] EXT4-fs: Ignoring removed nobh option [ 139.411339][ T5623] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 139.493714][ T5623] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 139.717870][ T4494] EXT4-fs (loop5): unmounting filesystem. [ 139.779252][ T5607] syz.2.411: attempt to access beyond end of device [ 139.779252][ T5607] loop2: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 140.535914][ T5626] loop4: detected capacity change from 0 to 40427 [ 140.566854][ T5638] loop2: detected capacity change from 0 to 128 [ 140.576087][ T5626] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 140.616298][ T5626] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 140.616490][ T5638] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 140.695228][ T5626] F2FS-fs (loop4): Found nat_bits in checkpoint [ 140.725586][ T5642] loop5: detected capacity change from 0 to 128 [ 140.796881][ T5638] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 140.816268][ T5628] loop3: detected capacity change from 0 to 40427 [ 140.862608][ T5628] F2FS-fs (loop3): inline encryption not supported [ 140.902884][ T5628] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x3ffff [ 140.915418][ T5626] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 140.923124][ T5628] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x4 [ 140.936808][ T5645] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40) [ 140.943274][ T5626] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 140.981457][ T5628] F2FS-fs (loop3): invalid crc value [ 141.041126][ T5628] F2FS-fs (loop3): Found nat_bits in checkpoint [ 141.301367][ T5628] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 141.491994][ T5642] EXT4-fs (loop5): Test dummy encryption mode enabled [ 141.556149][ T5642] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 141.571572][ T5642] ext4 filesystem being mounted at /50/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 141.589241][ T4260] syz-executor: attempt to access beyond end of device [ 141.589241][ T4260] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 141.685225][ T5657] loop2: detected capacity change from 0 to 2048 [ 141.783609][ T5657] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 141.863780][ T5657] UDF-fs: error (device loop2): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 141.932642][ T5657] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 141.997534][ T5660] input: syz1 as /devices/virtual/input/input7 [ 142.008282][ T5659] UDF-fs: error (device loop2): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376) [ 142.058325][ T5659] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232 [ 142.388650][ T4494] EXT4-fs (loop5): unmounting filesystem. [ 142.564961][ T5671] loop2: detected capacity change from 0 to 128 [ 142.603994][ T5670] loop5: detected capacity change from 0 to 1024 [ 142.621054][ T5671] EXT4-fs: Ignoring removed nobh option [ 142.630030][ T5670] EXT4-fs: Ignoring removed bh option [ 142.659315][ T5671] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 142.677749][ T5675] netlink: 148 bytes leftover after parsing attributes in process `syz.3.426'. [ 142.728223][ T4836] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 142.757804][ T5670] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 142.788266][ T5671] ext4 filesystem being mounted at /90/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 142.924211][ T4836] usb 1-1: Using ep0 maxpacket: 8 [ 142.931461][ T4836] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 142.966069][ T4836] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 142.985113][ T4257] EXT4-fs (loop2): unmounting filesystem. [ 143.003105][ T4836] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 143.015964][ T4494] EXT4-fs (loop5): unmounting filesystem. [ 143.026908][ T4836] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 143.046536][ T4836] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 143.092537][ T4836] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.126370][ T4836] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 143.168842][ T4836] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.416608][ T4836] usb 1-1: GET_CAPABILITIES returned 0 [ 143.422302][ T4836] usbtmc 1-1:16.0: can't read capabilities [ 143.685784][ T5680] loop3: detected capacity change from 0 to 32768 [ 143.692787][ T7] usb 1-1: USB disconnect, device number 5 [ 143.742138][ T5680] XFS: attr2 mount option is deprecated. [ 143.810270][ T5691] loop4: detected capacity change from 0 to 256 [ 143.878666][ T5691] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 143.896035][ T5684] loop2: detected capacity change from 0 to 32768 [ 143.911784][ T5680] XFS (loop3): Mounting V5 Filesystem [ 144.006569][ T5684] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 144.137063][ T5680] XFS (loop3): Ending clean mount [ 144.237388][ T5680] XFS (loop3): Quotacheck needed: Please wait. [ 144.339259][ T5680] XFS (loop3): Quotacheck: Done. [ 144.474639][ T4257] (syz-executor,4257,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 144.617591][ T4257] ocfs2: Unmounting device (7,2) on (node local) [ 144.688917][ T4260] XFS (loop3): Unmounting Filesystem [ 145.066395][ T5715] loop4: detected capacity change from 0 to 4096 [ 145.196075][ T5715] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 145.401571][ T5721] loop2: detected capacity change from 0 to 1024 [ 145.694672][ T4263] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 145.883938][ T5733] loop4: detected capacity change from 0 to 512 [ 145.904476][ T5733] EXT4-fs: Ignoring removed mblk_io_submit option [ 145.907136][ T5705] loop5: detected capacity change from 0 to 40427 [ 145.936068][ T5705] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 145.969664][ T5733] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 145.985771][ T5705] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 146.007257][ T5736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.456'. [ 146.020753][ T5733] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 146.032094][ T5705] F2FS-fs (loop5): Found nat_bits in checkpoint [ 146.069592][ T5733] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 146.101312][ T5742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.457'. [ 146.134767][ T5733] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a043c01c, mo2=0102] [ 146.136991][ T5705] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 146.165809][ T5705] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 146.179389][ T5742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.457'. [ 146.209220][ T5733] System zones: 0-2, 18-18, 34-34 [ 146.265167][ T5733] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 146.395161][ T5733] EXT4-fs (loop4): 1 truncate cleaned up [ 146.444065][ T5733] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 146.875137][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 147.061685][ T5760] loop2: detected capacity change from 0 to 4096 [ 147.137575][ T5766] loop3: detected capacity change from 0 to 256 [ 147.155423][ T5760] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 147.191922][ T5766] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 147.281149][ T26] audit: type=1800 audit(1748868700.398:10): pid=5766 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.468" name="file1" dev="loop3" ino=1048610 res=0 errno=0 [ 147.424327][ T4257] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 147.880485][ T26] audit: type=1326 audit(1748868700.998:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5781 comm="syz.0.474" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4854f8e969 code=0x0 [ 148.008297][ T5768] loop5: detected capacity change from 0 to 32768 [ 148.038389][ T5768] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 scanned by syz.5.461 (5768) [ 148.076236][ T5768] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 148.092486][ T5768] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 148.122975][ T5786] loop4: detected capacity change from 0 to 2048 [ 148.129683][ T5768] BTRFS info (device loop5): enabling disk space caching [ 148.143605][ T5768] BTRFS info (device loop5): force clearing of disk cache [ 148.172199][ T5768] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 148.207959][ T5786] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.221512][ T5768] BTRFS info (device loop5): use zstd compression, level 3 [ 148.247216][ T5768] BTRFS info (device loop5): disk space caching is enabled [ 148.284628][ T5766] syz.3.468: attempt to access beyond end of device [ 148.284628][ T5766] loop3: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 148.532749][ T5768] BTRFS info (device loop5): enabling ssd optimizations [ 148.564692][ T5768] BTRFS info (device loop5): rebuilding free space tree [ 148.633348][ T5768] BTRFS info (device loop5): disabling free space tree [ 148.656584][ T5768] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 148.726834][ T5768] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 148.925837][ T26] audit: type=1800 audit(1748868702.038:12): pid=5768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.461" name="file1" dev="loop5" ino=260 res=0 errno=0 [ 149.192693][ T4494] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 150.368769][ T5846] loop4: detected capacity change from 0 to 256 [ 150.370143][ T5847] loop2: detected capacity change from 0 to 1024 [ 150.443332][ T5846] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 150.463279][ T26] audit: type=1800 audit(1748868703.578:13): pid=5846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.491" name="file1" dev="loop4" ino=1048611 res=0 errno=0 [ 150.478759][ T5847] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 150.721637][ T4257] EXT4-fs (loop2): unmounting filesystem. [ 150.913649][ T5862] loop2: detected capacity change from 0 to 256 [ 151.002010][ T5862] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 151.020566][ T5864] netlink: 'syz.5.496': attribute type 10 has an invalid length. [ 151.076343][ T5846] syz.4.491: attempt to access beyond end of device [ 151.076343][ T5846] loop4: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 151.690473][ T4836] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 151.897670][ T4836] usb 3-1: Using ep0 maxpacket: 8 [ 151.905837][ T4836] usb 3-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 151.944891][ T4836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 252, changing to 11 [ 151.989024][ T4836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 41574, setting to 1024 [ 152.018894][ T4836] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 152.047492][ T4836] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 152.076837][ T4836] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 152.099009][ T4836] usb 3-1: Product: syz [ 152.109150][ T4836] usb 3-1: Manufacturer: syz [ 152.113807][ T4836] usb 3-1: SerialNumber: syz [ 152.141701][ T4836] usb 3-1: config 0 descriptor?? [ 152.215025][ T5874] loop3: detected capacity change from 0 to 32768 [ 152.280702][ T5874] XFS (loop3): Mounting V5 Filesystem [ 152.363297][ T4836] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 152.371422][ T4836] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 152.462831][ T5874] XFS (loop3): Ending clean mount [ 152.474127][ T5874] XFS (loop3): Quotacheck needed: Please wait. [ 152.576628][ T4836] radio-si470x 3-1:0.0: software version 0, hardware version 0 [ 152.597827][ T4836] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 152.615899][ T5904] netlink: 'syz.0.511': attribute type 10 has an invalid length. [ 152.618201][ T4836] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 152.678379][ T5874] XFS (loop3): Quotacheck: Done. [ 152.785849][ T4836] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 152.823685][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 152.830446][ T4836] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 152.839019][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 152.845681][ C1] radio-si470x 3-1:0.0: non-zero urb status (-71) [ 152.879409][ T4836] radio-si470x: probe of 3-1:0.0 failed with error -22 [ 152.893027][ T4836] usb 3-1: USB disconnect, device number 3 [ 152.968570][ T4260] XFS (loop3): Unmounting Filesystem [ 153.000750][ T5888] loop5: detected capacity change from 0 to 32768 [ 153.172797][ T5888] XFS (loop5): Mounting V5 Filesystem [ 153.322650][ T5888] XFS (loop5): Ending clean mount [ 153.354216][ T5888] XFS (loop5): Quotacheck needed: Please wait. [ 153.437194][ T5888] XFS (loop5): Quotacheck: Done. [ 153.626498][ T4494] XFS (loop5): Unmounting Filesystem [ 153.914630][ T5925] loop2: detected capacity change from 0 to 16 [ 153.966204][ T5925] erofs: (device loop2): mounted with root inode @ nid 36. [ 154.728022][ T5927] loop3: detected capacity change from 0 to 32768 [ 154.761013][ T5927] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.520 (5927) [ 154.814772][ T5927] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 154.837797][ T5927] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 154.874050][ T5927] BTRFS info (device loop3): enabling disk space caching [ 154.897190][ T5927] BTRFS info (device loop3): force clearing of disk cache [ 154.921615][ T5927] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 154.952814][ T5927] BTRFS info (device loop3): use zstd compression, level 3 [ 154.968305][ T5927] BTRFS info (device loop3): disk space caching is enabled [ 155.065735][ T5944] loop5: detected capacity change from 0 to 32768 [ 155.122834][ T5944] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.526 (5944) [ 155.173019][ T5944] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 155.208606][ T5962] loop4: detected capacity change from 0 to 128 [ 155.232133][ T5927] BTRFS info (device loop3): enabling ssd optimizations [ 155.266105][ T5944] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 155.284097][ T5927] BTRFS info (device loop3): rebuilding free space tree [ 155.298193][ T5944] BTRFS info (device loop5): force clearing of disk cache [ 155.313513][ T5962] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 155.319669][ T5944] BTRFS info (device loop5): enabling auto defrag [ 155.358382][ T5927] BTRFS info (device loop3): disabling free space tree [ 155.365443][ T5927] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 155.397490][ T5962] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.398252][ T5944] BTRFS info (device loop5): max_inline at 0 [ 155.413916][ T5927] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 155.439277][ T5944] BTRFS info (device loop5): enabling disk space caching [ 155.446415][ T5944] BTRFS info (device loop5): disk space caching is enabled [ 155.446954][ T5941] loop2: detected capacity change from 0 to 32768 [ 155.567712][ T26] audit: type=1800 audit(1748868708.678:14): pid=5927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.520" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 155.653915][ T5941] XFS (loop2): Mounting V5 Filesystem [ 155.835456][ T4260] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 155.876683][ T4835] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 155.912406][ T5941] XFS (loop2): Ending clean mount [ 155.985062][ T5944] BTRFS info (device loop5): enabling ssd optimizations [ 156.058964][ T5944] BTRFS info (device loop5): rebuilding free space tree [ 156.068256][ T4835] usb 1-1: Using ep0 maxpacket: 8 [ 156.075455][ T4835] usb 1-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 156.104977][ T4835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 252, changing to 11 [ 156.108571][ T5944] BTRFS info (device loop5): disabling free space tree [ 156.152598][ T4835] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 41574, setting to 1024 [ 156.182262][ T5944] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 156.218363][ T4835] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 156.246560][ T5944] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 156.299851][ T4835] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 156.333226][ T4835] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 156.353347][ T4835] usb 1-1: Product: syz [ 156.366547][ T4835] usb 1-1: Manufacturer: syz [ 156.385939][ T4835] usb 1-1: SerialNumber: syz [ 156.418876][ T5941] XFS (loop2): Quotacheck needed: Please wait. [ 156.453754][ T4835] usb 1-1: config 0 descriptor?? [ 156.534420][ T5941] XFS (loop2): Quotacheck: Done. [ 156.650082][ T33] BTRFS info (device loop5): qgroup scan completed (inconsistency flag cleared) [ 156.678177][ T4835] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 156.685061][ T4835] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 156.750543][ T4494] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 156.793865][ T4257] XFS (loop2): Unmounting Filesystem [ 156.899803][ T4835] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 156.907426][ T4835] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 156.920353][ T4835] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 157.121566][ T4835] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 157.138364][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 157.146456][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 157.153289][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 157.160028][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 157.166742][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 157.173570][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 157.180300][ T4835] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 157.198756][ C1] radio-si470x 1-1:0.0: non-zero urb status (-71) [ 157.208761][ T4835] radio-si470x: probe of 1-1:0.0 failed with error -22 [ 157.228313][ T4835] usb 1-1: USB disconnect, device number 6 [ 157.744704][ T6019] loop4: detected capacity change from 0 to 512 [ 157.813230][ T6019] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.539: bad orphan inode 15 [ 157.843945][ T6019] ext4_test_bit(bit=14, block=5) = 0 [ 157.863804][ T6019] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 157.972028][ T6019] EXT4-fs error (device loop4): __ext4_new_inode:1075: comm syz.4.539: reserved inode found cleared - inode=1 [ 158.038206][ T6019] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 158.066226][ T6019] EXT4-fs error (device loop4) in ext4_free_inode:362: Corrupt filesystem [ 158.205885][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 158.674219][ T6043] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.203049][ T6059] loop2: detected capacity change from 0 to 512 [ 159.251609][ T6059] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.553: bad orphan inode 15 [ 159.297080][ T6059] ext4_test_bit(bit=14, block=5) = 0 [ 159.317014][ T6059] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 159.417844][ T6059] EXT4-fs error (device loop2): __ext4_new_inode:1075: comm syz.2.553: reserved inode found cleared - inode=1 [ 159.461222][ T6065] loop3: detected capacity change from 0 to 512 [ 159.483141][ T6059] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 159.547106][ T6065] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 159.548409][ T6059] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 159.568267][ T6065] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 159.771091][ T6065] EXT4-fs (loop3): resizing filesystem from 128 to 1 blocks [ 159.813898][ T6065] EXT4-fs warning (device loop3): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 159.845367][ T4257] EXT4-fs (loop2): unmounting filesystem. [ 160.016263][ T6076] loop2: detected capacity change from 0 to 128 [ 160.026835][ T4260] EXT4-fs (loop3): unmounting filesystem. [ 160.063123][ T6076] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 160.117479][ T6076] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 160.185282][ T6079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.384497][ T33] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 161.154511][ T6110] loop5: detected capacity change from 0 to 512 [ 161.306211][ T6110] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 161.328279][ T6110] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.457380][ T6110] EXT4-fs (loop5): resizing filesystem from 128 to 1 blocks [ 161.509484][ T6110] EXT4-fs warning (device loop5): ext4_resize_fs:2051: can't shrink FS - resize aborted [ 161.690627][ T4494] EXT4-fs (loop5): unmounting filesystem. [ 161.984707][ T6138] device lo entered promiscuous mode [ 162.016228][ T6138] netlink: 12 bytes leftover after parsing attributes in process `syz.2.586'. [ 162.053573][ T6138] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.273675][ T6144] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 163.787352][ T6181] loop4: detected capacity change from 0 to 64 [ 164.102496][ T6189] loop4: detected capacity change from 0 to 256 [ 164.133339][ T6189] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 164.218280][ T4835] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 164.238233][ T4336] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 164.420124][ T4835] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 164.437485][ T4835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.458173][ T4336] usb 1-1: Using ep0 maxpacket: 32 [ 164.465797][ T4336] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 164.485481][ T4336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.489474][ T4835] usb 6-1: config 0 descriptor?? [ 164.529255][ T4336] usb 1-1: config 0 descriptor?? [ 164.744757][ T4336] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 164.775084][ T4336] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 164.795805][ T4336] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 164.813929][ T4336] usb 1-1: media controller created [ 164.859619][ T4336] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 164.923586][ T4835] [drm:udl_init] *ERROR* Selecting channel failed [ 164.975457][ T4336] az6027: usb out operation failed. (-71) [ 164.989834][ T4336] az6027: usb out operation failed. (-71) [ 164.995614][ T4336] stb0899_attach: Driver disabled by Kconfig [ 165.000313][ T4835] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2 [ 165.018409][ T4835] [drm] Initialized udl on minor 2 [ 165.029419][ T4336] az6027: no front-end attached [ 165.029419][ T4336] [ 165.039312][ T4835] udl 6-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 165.046940][ T4336] az6027: usb out operation failed. (-71) [ 165.054981][ T4336] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 165.073413][ T4835] udl 6-1:0.0: [drm] Cannot find any crtc or sizes [ 165.080228][ T4336] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 165.094065][ T4835] usb 6-1: USB disconnect, device number 3 [ 165.121402][ T4336] dvb-usb: schedule remote query interval to 400 msecs. [ 165.145896][ T4336] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 165.180756][ T4336] usb 1-1: USB disconnect, device number 7 [ 165.268292][ T4832] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 165.290222][ T4336] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 165.430727][ T6197] loop4: detected capacity change from 0 to 40427 [ 165.458757][ T6197] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 165.478259][ T4832] usb 3-1: Using ep0 maxpacket: 32 [ 165.495316][ T4832] usb 3-1: unable to get BOS descriptor or descriptor too short [ 165.522041][ T4832] usb 3-1: no configurations [ 165.549409][ T6197] F2FS-fs (loop4): invalid crc value [ 165.558191][ T4832] usb 3-1: can't read configurations, error -22 [ 165.591583][ T6197] F2FS-fs (loop4): Found nat_bits in checkpoint [ 165.701476][ T6197] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 165.950991][ T4263] syz-executor: attempt to access beyond end of device [ 165.950991][ T4263] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 166.151630][ T6220] process 'syz.5.622' launched '/dev/fd/3' with NULL argv: empty string added [ 166.728217][ T4835] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 166.803746][ T6235] netlink: 16 bytes leftover after parsing attributes in process `syz.4.628'. [ 166.862395][ T4832] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 166.930562][ T4835] usb 6-1: Using ep0 maxpacket: 8 [ 166.947627][ T4835] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 166.967202][ T4835] usb 6-1: config 179 has no interface number 0 [ 166.977732][ T4835] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 166.989674][ T4835] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 167.001472][ T4835] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 167.023447][ T4835] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 167.043661][ T4835] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 167.067396][ T4835] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 167.088155][ T4832] usb 3-1: Using ep0 maxpacket: 16 [ 167.096466][ T4835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.109378][ T4832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.128198][ T4832] usb 3-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 167.140063][ T4832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.150742][ T6229] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 167.195927][ T4832] usb 3-1: config 0 descriptor?? [ 167.314754][ T6243] loop4: detected capacity change from 0 to 2048 [ 167.323595][ T6243] EXT4-fs: inline encryption not supported [ 167.401359][ T6243] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 167.470665][ T4830] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input9 [ 167.551997][ T6243] EXT4-fs (loop4): shut down requested (2) [ 167.673496][ T4336] usb 6-1: USB disconnect, device number 4 [ 167.673540][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 167.687992][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 167.697109][ T4336] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 167.697490][ T4832] cypress 0003:04B4:0001.0003: unknown main item tag 0x0 [ 167.742224][ T4832] cypress 0003:04B4:0001.0003: unknown main item tag 0x0 [ 167.755000][ T4832] cypress 0003:04B4:0001.0003: unknown main item tag 0x0 [ 167.762447][ T4832] cypress 0003:04B4:0001.0003: unknown main item tag 0x0 [ 167.776320][ T4832] cypress 0003:04B4:0001.0003: unknown main item tag 0x0 [ 167.789718][ T4832] cypress 0003:04B4:0001.0003: unknown main item tag 0x0 [ 167.799197][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.635'. [ 167.810809][ T4832] cypress 0003:04B4:0001.0003: unknown main item tag 0x0 [ 167.811219][ T4263] EXT4-fs (loop4): unmounting filesystem. [ 167.856264][ T4832] cypress 0003:04B4:0001.0003: hidraw0: USB HID v10.03 Device [HID 04b4:0001] on usb-dummy_hcd.2-1/input0 [ 167.961516][ T4832] usb 3-1: USB disconnect, device number 6 [ 168.038095][ T4255] Bluetooth: hci3: command 0x0401 tx timeout [ 168.107934][ T6255] fido_id[6255]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 168.205706][ T6263] loop3: detected capacity change from 0 to 512 [ 168.238295][ T6263] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 168.288168][ T4830] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 168.294137][ T26] audit: type=1326 audit(1748868721.408:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6265 comm="syz.5.640" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e8858e969 code=0x0 [ 168.335468][ T6263] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 168.375000][ T6263] EXT4-fs (loop3): 1 truncate cleaned up [ 168.386370][ T6263] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 168.455955][ T26] audit: type=1800 audit(1748868721.568:16): pid=6263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.639" name="bus" dev="loop3" ino=15 res=0 errno=0 [ 168.505906][ T4830] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 168.521527][ T4830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.555771][ T4830] usb 5-1: config 0 descriptor?? [ 168.582465][ T4830] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 168.786279][ T4260] EXT4-fs (loop3): unmounting filesystem. [ 168.988332][ T4830] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 169.400896][ T4830] gspca_cpia1: usb_control_msg 02, error -71 [ 169.408311][ T4830] gspca_cpia1: usb_control_msg 05, error -71 [ 169.423640][ T4830] cpia1 5-1:0.0: unexpected systemstate: 00 [ 169.439595][ T4830] usb 5-1: USB disconnect, device number 5 [ 169.618361][ T4832] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 169.745573][ T6291] loop5: detected capacity change from 0 to 40427 [ 169.771181][ T6291] F2FS-fs (loop5): build fault injection attr: rate: 771, type: 0x3ffff [ 169.783743][ T6291] F2FS-fs (loop5): invalid crc value [ 169.810704][ T6291] F2FS-fs (loop5): Found nat_bits in checkpoint [ 169.828230][ T4832] usb 3-1: Using ep0 maxpacket: 32 [ 169.836102][ T4832] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 169.846046][ T4832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.865789][ T4832] usb 3-1: config 0 descriptor?? [ 169.912172][ T6291] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 170.084834][ T4832] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 170.097313][ T4830] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 170.122433][ T4832] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 170.144737][ T4494] syz-executor: attempt to access beyond end of device [ 170.144737][ T4494] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 170.152953][ T4832] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 170.176369][ T4832] usb 3-1: media controller created [ 170.246956][ T4832] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 170.298256][ T4830] usb 1-1: Using ep0 maxpacket: 32 [ 170.316827][ T4830] usb 1-1: unable to get BOS descriptor or descriptor too short [ 170.344458][ T4832] az6027: usb out operation failed. (-71) [ 170.358178][ T4830] usb 1-1: no configurations [ 170.368254][ T4830] usb 1-1: can't read configurations, error -22 [ 170.375310][ T4832] az6027: usb out operation failed. (-71) [ 170.385557][ T4832] stb0899_attach: Driver disabled by Kconfig [ 170.396468][ T4832] az6027: no front-end attached [ 170.396468][ T4832] [ 170.404275][ T4832] az6027: usb out operation failed. (-71) [ 170.410411][ T4832] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 170.419085][ T4832] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input10 [ 170.443484][ T4832] dvb-usb: schedule remote query interval to 400 msecs. [ 170.458073][ T4832] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 170.467326][ T3623] udevd[3623]: worker [4337] terminated by signal 33 (Unknown signal 33) [ 170.476374][ T3623] udevd[3623]: worker [4337] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/input/input10' [ 170.500273][ T4832] usb 3-1: USB disconnect, device number 7 [ 170.580596][ T4832] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 171.152633][ T6321] loop3: detected capacity change from 0 to 64 [ 171.397673][ T4310] ------------[ cut here ]------------ [ 171.403559][ T4310] kernel BUG at fs/hfs/inode.c:449! [ 171.420152][ T4310] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 171.426383][ T4310] CPU: 1 PID: 4310 Comm: kworker/u4:6 Not tainted 6.1.140-syzkaller #0 [ 171.434658][ T4310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 171.444738][ T4310] Workqueue: writeback wb_workfn (flush-7:3) [ 171.450771][ T4310] RIP: 0010:hfs_write_inode+0x964/0x970 [ 171.456348][ T4310] Code: 88 ff e9 13 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e fe ff ff 4c 89 f7 e8 66 e5 88 ff e9 51 fe ff ff e8 6c 6f 37 ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 55 41 57 41 56 41 54 53 48 89 [ 171.476081][ T4310] RSP: 0018:ffffc900042d73a0 EFLAGS: 00010293 [ 171.482182][ T4310] RAX: ffffffff824967a4 RBX: ffff888077bb8e98 RCX: ffff88801874d940 [ 171.490272][ T4310] RDX: 0000000000000000 RSI: ffffffff8cb24de0 RDI: 0000000000000000 [ 171.498275][ T4310] RBP: ffffc900042d7530 R08: ffff88801874d940 R09: 0000000000000003 [ 171.506284][ T4310] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 171.514285][ T4310] R13: 1ffff9200085ae78 R14: 0000000000000000 R15: ffff888077bb8e58 [ 171.522290][ T4310] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 171.531274][ T4310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 171.537908][ T4310] CR2: 00007ffdcf9c3d78 CR3: 000000002ebd5000 CR4: 00000000003506e0 [ 171.545915][ T4310] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 171.553913][ T4310] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 171.561909][ T4310] Call Trace: [ 171.565207][ T4310] [ 171.568158][ T4310] ? hfs_inode_write_fork+0x1a0/0x1a0 [ 171.573566][ T4310] ? __writeback_single_inode+0x4ae/0x1160 [ 171.579506][ T4310] ? __rwlock_init+0x140/0x140 [ 171.584391][ T4310] ? __lock_acquire+0x7c50/0x7c50 [ 171.589451][ T4310] __writeback_single_inode+0x75b/0x1160 [ 171.595123][ T4310] writeback_sb_inodes+0xad8/0x17d0 [ 171.600371][ T4310] ? queue_io+0x5a0/0x5a0 [ 171.604746][ T4310] ? rcu_is_watching+0x11/0xa0 [ 171.609633][ T4310] wb_writeback+0x468/0xd00 [ 171.614179][ T4310] ? percpu_ref_tryget+0x250/0x250 [ 171.619324][ T4310] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 171.625342][ T4310] ? _raw_spin_unlock_irq+0x1f/0x40 [ 171.630576][ T4310] wb_workfn+0x435/0xec0 [ 171.634855][ T4310] ? inode_wait_for_writeback+0x200/0x200 [ 171.640613][ T4310] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 171.646621][ T4310] ? read_lock_is_recursive+0x10/0x10 [ 171.652028][ T4310] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 171.657961][ T4310] ? _raw_spin_unlock+0x40/0x40 [ 171.662858][ T4310] ? _raw_spin_unlock_irq+0x1f/0x40 [ 171.668095][ T4310] ? process_one_work+0x7a1/0x1160 [ 171.673234][ T4310] process_one_work+0x898/0x1160 [ 171.678249][ T4310] ? worker_detach_from_pool+0x240/0x240 [ 171.683922][ T4310] ? _raw_spin_lock_irq+0xab/0xe0 [ 171.688981][ T4310] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 171.694403][ T4310] ? kthread_data+0x4b/0xc0 SYZFAIL: failed to send rpc fd=3 want=37544 sent=0 n=-1 (errno 32: Broken pipe) [ 171.699298][ T4310] worker_thread+0xaa2/0x1250 [ 171.704020][ T4310] kthread+0x29d/0x330 [ 171.708138][ T4310] ? worker_clr_flags+0x1a0/0x1a0 [ 171.713259][ T4310] ? kthread_blkcg+0xd0/0xd0 [ 171.717886][ T4310] ret_from_fork+0x1f/0x30 [ 171.722336][ T4310] [ 171.725377][ T4310] Modules linked in: [ 171.748912][ T4310] ---[ end trace 0000000000000000 ]--- [ 171.754770][ T4310] RIP: 0010:hfs_write_inode+0x964/0x970 [ 171.760630][ T26] audit: type=1326 audit(1748868724.878:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6329 comm="syz.0.667" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4854f8e969 code=0x0 [ 171.760788][ T4310] Code: 88 ff e9 13 fe ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 5e fe ff ff 4c 89 f7 e8 66 e5 88 ff e9 51 fe ff ff e8 6c 6f 37 ff <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 55 41 57 41 56 41 54 53 48 89 [ 171.807151][ T4310] RSP: 0018:ffffc900042d73a0 EFLAGS: 00010293 [ 171.814667][ T4310] RAX: ffffffff824967a4 RBX: ffff888077bb8e98 RCX: ffff88801874d940 [ 171.892199][ T4310] RDX: 0000000000000000 RSI: ffffffff8cb24de0 RDI: 0000000000000000 [ 171.906718][ T4310] RBP: ffffc900042d7530 R08: ffff88801874d940 R09: 0000000000000003 [ 171.914818][ T4310] R10: 0000000000000004 R11: 0000000000000000 R12: dffffc0000000000 [ 171.953251][ T4310] R13: 1ffff9200085ae78 R14: 0000000000000000 R15: ffff888077bb8e58 [ 171.969831][ T4310] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 171.989875][ T4310] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 171.996514][ T4310] CR2: 000056392441d000 CR3: 000000000c68e000 CR4: 00000000003506f0 [ 172.030483][ T4310] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 172.060023][ T4310] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 172.087258][ T4310] Kernel panic - not syncing: Fatal exception [ 172.093738][ T4310] Kernel Offset: disabled [ 172.098074][ T4310] Rebooting in 86400 seconds..