last executing test programs: 55.897995909s ago: executing program 3 (id=199): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='attr/keycreate\x00') copy_file_range(r0, 0x0, r0, 0x0, 0x10001, 0x0) 55.771914562s ago: executing program 3 (id=201): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)={0x64, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0xfffffffffffffe50, 0xb, 0x4}, {0x6, 0x16, 0xb}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x80}, {0x8, 0xb, 0x6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 55.582677795s ago: executing program 3 (id=203): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, 0x1c) 55.452621628s ago: executing program 3 (id=204): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f00000000c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@lazytime}, {@init_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0xb}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c}) 55.010015847s ago: executing program 3 (id=209): openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x300}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b07"], 0xec) 53.862539449s ago: executing program 3 (id=222): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000004000000000000100000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) 53.499289236s ago: executing program 32 (id=222): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000030000005800018044000400200001000a000000000000000000000000000000004000000000000100000000200002000a00000000000000fe8000000000000000000000000000bb000000000d0001007564703a73"], 0x6c}}, 0x0) 6.19968127s ago: executing program 1 (id=589): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000018c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7b5, 0x312, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000640)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\f'], 0x0}, 0x0) 4.66804145s ago: executing program 4 (id=601): r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x2e, 0x2007, @fd, 0xfffffffffffffffd, 0x0}) io_uring_enter(r0, 0x54, 0x4, 0xf, 0x0, 0x18) 4.496162203s ago: executing program 4 (id=604): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x10, 0x5, &(0x7f0000000800)=ANY=[@ANYBLOB="180000000000000000000000fcffffff7910000000000000c3704c000000000095"], &(0x7f0000000100)='GPL\x00', 0x2, 0xb, &(0x7f00000002c0)=""/177}, 0x94) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2d}, 0x12) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f00000002c0)}, 0x10) 4.396856035s ago: executing program 4 (id=605): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2e22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0xb}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xa}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0x2, "c8dd1ffd"}, @main=@item_012={0x0, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x7, "0100"}]}}, 0x0}, 0x0) 4.264648608s ago: executing program 1 (id=609): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f0000001080)={{0xc, @private=0xa010101, 0x2, 0x0, 'fo\x00', 0x0, 0x5, 0x2000000}, {@broadcast, 0x2, 0x2000, 0x7ffffff, 0x0, 0x20100}}, 0x44) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000040)) 4.11044039s ago: executing program 1 (id=611): r0 = add_key$user(&(0x7f0000000080), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='Q', 0x1, 0xffffffffffffffff) r1 = add_key$user(&(0x7f0000000280), &(0x7f0000002700)={'syz', 0x3}, &(0x7f0000002740)="9a82b41d28cc977db6423f7174abe35ec1f5e9ced1dbf2c674a12192b84c8ca15ac1f3deef05cbda4d3a926440b5c99a1c8d9ed23e213220c79c27767e1dc54f2cbf47ed78682d9fc4f517e6868cbe37fec1886d42ccc9dbec439a6ade9568add6a5682c2f944f5ed04fd2b39b10ff149bfe4facadc10aa6cdc05bc6b36aa04bb08825f1277d180b5add70a54b1f0dd1821ddab761088dabca0c57fac9029ab76471afe3d6aa1430655ee9272f67108f7aabec3edc43b0de489292545003bcae", 0xc0, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000003740)={r0, r1, r0}, &(0x7f0000003780)=""/194, 0xc2, &(0x7f00000038c0)={&(0x7f0000003880)={'sm3\x00'}}) 3.936419804s ago: executing program 1 (id=614): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f00000000c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@lazytime}, {@init_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0xb}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c}) 3.492861452s ago: executing program 1 (id=619): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000d0000000000000000000000850000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f00000001c0)="581f9239658ea95ed371ea3dd361", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 3.466554573s ago: executing program 0 (id=620): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20009805}, 0x4000080) 3.349214786s ago: executing program 0 (id=622): openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x300}], 0x2, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="043e110b07"], 0xec) 2.897827784s ago: executing program 1 (id=623): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) 2.62107359s ago: executing program 33 (id=623): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x2000000) 2.485613352s ago: executing program 4 (id=626): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_usb_connect(0x0, 0x43, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000043a5aa40801b96e3b1a7000000010902120001000000000904"], 0x0) 2.341021965s ago: executing program 0 (id=627): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x54, r1, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev}}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @dev}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @loopback}]}, 0x54}, 0x2, 0x34005}, 0x0) 2.009110081s ago: executing program 2 (id=629): r0 = memfd_secret(0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200002, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) 2.005456501s ago: executing program 0 (id=637): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f00000000c0)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@lazytime}, {@init_itable}, {@max_batch_time={'max_batch_time', 0x3d, 0xb}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c}) 1.386956143s ago: executing program 0 (id=630): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)={0x38, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044815}, 0x0) 1.386692473s ago: executing program 2 (id=631): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={0x20, 0xa, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040800}, 0x40880) 1.257370226s ago: executing program 2 (id=632): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000002c0)={0x8400001e, 0x0, 0x0, 0xfffffffd}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81"], 0x30}}, 0x0) 957.729512ms ago: executing program 4 (id=634): futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x5, 0x100000, 0x0, &(0x7f0000000000), 0x3000000) 947.064042ms ago: executing program 2 (id=635): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x3e) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c0000000000", @ANYRES8=0x0, @ANYRES32=r0], 0x30}}, 0x0) 745.813856ms ago: executing program 0 (id=636): prctl$PR_SET_NAME(0xf, &(0x7f0000001600)='\xf6\x97@\x1b\xcd\xb6dx\xe6\x9b#\xca\xacI\x83\xd1\xbe\x80\xa0\r\x10\xdbBL\xf8\x93>\"\x85i\x8a(\xc8\x05\x99\xdaZ\xda[Z\b\x00\x00\x00\xf2g\xbeH\x1d$k\xbd\xe7l\xeaHE\xec\x13\xf7/\xcd\xeb\xe7\x8b\xeaa\n\x11\xdc\xb8\xf0\x7f\x16\xf1>\xac\xe3\x94n\xbe\xa0\xd9%Z\xe5\xb1\x13e3W<\xac\xff\xab\xecK\x06\x9f\xd2\xde\xa4\xcd[\x12\xdb\x9e}\x0f7\x04<\xcd`\xfd\x9f\xfa\xa4\x86\xc8\xfa(\xde\xb2A\xb6\x16[\xc2\x9e\xe7\x875[\x87\x99\xd5Z\xbe\x01]DB\x14{\xecu\xa0jZa\xc4\xf0%\xbflQ\xbd\xcb`)\x04\x9e\b\xa8X\x191y\xaca\x127Gr\x99!\xff\xacgq&:\x95\xd8f\xe4\xd9\x9b\x12\xbb\\N2\x90\xda7{\xf0KxS\x8ci') r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 457.693331ms ago: executing program 34 (id=636): prctl$PR_SET_NAME(0xf, &(0x7f0000001600)='\xf6\x97@\x1b\xcd\xb6dx\xe6\x9b#\xca\xacI\x83\xd1\xbe\x80\xa0\r\x10\xdbBL\xf8\x93>\"\x85i\x8a(\xc8\x05\x99\xdaZ\xda[Z\b\x00\x00\x00\xf2g\xbeH\x1d$k\xbd\xe7l\xeaHE\xec\x13\xf7/\xcd\xeb\xe7\x8b\xeaa\n\x11\xdc\xb8\xf0\x7f\x16\xf1>\xac\xe3\x94n\xbe\xa0\xd9%Z\xe5\xb1\x13e3W<\xac\xff\xab\xecK\x06\x9f\xd2\xde\xa4\xcd[\x12\xdb\x9e}\x0f7\x04<\xcd`\xfd\x9f\xfa\xa4\x86\xc8\xfa(\xde\xb2A\xb6\x16[\xc2\x9e\xe7\x875[\x87\x99\xd5Z\xbe\x01]DB\x14{\xecu\xa0jZa\xc4\xf0%\xbflQ\xbd\xcb`)\x04\x9e\b\xa8X\x191y\xaca\x127Gr\x99!\xff\xacgq&:\x95\xd8f\xe4\xd9\x9b\x12\xbb\\N2\x90\xda7{\xf0KxS\x8ci') r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) 450.975932ms ago: executing program 2 (id=639): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x15, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x6, 0x1, 0xb, 0xa, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x9}, {}, {}, {0x18, 0x6, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.89733ms ago: executing program 4 (id=640): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, r0, 0x4}, 0x38) 0s ago: executing program 2 (id=641): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000000c0)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x0, 0x200}, 0x3c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.194' (ED25519) to the list of known hosts. syzkaller login: [ 81.056413][ T5775] cgroup: Unknown subsys name 'net' [ 81.253491][ T5775] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.957579][ T5775] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.610364][ T5791] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.629849][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.638286][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.640987][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.648187][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.653284][ T5798] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.661498][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.667869][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.676565][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.689250][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.689993][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.697234][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.712233][ T5792] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.719888][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.729861][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.737916][ T5792] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.745607][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.754593][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.760028][ T5796] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.763082][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.782462][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.796085][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.804529][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.812205][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.378874][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 85.390357][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 85.467597][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 85.522782][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 85.613525][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.621933][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.629660][ T5784] bridge_slave_0: entered allmulticast mode [ 85.637663][ T5784] bridge_slave_0: entered promiscuous mode [ 85.682634][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.690107][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.697515][ T5784] bridge_slave_1: entered allmulticast mode [ 85.705210][ T5784] bridge_slave_1: entered promiscuous mode [ 85.723448][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.730755][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.738066][ T5787] bridge_slave_0: entered allmulticast mode [ 85.745223][ T5787] bridge_slave_0: entered promiscuous mode [ 85.800744][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.807987][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.815302][ T5787] bridge_slave_1: entered allmulticast mode [ 85.822521][ T5787] bridge_slave_1: entered promiscuous mode [ 85.881371][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.889251][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.897690][ T5786] bridge_slave_0: entered allmulticast mode [ 85.904926][ T5786] bridge_slave_0: entered promiscuous mode [ 85.924044][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.931263][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.938967][ T5785] bridge_slave_0: entered allmulticast mode [ 85.946197][ T5785] bridge_slave_0: entered promiscuous mode [ 85.958149][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.967718][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.975614][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.982917][ T5786] bridge_slave_1: entered allmulticast mode [ 85.990114][ T5786] bridge_slave_1: entered promiscuous mode [ 86.012653][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.022218][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.030110][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.037450][ T5785] bridge_slave_1: entered allmulticast mode [ 86.044638][ T5785] bridge_slave_1: entered promiscuous mode [ 86.053339][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.078410][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.126705][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.176151][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.188674][ T5787] team0: Port device team_slave_0 added [ 86.198707][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.212150][ T5784] team0: Port device team_slave_0 added [ 86.239023][ T5787] team0: Port device team_slave_1 added [ 86.258525][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.282282][ T5784] team0: Port device team_slave_1 added [ 86.330239][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.337364][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.364062][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.392969][ T5785] team0: Port device team_slave_0 added [ 86.416488][ T5786] team0: Port device team_slave_0 added [ 86.423156][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.430225][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.456438][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.468973][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.476290][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.502310][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.549866][ T5785] team0: Port device team_slave_1 added [ 86.557956][ T5786] team0: Port device team_slave_1 added [ 86.565237][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.572210][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.598440][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.623223][ T5787] hsr_slave_0: entered promiscuous mode [ 86.630039][ T5787] hsr_slave_1: entered promiscuous mode [ 86.713713][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.721212][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.748333][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.777148][ T5784] hsr_slave_0: entered promiscuous mode [ 86.783736][ T5784] hsr_slave_1: entered promiscuous mode [ 86.790151][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.798881][ T5784] Cannot create hsr debugfs directory [ 86.806348][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.813324][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.845283][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.846022][ T5794] Bluetooth: hci0: command tx timeout [ 86.856401][ T5792] Bluetooth: hci1: command tx timeout [ 86.871109][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.878236][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.904616][ T5792] Bluetooth: hci3: command tx timeout [ 86.904643][ T5794] Bluetooth: hci2: command tx timeout [ 86.910250][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.939597][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.946740][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.973406][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.119176][ T5786] hsr_slave_0: entered promiscuous mode [ 87.128714][ T5786] hsr_slave_1: entered promiscuous mode [ 87.138984][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.148549][ T5786] Cannot create hsr debugfs directory [ 87.231649][ T5785] hsr_slave_0: entered promiscuous mode [ 87.243654][ T5785] hsr_slave_1: entered promiscuous mode [ 87.250923][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.263557][ T5785] Cannot create hsr debugfs directory [ 87.615580][ T5787] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.633269][ T5787] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.676739][ T5787] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.733221][ T5787] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.816088][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.829049][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.847467][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.858780][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.966681][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.979617][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.991155][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.006082][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.112070][ T5785] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.122229][ T5785] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.158595][ T5785] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.171929][ T5785] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.241125][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.289813][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.310667][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.334230][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.378585][ T1305] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.385999][ T1305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.399032][ T1305] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.406231][ T1305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.417886][ T1305] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.425483][ T1305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.441080][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.448281][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.555784][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.590759][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.631513][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.670286][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.677499][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.712372][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.719795][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.755189][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.818775][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.826039][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.837387][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.844626][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.905248][ T5792] Bluetooth: hci0: command tx timeout [ 88.907117][ T5794] Bluetooth: hci1: command tx timeout [ 88.984834][ T5794] Bluetooth: hci3: command tx timeout [ 88.985938][ T5792] Bluetooth: hci2: command tx timeout [ 89.111523][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.260359][ T5784] veth0_vlan: entered promiscuous mode [ 89.279435][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.301658][ T5784] veth1_vlan: entered promiscuous mode [ 89.420937][ T5784] veth0_macvtap: entered promiscuous mode [ 89.444025][ T5787] veth0_vlan: entered promiscuous mode [ 89.459649][ T5784] veth1_macvtap: entered promiscuous mode [ 89.488528][ T5787] veth1_vlan: entered promiscuous mode [ 89.551188][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.574771][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.596301][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.614115][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.622721][ T5784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.632392][ T5784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.645432][ T5784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.654174][ T5784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.706042][ T5787] veth0_macvtap: entered promiscuous mode [ 89.743191][ T5787] veth1_macvtap: entered promiscuous mode [ 89.837022][ T5785] veth0_vlan: entered promiscuous mode [ 89.858764][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.870798][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.887007][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.900268][ T5785] veth1_vlan: entered promiscuous mode [ 89.911873][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.923814][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.932726][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.935144][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.956088][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.017603][ T5787] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.027884][ T5787] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.037422][ T5787] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.047595][ T5787] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.089165][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.093052][ T5785] veth0_macvtap: entered promiscuous mode [ 90.103079][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.118633][ T5786] veth0_vlan: entered promiscuous mode [ 90.142776][ T5785] veth1_macvtap: entered promiscuous mode [ 90.162878][ T5786] veth1_vlan: entered promiscuous mode [ 90.267765][ T1322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.290151][ T1322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.309848][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.337245][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.349042][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.360022][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.372465][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.398320][ T5786] veth0_macvtap: entered promiscuous mode [ 90.409184][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.419985][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.430134][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.443904][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.455713][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.475513][ T5786] veth1_macvtap: entered promiscuous mode [ 90.513873][ T5785] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.530167][ T5785] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.539664][ T5785] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.552698][ T5785] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.573622][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.587079][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.598684][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.609445][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.619753][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.630570][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.647865][ T5882] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 90.649871][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.681552][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.700520][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.709970][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.720893][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.731569][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.742196][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.753557][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.767201][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.779699][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.807730][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.818123][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.830625][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.839708][ T5786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.985058][ T5792] Bluetooth: hci1: command tx timeout [ 90.985582][ T5794] Bluetooth: hci0: command tx timeout [ 91.065216][ T5794] Bluetooth: hci3: command tx timeout [ 91.065279][ T5792] Bluetooth: hci2: command tx timeout [ 91.092931][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.126927][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.213901][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.236288][ T5890] syz.2.7[5890]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 91.255743][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.296036][ T5890] loop2: detected capacity change from 0 to 128 [ 91.349173][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.371784][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.475432][ T1103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.492727][ T1103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.932903][ T5906] loop1: detected capacity change from 0 to 1024 [ 91.967544][ T5905] loop0: detected capacity change from 0 to 2048 [ 91.979368][ T5906] EXT4-fs: Ignoring removed nobh option [ 92.051718][ T5906] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869) [ 92.055126][ T5905] UDF-fs: error (device loop0): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 92.114017][ T5906] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 92.120613][ T5905] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 92.139187][ T8] cfg80211: failed to load regulatory.db [ 92.166686][ T5906] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 92.176526][ T5905] UDF-fs: Scanning with blocksize 512 failed [ 92.215137][ T5905] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.572277][ T5913] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17'. [ 92.648666][ T5916] loop2: detected capacity change from 0 to 256 [ 92.666159][ T5916] exfat: Deprecated parameter 'namecase' [ 92.699686][ T5916] exfat: Deprecated parameter 'namecase' [ 92.769360][ T5916] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 92.865483][ T5916] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 93.065650][ T5792] Bluetooth: hci1: command tx timeout [ 93.065667][ T5794] Bluetooth: hci0: command tx timeout [ 93.144664][ T5794] Bluetooth: hci3: command tx timeout [ 93.150170][ T5792] Bluetooth: hci2: command tx timeout [ 93.334802][ T5931] loop2: detected capacity change from 0 to 256 [ 93.344902][ T5858] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.381187][ T5929] loop0: detected capacity change from 0 to 256 [ 93.565914][ T5858] usb 4-1: Using ep0 maxpacket: 16 [ 93.590731][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.604903][ T5929] FAT-fs (loop0): Directory bread(block 64) failed [ 93.611772][ T5929] FAT-fs (loop0): Directory bread(block 65) failed [ 93.639467][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.654799][ T5929] FAT-fs (loop0): Directory bread(block 66) failed [ 93.672296][ T5858] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 93.686399][ T5929] FAT-fs (loop0): Directory bread(block 67) failed [ 93.701378][ T5929] FAT-fs (loop0): Directory bread(block 68) failed [ 93.710093][ T5858] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 93.724582][ T5929] FAT-fs (loop0): Directory bread(block 69) failed [ 93.725289][ T5933] loop2: detected capacity change from 0 to 128 [ 93.732337][ T5929] FAT-fs (loop0): Directory bread(block 70) failed [ 93.748138][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.753997][ T5923] loop1: detected capacity change from 0 to 32768 [ 93.763287][ T5858] usb 4-1: config 0 descriptor?? [ 93.770791][ T5929] FAT-fs (loop0): Directory bread(block 71) failed [ 93.778137][ T5929] FAT-fs (loop0): Directory bread(block 72) failed [ 93.782090][ T5933] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 93.825036][ T5929] FAT-fs (loop0): Directory bread(block 73) failed [ 93.862387][ T5933] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 93.915846][ T5923] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 94.101537][ T5923] XFS (loop1): Ending clean mount [ 94.111724][ T1103] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 94.232471][ T5943] capability: warning: `syz.0.27' uses deprecated v2 capabilities in a way that may be insecure [ 94.261413][ T5858] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 94.330572][ T5858] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 94.349111][ T5785] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 94.392649][ T5858] microsoft 0003:045E:07DA.0001: no inputs found [ 94.427936][ T5858] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 94.518615][ T5858] usb 4-1: USB disconnect, device number 2 [ 94.663881][ T5946] fido_id[5946]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 95.014241][ T5958] program syz.1.34 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 95.154554][ T5858] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.228852][ T5962] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 95.374413][ T5858] usb 1-1: Using ep0 maxpacket: 32 [ 95.383729][ T5964] loop3: detected capacity change from 0 to 2048 [ 95.389412][ T5858] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 95.410341][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.432879][ T5964] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 95.434514][ T5858] usb 1-1: Product: syz [ 95.467443][ T5858] usb 1-1: Manufacturer: syz [ 95.472131][ T5858] usb 1-1: SerialNumber: syz [ 95.487226][ T5858] usb 1-1: config 0 descriptor?? [ 95.501062][ T5800] udevd[5800]: incorrect nilfs2 checksum on /dev/loop3 [ 95.537080][ T5968] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.568049][ T5952] loop2: detected capacity change from 0 to 40427 [ 95.581253][ T5952] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 95.600606][ T5952] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 95.639722][ T5952] F2FS-fs (loop2): invalid crc value [ 95.684296][ T5964] syz.3.37: attempt to access beyond end of device [ 95.684296][ T5964] loop3: rw=0, sector=3120, nr_sectors = 2 limit=2048 [ 95.693877][ T5952] F2FS-fs (loop2): Found nat_bits in checkpoint [ 95.716168][ T5964] Buffer I/O error on dev loop3, logical block 1560, async page read [ 95.732217][ T28] audit: type=1804 audit(1757002266.629:2): pid=5972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.37" name="/newroot/10/file0/file3" dev="loop3" ino=16 res=1 errno=0 [ 95.780821][ T5964] syz.3.37: attempt to access beyond end of device [ 95.780821][ T5964] loop3: rw=0, sector=3120, nr_sectors = 2 limit=2048 [ 95.824253][ T5964] Buffer I/O error on dev loop3, logical block 1560, async page read [ 95.850046][ T28] audit: type=1800 audit(1757002266.749:3): pid=5964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.37" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 95.874973][ T5972] syz.3.37: attempt to access beyond end of device [ 95.874973][ T5972] loop3: rw=0, sector=3120, nr_sectors = 2 limit=2048 [ 95.906517][ T5952] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 95.916461][ T5972] Buffer I/O error on dev loop3, logical block 1560, async page read [ 95.923043][ T5952] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 95.928398][ T28] audit: type=1800 audit(1757002266.829:4): pid=5972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.37" name="file3" dev="loop3" ino=16 res=0 errno=0 [ 95.940791][ T5964] syz.3.37 (5964) used greatest stack depth: 19920 bytes left [ 95.981502][ T5858] airspy 1-1:0.0: Board ID: 00 [ 96.006841][ T5858] airspy 1-1:0.0: Firmware version: [ 96.167505][ T5858] airspy 1-1:0.0: usb_control_msg() failed -71 request 11 [ 96.186267][ T5858] airspy 1-1:0.0: Registered as swradio24 [ 96.199858][ T5858] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 96.231994][ T5858] usb 1-1: USB disconnect, device number 2 [ 96.451475][ T5978] loop1: detected capacity change from 0 to 1024 [ 96.552254][ T5978] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.706025][ T28] audit: type=1800 audit(1757002267.609:5): pid=5978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.41" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 96.878840][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.380268][ T5999] loop2: detected capacity change from 0 to 256 [ 97.403213][ T5999] ======================================================= [ 97.403213][ T5999] WARNING: The mand mount option has been deprecated and [ 97.403213][ T5999] and is ignored by this kernel. Remove the mand [ 97.403213][ T5999] option from the mount to silence this warning. [ 97.403213][ T5999] ======================================================= [ 97.481460][ T5999] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d) [ 97.583620][ T28] audit: type=1800 audit(1757002268.479:6): pid=5999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.40" name="file1" dev="loop2" ino=1048595 res=0 errno=0 [ 97.671925][ T5999] syz.2.40: attempt to access beyond end of device [ 97.671925][ T5999] loop2: rw=0, sector=256, nr_sectors = 8 limit=256 [ 97.801791][ T5989] loop0: detected capacity change from 0 to 32768 [ 97.885477][ T6005] loop1: detected capacity change from 0 to 1024 [ 97.943958][ T5989] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 98.065491][ T5989] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 98.306313][ T48] hfsplus: b-tree write err: -5, ino 4 [ 98.339334][ T5786] ocfs2: Unmounting device (7,0) on (node local) [ 98.351038][ T6003] loop3: detected capacity change from 0 to 40427 [ 98.402736][ T6003] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 98.435199][ T6003] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 98.490605][ T6003] F2FS-fs (loop3): invalid crc value [ 98.589642][ T6003] F2FS-fs (loop3): Found nat_bits in checkpoint [ 98.783186][ T6018] loop2: detected capacity change from 0 to 4096 [ 98.804437][ T6003] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 98.811810][ T6003] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 99.036281][ T6018] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 99.069728][ T6028] loop1: detected capacity change from 0 to 64 [ 99.175559][ T6018] ntfs3: loop2: Failed to load $Extend (-22). [ 99.182015][ T6018] ntfs3: loop2: Failed to initialize $Extend. [ 99.382026][ T28] audit: type=1800 audit(1757002270.269:7): pid=6018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.53" name="file1" dev="loop2" ino=30 res=0 errno=0 [ 100.086643][ T6045] loop3: detected capacity change from 0 to 2048 [ 100.122243][ T6045] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.134722][ T6045] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.155733][ T788] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 100.172046][ T6045] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.61: bg 0: block 345: padding at end of block bitmap is not set [ 100.189988][ T6045] EXT4-fs (loop3): Remounting filesystem read-only [ 100.197973][ T6045] EXT4-fs warning (device loop3): ext4_xattr_inode_lookup_create:1614: inode #18: comm syz.3.61: cleanup dec ref error -117 [ 100.238068][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.354468][ T788] usb 1-1: Using ep0 maxpacket: 32 [ 100.361647][ T788] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 100.369940][ T788] usb 1-1: config 0 has no interface number 0 [ 100.378290][ T788] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 100.387542][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.395615][ T788] usb 1-1: Product: syz [ 100.399795][ T788] usb 1-1: Manufacturer: syz [ 100.404482][ T788] usb 1-1: SerialNumber: syz [ 100.411595][ T788] usb 1-1: config 0 descriptor?? [ 100.422166][ T788] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 100.635176][ T788] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 100.651178][ T788] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 101.062488][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 101.075592][ T788] usb 1-1: USB disconnect, device number 3 [ 101.093099][ T788] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 101.108141][ T788] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 101.121541][ T788] quatech2 1-1:0.51: device disconnected [ 102.093473][ T6065] loop3: detected capacity change from 0 to 4096 [ 102.165818][ T6070] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 102.922783][ T6081] loop3: detected capacity change from 0 to 256 [ 102.923414][ T6057] loop0: detected capacity change from 0 to 40427 [ 102.958581][ T6081] exfat: Deprecated parameter 'namecase' [ 102.974892][ T6057] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 102.992996][ T6057] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 102.996023][ T6081] exfat: Deprecated parameter 'utf8' [ 103.036480][ T6057] F2FS-fs (loop0): invalid crc value [ 103.041179][ T6081] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 103.093523][ T6057] F2FS-fs (loop0): Found nat_bits in checkpoint [ 103.133847][ T6069] loop1: detected capacity change from 0 to 32768 [ 103.162529][ T6069] XFS: noikeep mount option is deprecated. [ 103.212342][ T6069] XFS: ikeep mount option is deprecated. [ 103.283785][ T6069] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 103.293797][ T6088] sp0: Synchronizing with TNC [ 103.320738][ T6091] sp0: Found TNC [ 103.322707][ T6057] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 103.336646][ T6057] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 103.491945][ T6069] XFS (loop1): Ending clean mount [ 103.520882][ T6069] XFS (loop1): Quotacheck needed: Please wait. [ 103.631571][ T6069] XFS (loop1): Quotacheck: Done. [ 103.752564][ T6103] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 103.962833][ T5785] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 104.123700][ T6109] loop3: detected capacity change from 0 to 4096 [ 104.220899][ T6109] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 104.303047][ T6109] ntfs3: loop3: Failed to load $Extend (-22). [ 104.321148][ T6109] ntfs3: loop3: Failed to initialize $Extend. [ 104.427741][ T28] audit: type=1800 audit(1757002275.329:8): pid=6109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.92" name="file1" dev="loop3" ino=30 res=0 errno=0 [ 104.604651][ T5877] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 104.789650][ T5877] usb 3-1: Using ep0 maxpacket: 8 [ 104.810076][ T5877] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 104.829682][ T5877] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.844409][ T5877] usb 3-1: Product: syz [ 104.848634][ T5877] usb 3-1: Manufacturer: syz [ 104.863470][ T5877] usb 3-1: SerialNumber: syz [ 104.876398][ T5877] usb 3-1: config 0 descriptor?? [ 104.900743][ T5877] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 104.925702][ T5877] usb 3-1: setting power ON [ 104.945306][ T5877] dvb-usb: bulk message failed: -22 (2/0) [ 104.965704][ T6117] loop0: detected capacity change from 0 to 32768 [ 104.968906][ T5877] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 104.995185][ T5877] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 105.012897][ T5877] usb 3-1: media controller created [ 105.096197][ T6113] dvb-usb: bulk message failed: -22 (3/0) [ 105.174084][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.226681][ T6117] read_mapping_page failed! [ 105.276274][ T5877] usb 3-1: selecting invalid altsetting 6 [ 105.306336][ T5877] usb 3-1: digital interface selection failed (-22) [ 105.324535][ T5877] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 105.341839][ T5877] usb 3-1: setting power OFF [ 105.367261][ T5877] dvb-usb: bulk message failed: -22 (2/0) [ 105.371818][ T114] read_mapping_page failed! [ 105.373201][ T5877] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 105.383161][ T6119] loop3: detected capacity change from 0 to 32768 [ 105.414465][ T5877] (NULL device *): no alternate interface [ 105.560540][ T5877] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 105.590705][ T5877] usb 3-1: USB disconnect, device number 2 [ 105.739091][ T6123] netlink: 201392 bytes leftover after parsing attributes in process `syz.3.97'. [ 106.215873][ T6131] Driver unsupported XDP return value 0 on prog (id 9) dev N/A, expect packet loss! [ 106.474030][ T6137] loop2: detected capacity change from 0 to 4096 [ 106.502269][ T6137] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 106.532967][ T6137] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 4096) [ 106.621275][ T6144] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 106.745021][ T54] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 106.989984][ T54] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 107.010125][ T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.041146][ T54] usb 2-1: Product: syz [ 107.050578][ T54] usb 2-1: Manufacturer: syz [ 107.061560][ T54] usb 2-1: SerialNumber: syz [ 107.079052][ T54] usb 2-1: config 0 descriptor?? [ 107.097882][ T54] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 002 [ 107.274275][ T6162] loop3: detected capacity change from 0 to 8192 [ 107.308046][ T6162] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 107.711011][ T54] i2c i2c-1: failure reading functionality [ 107.718379][ T5858] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 107.730173][ T54] i2c i2c-1: connected i2c-tiny-usb device [ 107.740893][ T54] usb 2-1: USB disconnect, device number 2 [ 107.927412][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 107.939864][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.950672][ T5858] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 107.963283][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.979636][ T5858] usb 4-1: config 0 descriptor?? [ 108.421301][ T5858] zydacron 0003:13EC:0006.0002: unknown main item tag 0x6 [ 108.467498][ T5858] zydacron 0003:13EC:0006.0002: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.3-1/input0 [ 108.498368][ T6177] loop2: detected capacity change from 0 to 256 [ 108.554673][ T6177] FAT-fs (loop2): Directory bread(block 64) failed [ 108.578318][ T6175] loop1: detected capacity change from 0 to 4096 [ 108.578666][ T6177] FAT-fs (loop2): Directory bread(block 65) failed [ 108.643243][ T6177] FAT-fs (loop2): Directory bread(block 66) failed [ 108.674608][ T6177] FAT-fs (loop2): Directory bread(block 67) failed [ 108.681303][ T6177] FAT-fs (loop2): Directory bread(block 68) failed [ 108.702902][ T23] usb 4-1: USB disconnect, device number 3 [ 108.723436][ T6180] fido_id[6180]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 108.738153][ T6175] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 108.764622][ T6177] FAT-fs (loop2): Directory bread(block 69) failed [ 108.781568][ T6177] FAT-fs (loop2): Directory bread(block 70) failed [ 108.791601][ T6177] FAT-fs (loop2): Directory bread(block 71) failed [ 108.816238][ T6177] FAT-fs (loop2): Directory bread(block 72) failed [ 108.825373][ T6175] ntfs3: loop1: Failed to load $Extend (-22). [ 108.844461][ T6175] ntfs3: loop1: Failed to initialize $Extend. [ 108.845925][ T6177] FAT-fs (loop2): Directory bread(block 73) failed [ 109.017041][ T28] audit: type=1800 audit(1757002279.909:9): pid=6175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.120" name="file1" dev="loop1" ino=30 res=0 errno=0 [ 109.208100][ T6187] loop0: detected capacity change from 0 to 512 [ 109.292940][ T6187] EXT4-fs (loop0): orphan cleanup on readonly fs [ 109.309642][ T6187] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 109.319563][ T6187] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 109.342197][ T6187] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.126: attempt to clear invalid blocks 2 len 1 [ 109.366069][ T6187] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.126: invalid indirect mapped block 1819239214 (level 0) [ 109.487283][ T6187] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.126: invalid indirect mapped block 1819239214 (level 1) [ 109.522474][ T6194] loop3: detected capacity change from 0 to 512 [ 109.556379][ T6187] EXT4-fs (loop0): 1 truncate cleaned up [ 109.569213][ T6187] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.727072][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.801698][ T6194] EXT4-fs (loop3): Test dummy encryption mode enabled [ 109.819476][ T6194] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 109.884411][ T6194] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 109.924729][ T6194] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 109.933228][ T6194] System zones: 1-12 [ 109.944245][ T6201] netlink: 'syz.0.132': attribute type 10 has an invalid length. [ 109.964075][ T6194] EXT4-fs (loop3): 1 truncate cleaned up [ 110.002000][ T6194] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.120362][ T6192] loop2: detected capacity change from 0 to 40427 [ 110.158342][ T6192] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 110.182305][ T6192] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 110.224108][ T6192] F2FS-fs (loop2): invalid crc value [ 110.288797][ T6194] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 110.295456][ T6192] F2FS-fs (loop2): Found nat_bits in checkpoint [ 110.431148][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.475313][ T6192] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 110.482428][ T6192] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 110.604519][ T23] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 110.787864][ T6227] loop1: detected capacity change from 0 to 2048 [ 110.806638][ T23] usb 1-1: config 0 has an invalid interface number: 112 but max is 0 [ 110.814505][ T6227] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 110.815229][ T23] usb 1-1: config 0 has no interface number 0 [ 110.860015][ T23] usb 1-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice=fb.16 [ 110.865871][ T6227] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 110.877082][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.917099][ T23] usb 1-1: Product: syz [ 110.921347][ T23] usb 1-1: Manufacturer: syz [ 110.939663][ T23] usb 1-1: SerialNumber: syz [ 110.953162][ T23] usb 1-1: config 0 descriptor?? [ 111.013202][ T23] mvusb_mdio: probe of 1-1:0.112 failed with error -5 [ 111.299527][ T23] usb 1-1: USB disconnect, device number 4 [ 111.682018][ T6242] loop2: detected capacity change from 0 to 512 [ 111.747489][ T6242] EXT4-fs (loop2): Test dummy encryption mode enabled [ 111.775071][ T6242] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 111.821762][ T6242] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 111.887882][ T6251] loop3: detected capacity change from 0 to 512 [ 111.897442][ T6251] EXT4-fs: Ignoring removed nomblk_io_submit option [ 111.906076][ T6242] System zones: 1-12 [ 111.924938][ T6242] EXT4-fs (loop2): 1 truncate cleaned up [ 111.934830][ T6242] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.955097][ T6251] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 111.963060][ T6251] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102] [ 111.989547][ T6254] loop0: detected capacity change from 0 to 1024 [ 112.015004][ T6251] EXT4-fs (loop3): couldn't mount RDWR because of unsupported optional features (80) [ 112.069176][ T6251] EXT4-fs (loop3): Skipping orphan cleanup due to unknown ROCOMPAT features [ 112.109620][ T6256] loop1: detected capacity change from 0 to 8 [ 112.157633][ T6251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 112.197230][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.253489][ T48] hfsplus: b-tree write err: -5, ino 4 [ 112.325606][ T6251] EXT4-fs warning (device loop3): dx_probe:893: inode #2: comm syz.3.151: dx entry: limit 65535 != root limit 120 [ 112.404803][ T6251] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.151: Corrupt directory, running e2fsck is recommended [ 112.449692][ T6251] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 3: comm syz.3.151: path /46/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 112.630510][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.642466][ T6266] loop0: detected capacity change from 0 to 64 [ 113.032801][ T6277] loop1: detected capacity change from 0 to 1024 [ 113.147861][ T6277] hfsplus: bad catalog entry type [ 113.175608][ T969] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 113.249130][ T48] hfsplus: b-tree write err: -5, ino 4 [ 113.384979][ T969] usb 3-1: Using ep0 maxpacket: 8 [ 113.400749][ T969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.420819][ T969] usb 3-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 113.433571][ T969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.465218][ T969] usb 3-1: config 0 descriptor?? [ 113.602762][ T6294] capability: warning: `syz.1.170' uses 32-bit capabilities (legacy support in use) [ 113.776163][ T6298] openvswitch: netlink: Actions may not be safe on all matching packets [ 113.915586][ T969] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 113.922895][ T969] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 113.966595][ T969] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 113.976730][ T969] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 113.994245][ T969] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 114.004634][ T969] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 114.011915][ T969] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 114.034397][ T969] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 114.051903][ T969] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 114.074432][ T969] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 114.081739][ T969] megaworld 0003:07B5:0312.0003: unknown main item tag 0x0 [ 114.134701][ T969] megaworld 0003:07B5:0312.0003: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.2-1/input0 [ 114.174408][ T969] megaworld 0003:07B5:0312.0003: no inputs found [ 114.204663][ T969] usb 3-1: USB disconnect, device number 3 [ 114.251008][ T6290] loop3: detected capacity change from 0 to 32768 [ 114.371390][ T6301] fido_id[6301]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 114.589115][ T6296] loop1: detected capacity change from 0 to 32768 [ 114.683387][ T6296] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 114.840667][ T5785] ocfs2: Unmounting device (7,1) on (node local) [ 115.224557][ T788] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 115.433448][ T788] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 115.448196][ T788] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 115.464798][ T788] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.499245][ T788] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 115.516894][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.526033][ T788] usb 3-1: Product: syz [ 115.530283][ T788] usb 3-1: Manufacturer: syz [ 115.535424][ T788] usb 3-1: SerialNumber: syz [ 115.555438][ T788] hub 3-1:1.0: bad descriptor, ignoring hub [ 115.574408][ T788] hub: probe of 3-1:1.0 failed with error -5 [ 115.765445][ T5858] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 115.769425][ T788] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 115.803396][ T6327] loop0: detected capacity change from 0 to 32768 [ 115.830417][ T6327] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.185 (6327) [ 115.880885][ T6327] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 115.893365][ T6327] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 115.903290][ T6327] BTRFS info (device loop0): turning on sync discard [ 115.911015][ T6327] BTRFS info (device loop0): setting nodatasum [ 115.918025][ T6327] BTRFS info (device loop0): enabling auto defrag [ 115.924664][ T6327] BTRFS info (device loop0): max_inline at 0 [ 115.936165][ T6327] BTRFS info (device loop0): using free space tree [ 115.967144][ T5858] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 115.987231][ T5858] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 116.000212][ T5858] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 116.010346][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.022388][ T5858] usb 4-1: config 0 descriptor?? [ 116.119930][ T969] usb 3-1: USB disconnect, device number 4 [ 116.155178][ T6327] BTRFS info (device loop0): enabling ssd optimizations [ 116.206368][ T969] usblp0: removed [ 116.391960][ T5786] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 116.651373][ T5858] Bluetooth: Can't get version to change to load ram patch err [ 116.690623][ T5858] Bluetooth: Loading sysconfig file failed [ 116.707248][ T5858] ath3k: probe of 4-1:0.0 failed with error -71 [ 116.736114][ T5858] usb 4-1: USB disconnect, device number 4 [ 117.359669][ T6348] loop1: detected capacity change from 0 to 32768 [ 117.395072][ T6348] XFS: ikeep mount option is deprecated. [ 117.436603][ T6348] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 117.457881][ T6348] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 117.572853][ T6348] XFS (loop1): Ending clean mount [ 117.588041][ T6348] XFS (loop1): Quotacheck needed: Please wait. [ 117.672329][ T6348] XFS (loop1): Quotacheck: Done. [ 117.804112][ T5785] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 118.001637][ T6386] netlink: 40 bytes leftover after parsing attributes in process `syz.3.201'. [ 118.333115][ T6393] loop3: detected capacity change from 0 to 512 [ 118.364666][ T6393] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 118.378401][ T6398] loop2: detected capacity change from 0 to 64 [ 118.481120][ T6393] EXT4-fs (loop3): 1 truncate cleaned up [ 118.497114][ T6393] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.668241][ T5784] EXT4-fs error (device loop3): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 46 (inode size 256) [ 118.705017][ T5784] EXT4-fs error (device loop3): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 46 (inode size 256) [ 119.147390][ T6411] loop2: detected capacity change from 0 to 256 [ 119.746253][ T5784] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.324673][ T1322] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.652365][ T1322] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.796046][ T5794] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 120.812372][ T1322] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.830627][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 120.841511][ T5794] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 120.851392][ T5794] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 120.860788][ T5794] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 120.870865][ T5794] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 120.941725][ T6447] loop1: detected capacity change from 0 to 4096 [ 120.953366][ T6447] ntfs3: Bad value for 'gid' [ 120.998756][ T28] audit: type=1326 audit(1757002291.899:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcbcb8ebe9 code=0x7ffc0000 [ 121.043029][ T1322] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.094669][ T28] audit: type=1326 audit(1757002291.899:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcbcb8ebe9 code=0x7ffc0000 [ 121.137922][ T28] audit: type=1326 audit(1757002291.979:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efcbcb8d550 code=0x7ffc0000 [ 121.204496][ T28] audit: type=1326 audit(1757002291.979:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efcbcb8d550 code=0x7ffc0000 [ 121.295680][ T28] audit: type=1326 audit(1757002291.979:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcbcb8ebe9 code=0x7ffc0000 [ 121.387884][ T28] audit: type=1326 audit(1757002291.979:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcbcb8ebe9 code=0x7ffc0000 [ 121.457161][ T28] audit: type=1326 audit(1757002291.979:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7efcbcb8ebe9 code=0x7ffc0000 [ 121.479980][ T28] audit: type=1326 audit(1757002291.979:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcbcb8ebe9 code=0x7ffc0000 [ 121.538877][ T28] audit: type=1326 audit(1757002291.979:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6448 comm="syz.0.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcbcb8ebe9 code=0x7ffc0000 [ 121.679184][ T6462] netlink: 20 bytes leftover after parsing attributes in process `syz.0.235'. [ 122.347014][ T6483] loop2: detected capacity change from 0 to 1024 [ 122.461395][ T6483] UBIFS error (pid: 6483): cannot open "7Á4EU¥Ë%8ñ`»Ýº¼õ¨Ý ôFu¯g³5÷ÚŒOÝŽ‚l×3jÓ#ôÝdÏ(]æl6ãüŸKêËuÌÇf¾šïæŽ õIÍîü¯{˜Ü‘ [ 122.461395][ T6483] ŽTœÿ•á{t½ íVò·z½ôm²â9ç[ð [ 122.461395][ T6483] zYË®HÔ9£VÔÿAX”§‹:=÷îjAÔjfÔfçݨµ¾(Û›îÙ<¼½I3Ìm³®?ú¢FÏü?°ùm(÷ÊL®³îû3ŸÝ\Õí3LéË¥û-. Kýoþ=ð^÷u]ËO_¾zXi·[O콌…ÇKÝOæÞJ™Û”¼ ½ä“ENjãΠ4ÍÄ.êíý£pc{•‰ƒr¬ߦ{"•±Pòý S‘ô²3AIì¼ËÄõ_R¯TãÉž} 3çé#þà÷Ù9v·‚Kb£xF.éä*¸Åá\ºæJÕŒ®æ:Qº0z‹¡Ïó˜0ýÐ]~ÿ", error -22 [ 122.544046][ T6445] chnl_net:caif_netlink_parms(): no params data found [ 122.599364][ T11] hfsplus: b-tree write err: -5, ino 4 [ 122.809089][ T6469] loop0: detected capacity change from 0 to 32768 [ 122.908703][ T5792] Bluetooth: hci0: command tx timeout [ 123.336103][ T6445] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.372099][ T6445] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.402050][ T6445] bridge_slave_0: entered allmulticast mode [ 123.434093][ T6445] bridge_slave_0: entered promiscuous mode [ 123.638605][ T6445] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.657605][ T6445] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.679863][ T6445] bridge_slave_1: entered allmulticast mode [ 123.688877][ T6445] bridge_slave_1: entered promiscuous mode [ 123.696973][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.249'. [ 123.903083][ T6445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.920864][ T788] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 123.927095][ T6445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 124.124538][ T788] usb 2-1: Using ep0 maxpacket: 8 [ 124.145476][ T788] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 124.178504][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.201841][ T788] usb 2-1: Product: syz [ 124.213069][ T788] usb 2-1: Manufacturer: syz [ 124.243213][ T788] usb 2-1: SerialNumber: syz [ 124.255584][ T788] usb 2-1: config 0 descriptor?? [ 124.299590][ T6445] team0: Port device team_slave_0 added [ 124.321160][ T6445] team0: Port device team_slave_1 added [ 124.502089][ T788] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 124.523870][ T28] audit: type=1326 audit(1757002295.419:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6539 comm="syz.2.259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0e1d8ebe9 code=0x7ffc0000 [ 124.722946][ T6445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.753671][ T6445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.792013][ T6445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.810812][ T6544] loop0: detected capacity change from 0 to 4096 [ 124.816825][ T6445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.853955][ T6445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.880597][ T6549] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.893339][ T6544] NILFS error (device loop0): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 124.907540][ T788] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 124.918021][ T6445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.937327][ T788] usb 2-1: USB disconnect, device number 3 [ 124.939407][ T6544] Remounting filesystem read-only [ 124.985840][ T5792] Bluetooth: hci0: command tx timeout [ 125.039031][ T6544] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 125.401216][ T1322] hsr_slave_0: left promiscuous mode [ 125.407713][ T1322] hsr_slave_1: left promiscuous mode [ 125.415666][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.423239][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.435136][ T1322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.443276][ T1322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.453982][ T1322] bridge_slave_1: left allmulticast mode [ 125.461400][ T1322] bridge_slave_1: left promiscuous mode [ 125.474524][ T788] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 125.496557][ T1322] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.519370][ T1322] bridge_slave_0: left allmulticast mode [ 125.533774][ T1322] bridge_slave_0: left promiscuous mode [ 125.540747][ T1322] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.611897][ T1322] veth1_macvtap: left promiscuous mode [ 125.625047][ T1322] veth0_macvtap: left promiscuous mode [ 125.630758][ T1322] veth1_vlan: left promiscuous mode [ 125.647089][ T1322] veth0_vlan: left promiscuous mode [ 125.666573][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.690839][ T788] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.706640][ T788] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 125.716828][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.728174][ T788] usb 3-1: config 0 descriptor?? [ 126.173254][ T788] kone 0003:1E7D:2CED.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.2-1/input0 [ 126.344408][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 126.402080][ T788] usb 3-1: USB disconnect, device number 5 [ 126.547672][ T23] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 126.562666][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.578911][ T23] usb 1-1: config 0 descriptor?? [ 126.603174][ T1322] team0 (unregistering): Port device team_slave_1 removed [ 126.651161][ T1322] team0 (unregistering): Port device team_slave_0 removed [ 126.699658][ T1322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.752004][ T1322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 127.004981][ T23] ath6kl: Unsupported hardware version: 0x0 [ 127.022833][ T23] ath6kl: Failed to init ath6kl core: -22 [ 127.046951][ T23] ath6kl_usb: probe of 1-1:0.0 failed with error -22 [ 127.071132][ T5792] Bluetooth: hci0: command tx timeout [ 127.226759][ T5858] usb 1-1: USB disconnect, device number 5 [ 127.359906][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 127.379232][ T1322] bond0 (unregistering): Released all slaves [ 127.467703][ T6445] hsr_slave_0: entered promiscuous mode [ 127.474135][ T6445] hsr_slave_1: entered promiscuous mode [ 127.480590][ T6445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.488550][ T6445] Cannot create hsr debugfs directory [ 127.500412][ T6560] netlink: 'syz.1.265': attribute type 2 has an invalid length. [ 127.548005][ T23] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.579834][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 127.600186][ T23] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 127.631700][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.658007][ T6574] loop1: detected capacity change from 0 to 128 [ 127.736744][ T23] usb 3-1: config 0 descriptor?? [ 128.202507][ T6445] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 128.216798][ T23] acrux 0003:1A34:0802.0005: unknown main item tag 0x0 [ 128.223755][ T23] acrux 0003:1A34:0802.0005: unknown main item tag 0x0 [ 128.268030][ T6445] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 128.271765][ T23] acrux 0003:1A34:0802.0005: unknown main item tag 0x0 [ 128.306994][ T6445] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 128.312269][ T23] acrux 0003:1A34:0802.0005: unknown main item tag 0x0 [ 128.322941][ T6587] loop1: detected capacity change from 0 to 1024 [ 128.354716][ T6445] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 128.354840][ T23] acrux 0003:1A34:0802.0005: unknown main item tag 0x0 [ 128.361712][ T6587] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 128.408775][ T23] acrux 0003:1A34:0802.0005: unknown main item tag 0x0 [ 128.440830][ T23] acrux 0003:1A34:0802.0005: unknown main item tag 0x0 [ 128.445645][ T6587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.475558][ T23] acrux 0003:1A34:0802.0005: hidraw0: USB HID v10.00 Device [HID 1a34:0802] on usb-dummy_hcd.2-1/input0 [ 128.494527][ T23] acrux 0003:1A34:0802.0005: no inputs found [ 128.500611][ T23] acrux 0003:1A34:0802.0005: Failed to enable force feedback support, error: -19 [ 128.618661][ T23] usb 3-1: USB disconnect, device number 6 [ 128.747077][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.770856][ T6601] fido_id[6601]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 128.781739][ T6445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.918385][ T6445] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.970111][ T1322] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.977348][ T1322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.026096][ T1305] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.033506][ T1305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 129.144816][ T5792] Bluetooth: hci0: command tx timeout [ 129.391533][ T6621] loop1: detected capacity change from 0 to 2048 [ 129.468207][ T6621] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 129.521501][ T6621] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.958924][ T6445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.146158][ T6648] loop1: detected capacity change from 0 to 512 [ 130.181514][ T6648] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 130.260652][ T6648] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 130.307572][ T6648] EXT4-fs (loop1): 1 truncate cleaned up [ 130.314768][ T6648] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.558528][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.738515][ T6663] loop0: detected capacity change from 0 to 4096 [ 130.758192][ T6663] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 130.867940][ T6445] veth0_vlan: entered promiscuous mode [ 130.902842][ T6445] veth1_vlan: entered promiscuous mode [ 130.997111][ T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 130.998650][ T6445] veth0_macvtap: entered promiscuous mode [ 131.032149][ T6445] veth1_macvtap: entered promiscuous mode [ 131.106440][ T6445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.143757][ T6445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.174378][ T6445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.205243][ T6445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.215490][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 131.234980][ T6445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.265739][ T6445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.287056][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.288443][ T6445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.311430][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.335477][ T23] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 131.347763][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.408551][ T6445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.428730][ T23] usb 3-1: config 0 descriptor?? [ 131.445433][ T6445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.459045][ T23] hub 3-1:0.0: USB hub found [ 131.473840][ T6445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.497124][ T6445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.524402][ T6445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.534988][ T6445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.556604][ T6445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.646483][ T6445] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.674839][ T23] hub 3-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 131.684458][ T6445] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.693212][ T6445] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.711833][ T6445] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.740539][ T6684] loop0: detected capacity change from 0 to 512 [ 131.923881][ T6684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.954740][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.974579][ T6684] ext4 filesystem being mounted at /80/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.988750][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.070291][ T1305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.073631][ T23] usbhid 3-1:0.0: can't add hid device: -71 [ 132.084482][ T23] usbhid: probe of 3-1:0.0 failed with error -71 [ 132.095987][ T1305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.126384][ T23] usb 3-1: USB disconnect, device number 7 [ 132.244817][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.950278][ T6711] process 'syz.0.304' launched '/dev/fd/3' with NULL argv: empty string added [ 133.074227][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.313897][ T6725] C: renamed from team_slave_0 (while UP) [ 133.398515][ T6725] netlink: 'syz.1.308': attribute type 3 has an invalid length. [ 133.414606][ T6725] netlink: 152 bytes leftover after parsing attributes in process `syz.1.308'. [ 133.464953][ T6725] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 133.831132][ T6700] loop4: detected capacity change from 0 to 40427 [ 133.888843][ T6700] F2FS-fs (loop4): Wrong CP boundary, start(512) end(2365457920) blocks(1024) [ 133.902625][ T6700] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 133.927900][ T6700] F2FS-fs (loop4): invalid crc value [ 133.977072][ T6700] F2FS-fs (loop4): Found nat_bits in checkpoint [ 134.178079][ T6700] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 134.197765][ T6700] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 134.946540][ T6770] loop0: detected capacity change from 0 to 764 [ 135.080061][ T6770] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 135.547099][ T6793] loop4: detected capacity change from 0 to 1024 [ 135.580642][ T6793] EXT4-fs: Ignoring removed i_version option [ 135.618598][ T6793] ext4: Unknown parameter 'block_va' [ 135.796684][ T5858] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 135.875354][ T6796] loop0: detected capacity change from 0 to 4096 [ 135.903816][ T6801] netlink: 12 bytes leftover after parsing attributes in process `syz.4.335'. [ 136.024532][ T5858] usb 2-1: Using ep0 maxpacket: 8 [ 136.046137][ T5858] usb 2-1: config 0 interface 0 altsetting 42 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 136.094173][ T5858] usb 2-1: config 0 interface 0 has no altsetting 0 [ 136.115093][ T5858] usb 2-1: New USB device found, idVendor=056a, idProduct=00d6, bcdDevice= 0.00 [ 136.124207][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.182151][ T5858] usb 2-1: config 0 descriptor?? [ 136.692870][ T5858] wacom 0003:056A:00D6.0006: Unknown device_type for 'HID 056a:00d6'. Assuming pen. [ 136.738485][ T5858] wacom 0003:056A:00D6.0006: hidraw0: USB HID v0.07 Device [HID 056a:00d6] on usb-dummy_hcd.1-1/input0 [ 136.807992][ T5858] input: Wacom BambooPT 2FG 4x5 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:00D6.0006/input/input6 [ 136.870294][ T5858] usb 2-1: USB disconnect, device number 4 [ 137.057647][ T6827] fido_id[6827]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 137.094478][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 137.306774][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.333941][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.356859][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.384599][ T23] usb 1-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 137.404700][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.438956][ T23] usb 1-1: config 0 descriptor?? [ 137.885494][ T6850] loop2: detected capacity change from 0 to 256 [ 137.907975][ T23] aureal 0003:0755:2626.0007: hidraw0: USB HID v0.00 Device [HID 0755:2626] on usb-dummy_hcd.0-1/input0 [ 137.932694][ T6850] exfat: Deprecated parameter 'namecase' [ 137.988680][ T6837] loop4: detected capacity change from 0 to 32768 [ 138.009133][ T6850] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 138.071674][ T6837] (syz.4.346,6837,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 138.156528][ T6837] (syz.4.346,6837,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 138.207024][ T5858] usb 1-1: USB disconnect, device number 6 [ 138.348986][ T6837] JBD2: Ignoring recovery information on journal [ 138.489693][ T6862] loop1: detected capacity change from 0 to 1024 [ 138.516841][ T6837] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 138.623857][ T6862] hfsplus: request for non-existent node 134217728 in B*Tree [ 138.646448][ T6862] hfsplus: request for non-existent node 134217728 in B*Tree [ 138.837075][ T6445] ocfs2: Unmounting device (7,4) on (node local) [ 139.282124][ T6878] loop0: detected capacity change from 0 to 512 [ 139.334212][ T6878] EXT4-fs: Ignoring removed mblk_io_submit option [ 139.376493][ T6878] EXT4-fs: inline encryption not supported [ 139.412832][ T6878] EXT4-fs: Ignoring removed mblk_io_submit option [ 139.455087][ T6878] EXT4-fs (loop0): Test dummy encryption mode enabled [ 139.461941][ T6878] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 139.581944][ T6878] EXT4-fs (loop0): 1 truncate cleaned up [ 139.642209][ T6878] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.703916][ T6891] loop4: detected capacity change from 0 to 256 [ 139.783067][ T6864] loop2: detected capacity change from 0 to 32768 [ 139.860000][ T6864] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 139.958827][ T6864] XFS (loop2): Ending clean mount [ 140.013341][ T6864] XFS (loop2): Quotacheck needed: Please wait. [ 140.077247][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 140.077262][ T28] audit: type=1800 audit(1757002310.979:27): pid=6878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.357" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 140.131464][ T6864] XFS (loop2): Quotacheck: Done. [ 140.267343][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.455917][ T5787] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 140.540421][ T6914] loop4: detected capacity change from 0 to 256 [ 140.616671][ T6914] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 140.771362][ T28] audit: type=1800 audit(1757002311.669:28): pid=6914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.365" name="bus" dev="loop4" ino=1048618 res=0 errno=0 [ 140.832379][ T28] audit: type=1804 audit(1757002311.709:29): pid=6914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.365" name="/newroot/13/file0/bus" dev="loop4" ino=1048618 res=1 errno=0 [ 140.959381][ T6887] loop1: detected capacity change from 0 to 40427 [ 140.982039][ T6887] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 140.998701][ T6919] loop4: detected capacity change from 0 to 256 [ 141.006735][ T6919] exfat: Deprecated parameter 'namecase' [ 141.012625][ T6887] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 141.059155][ T6887] F2FS-fs (loop1): Found nat_bits in checkpoint [ 141.087557][ T6919] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36bd6320, utbl_chksum : 0xe619d30d) [ 141.299010][ T6887] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 141.315034][ T6887] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 141.452391][ T6912] loop0: detected capacity change from 0 to 32768 [ 142.149001][ T6938] netlink: 24 bytes leftover after parsing attributes in process `syz.4.372'. [ 142.174866][ T6937] netlink: 24 bytes leftover after parsing attributes in process `syz.4.372'. [ 142.190859][ T28] audit: type=1326 audit(1757002313.079:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcbcb8ebe9 code=0x7ffc0000 [ 142.271546][ T28] audit: type=1326 audit(1757002313.079:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcbcb8ebe9 code=0x7ffc0000 [ 142.345087][ T28] audit: type=1326 audit(1757002313.089:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efcbcb8d550 code=0x7ffc0000 [ 142.377029][ T28] audit: type=1326 audit(1757002313.089:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcbcb8ebe9 code=0x7ffc0000 [ 142.515629][ T28] audit: type=1326 audit(1757002313.089:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6939 comm=6C2586CE36DB0CCF197CC94F7FCE8F exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcbcb8ebe9 code=0x7ffc0000 [ 142.543470][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.374'. [ 142.725762][ T6953] loop1: detected capacity change from 0 to 128 [ 142.780501][ T6953] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 142.889669][ T6953] syz.1.376: attempt to access beyond end of device [ 142.889669][ T6953] loop1: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 142.946607][ T6953] sysv_free_block: trying to free block not in datazone [ 143.033966][ T5785] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 143.123007][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.384'. [ 143.135034][ T6966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.384'. [ 143.143987][ T6966] netlink: 'syz.4.384': attribute type 12 has an invalid length. [ 143.154870][ T969] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 143.171077][ T6969] loop1: detected capacity change from 0 to 764 [ 143.357159][ T969] usb 3-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 143.382414][ T969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.425110][ T969] usb 3-1: config 0 descriptor?? [ 143.450257][ T969] usb 3-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 143.473706][ T969] dvb_usb_af9015: probe of 3-1:0.0 failed with error -22 [ 143.616794][ T6979] loop1: detected capacity change from 0 to 64 [ 143.717921][ T969] usb 3-1: USB disconnect, device number 8 [ 143.773694][ T6981] loop0: detected capacity change from 0 to 2048 [ 143.830480][ T6981] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.250188][ T6975] loop4: detected capacity change from 0 to 32768 [ 144.373290][ T6988] loop1: detected capacity change from 0 to 4096 [ 144.395765][ T6975] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 144.601257][ T6975] XFS (loop4): Ending clean mount [ 144.630693][ T6988] ntfs: volume version 3.1. [ 144.659504][ T6975] XFS (loop4): Quotacheck needed: Please wait. [ 144.882092][ T6975] XFS (loop4): Quotacheck: Done. [ 145.310143][ T6445] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 145.614026][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.0.405'. [ 146.270081][ T7028] loop2: detected capacity change from 0 to 32768 [ 146.297550][ T7028] [ 146.297550][ T7028] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.297550][ T7028] [ 146.363521][ T7028] ERROR: (device loop2): diWrite: ixpxd invalid [ 146.363521][ T7028] [ 146.382201][ T7028] ERROR: (device loop2): txCommit: [ 146.382201][ T7028] [ 146.543427][ T5787] [ 146.543427][ T5787] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.543427][ T5787] [ 146.595160][ T5787] [ 146.595160][ T5787] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.595160][ T5787] [ 147.127711][ T7064] loop2: detected capacity change from 0 to 1024 [ 147.252916][ T7064] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.435858][ T7064] EXT4-fs error (device loop2): ext4_get_inode_usage:883: inode #2: comm syz.2.414: corrupted in-inode xattr: bad e_name length [ 147.625469][ T5787] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.671818][ T7077] loop4: detected capacity change from 0 to 4096 [ 147.896369][ T28] audit: type=1800 audit(1757002318.789:35): pid=7077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.419" name="file1" dev="loop4" ino=33 res=0 errno=0 [ 148.169904][ T7052] loop1: detected capacity change from 0 to 40427 [ 148.222223][ T7052] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 148.248277][ T7052] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 148.330084][ T7052] F2FS-fs (loop1): Found nat_bits in checkpoint [ 148.594761][ T7052] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 148.636430][ T7052] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 148.645572][ T7101] loop4: detected capacity change from 0 to 512 [ 148.729900][ T7101] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.426: bg 0: block 5: invalid block bitmap [ 148.832497][ T7101] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 148.851324][ T7101] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.426: invalid indirect mapped block 3 (level 2) [ 148.890713][ T7101] EXT4-fs (loop4): 1 orphan inode deleted [ 148.904951][ T7101] EXT4-fs (loop4): 1 truncate cleaned up [ 148.922253][ T7101] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.170003][ T6445] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.556104][ T7120] sp0: Synchronizing with TNC [ 149.610332][ T7119] [U] è` [ 149.618786][ T7116] loop4: detected capacity change from 0 to 4096 [ 149.764102][ T7116] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 149.796441][ T7116] ntfs3: loop4: Failed to load $Extend (-22). [ 149.814496][ T7116] ntfs3: loop4: Failed to initialize $Extend. [ 149.930091][ T7124] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 150.192006][ T7131] IPVS: sync thread started: state = MASTER, mcast_ifn = geneve1, syncid = 10802, id = 0 [ 150.484456][ T7141] loop4: detected capacity change from 0 to 128 [ 150.847790][ T7149] loop1: detected capacity change from 0 to 4096 [ 150.914636][ T7149] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 151.348472][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.4.454'. [ 151.415499][ T7170] netlink: 128 bytes leftover after parsing attributes in process `syz.2.455'. [ 151.680735][ T7178] netlink: 20 bytes leftover after parsing attributes in process `syz.2.458'. [ 152.380138][ T7201] binder: 7200:7201 ioctl c00c620f 200000000500 returned -22 [ 152.393926][ T7204] loop1: detected capacity change from 0 to 256 [ 152.491511][ T7204] FAT-fs (loop1): Directory bread(block 64) failed [ 152.513626][ T7204] FAT-fs (loop1): Directory bread(block 65) failed [ 152.514587][ T23] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 152.534761][ T7204] FAT-fs (loop1): Directory bread(block 66) failed [ 152.558093][ T7204] FAT-fs (loop1): Directory bread(block 67) failed [ 152.586126][ T7204] FAT-fs (loop1): Directory bread(block 68) failed [ 152.592816][ T7204] FAT-fs (loop1): Directory bread(block 69) failed [ 152.614513][ T7204] FAT-fs (loop1): Directory bread(block 70) failed [ 152.621127][ T7204] FAT-fs (loop1): Directory bread(block 71) failed [ 152.661197][ T7204] FAT-fs (loop1): Directory bread(block 72) failed [ 152.687806][ T7204] FAT-fs (loop1): Directory bread(block 73) failed [ 152.746493][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 152.762210][ T7208] loop4: detected capacity change from 0 to 4096 [ 152.786864][ T23] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 152.805901][ T7208] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 152.837734][ T23] usb 3-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 152.874484][ T23] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 152.914769][ T23] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 152.928834][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.945487][ T23] usb 3-1: Product: syz [ 152.949748][ T23] usb 3-1: Manufacturer: syz [ 152.977924][ T23] usb 3-1: SerialNumber: syz [ 153.008423][ T7208] ntfs: volume version 3.1. [ 153.027287][ T23] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 153.059075][ T23] imon 3-1:155.0: unable to initialize intf0, err -19 [ 153.080974][ T23] imon:imon_probe: failed to initialize context! [ 153.145542][ T23] imon 3-1:155.0: unable to register, err -19 [ 153.515840][ T5850] usb 3-1: USB disconnect, device number 9 [ 153.685412][ T7227] loop0: detected capacity change from 0 to 4096 [ 154.632810][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.486'. [ 154.655838][ T7263] netlink: 'syz.0.486': attribute type 5 has an invalid length. [ 154.729198][ T7267] loop4: detected capacity change from 0 to 256 [ 154.796425][ T7267] exfat: Deprecated parameter 'utf8' [ 154.847536][ T7267] exfat: Deprecated parameter 'namecase' [ 154.889220][ T7267] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x7b823c56, utbl_chksum : 0xe619d30d) [ 154.977582][ T7272] loop0: detected capacity change from 0 to 256 [ 154.984536][ T788] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 155.000115][ T7272] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 155.042171][ T7272] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf5c3c67c, utbl_chksum : 0xe619d30d) [ 155.209540][ T788] usb 2-1: Using ep0 maxpacket: 8 [ 155.241887][ T788] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 155.255285][ T788] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 155.264721][ T788] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 155.281372][ T788] usb 2-1: config 250 has no interface number 0 [ 155.310372][ T788] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 155.356635][ T788] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 155.411067][ T788] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 155.448543][ T788] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 155.484515][ T788] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 155.520673][ T788] usb 2-1: config 250 interface 228 has no altsetting 0 [ 155.538177][ T788] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 155.564264][ T788] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 155.572772][ T788] usb 2-1: Product: syz [ 155.582695][ T7257] loop2: detected capacity change from 0 to 32768 [ 155.604494][ T788] usb 2-1: SerialNumber: syz [ 155.674948][ T7257] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 155.680172][ T788] hub 2-1:250.228: bad descriptor, ignoring hub [ 155.689974][ T788] hub: probe of 2-1:250.228 failed with error -5 [ 155.763841][ T7279] loop0: detected capacity change from 0 to 8192 [ 155.806418][ T7279] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 155.813228][ T7257] XFS (loop2): Ending clean mount [ 155.866774][ T7279] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 155.868912][ T788] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 155.898197][ T7279] REISERFS (device loop0): using ordered data mode [ 155.938912][ T7279] reiserfs: using flush barriers [ 155.986112][ T7279] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 156.037117][ T7279] REISERFS (device loop0): checking transaction log (loop0) [ 156.083369][ T7279] REISERFS (device loop0): Using r5 hash to sort names [ 156.115475][ T7279] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 156.166544][ T5787] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 156.368346][ T788] usb 2-1: USB disconnect, device number 5 [ 156.379340][ T788] usblp0: removed [ 156.798362][ T7308] loop0: detected capacity change from 0 to 128 [ 156.823961][ T7308] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 156.881283][ T7308] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 157.013629][ T7294] loop4: detected capacity change from 0 to 32768 [ 157.136122][ T7294] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 157.158481][ T7317] loop1: detected capacity change from 0 to 256 [ 157.166328][ T7317] exfat: Deprecated parameter 'namecase' [ 157.172166][ T7317] exfat: Deprecated parameter 'namecase' [ 157.209727][ T1305] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 157.221196][ T7317] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 157.334516][ T7294] XFS (loop4): Ending clean mount [ 157.382385][ T7317] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 157.631818][ T6445] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 157.804461][ T5877] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 158.034847][ T5877] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.049697][ T5877] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.069988][ T5877] usb 1-1: config 0 interface 0 has no altsetting 0 [ 158.089112][ T5877] usb 1-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 158.110226][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.123391][ T5877] usb 1-1: config 0 descriptor?? [ 158.254444][ T23] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 158.446904][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 158.492467][ T23] usb 2-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00 [ 158.522714][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.555141][ T23] usb 2-1: config 0 descriptor?? [ 158.573082][ T5877] uclogic 0003:5543:0005.0008: item 0 2 0 8 parsing failed [ 158.633345][ T5877] uclogic 0003:5543:0005.0008: parse failed [ 158.653071][ T5877] uclogic: probe of 0003:5543:0005.0008 failed with error -22 [ 158.830272][ T788] usb 1-1: USB disconnect, device number 7 [ 158.977968][ T23] hid (null): report_id 0 is invalid [ 159.002367][ T23] nzxt-smart2 0003:1E71:2019.0009: report_id 0 is invalid [ 159.027104][ T23] nzxt-smart2 0003:1E71:2019.0009: item 0 4 1 8 parsing failed [ 159.054542][ T23] nzxt-smart2: probe of 0003:1E71:2019.0009 failed with error -22 [ 159.240998][ T23] usb 2-1: USB disconnect, device number 6 [ 159.562851][ T7391] netlink: 16 bytes leftover after parsing attributes in process `syz.0.515'. [ 159.937103][ T7406] mmap: syz.2.519 (7406) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 160.703178][ T7428] loop0: detected capacity change from 0 to 512 [ 160.783313][ T7428] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 160.856056][ T7428] System zones: 1-12 [ 160.857672][ T7404] loop4: detected capacity change from 0 to 40427 [ 160.876009][ T7428] EXT4-fs error (device loop0): dx_probe:823: inode #2: comm syz.0.528: Directory hole found for htree index block 0 [ 160.889672][ T7404] F2FS-fs (loop4): invalid crc value [ 160.923231][ T7404] F2FS-fs (loop4): Found nat_bits in checkpoint [ 160.924763][ T7428] EXT4-fs (loop0): Remounting filesystem read-only [ 160.937248][ T7428] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -117 [ 160.946149][ T7428] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117 [ 160.963477][ T7428] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.192007][ T7404] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 161.236063][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.481681][ T6445] syz-executor: attempt to access beyond end of device [ 161.481681][ T6445] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 161.517015][ T6445] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 162.108971][ T7471] loop0: detected capacity change from 0 to 4096 [ 162.315845][ T7471] ntfs: volume version 3.1. [ 163.234610][ T5850] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 163.308716][ T7487] loop0: detected capacity change from 0 to 32768 [ 163.413796][ T7483] loop2: detected capacity change from 0 to 32768 [ 163.439159][ T5850] usb 5-1: Using ep0 maxpacket: 32 [ 163.457404][ T5850] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 97, changing to 10 [ 163.495783][ T5850] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24929, setting to 1024 [ 163.524570][ T5850] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 163.554046][ T7483] read_mapping_page failed! [ 163.571803][ T5850] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 163.595196][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 163.622838][ T5850] usb 5-1: Product: syz [ 163.637622][ T5850] usb 5-1: Manufacturer: syz [ 163.652483][ T5850] usb 5-1: SerialNumber: syz [ 163.659810][ T969] IPVS: starting estimator thread 0... [ 163.689581][ T113] read_mapping_page failed! [ 163.696372][ T5850] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input9 [ 163.780610][ T7489] loop1: detected capacity change from 0 to 32768 [ 163.795808][ T7494] IPVS: using max 21 ests per chain, 50400 per kthread [ 163.952671][ T7489] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 164.115175][ T5858] usb 5-1: USB disconnect, device number 2 [ 164.150510][ T7489] XFS (loop1): Ending clean mount [ 164.208458][ T7489] XFS (loop1): Quotacheck needed: Please wait. [ 164.236830][ T5858] appletouch 5-1:1.0: input: appletouch disconnected [ 164.354446][ T7489] XFS (loop1): Quotacheck: Done. [ 164.489274][ T7511] loop0: detected capacity change from 0 to 4096 [ 164.511128][ T7511] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 164.543779][ T7511] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 4096) [ 164.570858][ T7517] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 164.882033][ T7523] loop4: detected capacity change from 0 to 256 [ 164.988713][ T7523] FAT-fs (loop4): Directory bread(block 64) failed [ 165.003207][ T7523] FAT-fs (loop4): Directory bread(block 65) failed [ 165.031455][ T7523] FAT-fs (loop4): Directory bread(block 66) failed [ 165.057633][ T7523] FAT-fs (loop4): Directory bread(block 67) failed [ 165.065368][ T7523] FAT-fs (loop4): Directory bread(block 68) failed [ 165.072037][ T7523] FAT-fs (loop4): Directory bread(block 69) failed [ 165.090015][ T7523] FAT-fs (loop4): Directory bread(block 70) failed [ 165.100339][ T7523] FAT-fs (loop4): Directory bread(block 71) failed [ 165.114902][ T7523] FAT-fs (loop4): Directory bread(block 72) failed [ 165.121518][ T7523] FAT-fs (loop4): Directory bread(block 73) failed [ 165.304587][ T969] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 165.457322][ T7538] snd_virmidi snd_virmidi.0: control 0:9:32769:syz0:3106 is already present [ 165.523266][ T5785] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 165.524055][ T969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 165.565997][ T969] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.602487][ T969] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 165.649988][ T969] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.688750][ T969] usb 3-1: config 0 descriptor?? [ 165.752930][ T7543] loop4: detected capacity change from 0 to 2048 [ 165.779180][ T7543] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 165.822457][ T7543] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 166.148161][ T969] zydacron 0003:13EC:0006.000A: unknown main item tag 0x6 [ 166.170689][ T969] zydacron 0003:13EC:0006.000A: hidraw0: USB HID v0.00 Device [HID 13ec:0006] on usb-dummy_hcd.2-1/input0 [ 166.218191][ T7549] loop4: detected capacity change from 0 to 4096 [ 166.350807][ T7549] ntfs: volume version 3.1. [ 166.422518][ T5858] usb 3-1: USB disconnect, device number 10 [ 166.588180][ T7554] loop1: detected capacity change from 0 to 512 [ 166.603898][ T7554] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e02c, mo2=0002] [ 166.624194][ T7554] System zones: 1-12 [ 166.642759][ T7554] EXT4-fs error (device loop1): dx_probe:823: inode #2: comm syz.1.578: Directory hole found for htree index block 0 [ 166.661072][ T7554] EXT4-fs (loop1): Remounting filesystem read-only [ 166.669176][ T7554] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -117 [ 166.678905][ T7554] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 166.688601][ T7554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.746716][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.940445][ T7562] loop0: detected capacity change from 0 to 8 [ 167.060005][ T7566] loop4: detected capacity change from 0 to 512 [ 167.096464][ T7566] EXT4-fs: Ignoring removed nomblk_io_submit option [ 167.110214][ T7566] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 167.118429][ T7566] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01d, mo2=0102] [ 167.127311][ T7566] EXT4-fs (loop4): couldn't mount RDWR because of unsupported optional features (80) [ 167.137361][ T7566] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features [ 167.148249][ T7566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 167.173871][ T7566] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.582: dx entry: limit 65535 != root limit 120 [ 167.186225][ T7566] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.582: Corrupt directory, running e2fsck is recommended [ 167.201063][ T7566] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.582: path /71/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 167.351111][ T6445] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.834433][ T5850] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 167.911276][ T7593] loop2: detected capacity change from 0 to 64 [ 167.917784][ T5877] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 168.044616][ T5850] usb 2-1: Using ep0 maxpacket: 8 [ 168.069739][ T5850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.082581][ T5850] usb 2-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 168.096911][ T5850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.116511][ T5877] usb 1-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 168.119000][ T5850] usb 2-1: config 0 descriptor?? [ 168.134093][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.149409][ T7597] loop2: detected capacity change from 0 to 2048 [ 168.159479][ T5877] usb 1-1: config 0 descriptor?? [ 168.172611][ T5877] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 168.187394][ T5877] dvb_usb_af9015: probe of 1-1:0.0 failed with error -22 [ 168.216460][ T7597] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 168.230410][ T7597] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 168.372811][ T7599] loop2: detected capacity change from 0 to 128 [ 168.397432][ T7599] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 168.404223][ T969] usb 1-1: USB disconnect, device number 8 [ 168.439036][ T7599] syz.2.599: attempt to access beyond end of device [ 168.439036][ T7599] loop2: rw=0, sector=13269809, nr_sectors = 1 limit=128 [ 168.453612][ T7599] sysv_free_block: trying to free block not in datazone [ 168.521895][ T5787] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 168.568000][ T5850] megaworld 0003:07B5:0312.000B: unknown main item tag 0x0 [ 168.584819][ T5850] megaworld 0003:07B5:0312.000B: unknown main item tag 0x0 [ 168.592329][ T5850] megaworld 0003:07B5:0312.000B: unknown main item tag 0x0 [ 168.600943][ T5850] megaworld 0003:07B5:0312.000B: unknown main item tag 0x0 [ 168.609436][ T5850] megaworld 0003:07B5:0312.000B: unknown main item tag 0x0 [ 168.617729][ T5850] megaworld 0003:07B5:0312.000B: unknown main item tag 0x0 [ 168.627041][ T5850] megaworld 0003:07B5:0312.000B: unknown main item tag 0x0 [ 168.634377][ T5850] megaworld 0003:07B5:0312.000B: unknown main item tag 0x0 [ 168.641636][ T5850] megaworld 0003:07B5:0312.000B: unknown main item tag 0x0 [ 168.650115][ T5850] megaworld 0003:07B5:0312.000B: unknown main item tag 0x0 [ 168.658164][ T5850] megaworld 0003:07B5:0312.000B: unknown main item tag 0x0 [ 168.669228][ T5850] megaworld 0003:07B5:0312.000B: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.1-1/input0 [ 168.680727][ T5850] megaworld 0003:07B5:0312.000B: no inputs found [ 168.789710][ T5877] usb 2-1: USB disconnect, device number 7 [ 169.634760][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 169.746322][ T7628] loop0: detected capacity change from 0 to 64 [ 169.803568][ T7630] loop1: detected capacity change from 0 to 512 [ 169.827927][ T7630] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 169.844627][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 169.859459][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.863368][ T7630] EXT4-fs (loop1): 1 truncate cleaned up [ 169.881584][ T23] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 169.904528][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.915682][ T7630] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 169.936123][ T23] usb 5-1: config 0 descriptor?? [ 170.177843][ T5785] EXT4-fs error (device loop1): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 46 (inode size 256) [ 170.228307][ T5785] EXT4-fs error (device loop1): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 46 (inode size 256) [ 170.381659][ T23] koneplus 0003:1E7D:2E22.000C: ignoring exceeding usage max [ 170.418888][ T23] koneplus 0003:1E7D:2E22.000C: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.4-1/input0 [ 170.490850][ T5792] Bluetooth: hci3: unknown advertising packet type: 0x70 [ 170.604512][ T23] usb 5-1: USB disconnect, device number 3 [ 170.693392][ T5785] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.758827][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.896157][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.993554][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.073698][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.624507][ T788] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 171.779557][ T7668] loop0: detected capacity change from 0 to 512 [ 171.801975][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 171.813073][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 171.824897][ T5794] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 171.834443][ T788] usb 5-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 171.843585][ T788] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.854966][ T5794] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 171.862186][ T7668] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 171.864189][ T788] usb 5-1: config 0 descriptor?? [ 171.884914][ T5794] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 171.897584][ T788] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 171.904904][ T5794] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 171.933470][ T788] dvb_usb_af9015: probe of 5-1:0.0 failed with error -22 [ 171.956002][ T7668] EXT4-fs (loop0): 1 truncate cleaned up [ 171.986398][ T7668] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 172.146860][ T788] usb 5-1: USB disconnect, device number 4 [ 172.290388][ T5786] EXT4-fs error (device loop0): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 46 (inode size 256) [ 172.321893][ T5786] EXT4-fs error (device loop0): ext4_lookup:1858: inode #11: comm syz-executor: iget: bad extra_isize 46 (inode size 256) [ 172.646669][ T7685] netlink: 20 bytes leftover after parsing attributes in process `syz.2.632'. [ 172.816746][ T5786] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.946408][ T11] IPVS: stopping master sync thread 7131 ... [ 172.971096][ T7667] chnl_net:caif_netlink_parms(): no params data found [ 173.382114][ T11] hsr_slave_0: left promiscuous mode [ 173.402477][ T11] hsr_slave_1: left promiscuous mode [ 173.427822][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.449754][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.470517][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.504598][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.520145][ T11] bridge_slave_1: left allmulticast mode [ 173.535320][ T11] bridge_slave_1: left promiscuous mode [ 173.554631][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.576510][ T11] bridge_slave_0: left allmulticast mode [ 173.582316][ T11] bridge_slave_0: left promiscuous mode [ 173.604581][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.712095][ T11] veth1_macvtap: left promiscuous mode [ 173.728262][ T11] veth0_macvtap: left promiscuous mode [ 173.751143][ T11] veth1_vlan: left promiscuous mode [ 173.764795][ T11] veth0_vlan: left promiscuous mode [ 173.852256][ T5794] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 173.867377][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 173.877722][ T5794] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 173.886373][ T5794] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 173.895983][ T5794] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 173.903863][ T5794] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 173.944839][ T5794] Bluetooth: hci1: command tx timeout [ 174.592714][ T11] team0 (unregistering): Port device team_slave_1 removed [ 174.639035][ T11] team0 (unregistering): Port device C removed [ 174.677907][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.727492][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.231099][ T11] bond0 (unregistering): Released all slaves [ 175.360725][ T7667] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.387834][ T7667] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.401965][ T7667] bridge_slave_0: entered allmulticast mode [ 175.411443][ T7667] bridge_slave_0: entered promiscuous mode [ 175.448167][ T7667] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.455770][ T7667] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.462992][ T7667] bridge_slave_1: entered allmulticast mode [ 175.470906][ T7667] bridge_slave_1: entered promiscuous mode [ 175.531374][ T7667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 175.545814][ T7667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.649606][ T7667] team0: Port device team_slave_0 added [ 175.702567][ T7667] team0: Port device team_slave_1 added [ 175.795236][ T7667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.802246][ T7667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.838277][ T7667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.905768][ T7667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.913075][ T7667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.947116][ T5794] Bluetooth: hci3: command tx timeout [ 175.957880][ T7667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 176.024643][ T5794] Bluetooth: hci1: command tx timeout [ 176.097608][ T7667] hsr_slave_0: entered promiscuous mode [ 176.111428][ T7667] hsr_slave_1: entered promiscuous mode [ 176.119476][ T7667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 176.132772][ T7667] Cannot create hsr debugfs directory [ 176.145264][ T11] ------------[ cut here ]------------ [ 176.151203][ T11] WARNING: CPU: 0 PID: 11 at net/xfrm/xfrm_state.c:2997 xfrm_state_fini+0x25c/0x2b0 [ 176.161058][ T11] Modules linked in: [ 176.165603][ T11] CPU: 0 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 176.173031][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 176.183245][ T11] Workqueue: netns cleanup_net [ 176.188285][ T11] RIP: 0010:xfrm_state_fini+0x25c/0x2b0 [ 176.193883][ T11] Code: 5c 41 5d 41 5e 41 5f 5d e9 81 20 00 00 e8 4c e6 66 f8 0f 0b e9 2c fe ff ff e8 40 e6 66 f8 0f 0b e9 91 fe ff ff e8 34 e6 66 f8 <0f> 0b 43 80 3c 2c 00 0f 85 fa fe ff ff e9 fd fe ff ff e8 1d e6 66 [ 176.214045][ T11] RSP: 0018:ffffc90000107a98 EFLAGS: 00010293 [ 176.220314][ T11] RAX: ffffffff891ea96c RBX: ffff88802f948000 RCX: ffff88801be43c00 [ 176.228400][ T11] RDX: 0000000000000000 RSI: ffffffff8aaabaa0 RDI: ffffffff8afc70c0 [ 176.236796][ T11] RBP: 0000000000000040 R08: ffffffff90da550f R09: 1ffffffff21b4aa1 [ 176.244887][ T11] R10: dffffc0000000000 R11: fffffbfff21b4aa2 R12: 1ffff11005f29274 [ 176.252902][ T11] R13: dffffc0000000000 R14: ffff88802f9493a0 R15: ffff88802dd46a80 [ 176.260975][ T11] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 176.270072][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 176.276750][ T11] CR2: 00007f074afef9b0 CR3: 0000000059a12000 CR4: 00000000003506f0 [ 176.284855][ T11] Call Trace: [ 176.288170][ T11] [ 176.291155][ T11] xfrm_net_exit+0x25/0x60 [ 176.295731][ T11] cleanup_net+0x6f4/0xb90 [ 176.300206][ T11] ? ops_free_list+0x3b0/0x3b0 [ 176.305846][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 176.311096][ T11] ? process_scheduled_works+0x957/0x15b0 [ 176.317017][ T11] ? process_scheduled_works+0x957/0x15b0 [ 176.322791][ T11] process_scheduled_works+0xa45/0x15b0 [ 176.328491][ T11] ? assign_work+0x400/0x400 [ 176.333144][ T11] ? assign_work+0x39e/0x400 [ 176.337855][ T11] worker_thread+0xa55/0xfc0 [ 176.342523][ T11] kthread+0x2fa/0x390 [ 176.346776][ T11] ? pr_cont_work+0x560/0x560 [ 176.351505][ T11] ? kthread_blkcg+0xd0/0xd0 [ 176.356273][ T11] ret_from_fork+0x48/0x80 [ 176.360735][ T11] ? kthread_blkcg+0xd0/0xd0 [ 176.365440][ T11] ret_from_fork_asm+0x11/0x20 [ 176.370268][ T11] [ 176.373327][ T11] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 176.380650][ T11] CPU: 0 PID: 11 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 176.388056][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 176.398145][ T11] Workqueue: netns cleanup_net [ 176.402957][ T11] Call Trace: [ 176.406253][ T11] [ 176.409205][ T11] dump_stack_lvl+0x16c/0x230 [ 176.413906][ T11] ? show_regs_print_info+0x20/0x20 [ 176.419141][ T11] ? load_image+0x3b0/0x3b0 [ 176.423669][ T11] panic+0x2c0/0x710 [ 176.427602][ T11] ? bpf_jit_dump+0xd0/0xd0 [ 176.432159][ T11] ? ret_from_fork_asm+0x11/0x20 [ 176.437118][ T11] __warn+0x2e0/0x470 [ 176.441120][ T11] ? xfrm_state_fini+0x25c/0x2b0 [ 176.446086][ T11] ? xfrm_state_fini+0x25c/0x2b0 [ 176.451056][ T11] report_bug+0x2be/0x4f0 [ 176.455418][ T11] ? xfrm_state_fini+0x25c/0x2b0 [ 176.460391][ T11] ? xfrm_state_fini+0x25c/0x2b0 [ 176.465352][ T11] ? xfrm_state_fini+0x25e/0x2b0 [ 176.470310][ T11] handle_bug+0xcf/0x120 [ 176.474575][ T11] exc_invalid_op+0x1a/0x50 [ 176.479094][ T11] asm_exc_invalid_op+0x1a/0x20 [ 176.483978][ T11] RIP: 0010:xfrm_state_fini+0x25c/0x2b0 [ 176.489537][ T11] Code: 5c 41 5d 41 5e 41 5f 5d e9 81 20 00 00 e8 4c e6 66 f8 0f 0b e9 2c fe ff ff e8 40 e6 66 f8 0f 0b e9 91 fe ff ff e8 34 e6 66 f8 <0f> 0b 43 80 3c 2c 00 0f 85 fa fe ff ff e9 fd fe ff ff e8 1d e6 66 [ 176.509156][ T11] RSP: 0018:ffffc90000107a98 EFLAGS: 00010293 [ 176.515238][ T11] RAX: ffffffff891ea96c RBX: ffff88802f948000 RCX: ffff88801be43c00 [ 176.523217][ T11] RDX: 0000000000000000 RSI: ffffffff8aaabaa0 RDI: ffffffff8afc70c0 [ 176.531201][ T11] RBP: 0000000000000040 R08: ffffffff90da550f R09: 1ffffffff21b4aa1 [ 176.539196][ T11] R10: dffffc0000000000 R11: fffffbfff21b4aa2 R12: 1ffff11005f29274 [ 176.547180][ T11] R13: dffffc0000000000 R14: ffff88802f9493a0 R15: ffff88802dd46a80 [ 176.555186][ T11] ? xfrm_state_fini+0x25c/0x2b0 [ 176.560145][ T11] ? xfrm_state_fini+0x25c/0x2b0 [ 176.565101][ T11] xfrm_net_exit+0x25/0x60 [ 176.569528][ T11] cleanup_net+0x6f4/0xb90 [ 176.573962][ T11] ? ops_free_list+0x3b0/0x3b0 [ 176.578747][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 176.583954][ T11] ? process_scheduled_works+0x957/0x15b0 [ 176.589690][ T11] ? process_scheduled_works+0x957/0x15b0 [ 176.595424][ T11] process_scheduled_works+0xa45/0x15b0 [ 176.601032][ T11] ? assign_work+0x400/0x400 [ 176.605639][ T11] ? assign_work+0x39e/0x400 [ 176.610245][ T11] worker_thread+0xa55/0xfc0 [ 176.614877][ T11] kthread+0x2fa/0x390 [ 176.618956][ T11] ? pr_cont_work+0x560/0x560 [ 176.623645][ T11] ? kthread_blkcg+0xd0/0xd0 [ 176.628255][ T11] ret_from_fork+0x48/0x80 [ 176.632684][ T11] ? kthread_blkcg+0xd0/0xd0 [ 176.637287][ T11] ret_from_fork_asm+0x11/0x20 [ 176.642074][ T11] [ 176.645327][ T11] Kernel Offset: disabled [ 176.649710][ T11] Rebooting in 86400 seconds..