last executing test programs: 17.326771568s ago: executing program 4 (id=640): prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x0, 0x0) syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000001340)=""/102378, 0x7706c522012798af) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002fee702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 17.022997554s ago: executing program 4 (id=644): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x304) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="171692e7f7ef"}) 16.513790017s ago: executing program 4 (id=648): read(0xffffffffffffffff, 0x0, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x169802, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x13, r1, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/ip_tables_matches\x00') pread64(r2, &(0x7f00000001c0)=""/191, 0xbf, 0x49) ioctl$BLKRRPART(r1, 0x125f, 0x0) 16.342550322s ago: executing program 4 (id=651): r0 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$apparmor_exec(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='stack :'], 0xae) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f0000000100), 0x12) syz_io_uring_setup(0x5b3b, &(0x7f0000000000)={0x0, 0x0, 0x2}, 0x0, 0x0) 16.00244301s ago: executing program 4 (id=654): bpf$MAP_DELETE_ELEM(0x2, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r1, @ANYBLOB="05"], 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 15.449293547s ago: executing program 4 (id=660): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r1, 0x0, 0x0, 0x48800, &(0x7f0000000340)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r1, &(0x7f00000023c0)="8c", 0x1, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 14.652107445s ago: executing program 3 (id=668): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='1', 0x1) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0x20000000001005, &(0x7f0000000880)=0x0) sendmmsg$alg(r1, &(0x7f00000010c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x5000000, 0x0, 0x6, 0x0, 0x0, r1, &(0x7f0000000080)="95", 0x1}]) 14.161803617s ago: executing program 3 (id=670): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x22000446, &(0x7f00000005c0)={[{@nobarrier}, {@bh}, {@abort}, {@init_itable}, {@min_batch_time={'min_batch_time', 0x3d, 0x5}}, {@grpjquota, 0x2e}, {@nouid32}, {@grpjquota}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x80, 0x4b2, &(0x7f00000017c0)="$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") 11.172884821s ago: executing program 3 (id=685): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000180)={[{@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@resgid}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) 10.82368935s ago: executing program 3 (id=686): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000000e40)=ANY=[@ANYBLOB='iocharset=iso8859-1,nostrict,uid=forget,anchor=0000000000000145,gid=', @ANYRESDEC=0x0, @ANYBLOB=',dmode=00000000000000000002004,undelete,partition=00000000000000000001,unhide,\x00'], 0x1, 0xc43, &(0x7f00000001c0)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) mkdir(&(0x7f0000000140)='./control\x00', 0x0) rmdir(&(0x7f0000000100)='./control\x00') 9.788782278s ago: executing program 3 (id=690): syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000000)='./file1\x00', 0x1600008, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], 0x3, 0x632, &(0x7f0000001840)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) open(&(0x7f0000001f80)='./cgroup\x00', 0x14927e, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 6.137953368s ago: executing program 3 (id=709): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) io_setup(0xff, &(0x7f0000000380)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000440)="db", 0x1}]) sendto(r1, &(0x7f0000000240)="c7ad", 0x2, 0x0, 0x0, 0x0) 2.848127158s ago: executing program 0 (id=726): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', './bus'}, 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ptrace$getregset(0x4204, r0, 0x2, &(0x7f0000000740)={0x0}) 2.686837061s ago: executing program 0 (id=727): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000340)="15", 0x1}, {&(0x7f0000000dc0)='Q[', 0x2}, {&(0x7f0000000440)="1f61da", 0x3}, {&(0x7f0000000040)="efce55", 0x3}, {&(0x7f0000000540)="94eaadd7c66d2a2ef2da40569fb064209dfb1e048b03bc0e680764b5e473e0e673ed11c936bf3050d3613e9a662ffb527457da1b63290d09e69f62049073d137bc7dbd1d2a32d2e190b19ab0b3b29d7972cd2bfe673068c36a57668c4abf830afd43e5dfe418645dfa4cb7bfc676feef167924a4f068e5e244e0", 0x7a}, {&(0x7f00000005c0)="bb31389c501cac6fc63962e9bfbb888c3fa84c6194cdff0aa75e6c493bbee9771c98dff3f7cbd16a35c086a23c9184598df49a64265ce92596a352d1bd2d6476f97e57101aa4439386152f2d5845f367fee545f3c9ac0fa79e378da5efb4a9", 0x5f}, {&(0x7f0000000000)="522fbbf0fbe8c088f8024aed3a6c9cfa811ce4c5bb6040", 0x17}, {&(0x7f0000000200)="53876165c1d64b3887ff159308d6febc9954f948cc8fa7840b77e7307713bb79421767160fcfea47a86385f1c41de6af43519550f3a01fd3989d2bbd77da22aec98ee3e289f8d652f918326ee6300083bdba0e4646e9b90bea606137246fa9a6f1aad3a3cbe84020ff6aa2f2ebcb33c25c772e40699aaa0dd14d1ad7fe4e058e747ad0bd87692ae9754a4490027c6b2d20452fc6ab4e977006acf799e3cd06b986e472b6354f8033bb98f696ecb7754df4c584f9dbde5c4ce082592638d690d6c3e31b945e34b65a3e47475f34c9688d84baf490ee5e244eefe6b2227502877935509c12cd8b793e2218935c037f99beb3de8a359386413d5ce35dd973", 0xfd}, {&(0x7f0000001900)="d3", 0x1}], 0x9) write$binfmt_script(r0, &(0x7f0000000040), 0x18a3c85) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) r2 = accept$alg(r1, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x7ffff000) 2.074359273s ago: executing program 2 (id=730): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000bc0)={[{@jqfmt_vfsv1}, {}, {@barrier_val}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@acl}, {@dioread_lock}]}, 0xfc, 0x572, &(0x7f0000003780)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00', r1}, 0x10) write$cgroup_subtree(r0, 0x0, 0x32600) 1.505849832s ago: executing program 2 (id=731): r0 = creat(&(0x7f0000000280)='./file0\x00', 0x0) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000480)={0x0, &(0x7f00000003c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r2, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, [0x0]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x3, [r4], [0x2b8]}) 1.477340924s ago: executing program 1 (id=733): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000100)=[&(0x7f0000000440)={0x18, 0x7000000, 0x10, 0x1, 0x0, r2, &(0x7f0000000180)='\x00', 0x1}]) 1.462430405s ago: executing program 0 (id=734): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002600)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.273977671s ago: executing program 2 (id=735): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x6, &(0x7f00000003c0)={r3, @in={{0x2, 0x0, @private}}}, &(0x7f0000000340)=0x90) 1.136585263s ago: executing program 1 (id=736): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000100000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000200)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020022003505d25a806f8c6394f90224fc60040011000a7403004700000037153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 997.906604ms ago: executing program 2 (id=737): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r0, &(0x7f0000000000)=@ceph_nfs_fh={0x8, 0xf8}, 0x0) 968.406447ms ago: executing program 0 (id=738): sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, 0x0, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, 'ethtool\x00'}]}, 0x2c}}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa8c01) write$sndseq(r1, &(0x7f0000000080)=[{0x1e, 0x0, 0x0, 0xfd, @time, {}, {}, @result}], 0x1c) 718.120078ms ago: executing program 1 (id=739): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc0585611, &(0x7f0000000580)={0x0, 0x5, 0x0, {0x0, @raw_data="6d14610dfd30a74fe3b78e024184e4445939547ded0fdd1cd48ea83e06b3f9f9ca2ed9714abbeda901e196ac9163388168d67da8c2b20765e9332541ea5125e7f65b4ebdb2ea015b3499f8275f875e4ff4c6aa5d6548240de4b0312e0a41220762b49254c5a49ac78bc50ff43adfe77c4f629cf7e3b3203dd6c5dc0bb3816190c14ec0ae695502a6f3ba41fa55120f9bf94ab597f3a9c9af0c4b473fa3122a90650d581ed4563f3760d8df6907d47c3c6e8747fc280733f97e4432318b096699480ab4fda870ff47"}}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x0, 0x1, &(0x7f0000000180)=[r3], &(0x7f00000000c0)=[0x2], &(0x7f0000000580)=[r2], &(0x7f0000000040)}) 661.941823ms ago: executing program 2 (id=740): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="5300000007000046009ce6e7e68cce73c5a791cc17bca736"], 0x53) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 474.187899ms ago: executing program 1 (id=741): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00'}, 0x90) r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioctl$RNDADDENTROPY(r0, 0x5452, &(0x7f0000000100)=ANY=[]) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) 467.54888ms ago: executing program 2 (id=742): creat(&(0x7f0000000300)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_aout(r1, 0x0, 0x6a) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) splice(r0, 0x0, r2, 0x0, 0x800, 0x3) 321.856493ms ago: executing program 0 (id=743): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="850000002e000000350000000000ba008500000008000000950000000000000064f1c0dcf95d6806f8a1572b41a1410824581835d80532cb457f454698165b61a3cf5fc6dd8428230e35230163cf094949fc8b0a9114f43d1b6538f5976be4adc07e8c97d76b1895c322a1ef1f83dd6c1023158a1086f7d0f9dce435554bc34e6bdea4217cfaa9a1f8ad1087c697acd9a7ab696922c9e35f0aee6156c599c7b297de0019b27d67bfb3fe241454a04080bf7f8ce021129c820f9b80fe04be5b11cc7bf16c8a029df573db052357c71be1f5e8ce8db0f96ee1d8a312e9671e652bd642dd65d5b9de99038bc9a5d905441c0785d333135a04000130af1bb4cd5b295b9add7a0247cada056be3a9e29f9d4b57ddd4130ccbbbcd6e000000000000004102d74c391acc0880312cc8a8c51c7bddd3698f620a69f46984c2a2e742fadecf6fa7000000000000f001000080000000001b7e62ca8c3572c3dc46dc7579c100010000000000001af7d2149c8ab5ef187087f74b65a6c7da154853894437ffcb5cc3a2b13759c42b350b09a639a8f257d81204e7e61b7f7230db061fabbdc611df1129695265a3426e02f9b24ebc1355c3bde34d28c2be8594af30231a567d1f0ac5297daa6e9e82eb90c602adffc6a3de64b1db82ac547aaf07000023aebbf4917450e54b989c6065aeafe708ed91d86ee0aebd842815a9bad226f1eda090456f50863060f074c0469fb827520400000000000f00cdb628b5f371ce3b1431b2726cbd8b933f3ce2d452d46d563b254fc3bef447d869a8cc49e160581b4ae43a81264d498b4b6e7c2f9bc962da260e699a9a0d2da32c555047cad7e5deefca3a0942d6170aa75648bd19133373dcee41ddece3fe4c111558e0c4a37ccb72e26c31362cfb9606941dfdb10fee16eb67ab9e957ca01b838defa334e36f703204b01dd394bd1dd08b0e1aa9eb396c61dc2b69bc6aec6e8d2a1c5240b734896365f854ed663cc0ab4c4a03468eebe3786f77327ed31360554b8bca4d90e8e7fefeb95831f49537e3f08ad06bc6c0c1842fe5db582677b6a6886bbf"], &(0x7f0000001040)='GPL\x00', 0x0, 0x6b, &(0x7f00000004c0)=""/153}, 0x15) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r0}, &(0x7f0000000480), &(0x7f00000004c0)=r2}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2}, 0x8}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) 285.900915ms ago: executing program 1 (id=744): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e) connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x541b, 0x0) 195.556523ms ago: executing program 0 (id=745): syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x16, &(0x7f0000000180), 0x9, 0x50f6, &(0x7f0000000340)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001000)='pids.current\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x0, 0xc8ab) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0x4020940d, &(0x7f0000000080)={0x4}) 0s ago: executing program 1 (id=746): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0xfe6f) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0), 0xfea7) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x2}) kernel console output (not intermixed with test programs): s value: 0 [ 132.044905][ T3865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.061994][ T3865] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.074253][ T3865] usb 2-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 132.086294][ T4821] F2FS-fs (loop0): Found nat_bits in checkpoint [ 132.090013][ T3865] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.134537][ T3865] usb 2-1: config 0 descriptor?? [ 132.239477][ T4821] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 132.246962][ T4821] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 132.415388][ T3643] syz-executor: attempt to access beyond end of device [ 132.415388][ T3643] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 132.619267][ T4870] loop2: detected capacity change from 0 to 47 [ 132.629253][ T3865] saitek 0003:06A3:0621.0003: unknown main item tag 0x0 [ 132.656990][ T3689] usb 4-1: USB disconnect, device number 3 [ 132.666350][ T3865] saitek 0003:06A3:0621.0003: unknown main item tag 0x0 [ 132.700322][ T3865] saitek 0003:06A3:0621.0003: collection stack underflow [ 132.730931][ T4870] syz.2.300: attempt to access beyond end of device [ 132.730931][ T4870] loop2: rw=2049, sector=48, nr_sectors = 2 limit=47 [ 132.745606][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.746198][ T3865] saitek 0003:06A3:0621.0003: item 0 0 0 12 parsing failed [ 132.757391][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.760195][ T4870] Buffer I/O error on dev loop2, logical block 24, lost async page write [ 132.774749][ T4870] syz.2.300: attempt to access beyond end of device [ 132.774749][ T4870] loop2: rw=2049, sector=50, nr_sectors = 2 limit=47 [ 132.794377][ T3865] saitek 0003:06A3:0621.0003: parse failed [ 132.804689][ T3865] saitek: probe of 0003:06A3:0621.0003 failed with error -22 [ 132.842017][ T4870] Buffer I/O error on dev loop2, logical block 25, lost async page write [ 132.868194][ T3865] usb 2-1: USB disconnect, device number 4 [ 133.500659][ T4882] loop0: detected capacity change from 0 to 1024 [ 133.537118][ T4882] EXT4-fs: Ignoring removed nobh option [ 133.562064][ T4882] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 133.630383][ T4882] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 133.638224][ T4885] loop1: detected capacity change from 0 to 1024 [ 133.682768][ T4885] hfsplus: request for non-existent node -709361664 in B*Tree [ 133.771616][ T4885] hfsplus: request for non-existent node -709361664 in B*Tree [ 133.812387][ T4885] hfsplus: b-tree write err: -5, ino 8 [ 133.832990][ T3643] EXT4-fs (loop0): unmounting filesystem. [ 133.951753][ T4877] loop2: detected capacity change from 0 to 32768 [ 134.008384][ T4877] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop2 scanned by syz.2.306 (4877) [ 134.011332][ T4885] loop1: detected capacity change from 0 to 1024 [ 134.096891][ T4877] BTRFS info (device loop2): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 134.125340][ T4885] ext4: Bad value for 'sb' [ 134.138411][ T4877] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 134.173796][ T4874] loop3: detected capacity change from 0 to 32768 [ 134.178987][ T4877] BTRFS info (device loop2): using free space tree [ 134.189311][ T3720] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 134.280729][ T4874] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 134.289718][ T4874] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 134.372491][ T4874] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 134.387706][ T3689] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 134.401321][ T3689] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 134.496264][ T3689] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 94ms [ 134.503910][ T4877] BTRFS info (device loop2): enabling ssd optimizations [ 134.514924][ T3689] gfs2: fsid=syz:syz.0: jid=0: Done [ 134.558019][ T4874] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 134.580783][ T4917] loop4: detected capacity change from 0 to 128 [ 134.673081][ T4874] gfs2: fsid=syz:syz.0: gfs2_check_dirent: gfs2_dirent too small (not first in block) [ 134.726733][ T4874] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error [ 134.726733][ T4874] inode = 12 2341 [ 134.726733][ T4874] function = gfs2_dirent_scan, file = fs/gfs2/dir.c, line = 602 [ 134.758195][ T4917] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 134.766243][ T4874] gfs2: fsid=syz:syz.0: G: s:SH n:2/925 f:qob t:SH d:EX/0 a:0 v:0 r:3 m:20 p:1 [ 134.834416][ T4874] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:4874 [syz.3.305] iterate_dir+0x224/0x560 [ 134.846663][ T4874] gfs2: fsid=syz:syz.0: I: n:12/2341 t:4 f:0x00 d:0x00000001 s:3864 p:0 [ 134.858493][ T4917] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038 (0x7fffffff) [ 134.861555][ T4924] loop0: detected capacity change from 0 to 2048 [ 134.889820][ T4874] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 134.930333][ T4917] syz.4.313 (pid 4917) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 134.939640][ T4924] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.947486][ T4874] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 134.988396][ T4874] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 135.048667][ T4874] gfs2: fsid=syz:syz.0: File system withdrawn [ 135.055790][ T4874] CPU: 0 PID: 4874 Comm: syz.3.305 Not tainted 6.1.106-syzkaller #0 [ 135.063830][ T4874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 135.073922][ T4874] Call Trace: [ 135.077242][ T4874] [ 135.077694][ T4011] BTRFS info (device loop2): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 135.080179][ T4874] dump_stack_lvl+0x1e3/0x2cb [ 135.080224][ T4874] ? nf_tcp_handle_invalid+0x642/0x642 [ 135.100538][ T4874] ? panic+0x764/0x764 [ 135.104629][ T4874] ? kobject_uevent_env+0x54a/0x8c0 [ 135.109847][ T4874] gfs2_withdraw+0xf09/0x14b0 [ 135.114550][ T4874] ? gfs2_lm+0x230/0x230 [ 135.118800][ T4874] ? gfs2_dirent_scan+0x276/0x640 [ 135.123831][ T4874] ? panic+0x764/0x764 [ 135.127912][ T4874] ? gfs2_consist_inode_i+0xf1/0x110 [ 135.133212][ T4874] gfs2_dirent_scan+0x512/0x640 [ 135.138076][ T4874] ? gfs2_dirent_scan+0x640/0x640 [ 135.143114][ T4874] gfs2_dir_read+0x82b/0x1af0 [ 135.147825][ T4874] ? inode_dio_wait+0x2a9/0x340 [ 135.152734][ T4874] ? inode_owner_or_capable+0x210/0x210 [ 135.158302][ T4874] ? gfs2_dir_hash_inval+0x80/0x80 [ 135.163451][ T4874] ? gfs2_glock_nq+0xe37/0x18a0 [ 135.168325][ T4874] ? inode_go_held+0xe6/0x1f0 [ 135.173010][ T4874] ? gfs2_glock_wait+0x216/0x2a0 [ 135.177960][ T4874] gfs2_readdir+0x14a/0x1a0 [ 135.182480][ T4874] ? gfs2_fallocate+0x490/0x490 [ 135.187351][ T4874] ? iterate_dir+0x224/0x560 [ 135.191947][ T4874] ? common_file_perm+0x17d/0x1d0 [ 135.196994][ T4874] ? fsnotify_perm+0x439/0x590 [ 135.201768][ T4874] iterate_dir+0x224/0x560 [ 135.206192][ T4874] ? gfs2_fallocate+0x490/0x490 [ 135.211090][ T4874] __se_sys_getdents+0x1eb/0x4c0 [ 135.216043][ T4874] ? __x64_sys_getdents+0x80/0x80 [ 135.221076][ T4874] ? fillonedir+0x4c0/0x4c0 [ 135.225588][ T4874] ? syscall_enter_from_user_mode+0x2e/0x230 [ 135.231579][ T4874] ? lockdep_hardirqs_on+0x94/0x130 [ 135.236786][ T4874] ? syscall_enter_from_user_mode+0x2e/0x230 [ 135.242776][ T4874] do_syscall_64+0x3b/0xb0 [ 135.247355][ T4874] ? clear_bhb_loop+0x45/0xa0 [ 135.252067][ T4874] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.258000][ T4874] RIP: 0033:0x7ff8f9179e79 [ 135.262428][ T4874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.282042][ T4874] RSP: 002b:00007ff8f9eec038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 135.290464][ T4874] RAX: ffffffffffffffda RBX: 00007ff8f9315f80 RCX: 00007ff8f9179e79 [ 135.298446][ T4874] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 135.306422][ T4874] RBP: 00007ff8f91e7916 R08: 0000000000000000 R09: 0000000000000000 [ 135.314416][ T4874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.322409][ T4874] R13: 0000000000000000 R14: 00007ff8f9315f80 R15: 00007ffc4e7a8318 [ 135.330415][ T4874] [ 135.333539][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.361209][ T3810] EXT4-fs (loop4): unmounting filesystem. [ 135.927791][ T4940] loop4: detected capacity change from 0 to 2048 [ 135.958920][ T4940] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 135.993145][ T4940] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 136.020592][ T4940] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 136.034856][ T4940] UDF-fs: Scanning with blocksize 512 failed [ 136.086521][ T4940] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 136.244219][ T26] audit: type=1804 audit(1858520788.243:20): pid=4940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.322" name="/newroot/55/file0/file1" dev="loop4" ino=838 res=1 errno=0 [ 136.885234][ T4960] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 136.953717][ T4947] loop0: detected capacity change from 0 to 32768 [ 137.076974][ T4947] XFS (loop0): Mounting V5 Filesystem [ 137.232421][ T4947] XFS (loop0): Ending clean mount [ 137.258686][ T4947] XFS (loop0): Quotacheck needed: Please wait. [ 137.334728][ T4975] loop1: detected capacity change from 0 to 2048 [ 137.345041][ T4947] XFS (loop0): Quotacheck: Done. [ 137.455755][ T4975] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 137.687543][ T3641] EXT4-fs (loop1): unmounting filesystem. [ 137.688045][ T3643] XFS (loop0): Unmounting Filesystem [ 138.337616][ T5004] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 138.593409][ T5010] loop1: detected capacity change from 0 to 128 [ 138.651853][ T5015] loop4: detected capacity change from 0 to 512 [ 138.781025][ T5015] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 138.858461][ T5015] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038 (0x7fffffff) [ 139.162770][ T3810] EXT4-fs (loop4): unmounting filesystem. [ 139.411996][ T5029] tipc: Started in network mode [ 139.448584][ T5029] tipc: Node identity 1, cluster identity 4711 [ 139.485438][ T5029] tipc: Node number set to 1 [ 139.801886][ T5035] kvm [5034]: vcpu0, guest rIP: 0xfff0 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x6ec6c6d7, nop [ 139.895771][ T5008] loop0: detected capacity change from 0 to 32768 [ 139.949910][ T5008] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.341 (5008) [ 139.999774][ T5016] loop3: detected capacity change from 0 to 32768 [ 140.065101][ T5016] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.347 (5016) [ 140.109381][ T5008] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 140.140152][ T5008] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 140.170641][ T5016] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 140.201671][ T5008] BTRFS info (device loop0): setting nodatacow, compression disabled [ 140.211803][ T5016] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 140.260017][ T5008] BTRFS info (device loop0): force clearing of disk cache [ 140.279380][ T5016] BTRFS info (device loop3): using free space tree [ 140.299795][ T5008] BTRFS info (device loop0): setting datacow [ 140.305845][ T5008] BTRFS info (device loop0): doing ref verification [ 140.348475][ T5008] BTRFS info (device loop0): turning off barriers [ 140.368512][ T5008] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 140.414505][ T5046] loop4: detected capacity change from 0 to 2048 [ 140.437910][ T5008] BTRFS info (device loop0): use zstd compression, level 3 [ 140.445186][ T5008] BTRFS info (device loop0): enabling ssd optimizations [ 140.452910][ T5008] BTRFS info (device loop0): using spread ssd allocation scheme [ 140.461902][ T5008] BTRFS info (device loop0): not using ssd optimizations [ 140.469398][ T5008] BTRFS info (device loop0): not using spread ssd allocation scheme [ 140.477526][ T5008] BTRFS info (device loop0): using free space tree [ 140.491199][ T5043] loop2: detected capacity change from 0 to 4096 [ 140.565728][ T5016] BTRFS info (device loop3): enabling ssd optimizations [ 140.824356][ T5043] ntfs3: loop2: failed to convert "0000" to iso8859-1 [ 140.844482][ T5008] BTRFS info (device loop0): rebuilding free space tree [ 140.871521][ T5043] ntfs3: loop2: failed to convert name for inode 1e. [ 141.008027][ T4011] ntfs3: loop2: failed to convert "0000" to iso8859-1 [ 141.015651][ T4011] ntfs3: loop2: failed to convert name for inode 1e. [ 141.100955][ T26] audit: type=1800 audit(1858520793.103:21): pid=5008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.341" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 141.163368][ T4209] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 141.297081][ T3689] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 141.595008][ T3643] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 141.693550][ T3689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.715951][ T3689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.745034][ T3689] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 141.833492][ T3689] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 141.876099][ T3689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.934780][ T3689] usb 5-1: config 0 descriptor?? [ 142.133746][ T56] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.431303][ T5105] loop0: detected capacity change from 0 to 4096 [ 142.443897][ T3689] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 142.459380][ T56] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.467130][ T3689] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 142.488635][ T5105] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 142.537396][ T3689] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 142.722640][ T3653] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 142.732568][ T3653] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 142.743573][ T3653] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 142.768688][ T3653] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 142.781862][ T3653] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 142.789320][ T3653] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 142.846351][ T5115] loop1: detected capacity change from 0 to 256 [ 143.028664][ T56] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.264771][ T56] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.364798][ T5119] loop1: detected capacity change from 0 to 512 [ 143.364903][ T5117] loop0: detected capacity change from 0 to 32768 [ 143.392220][ T5119] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 143.409840][ T5117] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.373 (5117) [ 143.474663][ T5119] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 143.514217][ T5117] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 143.515819][ T5119] EXT4-fs (loop1): 1 truncate cleaned up [ 143.528799][ T5117] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 143.546176][ T5117] BTRFS info (device loop0): using free space tree [ 143.604273][ T5119] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 143.767569][ T56] tipc: Left network mode [ 143.808520][ T5144] capability: warning: `syz.3.375' uses deprecated v2 capabilities in a way that may be insecure [ 143.847736][ T26] audit: type=1804 audit(1858520795.853:22): pid=5119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.383" name="/newroot/84/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 143.907526][ T5117] BTRFS info (device loop0): enabling ssd optimizations [ 143.950972][ T3641] EXT4-fs (loop1): unmounting filesystem. [ 144.045907][ T5110] chnl_net:caif_netlink_parms(): no params data found [ 144.536464][ T3768] usb 5-1: USB disconnect, device number 3 [ 144.590491][ T5110] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.597919][ T5110] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.640520][ T5110] device bridge_slave_0 entered promiscuous mode [ 144.684330][ T5110] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.697682][ T5097] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 144.707907][ T5110] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.718191][ T3643] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 144.733257][ T5110] device bridge_slave_1 entered promiscuous mode [ 144.816337][ T3657] Bluetooth: hci3: command tx timeout [ 144.956059][ T5097] usb 2-1: Using ep0 maxpacket: 32 [ 144.995204][ T5172] device sit1 entered promiscuous mode [ 145.086319][ T5097] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 145.152004][ T5110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.221178][ T5110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.296416][ T5097] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 145.325935][ T5097] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 145.334480][ T5097] usb 2-1: Product: syz [ 145.339183][ T5097] usb 2-1: Manufacturer: syz [ 145.344232][ T5097] usb 2-1: SerialNumber: syz [ 145.377728][ T5097] usb 2-1: config 0 descriptor?? [ 145.396488][ T5165] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 145.503734][ T5110] team0: Port device team_slave_0 added [ 145.566892][ T5110] team0: Port device team_slave_1 added [ 145.678799][ T5098] usb 2-1: USB disconnect, device number 5 [ 145.696386][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 145.714257][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.771248][ T5110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.792612][ T5171] loop3: detected capacity change from 0 to 40427 [ 145.831315][ T5171] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 145.850775][ T5171] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 145.859638][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.867463][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.915125][ T5171] F2FS-fs (loop3): invalid crc value [ 145.950589][ T5171] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 39874397669) [ 145.976336][ T5110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 145.987619][ T5171] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 146.083068][ T5197] loop4: detected capacity change from 0 to 1024 [ 146.141304][ T5197] EXT4-fs: Ignoring removed oldalloc option [ 146.166158][ T5171] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 146.191357][ T5171] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 146.235270][ T5197] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 146.272228][ T26] audit: type=1800 audit(1858520798.273:23): pid=5197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.388" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 146.322854][ T5110] device hsr_slave_0 entered promiscuous mode [ 146.365311][ T5110] device hsr_slave_1 entered promiscuous mode [ 146.384977][ T3810] EXT4-fs (loop4): unmounting filesystem. [ 146.416736][ T5110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.472922][ T5110] Cannot create hsr debugfs directory [ 146.677349][ T5212] loop4: detected capacity change from 0 to 128 [ 146.706389][ T5214] input: syz0 as /devices/virtual/input/input9 [ 146.743606][ T3723] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 146.896237][ T3657] Bluetooth: hci3: command tx timeout [ 146.916045][ T56] device hsr_slave_0 left promiscuous mode [ 146.931882][ T56] device hsr_slave_1 left promiscuous mode [ 146.947916][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.955406][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 147.016767][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 147.024230][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 147.082760][ T56] device bridge_slave_1 left promiscuous mode [ 147.096221][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.135457][ T56] device bridge_slave_0 left promiscuous mode [ 147.174851][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.298170][ T5228] loop4: detected capacity change from 0 to 128 [ 147.323027][ T56] device veth1_macvtap left promiscuous mode [ 147.329611][ T56] device veth0_macvtap left promiscuous mode [ 147.335764][ T56] device veth1_vlan left promiscuous mode [ 147.352249][ T5228] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 147.361814][ T5228] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038 (0x7fffffff) [ 147.367396][ T56] device veth0_vlan left promiscuous mode [ 147.379100][ T26] audit: type=1800 audit(1858520799.383:24): pid=5228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.394" name="bus" dev="loop4" ino=12 res=0 errno=0 [ 147.487697][ T5228] loop4: detected capacity change from 128 to 105 [ 147.518246][ T5233] EXT4-fs error (device loop4): __ext4_new_inode:1071: comm syz.4.394: reserved inode found cleared - inode=1 [ 147.684170][ T3810] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 147.809416][ T5226] EXT4-fs (loop4): unmounting filesystem. [ 147.992423][ T5218] loop0: detected capacity change from 0 to 32768 [ 148.010958][ T5218] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.391 (5218) [ 148.077658][ T5218] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 148.094531][ T5222] loop1: detected capacity change from 0 to 32768 [ 148.102153][ T5218] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 148.135273][ T5218] BTRFS info (device loop0): using free space tree [ 148.161703][ T5222] [ 148.161703][ T5222] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.161703][ T5222] [ 148.261059][ T5222] [ 148.261059][ T5222] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.261059][ T5222] [ 148.319977][ T5222] [ 148.319977][ T5222] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.319977][ T5222] [ 148.380426][ T133] [ 148.380426][ T133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.380426][ T133] [ 148.412089][ T5218] BTRFS info (device loop0): enabling ssd optimizations [ 148.533445][ T5222] read_mapping_page failed! [ 148.538686][ T5222] ERROR: (device loop1): txCommit: [ 148.538686][ T5222] [ 148.749683][ T3697] [ 148.749683][ T3697] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.749683][ T3697] [ 148.782389][ T5239] slcan: can't register candev [ 148.794352][ T3643] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 148.821846][ T3697] [ 148.821846][ T3697] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.821846][ T3697] [ 148.910039][ T3641] [ 148.910039][ T3641] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.910039][ T3641] [ 148.976227][ T3657] Bluetooth: hci3: command tx timeout [ 148.990181][ T133] [ 148.990181][ T133] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 148.990181][ T133] [ 149.005923][ T3641] [ 149.005923][ T3641] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 149.005923][ T3641] [ 149.145014][ T5264] loop0: detected capacity change from 0 to 2048 [ 149.193659][ T5264] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 149.244890][ T5264] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 149.435105][ T56] team0 (unregistering): Port device team_slave_1 removed [ 149.502219][ T26] audit: type=1326 audit(1858520801.503:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5269 comm="syz.1.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4af79e79 code=0x7ffc0000 [ 149.575544][ T26] audit: type=1326 audit(1858520801.543:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5269 comm="syz.1.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f6b4af79e79 code=0x7ffc0000 [ 149.608922][ T56] team0 (unregistering): Port device team_slave_0 removed [ 149.649919][ T26] audit: type=1326 audit(1858520801.543:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5269 comm="syz.1.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4af79e79 code=0x7ffc0000 [ 149.705817][ T26] audit: type=1326 audit(1858520801.543:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5269 comm="syz.1.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6b4af79e79 code=0x7ffc0000 [ 149.728894][ T26] audit: type=1326 audit(1858520801.543:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5269 comm="syz.1.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4af79e79 code=0x7ffc0000 [ 149.761272][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.770151][ T26] audit: type=1326 audit(1858520801.543:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5269 comm="syz.1.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f6b4af79e79 code=0x7ffc0000 [ 149.853417][ T26] audit: type=1326 audit(1858520801.543:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5269 comm="syz.1.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4af79e79 code=0x7ffc0000 [ 149.893718][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.931104][ T26] audit: type=1326 audit(1858520801.543:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5269 comm="syz.1.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f6b4af79e79 code=0x7ffc0000 [ 149.963543][ T26] audit: type=1326 audit(1858520801.543:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5269 comm="syz.1.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b4af79e79 code=0x7ffc0000 [ 149.997432][ T5276] loop0: detected capacity change from 0 to 8192 [ 150.002922][ T26] audit: type=1326 audit(1858520801.543:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5269 comm="syz.1.400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b4af79e79 code=0x7ffc0000 [ 150.051803][ T5276] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 150.065400][ T5276] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 150.075315][ T5276] REISERFS (device loop0): using ordered data mode [ 150.082649][ T5276] reiserfs: using flush barriers [ 150.116274][ T5276] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 150.140734][ T5276] REISERFS (device loop0): checking transaction log (loop0) [ 150.300901][ T5276] REISERFS (device loop0): Using tea hash to sort names [ 150.314560][ T5276] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 150.823307][ T5280] loop3: detected capacity change from 0 to 32768 [ 150.850706][ C1] eth0: bad gso: type: 1, size: 1408 [ 150.947630][ T5280] XFS (loop3): Mounting V5 Filesystem [ 151.056059][ T3657] Bluetooth: hci3: command tx timeout [ 151.096511][ T5280] XFS (loop3): Ending clean mount [ 151.125152][ T5280] XFS (loop3): Quotacheck needed: Please wait. [ 151.199458][ T5280] XFS (loop3): Quotacheck: Done. [ 151.308293][ T56] bond0 (unregistering): Released all slaves [ 151.399413][ T4209] XFS (loop3): Unmounting Filesystem [ 151.571214][ T5304] loop0: detected capacity change from 0 to 64 [ 151.666916][ T5304] hfs: invalid gid -1 [ 151.686221][ T5304] hfs: unable to parse mount options [ 152.550429][ T5320] loop1: detected capacity change from 0 to 4096 [ 152.838325][ T5110] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 152.886768][ T5110] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 152.930671][ T5110] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 152.969740][ T5110] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 152.996884][ T3653] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.010427][ T3653] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.018987][ T3653] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.040594][ T3653] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.048375][ T3653] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 153.077605][ T3653] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.347194][ T5319] loop3: detected capacity change from 0 to 32768 [ 153.399630][ T5333] loop0: detected capacity change from 0 to 512 [ 153.401878][ T5319] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.418 (5319) [ 153.433117][ T5333] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 153.512695][ T5110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.592790][ T5336] input: syz0 as /devices/virtual/input/input10 [ 153.607463][ T5333] EXT4-fs (loop0): 1 orphan inode deleted [ 153.614235][ T5333] EXT4-fs (loop0): 1 truncate cleaned up [ 153.620142][ T5333] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 153.633330][ T5333] EXT4-fs error (device loop0): ext4_lookup:1856: inode #15: comm syz.0.420: iget: bad extra_isize 46 (inode size 256) [ 153.717579][ T5319] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 153.758286][ T5110] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.765342][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.773642][ T5319] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 153.801890][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.806117][ T5319] BTRFS info (device loop3): using free space tree [ 153.832234][ T3643] EXT4-fs (loop0): unmounting filesystem. [ 153.878893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.917727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.983452][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.990661][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.036757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.045691][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.056660][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.063800][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.073233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.091973][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.143031][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.151802][ T5319] BTRFS info (device loop3): enabling ssd optimizations [ 154.164026][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.238963][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.289025][ T5327] chnl_net:caif_netlink_parms(): no params data found [ 154.341663][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.366930][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.375841][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.410653][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.424874][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.443980][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.512978][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.533036][ T4209] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 154.554604][ T5110] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.094249][ T5327] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.116148][ T5327] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.146341][ T3657] Bluetooth: hci0: command tx timeout [ 155.176463][ T5327] device bridge_slave_0 entered promiscuous mode [ 155.207346][ T5327] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.214599][ T5327] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.233422][ T5327] device bridge_slave_1 entered promiscuous mode [ 155.355834][ T5327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.408361][ T5327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.486497][ T5380] netlink: 'syz.3.424': attribute type 10 has an invalid length. [ 155.695305][ T5380] team0: Device veth1_vlan failed to register rx_handler [ 155.848484][ T5327] team0: Port device team_slave_0 added [ 155.902272][ T5327] team0: Port device team_slave_1 added [ 155.916448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.928880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.975589][ T5110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.040076][ T5327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.061617][ T5327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.089549][ T5368] loop0: detected capacity change from 0 to 40427 [ 156.110753][ T5327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.121528][ T5368] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 156.138226][ T5368] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 156.158677][ T5327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.190452][ T5327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.217420][ T5380] syz.3.424 (5380) used greatest stack depth: 18904 bytes left [ 156.232664][ T5368] F2FS-fs (loop0): invalid crc value [ 156.294685][ T5368] F2FS-fs (loop0): Found nat_bits in checkpoint [ 156.296469][ T5327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.419056][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 156.448704][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 156.518348][ T5327] device hsr_slave_0 entered promiscuous mode [ 156.542300][ T5368] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 156.563382][ T5327] device hsr_slave_1 entered promiscuous mode [ 156.568228][ T5368] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 156.577730][ T5327] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.603528][ T5327] Cannot create hsr debugfs directory [ 156.643827][ T5399] netlink: 'syz.3.427': attribute type 12 has an invalid length. [ 156.655550][ T5399] netlink: 132 bytes leftover after parsing attributes in process `syz.3.427'. [ 156.683200][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 156.683219][ T26] audit: type=1800 audit(1858520808.683:39): pid=5368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.425" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 156.720440][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 156.735739][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 156.791851][ T5110] device veth0_vlan entered promiscuous mode [ 156.872101][ T3643] syz-executor: attempt to access beyond end of device [ 156.872101][ T3643] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 156.900223][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 156.937098][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.022581][ T5110] device veth1_vlan entered promiscuous mode [ 157.199141][ T56] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.226193][ T3657] Bluetooth: hci0: command tx timeout [ 157.263085][ T5407] loop3: detected capacity change from 0 to 1024 [ 157.367844][ T5407] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 157.416982][ T26] audit: type=1800 audit(1858520809.413:40): pid=5407 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.430" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 157.526748][ T56] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.580389][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.607014][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.655036][ T4209] EXT4-fs (loop3): unmounting filesystem. [ 157.719551][ T56] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.782594][ T5110] device veth0_macvtap entered promiscuous mode [ 157.797688][ T5110] device veth1_macvtap entered promiscuous mode [ 157.888939][ T56] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.953892][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 157.979187][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 157.997693][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.036080][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.045945][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.097037][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.107269][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.126045][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.135907][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.159366][ T5426] loop0: detected capacity change from 0 to 4096 [ 158.189068][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.204541][ T5426] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 158.223308][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.316692][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.342524][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.383471][ T26] audit: type=1800 audit(1858520810.383:41): pid=5426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.432" name="bus" dev="loop0" ino=33 res=0 errno=0 [ 158.410039][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.451579][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.496246][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.516117][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.539334][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.570492][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.616085][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.653134][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.685313][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.736503][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.784111][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.824218][ T5110] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.856843][ T5110] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.876968][ T5110] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.885731][ T5110] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.893695][ T5437] "syz.0.433" (5437) uses obsolete ecb(arc4) skcipher [ 159.224727][ T5447] loop3: detected capacity change from 0 to 256 [ 159.296304][ T3657] Bluetooth: hci0: command tx timeout [ 159.408719][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.449883][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.606276][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 159.694677][ T5451] loop0: detected capacity change from 0 to 4096 [ 159.813271][ T5456] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.827259][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.876343][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.959050][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 160.064262][ T5459] loop3: detected capacity change from 0 to 1024 [ 160.072401][ T5451] loop0: detected capacity change from 4096 to 0 [ 160.182250][ T5461] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 160.261991][ T5462] syz.3.439: attempt to access beyond end of device [ 160.261991][ T5462] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 160.305317][ T5461] Remounting filesystem read-only [ 160.329484][ T5465] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-61) [ 160.342603][ T5467] netlink: 16 bytes leftover after parsing attributes in process `syz.1.440'. [ 160.366713][ T26] audit: type=1326 audit(1858520812.373:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5458 comm="syz.3.439" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8f9179e79 code=0x0 [ 160.390441][ T5464] syz.3.439: attempt to access beyond end of device [ 160.390441][ T5464] loop3: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 160.459875][ T3643] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer [ 160.484477][ T5464] Buffer I/O error on dev loop3, logical block 2889, async page read [ 160.493725][ T3643] NILFS (loop0): discard dirty page: offset=0, ino=2 [ 160.525922][ T3643] NILFS (loop0): discard dirty block: blocknr=14, size=4096 [ 160.527272][ T26] audit: type=1800 audit(1858520812.523:43): pid=5464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.439" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 160.547849][ T3643] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 160.575959][ T5327] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 160.618518][ T3643] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 160.630668][ T5475] loop2: detected capacity change from 0 to 64 [ 160.637159][ T5327] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 160.644319][ T3643] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 160.703218][ T5477] loop1: detected capacity change from 0 to 1024 [ 160.714311][ T3643] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 160.754088][ T3643] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 160.781209][ T3643] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 160.789757][ T5327] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 160.823235][ T5477] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 160.824603][ T5327] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 160.920274][ T3695] kworker/u4:5: attempt to access beyond end of device [ 160.920274][ T3695] loop2: rw=1, sector=268435468, nr_sectors = 2 limit=64 [ 160.967684][ T3695] Buffer I/O error on dev loop2, logical block 134217734, lost async page write [ 161.038191][ T5488] misc userio: No port type given on /dev/userio [ 161.137078][ T5369] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 161.149615][ T5490] loop2: detected capacity change from 0 to 1024 [ 161.217382][ T33] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 161.267431][ T33] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 161.290101][ T33] EXT4-fs (loop1): This should not happen!! Data will be lost [ 161.290101][ T33] [ 161.312794][ T33] EXT4-fs (loop1): Total free blocks count 0 [ 161.332453][ T33] EXT4-fs (loop1): Free/Dirty block details [ 161.363442][ T33] EXT4-fs (loop1): free_blocks=68451041280 [ 161.376361][ T3657] Bluetooth: hci0: command tx timeout [ 161.383046][ T33] EXT4-fs (loop1): dirty_blocks=16 [ 161.404013][ T33] EXT4-fs (loop1): Block reservation details [ 161.421597][ T33] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 161.439789][ T3641] EXT4-fs (loop1): unmounting filesystem. [ 161.506942][ T5369] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.546252][ T5369] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 161.592264][ T5369] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 161.627599][ T5369] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.649852][ T56] device hsr_slave_0 left promiscuous mode [ 161.651055][ T5499] loop1: detected capacity change from 0 to 256 [ 161.663584][ T56] device hsr_slave_1 left promiscuous mode [ 161.678334][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.680016][ T5369] usb 4-1: config 0 descriptor?? [ 161.694316][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.703147][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.710884][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.719547][ T56] device bridge_slave_1 left promiscuous mode [ 161.755092][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.770187][ T5499] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 161.788206][ T56] device bridge_slave_0 left promiscuous mode [ 161.829797][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.974722][ T56] device veth1_macvtap left promiscuous mode [ 161.983505][ T56] device veth0_macvtap left promiscuous mode [ 162.006920][ T56] device veth1_vlan left promiscuous mode [ 162.027423][ T56] device veth0_vlan left promiscuous mode [ 162.208198][ T5369] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 162.238711][ T5369] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 162.307660][ T5369] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 162.795217][ T5501] loop2: detected capacity change from 0 to 32768 [ 162.879285][ T5501] XFS (loop2): Mounting V5 Filesystem [ 162.994509][ T5501] XFS (loop2): Ending clean mount [ 163.167148][ T5094] usb 4-1: USB disconnect, device number 4 [ 163.242980][ T5110] XFS (loop2): Unmounting Filesystem [ 163.563084][ T56] team0 (unregistering): Port device team_slave_1 removed [ 163.641433][ T56] team0 (unregistering): Port device team_slave_0 removed [ 163.725345][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 163.792084][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.338940][ T56] bond0 (unregistering): Released all slaves [ 164.422322][ T5327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.440583][ T5547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.459'. [ 164.457514][ T5555] netlink: 18 bytes leftover after parsing attributes in process `syz.1.461'. [ 164.506924][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.536484][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.586761][ T5327] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.617351][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.638286][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.676684][ T3697] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.684013][ T3697] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.726494][ T5559] loop0: detected capacity change from 0 to 4096 [ 164.761937][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.771586][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.809023][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.868143][ T3697] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.875428][ T3697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.877281][ T5567] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.942352][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.984882][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.004307][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 165.063108][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.104015][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 165.149703][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.171023][ T5092] NILFS (loop0): DAT doesn't have a block to manage vblocknr = 648518346341351424 [ 165.191863][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 165.210312][ T5092] NILFS error (device loop0): nilfs_bmap_truncate: broken bmap (inode number=12) [ 165.226820][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.263342][ T5327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.275405][ T5092] Remounting filesystem read-only [ 165.280851][ T5092] NILFS (loop0): error -5 truncating bmap (ino=12) [ 165.294025][ T3643] NILFS (loop0): discard dirty page: offset=0, ino=6 [ 165.302450][ T5327] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 165.310670][ T3643] NILFS (loop0): discard dirty block: blocknr=23, size=4096 [ 165.320049][ T3643] NILFS (loop0): discard dirty page: offset=4096, ino=6 [ 165.329462][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 165.338615][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 165.348446][ T3643] NILFS (loop0): discard dirty block: blocknr=24, size=4096 [ 165.355901][ T3643] NILFS (loop0): discard dirty page: offset=8192, ino=6 [ 165.368135][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.377248][ T3643] NILFS (loop0): discard dirty block: blocknr=25, size=4096 [ 165.912907][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 165.924974][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 165.999809][ T5327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.080747][ T5593] loop2: detected capacity change from 0 to 256 [ 166.408398][ T5597] loop2: detected capacity change from 0 to 256 [ 166.431547][ T5597] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 166.918826][ T5607] overlayfs: failed to decode file handle (len=2, type=251, flags=0, err=-22) [ 166.973911][ T5611] netlink: 'syz.1.478': attribute type 4 has an invalid length. [ 167.014683][ T5611] netlink: 'syz.1.478': attribute type 1 has an invalid length. [ 167.065470][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.074710][ T5611] netlink: 5 bytes leftover after parsing attributes in process `syz.1.478'. [ 167.086749][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.114434][ T5609] loop0: detected capacity change from 0 to 4096 [ 167.150593][ T5613] loop1: detected capacity change from 0 to 512 [ 167.159796][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.193927][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.235119][ T5327] device veth0_vlan entered promiscuous mode [ 167.253907][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.285616][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.331439][ T5613] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 167.341907][ T5327] device veth1_vlan entered promiscuous mode [ 167.394762][ T5613] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 167.409490][ T5613] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 167.431202][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 167.441337][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 167.450515][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 167.460827][ T5613] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 167.475052][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 167.486545][ T3643] ntfs3: loop0: failed to convert "0080" to koi8-ru [ 167.506223][ T5613] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000] [ 167.515350][ T5613] EXT4-fs (loop1): orphan cleanup on readonly fs [ 167.525272][ T5327] device veth0_macvtap entered promiscuous mode [ 167.560342][ T5327] device veth1_macvtap entered promiscuous mode [ 167.570028][ T5613] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.478: bg 0: block 34: padding at end of block bitmap is not set [ 167.578046][ T3643] ntfs3: loop0: failed to convert name for inode 1e. [ 167.641650][ T5613] Quota error (device loop1): write_blk: dquota write failed [ 167.650160][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.656275][ T5613] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 167.671688][ T5613] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz.1.478: Failed to acquire dquot type 1 [ 167.686286][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.692754][ T5613] EXT4-fs (loop1): 1 truncate cleaned up [ 167.707291][ T5613] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 167.756084][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.775046][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.796030][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.816423][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.838112][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.866017][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.882513][ T3641] EXT4-fs (loop1): unmounting filesystem. [ 167.884134][ T5327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.895741][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 167.948909][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 167.987507][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.004250][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.163904][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.177155][ T5624] netlink: 60 bytes leftover after parsing attributes in process `syz.1.482'. [ 168.191344][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 168.198116][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.218953][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.221921][ T5624] unsupported nlmsg_type 40 [ 168.252018][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.302211][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.331705][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.361559][ T5327] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.389528][ T5327] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.424109][ T5327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.458652][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.469258][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.492163][ T5327] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.517954][ T5327] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.528383][ T5327] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.541255][ T5618] loop3: detected capacity change from 0 to 32768 [ 168.559105][ T5327] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.765899][ T5618] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 168.765899][ T5618] [ 168.779311][ T3697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.809756][ T3697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.813359][ T5618] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 168.813359][ T5618] [ 168.861735][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 168.868128][ T5618] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 168.868128][ T5618] [ 168.920998][ T5630] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 168.920998][ T5630] [ 168.932148][ T5452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 168.951841][ T5452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.965293][ T5618] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 168.965293][ T5618] [ 168.998248][ T5630] ialloc: diAlloc returned -5! [ 169.013278][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 169.025256][ T5618] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 169.025256][ T5618] [ 169.058273][ T5618] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 169.058273][ T5618] [ 169.087649][ T5618] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 169.087649][ T5618] [ 169.107006][ T5618] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 169.107006][ T5618] [ 169.126323][ T5618] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 169.126323][ T5618] [ 169.342770][ T3697] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 169.342770][ T3697] [ 169.522345][ T151] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 169.620736][ T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.738507][ T3657] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 169.766359][ T3657] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 169.777040][ T151] usb 3-1: Using ep0 maxpacket: 8 [ 169.782567][ T3657] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 169.790662][ T3657] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 169.798813][ T3657] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 169.816425][ T3657] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 169.862640][ T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.927304][ T5635] loop4: detected capacity change from 0 to 32768 [ 169.992218][ T5635] XFS (loop4): Mounting V5 Filesystem [ 170.010246][ T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.057841][ T151] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 170.095114][ T151] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.128341][ T151] usb 3-1: Product: syz [ 170.129916][ T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.133816][ T151] usb 3-1: Manufacturer: syz [ 170.147814][ T151] usb 3-1: SerialNumber: syz [ 170.174566][ T5635] XFS (loop4): Ending clean mount [ 170.185364][ T5635] XFS (loop4): Quotacheck needed: Please wait. [ 170.275029][ T5635] XFS (loop4): Quotacheck: Done. [ 170.331643][ T5659] loop3: detected capacity change from 0 to 8192 [ 170.461987][ T151] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 170.591569][ T5642] chnl_net:caif_netlink_parms(): no params data found [ 170.714069][ T5327] XFS (loop4): Unmounting Filesystem [ 170.752568][ T3688] usb 3-1: USB disconnect, device number 2 [ 170.766086][ C1] usblp0: nonzero write bulk status received: -71 [ 170.815437][ T3688] usblp0: removed [ 171.283239][ T5686] loop1: detected capacity change from 0 to 1024 [ 171.300401][ T5686] EXT4-fs: Ignoring removed oldalloc option [ 171.496578][ T5686] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 171.553688][ T5696] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-22) [ 171.675535][ T5642] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.693559][ T5642] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.718603][ T5642] device bridge_slave_0 entered promiscuous mode [ 171.781735][ T3641] EXT4-fs (loop1): unmounting filesystem. [ 171.849010][ T5642] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.856440][ T3657] Bluetooth: hci2: command tx timeout [ 171.885865][ T5642] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.934532][ T5642] device bridge_slave_1 entered promiscuous mode [ 172.194063][ T5719] loop3: detected capacity change from 0 to 512 [ 172.226998][ T5719] EXT4-fs: Ignoring removed orlov option [ 172.232715][ T5719] EXT4-fs: Ignoring removed i_version option [ 172.241843][ T5642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 172.263476][ T5719] EXT4-fs: Ignoring removed nomblk_io_submit option [ 172.291775][ T5716] loop2: detected capacity change from 0 to 8192 [ 172.340341][ T5716] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 172.365889][ T5719] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 172.391584][ T5642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 172.394150][ T5719] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c040e118, mo2=0002] [ 172.428733][ T5719] EXT4-fs (loop3): orphan cleanup on readonly fs [ 172.437450][ T5719] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 172.453593][ T5719] EXT4-fs warning (device loop3): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 172.540967][ T5719] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 172.587475][ T5719] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.508: bg 0: block 40: padding at end of block bitmap is not set [ 172.643871][ T5719] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 172.667929][ T5719] EXT4-fs (loop3): 1 truncate cleaned up [ 172.676368][ T5719] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 172.690106][ T5713] loop1: detected capacity change from 0 to 40427 [ 172.725682][ T5713] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 172.759610][ T5713] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 172.793922][ T5713] F2FS-fs (loop1): invalid crc value [ 172.818492][ T4209] EXT4-fs (loop3): unmounting filesystem. [ 172.876961][ T5713] F2FS-fs (loop1): Found nat_bits in checkpoint [ 172.952444][ T5642] team0: Port device team_slave_0 added [ 172.978554][ T5642] team0: Port device team_slave_1 added [ 173.009613][ T5733] loop4: detected capacity change from 0 to 512 [ 173.086461][ T5733] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 173.097759][ T5713] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 173.103292][ T5733] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038 (0x7fffffff) [ 173.104818][ T5713] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 173.204964][ T5743] loop2: detected capacity change from 0 to 256 [ 173.214982][ T5713] syz.1.506: attempt to access beyond end of device [ 173.214982][ T5713] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 173.254290][ T5327] EXT4-fs (loop4): unmounting filesystem. [ 173.275125][ T5743] exFAT-fs (loop2): invalid boot record signature [ 173.302128][ T5743] exFAT-fs (loop2): failed to read boot sector [ 173.346139][ T5743] exFAT-fs (loop2): failed to recognize exfat type [ 173.347417][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.426417][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.471370][ T5642] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.532580][ T5642] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.558637][ T5642] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.642958][ T5642] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.662833][ T5749] loop3: detected capacity change from 0 to 512 [ 173.706748][ T5749] EXT4-fs: Ignoring removed bh option [ 173.726759][ T5749] EXT4-fs error (device loop3): __ext4_iget:5055: inode #15: block 1803188595: comm syz.3.516: invalid block [ 173.746827][ T5747] loop4: detected capacity change from 0 to 8192 [ 173.756710][ T56] device hsr_slave_0 left promiscuous mode [ 173.771735][ T56] device hsr_slave_1 left promiscuous mode [ 173.796850][ T5749] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.516: couldn't read orphan inode 15 (err -117) [ 173.817289][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.824746][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.842115][ T5749] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 173.842284][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.859183][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.871474][ T56] device bridge_slave_1 left promiscuous mode [ 173.905038][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.942695][ T3657] Bluetooth: hci2: command tx timeout [ 173.960412][ T56] device bridge_slave_0 left promiscuous mode [ 174.005390][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.200343][ T56] device veth1_macvtap left promiscuous mode [ 174.216583][ T56] device veth0_macvtap left promiscuous mode [ 174.236070][ T56] device veth1_vlan left promiscuous mode [ 174.242112][ T56] device veth0_vlan left promiscuous mode [ 174.536475][ T26] audit: type=1326 audit(1858520826.543:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5763 comm="syz.1.517" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6b4af79e79 code=0x0 [ 174.712983][ T5767] loop4: detected capacity change from 0 to 764 [ 174.783103][ T4209] EXT4-fs (loop3): unmounting filesystem. [ 174.962616][ T5327] Symlink component flag not implemented [ 175.371906][ T5782] loop3: detected capacity change from 0 to 2048 [ 175.444395][ T5782] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 175.507432][ T5782] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 175.714107][ T4209] EXT4-fs (loop3): unmounting filesystem. [ 175.817334][ T56] team0 (unregistering): Port device team_slave_1 removed [ 175.935742][ T56] team0 (unregistering): Port device team_slave_0 removed [ 176.016717][ T3657] Bluetooth: hci2: command tx timeout [ 176.034078][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.194139][ T5804] loop4: detected capacity change from 0 to 64 [ 176.247743][ C1] eth0: bad gso: type: 1, size: 1408 [ 176.297262][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.599534][ T5809] loop4: detected capacity change from 0 to 1024 [ 176.633117][ T5809] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 176.664839][ T5809] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 176.668359][ T5800] loop1: detected capacity change from 0 to 32768 [ 176.716904][ T5800] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.534 (5800) [ 176.804920][ T5800] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 176.852600][ T5800] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 176.883924][ T5800] BTRFS info (device loop1): using free space tree [ 176.965433][ T5327] EXT4-fs (loop4): unmounting filesystem. [ 177.175309][ T5807] loop3: detected capacity change from 0 to 32768 [ 177.195117][ T5800] BTRFS info (device loop1): enabling ssd optimizations [ 177.242893][ T5807] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.537 (5807) [ 177.321444][ T5807] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 177.347014][ T5807] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 177.368140][ T5807] BTRFS info (device loop3): setting nodatacow, compression disabled [ 177.376583][ T5807] BTRFS info (device loop3): enabling auto defrag [ 177.398898][ T5807] BTRFS info (device loop3): max_inline at 0 [ 177.404957][ T5807] BTRFS info (device loop3): using free space tree [ 177.489500][ T3641] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 178.084608][ T56] bond0 (unregistering): Released all slaves [ 178.096210][ T3657] Bluetooth: hci2: command tx timeout [ 178.298540][ T4209] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 178.608599][ T5642] device hsr_slave_0 entered promiscuous mode [ 178.756949][ T5642] device hsr_slave_1 entered promiscuous mode [ 179.139111][ T5874] xt_CT: You must specify a L4 protocol and not use inversions on it [ 179.606186][ T3687] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 179.856119][ T3687] usb 2-1: Using ep0 maxpacket: 8 [ 179.907682][ T5864] loop4: detected capacity change from 0 to 32768 [ 179.914719][ T5864] XFS: ikeep mount option is deprecated. [ 179.946130][ T5864] XFS: ikeep mount option is deprecated. [ 179.996245][ T3687] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 180.015253][ T3687] usb 2-1: config 0 has no interface number 0 [ 180.024863][ T5892] loop2: detected capacity change from 0 to 8192 [ 180.033613][ T3687] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 180.065566][ T3687] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 180.067626][ T5864] XFS (loop4): Mounting V5 Filesystem [ 180.084997][ T3687] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.087749][ T5900] loop3: detected capacity change from 0 to 512 [ 180.105183][ T5900] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 180.117320][ T5892] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 180.146205][ T5892] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 180.155852][ T5892] REISERFS (device loop2): using ordered data mode [ 180.156826][ T3687] usb 2-1: config 0 descriptor?? [ 180.173058][ T5900] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec01c, mo2=0002] [ 180.181334][ T5900] System zones: 1-12 [ 180.221710][ T5900] EXT4-fs (loop3): 1 truncate cleaned up [ 180.230224][ T3687] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 180.231821][ T5892] reiserfs: using flush barriers [ 180.252782][ T5892] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 180.283091][ T5900] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 180.371661][ T5892] REISERFS (device loop2): checking transaction log (loop2) [ 180.392268][ T5864] XFS (loop4): Ending clean mount [ 180.445049][ T5892] REISERFS (device loop2): Using r5 hash to sort names [ 180.455756][ T5864] XFS (loop4): Quotacheck needed: Please wait. [ 180.464509][ T3687] usb 2-1: USB disconnect, device number 6 [ 180.470527][ C1] iowarrior 2-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 180.474446][ T5892] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 180.566308][ T3687] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 180.598973][ T5642] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 180.609608][ T5864] XFS (loop4): Quotacheck: Done. [ 180.634731][ T4209] EXT4-fs (loop3): unmounting filesystem. [ 180.678143][ T5642] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 180.719426][ T5642] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 180.751475][ T5642] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 180.959111][ T5327] XFS (loop4): Unmounting Filesystem [ 181.019548][ T5642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.075486][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 181.096504][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 181.172511][ T5642] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.221894][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 181.237570][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 181.277609][ T3791] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.284796][ T3791] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.389416][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 181.422370][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 181.451375][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 181.467771][ T3791] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.474905][ T3791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.536894][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 181.577204][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 181.620396][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 181.701512][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 181.757267][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 181.796641][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 181.850506][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 181.881782][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 181.938879][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 181.975398][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 182.026219][ T3791] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 182.044745][ T5947] loop4: detected capacity change from 0 to 512 [ 182.053808][ T5642] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 182.106610][ T5947] EXT4-fs: Ignoring removed bh option [ 182.148447][ T5947] EXT4-fs error (device loop4): __ext4_iget:5055: inode #15: block 1803188595: comm syz.4.561: invalid block [ 182.196759][ T5947] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.561: couldn't read orphan inode 15 (err -117) [ 182.237419][ T5947] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 182.448420][ T5093] kernel read not supported for file /eth0 (pid: 5093 comm: kworker/1:17) [ 182.612970][ T5327] EXT4-fs (loop4): unmounting filesystem. [ 182.649238][ T5963] loop2: detected capacity change from 0 to 128 [ 182.686165][ T5963] EXT4-fs: quotafile must be on filesystem root [ 183.003513][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 183.026590][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 183.084759][ T5642] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.183332][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 183.206951][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 183.301073][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 183.323863][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 183.337666][ T5851] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 183.376236][ T5642] device veth0_vlan entered promiscuous mode [ 183.394412][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 183.413681][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 183.441917][ T5642] device veth1_vlan entered promiscuous mode [ 183.540959][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 183.562903][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 183.593873][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 183.622857][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 183.672147][ T5642] device veth0_macvtap entered promiscuous mode [ 183.696808][ T5851] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 183.712330][ T5851] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.740102][ T5642] device veth1_macvtap entered promiscuous mode [ 183.757445][ T5851] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 183.760951][ T5642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.791482][ T5851] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 183.797206][ T5642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.818321][ T5642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.829408][ T5642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.847825][ T5642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.862143][ T5642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.888926][ T5642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.910908][ T5642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.944001][ T5851] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 183.945408][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.973775][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 183.984587][ T5851] usb 2-1: Product: syz [ 183.992320][ T5642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.004462][ T5851] usb 2-1: Manufacturer: syz [ 184.018923][ T5642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.033848][ T5642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.047525][ T5642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.057298][ T5851] cdc_wdm 2-1:1.0: skipping garbage [ 184.057353][ T5851] cdc_wdm 2-1:1.0: skipping garbage [ 184.059498][ T5851] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 184.077700][ T5642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.089373][ T5851] cdc_wdm 2-1:1.0: Unknown control protocol [ 184.141642][ T5642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.159233][ T5642] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.172379][ T5642] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.204234][ T5642] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.226300][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 184.245779][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 184.281990][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 184.302052][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 184.321551][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 184.333488][ T5851] usb 2-1: USB disconnect, device number 7 [ 184.340362][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 184.340524][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 184.340543][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 184.376872][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 184.401018][ T5642] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.445586][ T5642] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.481223][ T5642] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.522256][ T5642] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.811206][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.839795][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.894080][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 184.930307][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.933553][ T6035] netlink: 'syz.2.585': attribute type 4 has an invalid length. [ 184.942541][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.977460][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 185.231543][ T6042] loop2: detected capacity change from 0 to 512 [ 185.281744][ T6047] device batadv0 entered promiscuous mode [ 185.321623][ T6047] device netdevsim0 entered promiscuous mode [ 185.380622][ T6042] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 185.413042][ T6042] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038 (0x7fffffff) [ 185.433118][ T6044] device netdevsim0 left promiscuous mode [ 185.526324][ T6044] device batadv0 left promiscuous mode [ 185.928155][ T5110] EXT4-fs (loop2): unmounting filesystem. [ 186.182720][ T6048] loop0: detected capacity change from 0 to 32768 [ 186.322190][ T6048] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 186.341028][ T6048] XFS (loop0): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent. [ 186.405773][ T6048] XFS (loop0): Quotacheck needed: Please wait. [ 186.481278][ T6048] XFS (loop0): Quotacheck: Done. [ 186.615458][ C1] eth0: bad gso: type: 1, size: 1408 [ 186.746772][ T5642] XFS (loop0): Unmounting Filesystem [ 186.907231][ T6062] loop3: detected capacity change from 0 to 40427 [ 186.930470][ T6062] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 186.961325][ T6062] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 187.027007][ T6062] F2FS-fs (loop3): Found nat_bits in checkpoint [ 187.106179][ T3688] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 187.209673][ T6062] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 187.224052][ T6062] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 187.290803][ T26] audit: type=1800 audit(1858520839.293:45): pid=6062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.591" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 187.356208][ T26] audit: type=1800 audit(1858520839.293:46): pid=6062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.591" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 187.386397][ T3688] usb 5-1: Using ep0 maxpacket: 16 [ 187.457615][ T6105] loop2: detected capacity change from 0 to 2048 [ 187.523528][ T6105] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 187.536153][ T3688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.538579][ T33] kworker/u4:2: attempt to access beyond end of device [ 187.538579][ T33] loop3: rw=1, sector=45096, nr_sectors = 16 limit=40427 [ 187.582997][ T3688] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 187.655067][ T6105] EXT4-fs (loop2): shut down requested (2) [ 187.668980][ T6111] loop0: detected capacity change from 0 to 1024 [ 187.685676][ T3688] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 187.703455][ T6111] EXT4-fs: Ignoring removed mblk_io_submit option [ 187.716636][ T3688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.729065][ T6111] EXT4-fs: Ignoring removed i_version option [ 187.750417][ T3688] usb 5-1: config 0 descriptor?? [ 187.795467][ T6111] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 187.818401][ T5110] EXT4-fs (loop2): unmounting filesystem. [ 187.835055][ T6114] Cannot find map_set index 0 as target [ 187.862941][ T6111] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 188.049983][ T5642] EXT4-fs (loop0): unmounting filesystem. [ 188.247660][ T3688] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0006/input/input11 [ 188.371835][ T3688] microsoft 0003:045E:07DA.0006: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 188.460226][ T6133] loop3: detected capacity change from 0 to 512 [ 188.514994][ T6133] EXT4-fs (loop3): Unsupported blocksize for fs-verity [ 188.543053][ T6134] loop0: detected capacity change from 0 to 2048 [ 188.591029][ T6134] EXT4-fs error (device loop0): __ext4_fill_super:5399: inode #2: comm syz.0.613: casefold flag without casefold feature [ 188.634460][ T7] usb 5-1: USB disconnect, device number 4 [ 188.697072][ T6134] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 188.766413][ T6134] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 188.779746][ T6134] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 188.937767][ T5642] EXT4-fs (loop0): unmounting filesystem. [ 189.211667][ T6152] loop0: detected capacity change from 0 to 2048 [ 189.239364][ T26] audit: type=1326 audit(1858520841.243:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6157 comm="syz.2.623" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcbb9d79e79 code=0x0 [ 189.293014][ T6160] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 189.440818][ T6152] loop0: detected capacity change from 2048 to 0 [ 189.491611][ T6167] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 0, flags = 0x0, nchildren = 0 [ 189.520667][ T6167] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 189.569297][ T6167] Remounting filesystem read-only [ 189.582428][ T6167] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 0, flags = 0x0, nchildren = 0 [ 189.594251][ T6167] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 189.624115][ T6167] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 0, flags = 0x0, nchildren = 0 [ 189.639953][ T6167] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 189.658872][ T6167] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 0, flags = 0x0, nchildren = 0 [ 189.700891][ T6167] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 189.725735][ T6167] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 0, flags = 0x0, nchildren = 0 [ 189.751096][ T6167] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 189.783801][ T6167] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 0, flags = 0x0, nchildren = 0 [ 189.814598][ T6167] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 189.827461][ T6167] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 0, flags = 0x0, nchildren = 0 [ 189.856256][ T6167] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 189.885375][ T6167] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 0, flags = 0x0, nchildren = 0 [ 189.914141][ T6167] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 189.954807][ T6167] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 0, flags = 0x0, nchildren = 0 [ 189.970854][ T6167] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 189.991776][ T6167] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 0, flags = 0x0, nchildren = 0 [ 190.013228][ T6167] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 190.062707][ T6167] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 0, flags = 0x0, nchildren = 0 [ 190.093672][ T6167] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 190.129828][ T6167] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 0, flags = 0x0, nchildren = 0 [ 190.160447][ T6167] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 190.200974][ T6167] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 0, flags = 0x0, nchildren = 0 [ 190.225285][ T6167] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 190.259113][ T6167] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 0, flags = 0x0, nchildren = 0 [ 190.289759][ T6167] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 190.300743][ T6165] loop4: detected capacity change from 0 to 40427 [ 190.318261][ T6165] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 190.335895][ T6167] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 0, flags = 0x0, nchildren = 0 [ 190.347215][ T6165] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 190.363381][ T6167] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 190.369795][ T6165] F2FS-fs (loop4): invalid crc value [ 190.383086][ T6167] NILFS (loop0): bad btree node (ino=16, blocknr=15): level = 0, flags = 0x0, nchildren = 0 [ 190.393746][ T6167] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=16) [ 190.404292][ T26] audit: type=1800 audit(1858520842.403:48): pid=6167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.620" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 190.451347][ T6167] syz.0.620 (6167) used greatest stack depth: 18168 bytes left [ 190.456229][ T5642] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 190.477919][ T6165] F2FS-fs (loop4): Found nat_bits in checkpoint [ 190.486397][ T5642] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 190.523785][ T5642] NILFS error (device loop0): nilfs_readdir: bad page in #12 [ 190.593756][ T6165] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 190.601120][ T6165] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 190.835556][ T3695] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 190.861598][ T3695] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 191.136217][ T3657] Bluetooth: hci1: command 0x0406 tx timeout [ 191.363349][ T6176] loop2: detected capacity change from 0 to 32768 [ 191.393491][ T6176] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.629 (6176) [ 191.404872][ T6202] loop3: detected capacity change from 0 to 512 [ 191.417763][ T6202] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 191.451687][ T6202] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 1)! [ 191.472416][ T6176] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 191.478444][ T6204] loop1: detected capacity change from 0 to 128 [ 191.502679][ T6176] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 191.518471][ T6202] EXT4-fs (loop3): group descriptors corrupted! [ 191.526962][ T6204] FAT-fs (loop1): Unrecognized mount option "" or missing value [ 191.547446][ T6176] BTRFS info (device loop2): using free space tree [ 191.791222][ T6176] BTRFS info (device loop2): enabling ssd optimizations [ 191.830877][ T6226] loop1: detected capacity change from 0 to 128 [ 191.896281][ T5110] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 191.911213][ T6226] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 191.922160][ T6226] ext4 filesystem being mounted at /150/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 192.001306][ T6232] loop3: detected capacity change from 0 to 128 [ 192.036893][ T6232] FAT-fs (loop3): Unrecognized mount option "ÿ" or missing value [ 192.435019][ T3641] EXT4-fs (loop1): unmounting filesystem. [ 192.482734][ T6242] tipc: Started in network mode [ 192.537859][ T6242] tipc: Node identity 1, cluster identity 4711 [ 192.576252][ T6242] tipc: Node number set to 1 [ 192.732890][ T6245] loop1: detected capacity change from 0 to 4096 [ 192.741593][ T6249] loop2: detected capacity change from 0 to 2048 [ 192.762806][ T6245] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 192.826558][ T6249] EXT4-fs error (device loop2): ext4_orphan_get:1422: comm syz.2.649: bad orphan inode 8192 [ 192.902704][ T6249] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 192.936470][ T6255] cgroup: fork rejected by pids controller in /syz4 [ 193.054891][ T26] audit: type=1800 audit(1858520845.053:49): pid=6249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.649" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 193.119402][ T26] audit: type=1800 audit(1858520845.083:50): pid=6249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.649" name="bus" dev="loop2" ino=18 res=0 errno=0 [ 193.283223][ T5110] EXT4-fs (loop2): unmounting filesystem. [ 193.442251][ T6268] loop2: detected capacity change from 0 to 512 [ 193.522955][ T6268] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.656: invalid block [ 193.591902][ T6274] loop1: detected capacity change from 0 to 64 [ 193.685151][ T6268] EXT4-fs (loop2): Remounting filesystem read-only [ 193.740725][ T6268] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.656: invalid indirect mapped block 4294967295 (level 1) [ 193.822663][ T6268] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.656: invalid indirect mapped block 4294967295 (level 1) [ 193.850963][ T3695] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.930987][ T6268] EXT4-fs (loop2): 2 truncates cleaned up [ 193.958096][ T6268] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 194.069216][ T5110] EXT4-fs (loop2): unmounting filesystem. [ 194.132051][ T3695] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.180064][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.186482][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.275619][ T3695] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.420280][ T26] audit: type=1326 audit(1858520846.413:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.2.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb9d79e79 code=0x7ffc0000 [ 194.456181][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 194.506381][ T26] audit: type=1326 audit(1858520846.473:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.2.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb9d79e79 code=0x7ffc0000 [ 194.507741][ T3695] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.552215][ T6294] "syz.3.668" (6294) uses obsolete ecb(arc4) skcipher [ 194.581332][ T26] audit: type=1326 audit(1858520846.473:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.2.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fcbb9d79e79 code=0x7ffc0000 [ 194.603591][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.622551][ T26] audit: type=1326 audit(1858520846.473:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.2.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb9d79e79 code=0x7ffc0000 [ 194.652367][ T26] audit: type=1326 audit(1858520846.473:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.2.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb9d79e79 code=0x7ffc0000 [ 194.670827][ T6296] loop2: detected capacity change from 0 to 1024 [ 194.693348][ T26] audit: type=1326 audit(1858520846.473:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.2.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fcbb9d79e79 code=0x7ffc0000 [ 194.733902][ T26] audit: type=1326 audit(1858520846.473:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.2.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb9d79e79 code=0x7ffc0000 [ 194.762565][ T3657] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 194.783513][ T3657] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 194.792746][ T27] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 194.806616][ T3657] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 194.814940][ T3657] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 194.827622][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.840358][ T3657] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 194.854016][ T3657] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 194.914233][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.970832][ T7] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 194.993713][ T26] audit: type=1326 audit(1858520846.473:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6289 comm="syz.2.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbb9d79e79 code=0x7ffc0000 [ 195.034987][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.067561][ T7] usb 1-1: config 0 descriptor?? [ 195.133977][ T33] hfsplus: b-tree write err: -5, ino 4 [ 195.226451][ T3688] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 195.246403][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.266340][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.276798][ T27] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.295368][ T27] usb 2-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 195.305032][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.318168][ T27] usb 2-1: config 0 descriptor?? [ 195.336341][ T6309] loop2: detected capacity change from 0 to 16 [ 195.382111][ T6309] erofs: (device loop2): mounted with root inode @ nid 36. [ 195.506114][ T3688] usb 4-1: Using ep0 maxpacket: 16 [ 195.543947][ T7] kovaplus 0003:1E7D:2D50.0007: collection stack underflow [ 195.558579][ T7] kovaplus 0003:1E7D:2D50.0007: item 0 1 0 12 parsing failed [ 195.571737][ T6318] loop2: detected capacity change from 0 to 128 [ 195.578961][ T7] kovaplus 0003:1E7D:2D50.0007: parse failed [ 195.585011][ T7] kovaplus: probe of 0003:1E7D:2D50.0007 failed with error -22 [ 195.634840][ T6318] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 195.648260][ T3688] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.661197][ T3688] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 195.683184][ T3688] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 195.694144][ T6318] ext4 filesystem being mounted at /55/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 195.702680][ T3688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.736053][ T3688] usb 4-1: config 0 descriptor?? [ 195.744941][ T7] usb 1-1: USB disconnect, device number 4 [ 195.802393][ T6297] chnl_net:caif_netlink_parms(): no params data found [ 195.811621][ T27] waltop 0003:172F:0038.0008: hidraw0: USB HID v0.00 Device [HID 172f:0038] on usb-dummy_hcd.1-1/input0 [ 195.874633][ T5110] EXT4-fs (loop2): unmounting filesystem. [ 195.975674][ T6323] loop2: detected capacity change from 0 to 256 [ 195.996947][ T6323] exfat: Deprecated parameter 'utf8' [ 196.002335][ T6323] exfat: Deprecated parameter 'namecase' [ 196.056444][ T6323] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 196.073316][ T6327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.088080][ T6327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.106339][ T1174] usb 2-1: USB disconnect, device number 8 [ 196.173380][ T6297] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.198328][ T6297] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.211940][ T6297] device bridge_slave_0 entered promiscuous mode [ 196.224528][ T6329] netlink: 652 bytes leftover after parsing attributes in process `syz.2.674'. [ 196.252553][ T3688] HID 045e:07da: Invalid code 65791 type 1 [ 196.263085][ T6297] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.280170][ T3688] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0009/input/input12 [ 196.294090][ T6297] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.330588][ T6297] device bridge_slave_1 entered promiscuous mode [ 196.346663][ T3688] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 196.500793][ T6297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.595591][ T6297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.753714][ T6297] team0: Port device team_slave_0 added [ 196.896163][ T3653] Bluetooth: hci0: command tx timeout [ 197.002334][ T6297] team0: Port device team_slave_1 added [ 197.159483][ T6300] loop3: detected capacity change from 0 to 512 [ 197.183292][ T6300] EXT4-fs: Ignoring removed bh option [ 197.216500][ T6300] EXT4-fs (loop3): invalid inodes per group: 0 [ 197.216500][ T6300] [ 197.275822][ T3688] usb 4-1: USB disconnect, device number 5 [ 197.363522][ T6297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.386008][ T6297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.457444][ T6297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.499404][ T6297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.510580][ T6297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.587659][ T6297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.639158][ T3695] device hsr_slave_0 left promiscuous mode [ 197.672249][ T6363] loop0: detected capacity change from 0 to 512 [ 197.678965][ T3695] device hsr_slave_1 left promiscuous mode [ 197.689387][ T3695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.699283][ T3695] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.710612][ T3695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.733174][ T3695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.769668][ T3695] device bridge_slave_1 left promiscuous mode [ 197.777500][ T3695] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.794739][ T6363] EXT4-fs (loop0): 1 orphan inode deleted [ 197.826345][ T6363] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 197.835459][ T6363] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038 (0x7fffffff) [ 197.857824][ T3695] device bridge_slave_0 left promiscuous mode [ 197.864213][ T3695] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.065514][ T6368] loop3: detected capacity change from 0 to 1024 [ 198.101317][ T6368] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 198.116059][ T3695] device veth1_macvtap left promiscuous mode [ 198.132618][ T3695] device veth0_macvtap left promiscuous mode [ 198.202695][ T3695] device veth1_vlan left promiscuous mode [ 198.234877][ T6371] binder: 6369:6371 ioctl c0306201 200001c0 returned -14 [ 198.235486][ T3695] device veth0_vlan left promiscuous mode [ 198.258976][ T4209] EXT4-fs (loop3): unmounting filesystem. [ 198.325093][ T5642] EXT4-fs (loop0): unmounting filesystem. [ 198.510812][ T6362] loop2: detected capacity change from 0 to 32768 [ 198.524315][ T6378] loop1: detected capacity change from 0 to 1024 [ 198.532142][ T6374] loop3: detected capacity change from 0 to 2048 [ 198.548044][ T6362] XFS: ikeep mount option is deprecated. [ 198.614609][ T6374] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 198.646081][ T6362] XFS (loop2): Mounting V5 Filesystem [ 198.691639][ T6378] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 198.798417][ T6362] XFS (loop2): Ending clean mount [ 198.814287][ T6362] XFS (loop2): Quotacheck needed: Please wait. [ 198.834204][ T6378] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 198.983903][ T3653] Bluetooth: hci0: command tx timeout [ 198.996249][ T6362] XFS (loop2): Quotacheck: Done. [ 199.034263][ T6376] loop0: detected capacity change from 0 to 32768 [ 199.090617][ T3641] EXT4-fs (loop1): unmounting filesystem. [ 199.115106][ T6376] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.687 (6376) [ 199.218360][ T6376] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 199.267740][ T6376] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 199.293167][ T6376] BTRFS info (device loop0): setting nodatacow, compression disabled [ 199.326108][ T6376] BTRFS info (device loop0): setting datacow [ 199.336584][ T6376] BTRFS info (device loop0): doing ref verification [ 199.353914][ T6376] BTRFS info (device loop0): force clearing of disk cache [ 199.364241][ T4209] UDF-fs: error (device loop3): udf_read_inode: (ino 1440) failed !bh [ 199.374201][ T6376] BTRFS info (device loop0): turning off barriers [ 199.384357][ T6376] BTRFS info (device loop0): enabling ssd optimizations [ 199.384939][ T4209] UDF-fs: error (device loop3): udf_read_inode: (ino 1440) failed !bh [ 199.414717][ T6376] BTRFS info (device loop0): using spread ssd allocation scheme [ 199.440883][ T6376] BTRFS info (device loop0): not using ssd optimizations [ 199.461494][ T6376] BTRFS info (device loop0): not using spread ssd allocation scheme [ 199.461634][ T5110] XFS (loop2): Unmounting Filesystem [ 199.495496][ T6376] BTRFS info (device loop0): using free space tree [ 199.556397][ T4580] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 199.820615][ T6376] BTRFS info (device loop0): rebuilding free space tree [ 199.916241][ T4580] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 200.086260][ T4580] usb 2-1: New USB device found, idVendor=eb1a, idProduct=2883, bcdDevice=61.5b [ 200.095358][ T4580] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.123995][ T4580] usb 2-1: Product: syz [ 200.134137][ T4580] usb 2-1: Manufacturer: syz [ 200.151076][ T4580] usb 2-1: SerialNumber: syz [ 200.165711][ T5642] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 200.174302][ T4580] usb 2-1: config 0 descriptor?? [ 200.315797][ T6413] loop2: detected capacity change from 0 to 2048 [ 200.433266][ T6413] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 200.574573][ T4853] kernel write not supported for file bpf-prog (pid: 4853 comm: kworker/1:11) [ 200.646191][ T4580] usb 2-1: USB disconnect, device number 9 [ 200.781133][ T6421] loop2: detected capacity change from 0 to 128 [ 200.856714][ T6421] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 200.874735][ T6421] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 200.987361][ T3695] team0 (unregistering): Port device team_slave_1 removed [ 201.018045][ T5110] EXT4-fs (loop2): unmounting filesystem. [ 201.055120][ T3695] team0 (unregistering): Port device team_slave_0 removed [ 201.062733][ T3653] Bluetooth: hci0: command tx timeout [ 201.166573][ T3695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.294635][ T3695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.338656][ T6429] loop2: detected capacity change from 0 to 164 [ 201.469527][ T6429] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 201.605367][ T6429] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 201.641400][ T6429] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 201.843355][ T6444] loop1: detected capacity change from 0 to 512 [ 201.896376][ T6444] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.702: casefold flag without casefold feature [ 201.942768][ T6444] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #12: comm syz.1.702: missing EA_INODE flag [ 201.959602][ T6444] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.702: error while reading EA inode 12 err=-117 [ 201.992074][ T6444] EXT4-fs (loop1): 1 orphan inode deleted [ 202.000082][ T6444] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 202.071552][ T3641] EXT4-fs (loop1): unmounting filesystem. [ 202.546616][ T3695] bond0 (unregistering): Released all slaves [ 202.791285][ T6297] device hsr_slave_0 entered promiscuous mode [ 202.806020][ T6297] device hsr_slave_1 entered promiscuous mode [ 202.812754][ T6297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.822260][ T6297] Cannot create hsr debugfs directory [ 203.136450][ T3653] Bluetooth: hci0: command tx timeout [ 203.676110][ T4580] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 203.936246][ T4580] usb 2-1: Using ep0 maxpacket: 8 [ 204.078908][ T3657] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 204.093271][ T3657] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 204.103330][ T3657] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 204.115161][ T3657] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 204.126898][ T3657] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 204.134276][ T3657] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.216239][ T4580] usb 2-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e [ 204.225469][ T4580] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.296837][ T4580] usb 2-1: Product: syz [ 204.301060][ T4580] usb 2-1: Manufacturer: syz [ 204.308644][ T6297] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 204.314157][ T4580] usb 2-1: SerialNumber: syz [ 204.347262][ T4580] usb 2-1: config 0 descriptor?? [ 204.360396][ T6297] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 204.394805][ T6297] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 204.408330][ T4580] gspca_main: spca500-2.14.0 probing 046d:0900 [ 204.467483][ T6297] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 204.871221][ T6297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.930862][ T6492] chnl_net:caif_netlink_parms(): no params data found [ 204.977791][ T6507] loop2: detected capacity change from 0 to 8192 [ 204.990748][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 204.999094][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.033139][ T6297] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.055553][ T6507] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 205.067690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 205.080103][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 205.088804][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.095925][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.104768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 205.114592][ T6507] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 205.124021][ T6507] REISERFS (device loop2): using ordered data mode [ 205.133016][ T6507] reiserfs: using flush barriers [ 205.146126][ T4580] gspca_spca500: reg write: error -71 [ 205.151885][ T6507] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 205.166295][ T4580] gspca_spca500: reg write: error -71 [ 205.176612][ T6507] REISERFS (device loop2): checking transaction log (loop2) [ 205.216170][ T3654] Bluetooth: hci0: command tx timeout [ 205.221748][ T4580] gspca_spca500: reg write: error -71 [ 205.276168][ T4580] gspca_spca500: reg write: error -71 [ 205.306452][ T4580] gspca_spca500: reg write: error -71 [ 205.324804][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 205.338320][ T4580] gspca_spca500: reg write: error -71 [ 205.364917][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 205.366358][ T4580] gspca_spca500: reg write: error -71 [ 205.408364][ T4580] gspca_spca500: reg write: error -71 [ 205.411649][ T3697] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.420979][ T3697] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.428407][ T4580] gspca_spca500: reg write: error -71 [ 205.434794][ T6507] REISERFS (device loop2): Using tea hash to sort names [ 205.446179][ T4580] gspca_spca500: reg write: error -71 [ 205.466164][ T4580] gspca_spca500: reg write: error -71 [ 205.466685][ T6507] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 205.496247][ T4580] gspca_spca500: reg write: error -71 [ 205.581444][ T4580] usb 2-1: USB disconnect, device number 10 [ 205.735876][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 205.759246][ T6492] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.776902][ T6492] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.821506][ T6492] device bridge_slave_0 entered promiscuous mode [ 205.903933][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 205.927144][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 205.972027][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 206.024843][ T6492] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.045610][ T6492] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.076441][ T6492] device bridge_slave_1 entered promiscuous mode [ 206.185394][ T3653] Bluetooth: hci4: command tx timeout [ 206.215892][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 206.236641][ T6529] loop1: detected capacity change from 0 to 8192 [ 206.269882][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 206.291798][ T6533] loop0: detected capacity change from 0 to 128 [ 206.314479][ T6529] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 206.338321][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 206.397309][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 206.421840][ T6529] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 206.446858][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 206.466106][ T6529] REISERFS (device loop1): using ordered data mode [ 206.472815][ T6529] reiserfs: using flush barriers [ 206.489099][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 206.516788][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 206.526899][ T6529] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 206.559078][ T6297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 206.602760][ T6529] REISERFS (device loop1): checking transaction log (loop1) [ 206.603327][ T6492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.664957][ T6529] REISERFS (device loop1): Using r5 hash to sort names [ 206.696512][ T6492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.731810][ T6529] reiserfs: enabling write barrier flush mode [ 206.782585][ T6529] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 206.981725][ T6492] team0: Port device team_slave_0 added [ 207.014046][ T6492] team0: Port device team_slave_1 added [ 207.188076][ T6492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.226683][ T6492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.274826][ T6551] loop2: detected capacity change from 0 to 1024 [ 207.328913][ T6492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.379754][ T6492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.405018][ T6551] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 207.425543][ T6492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.492938][ T6492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.564613][ T5110] EXT4-fs (loop2): unmounting filesystem. [ 207.772865][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 207.793020][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 207.849160][ T6492] device hsr_slave_0 entered promiscuous mode [ 207.891522][ T6492] device hsr_slave_1 entered promiscuous mode [ 207.926817][ T6492] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.934442][ T6492] Cannot create hsr debugfs directory [ 208.003954][ T6297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.178238][ T6579] netlink: 'syz.1.736': attribute type 3 has an invalid length. [ 208.209562][ T6579] netlink: 105116 bytes leftover after parsing attributes in process `syz.1.736'. [ 208.246046][ T6583] overlayfs: failed to decode file handle (len=2, type=248, flags=0, err=-22) [ 208.265010][ T3653] Bluetooth: hci4: command tx timeout [ 208.306713][ T3695] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.526790][ T6594] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎsŧ‘̼§6 [ 208.547811][ T3695] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.715521][ T3695] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.881199][ T3695] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.086509][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 209.107577][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 209.122737][ T6613] loop1: detected capacity change from 0 to 512 [ 209.198853][ T6613] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 209.241355][ T6297] device veth0_vlan entered promiscuous mode [ 209.253300][ T6613] ext4 filesystem being mounted at /173/file1 supports timestamps until 2038 (0x7fffffff) [ 209.295004][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 209.340072][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 209.407259][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.453882][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 209.484275][ T6613] ------------[ cut here ]------------ [ 209.489787][ T6613] Looking for class "&ei->i_data_sem" with key init_once.__key.785, but found a different class "&ei->i_data_sem" with the same key [ 209.503480][ T6613] WARNING: CPU: 0 PID: 6613 at kernel/locking/lockdep.c:933 look_up_lock_class+0xc2/0x140 [ 209.513417][ T6613] Modules linked in: [ 209.513674][ T6610] loop0: detected capacity change from 0 to 32768 [ 209.517312][ T6613] CPU: 0 PID: 6613 Comm: syz.1.746 Not tainted 6.1.106-syzkaller #0 [ 209.517336][ T6613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 209.517348][ T6613] RIP: 0010:look_up_lock_class+0xc2/0x140 [ 209.547561][ T6613] Code: 8b 16 48 c7 c0 20 b1 5f 90 48 39 c2 74 46 f6 05 ee 0f e0 03 01 75 3d c6 05 e5 0f e0 03 01 48 c7 c7 00 23 0c 8b e8 8e 21 ad f6 <0f> 0b eb 26 e8 e5 67 90 f9 48 c7 c7 40 22 0c 8b 89 de e8 07 f8 fd [ 209.567220][ T6613] RSP: 0018:ffffc9000321f410 EFLAGS: 00010046 [ 209.573321][ T6613] RAX: 9ef0830737bb9e00 RBX: ffffffff904d6d20 RCX: 0000000000040000 [ 209.581426][ T6613] RDX: ffffc90004939000 RSI: 0000000000005d43 RDI: 0000000000005d44 [ 209.589431][ T6613] RBP: ffffc9000321f510 R08: ffffffff8152940e R09: ffffed1017304f1c [ 209.596819][ T6610] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.745 (6610) [ 209.597408][ T6613] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 209.597428][ T6613] R13: 1ffff92000643e90 R14: ffff888074f11698 R15: ffffffff920bff41 [ 209.597445][ T6613] FS: 00007f6b4bdf26c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 209.634372][ T6613] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 209.640966][ T6613] CR2: 000000002000f000 CR3: 00000000214e3000 CR4: 00000000003506f0 [ 209.648945][ T6613] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 209.656921][ T6613] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 209.664892][ T6613] Call Trace: [ 209.668170][ T6613] [ 209.671103][ T6613] ? __warn+0x15a/0x520 [ 209.675267][ T6613] ? look_up_lock_class+0xc2/0x140 [ 209.680385][ T6613] ? report_bug+0x2af/0x500 [ 209.684901][ T6613] ? look_up_lock_class+0xc2/0x140 [ 209.690026][ T6613] ? handle_bug+0x3d/0x70 [ 209.694373][ T6613] ? exc_invalid_op+0x16/0x40 [ 209.699064][ T6613] ? asm_exc_invalid_op+0x16/0x20 [ 209.704097][ T6613] ? __warn_printk+0x28e/0x350 [ 209.708865][ T6613] ? look_up_lock_class+0xc2/0x140 [ 209.713980][ T6613] register_lock_class+0x100/0x990 [ 209.719126][ T6613] ? is_dynamic_key+0x260/0x260 [ 209.723983][ T6613] ? mark_lock+0x9a/0x340 [ 209.728347][ T6613] __lock_acquire+0xd3/0x1f80 [ 209.733056][ T6613] lock_acquire+0x1f8/0x5a0 [ 209.737568][ T6613] ? ext4_move_extents+0x3a0/0xe30 [ 209.742685][ T6613] ? read_lock_is_recursive+0x10/0x10 [ 209.748088][ T6613] ? __might_sleep+0xb0/0xb0 [ 209.752679][ T6613] ? rwsem_write_trylock+0x166/0x210 [ 209.757970][ T6613] ? inode_owner_or_capable+0x210/0x210 [ 209.763528][ T6613] ? clear_nonspinnable+0x60/0x60 [ 209.768566][ T6613] down_write_nested+0x39/0x60 [ 209.773336][ T6613] ? ext4_move_extents+0x3a0/0xe30 [ 209.778474][ T6613] ext4_move_extents+0x3a0/0xe30 [ 209.783419][ T6613] ? rcu_read_lock_any_held+0xb3/0x160 [ 209.788888][ T6613] ? ext4_double_up_write_data_sem+0x30/0x30 [ 209.794880][ T6613] ext4_ioctl+0x3a8d/0x5f60 [ 209.799390][ T6613] ? kasan_set_track+0x4b/0x70 [ 209.804168][ T6613] ? security_file_ioctl+0x6d/0xa0 [ 209.809279][ T6613] ? __se_sys_ioctl+0x47/0x160 [ 209.814056][ T6613] ? do_syscall_64+0x3b/0xb0 [ 209.818664][ T6613] ? ext4_fileattr_set+0x1770/0x1770 [ 209.823964][ T6613] ? do_vfs_ioctl+0x1ab2/0x2a90 [ 209.828817][ T6613] ? __x64_compat_sys_ioctl+0x80/0x80 [ 209.834190][ T6613] ? __lock_acquire+0x1f80/0x1f80 [ 209.839227][ T6613] ? lockdep_hardirqs_on+0x94/0x130 [ 209.844435][ T6613] ? __kmem_cache_free+0x25c/0x3c0 [ 209.849554][ T6613] ? tomoyo_path_number_perm+0x61b/0x7f0 [ 209.855190][ T6613] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 209.860825][ T6613] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 209.866464][ T6613] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 209.871962][ T6613] ? __fget_files+0x28/0x4a0 [ 209.876567][ T6613] ? __fget_files+0x28/0x4a0 [ 209.881155][ T6613] ? __fget_files+0x435/0x4a0 [ 209.885831][ T6613] ? __fget_files+0x28/0x4a0 [ 209.890426][ T6613] ? bpf_lsm_file_ioctl+0x5/0x10 [ 209.895366][ T6613] ? security_file_ioctl+0x7d/0xa0 [ 209.900478][ T6613] ? ext4_fileattr_set+0x1770/0x1770 [ 209.905771][ T6613] __se_sys_ioctl+0xf1/0x160 [ 209.910374][ T6613] do_syscall_64+0x3b/0xb0 [ 209.914800][ T6613] ? clear_bhb_loop+0x45/0xa0 [ 209.919488][ T6613] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 209.925432][ T6613] RIP: 0033:0x7f6b4af79e79 [ 209.929858][ T6613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 209.949469][ T6613] RSP: 002b:00007f6b4bdf2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 209.957886][ T6613] RAX: ffffffffffffffda RBX: 00007f6b4b115f80 RCX: 00007f6b4af79e79 [ 209.965859][ T6613] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000005 [ 209.973861][ T6613] RBP: 00007f6b4afe7916 R08: 0000000000000000 R09: 0000000000000000 [ 209.981833][ T6613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 209.989804][ T6613] R13: 0000000000000000 R14: 00007f6b4b115f80 R15: 00007fffded34f38 [ 209.997785][ T6613] [ 210.000805][ T6613] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 210.008088][ T6613] CPU: 0 PID: 6613 Comm: syz.1.746 Not tainted 6.1.106-syzkaller #0 [ 210.016065][ T6613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 210.026120][ T6613] Call Trace: [ 210.029398][ T6613] [ 210.032327][ T6613] dump_stack_lvl+0x1e3/0x2cb [ 210.037021][ T6613] ? nf_tcp_handle_invalid+0x642/0x642 [ 210.042497][ T6613] ? panic+0x764/0x764 [ 210.046570][ T6613] ? vscnprintf+0x59/0x80 [ 210.050939][ T6613] panic+0x318/0x764 [ 210.054838][ T6613] ? __warn+0x169/0x520 [ 210.059015][ T6613] ? memcpy_page_flushcache+0xfc/0xfc [ 210.064403][ T6613] __warn+0x348/0x520 [ 210.068474][ T6613] ? look_up_lock_class+0xc2/0x140 [ 210.073590][ T6613] report_bug+0x2af/0x500 [ 210.077930][ T6613] ? look_up_lock_class+0xc2/0x140 [ 210.083046][ T6613] handle_bug+0x3d/0x70 [ 210.087211][ T6613] exc_invalid_op+0x16/0x40 [ 210.091753][ T6613] asm_exc_invalid_op+0x16/0x20 [ 210.096615][ T6613] RIP: 0010:look_up_lock_class+0xc2/0x140 [ 210.102340][ T6613] Code: 8b 16 48 c7 c0 20 b1 5f 90 48 39 c2 74 46 f6 05 ee 0f e0 03 01 75 3d c6 05 e5 0f e0 03 01 48 c7 c7 00 23 0c 8b e8 8e 21 ad f6 <0f> 0b eb 26 e8 e5 67 90 f9 48 c7 c7 40 22 0c 8b 89 de e8 07 f8 fd [ 210.121952][ T6613] RSP: 0018:ffffc9000321f410 EFLAGS: 00010046 [ 210.128027][ T6613] RAX: 9ef0830737bb9e00 RBX: ffffffff904d6d20 RCX: 0000000000040000 [ 210.136009][ T6613] RDX: ffffc90004939000 RSI: 0000000000005d43 RDI: 0000000000005d44 [ 210.144083][ T6613] RBP: ffffc9000321f510 R08: ffffffff8152940e R09: ffffed1017304f1c [ 210.152074][ T6613] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001 [ 210.160071][ T6613] R13: 1ffff92000643e90 R14: ffff888074f11698 R15: ffffffff920bff41 [ 210.168087][ T6613] ? __warn_printk+0x28e/0x350 [ 210.172862][ T6613] register_lock_class+0x100/0x990 [ 210.177987][ T6613] ? is_dynamic_key+0x260/0x260 [ 210.183028][ T6613] ? mark_lock+0x9a/0x340 [ 210.187369][ T6613] __lock_acquire+0xd3/0x1f80 [ 210.192073][ T6613] lock_acquire+0x1f8/0x5a0 [ 210.196584][ T6613] ? ext4_move_extents+0x3a0/0xe30 [ 210.201705][ T6613] ? read_lock_is_recursive+0x10/0x10 [ 210.207086][ T6613] ? __might_sleep+0xb0/0xb0 [ 210.211677][ T6613] ? rwsem_write_trylock+0x166/0x210 [ 210.216981][ T6613] ? inode_owner_or_capable+0x210/0x210 [ 210.222544][ T6613] ? clear_nonspinnable+0x60/0x60 [ 210.227580][ T6613] down_write_nested+0x39/0x60 [ 210.232348][ T6613] ? ext4_move_extents+0x3a0/0xe30 [ 210.237463][ T6613] ext4_move_extents+0x3a0/0xe30 [ 210.242410][ T6613] ? rcu_read_lock_any_held+0xb3/0x160 [ 210.247877][ T6613] ? ext4_double_up_write_data_sem+0x30/0x30 [ 210.253870][ T6613] ext4_ioctl+0x3a8d/0x5f60 [ 210.258380][ T6613] ? kasan_set_track+0x4b/0x70 [ 210.263152][ T6613] ? security_file_ioctl+0x6d/0xa0 [ 210.268264][ T6613] ? __se_sys_ioctl+0x47/0x160 [ 210.273037][ T6613] ? do_syscall_64+0x3b/0xb0 [ 210.277645][ T6613] ? ext4_fileattr_set+0x1770/0x1770 [ 210.282946][ T6613] ? do_vfs_ioctl+0x1ab2/0x2a90 [ 210.287797][ T6613] ? __x64_compat_sys_ioctl+0x80/0x80 [ 210.293171][ T6613] ? __lock_acquire+0x1f80/0x1f80 [ 210.298204][ T6613] ? lockdep_hardirqs_on+0x94/0x130 [ 210.303407][ T6613] ? __kmem_cache_free+0x25c/0x3c0 [ 210.308526][ T6613] ? tomoyo_path_number_perm+0x61b/0x7f0 [ 210.314190][ T6613] ? tomoyo_path_number_perm+0x68a/0x7f0 [ 210.319851][ T6613] ? tomoyo_path_number_perm+0x1f2/0x7f0 [ 210.325512][ T6613] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 210.330991][ T6613] ? __fget_files+0x28/0x4a0 [ 210.335600][ T6613] ? __fget_files+0x28/0x4a0 [ 210.340194][ T6613] ? __fget_files+0x435/0x4a0 [ 210.344880][ T6613] ? __fget_files+0x28/0x4a0 [ 210.349475][ T6613] ? bpf_lsm_file_ioctl+0x5/0x10 [ 210.354416][ T6613] ? security_file_ioctl+0x7d/0xa0 [ 210.359530][ T6613] ? ext4_fileattr_set+0x1770/0x1770 [ 210.364822][ T6613] __se_sys_ioctl+0xf1/0x160 [ 210.369425][ T6613] do_syscall_64+0x3b/0xb0 [ 210.373857][ T6613] ? clear_bhb_loop+0x45/0xa0 [ 210.378546][ T6613] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 210.384446][ T6613] RIP: 0033:0x7f6b4af79e79 [ 210.388863][ T6613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.408471][ T6613] RSP: 002b:00007f6b4bdf2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 210.416886][ T6613] RAX: ffffffffffffffda RBX: 00007f6b4b115f80 RCX: 00007f6b4af79e79 [ 210.424870][ T6613] RDX: 0000000020000040 RSI: 00000000c028660f RDI: 0000000000000005 [ 210.432844][ T6613] RBP: 00007f6b4afe7916 R08: 0000000000000000 R09: 0000000000000000 [ 210.440831][ T6613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 210.448813][ T6613] R13: 0000000000000000 R14: 00007f6b4b115f80 R15: 00007fffded34f38 [ 210.456806][ T6613] [ 210.460140][ T6613] Kernel Offset: disabled [ 210.464469][ T6613] Rebooting in 86400 seconds..