last executing test programs: 15.172155485s ago: executing program 3 (id=250): openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)) 15.128250206s ago: executing program 3 (id=251): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n'], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000340), 0x894, r0}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) 15.069607697s ago: executing program 3 (id=252): write$sysctl(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x3}, 0x6) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) 15.036694628s ago: executing program 3 (id=253): r0 = syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x14, &(0x7f0000002440)=ANY=[], 0xff, 0xc19, &(0x7f0000002140)="$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") r1 = syz_clone(0x1080000, 0x0, 0xfffffe81, 0x0, 0x0, 0x0) r2 = gettid() pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000140)={r3, r0, 0x68000000}) 14.8525438s ago: executing program 3 (id=254): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r0, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) 14.359285607s ago: executing program 3 (id=255): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000200)=ANY=[], 0xfdef) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x6, 0x8, 0x42474752, 0x9, 0x6, 0x2, 0x6, 0xa6e, 0x0, 0x4, 0x1, 0x7}}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x5, 0x0, 0x419}}}, 0x7) 14.190058s ago: executing program 32 (id=255): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000200)=ANY=[], 0xfdef) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x6, 0x8, 0x42474752, 0x9, 0x6, 0x2, 0x6, 0xa6e, 0x0, 0x4, 0x1, 0x7}}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x5, 0x0, 0x419}}}, 0x7) 3.281975434s ago: executing program 1 (id=336): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 3.087899287s ago: executing program 1 (id=338): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x2128, r0}, 0x0) landlock_restrict_self(r1, 0x0) link(&(0x7f0000000140)='.\x00', &(0x7f00000001c0)='./file0\x00') 2.969453609s ago: executing program 1 (id=340): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x2de8}}, 0x240088c1) 2.85185315s ago: executing program 1 (id=342): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000002000)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.064498061s ago: executing program 4 (id=352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0bfc0000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0) writev(r0, &(0x7f0000000040), 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0) 1.992259172s ago: executing program 4 (id=353): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0xa8400, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x8000203d}) 1.917338733s ago: executing program 4 (id=355): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='percpu_free_percpu\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x110, 0x0, 0x220, 0x220, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @local, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 1.846547154s ago: executing program 4 (id=357): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) poll(&(0x7f00000001c0)=[{r0, 0x81}, {r0, 0x2}], 0x2, 0x400) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 1.697225636s ago: executing program 4 (id=358): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000001280)=[{{&(0x7f0000000440)=@pppol2tpv3in6, 0x80, &(0x7f00000008c0)=[{&(0x7f0000001340)=""/147, 0xc8}, {&(0x7f0000000740)=""/250, 0xfa}, {&(0x7f0000000680)=""/64, 0x40}, {&(0x7f00000004c0)=""/49, 0x31}, {&(0x7f0000000840)=""/98, 0x62}], 0x5, &(0x7f00000005c0)=""/59, 0x3b}, 0x28}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000940)=""/7, 0x7}, {&(0x7f0000000980)=""/28, 0x1c}, {&(0x7f00000009c0)=""/178, 0xb2}, {&(0x7f0000000a80)=""/35, 0x23}, {&(0x7f0000000ac0), 0xd}, {&(0x7f0000000b00)=""/190, 0xbe}, {&(0x7f0000000bc0)=""/60, 0xffffffffffffffcb}, {&(0x7f0000000c00)=""/63, 0x3f}, {&(0x7f0000000c40)=""/204, 0xcc}], 0x9, &(0x7f0000000e00)=""/62, 0x3e}, 0x1}, {{&(0x7f0000000e40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000ec0)=""/43, 0x2b}, {&(0x7f0000000f00)=""/222, 0xde}, {&(0x7f0000001000)=""/196, 0xc4}, {&(0x7f0000001100)=""/140, 0x8c}], 0x4, &(0x7f0000001200)=""/78, 0x4e}, 0x9}], 0x3, 0x2, 0x0) io_setup(0x3, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 1.532843668s ago: executing program 0 (id=361): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000080000000000000000400000095"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r1, 0x9, 0x0) 1.43806503s ago: executing program 0 (id=363): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xff00000000000000, 0xac14140c}, 0xff000000}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) 1.385998061s ago: executing program 2 (id=364): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(r0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setitimer(0x1, 0x0, 0x0) 1.294486072s ago: executing program 0 (id=365): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x109001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) ioctl$PPPIOCGFLAGS1(r1, 0x8004745a, &(0x7f0000000080)) 1.083146385s ago: executing program 0 (id=366): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000340)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "1b00", 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc, 0x8, 0x8, 0x6, 0x6}]}}}}}}}}, 0x0) 923.000907ms ago: executing program 0 (id=367): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x5, 0x4, 0x9, 0x8}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) 758.28201ms ago: executing program 0 (id=368): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) 628.405371ms ago: executing program 2 (id=369): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x4) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {0x0, 0x7, 0x0, 0x804}, 0x7, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0xfffffffd, 0x3, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0x80000, 0x0, 0x8000180d, 0x0, 0xae4d, 0x0, 0x0, 0x3], [0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x101, 0x1, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42c, 0x0, 0x0, 0x400, 0x0, 0xed0, 0x4000000], [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3e8, 0xfffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0xf, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffb]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) write$uinput_user_dev(r0, &(0x7f0000000980)={'syz0\x00', {0xc, 0xc, 0x8ce, 0x8}, 0x28, [0x6, 0x9, 0x8f28, 0x987, 0xfffff5b6, 0x80000001, 0x8, 0x80000000, 0x200, 0x8001, 0x36c9, 0xec, 0x1, 0xfffffffb, 0x7fffffff, 0x1, 0x6, 0x5d9, 0x3, 0x0, 0x5, 0xb, 0x9, 0xc9e2, 0x9, 0x7, 0x3, 0xe, 0x8, 0x2aed2b6e, 0x46, 0x7f, 0x400, 0x8000, 0x2, 0x0, 0x3, 0x0, 0x7, 0xa4, 0x4, 0x3, 0x2, 0x6, 0xfffffff2, 0x6, 0x3, 0x7, 0x5, 0x200, 0x2, 0x0, 0x8, 0x10, 0x3, 0x1, 0x40, 0x80000001, 0x9, 0x6, 0x8, 0xcd2, 0x0, 0x5], [0xe9, 0xf, 0x1000, 0x5, 0xffd, 0x9, 0x346d353, 0x6, 0x2f, 0xff, 0x82000000, 0x7f, 0x7fff, 0x3, 0x80b, 0x1, 0x3d5, 0x10000, 0xffff, 0x6, 0xb, 0x5, 0x3, 0x10, 0x476, 0x80000000, 0x5, 0x40, 0x4, 0x10, 0x3, 0xfffffff8, 0x4, 0x3, 0x3f1, 0x2, 0xc, 0x91, 0x30000000, 0xfffffff8, 0x4, 0x1ff, 0x2, 0x1c000, 0x5, 0x7, 0x80000001, 0x7, 0x3, 0x9, 0x22f5688b, 0xd6c, 0xf6e5, 0xdf, 0x5, 0x2, 0x2, 0xfffffff8, 0x4, 0xffff, 0xb, 0x1, 0x1, 0x7], [0x0, 0x48, 0x0, 0xa13e, 0x104, 0x3, 0x3, 0x9, 0x8, 0x4, 0x8000, 0x3, 0x5, 0x2, 0x9, 0x5, 0x6, 0x401, 0x9, 0x80000000, 0x0, 0xf, 0x9, 0x6, 0x0, 0x0, 0x8000, 0x7fff, 0x5, 0x5, 0x14580ffb, 0x6, 0x5, 0x1, 0x1, 0x80, 0x400, 0x8, 0xb0, 0x8, 0x9, 0x7, 0x6, 0x97af, 0x7, 0x3, 0x18000, 0x101, 0x3, 0x4, 0xae3, 0x4, 0x8, 0xec, 0x3a, 0x7, 0x186, 0x0, 0x38000000, 0x8b3, 0x9, 0x7, 0x9, 0x4], [0x200, 0x89, 0x0, 0x2, 0x1, 0x7f, 0xa, 0x3, 0x9, 0x6, 0x0, 0x4, 0x0, 0x3, 0x4d1d, 0x2, 0x6, 0x4, 0x5, 0x0, 0x9, 0x9, 0xff, 0xd, 0x4, 0x2, 0x0, 0xe6, 0x6, 0x81, 0xdbe, 0xffff34e6, 0x0, 0x3, 0x800, 0x8000, 0x7, 0xffffffff, 0x376d, 0x3, 0x2, 0x1a, 0x8, 0xe, 0x7, 0x80, 0x2478e471, 0x2, 0x8, 0x4, 0x40000004, 0x1, 0x868, 0x8001, 0x8, 0xb, 0x8, 0xd, 0x80, 0x400004, 0x1, 0x7, 0x8c, 0x200]}, 0x45c) 566.500972ms ago: executing program 4 (id=370): ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x108c8, &(0x7f0000000080)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c00598f2f223a0a12f76404ad3bd59a04fbd75d1008c039c51a2a013e63af1c9ed7416faa1e2ea98d0f1c7337a5c81920988a4299a77054cdb12285fd7a0e5b43382d962372b73042593a5bd6b7db4a1b3721c62f11018727c29f3a1bd1e554474ea0d1da2a20b205df342a04a34b65e16a23e8e7811a984963073ebcbead85f9e4332bdef4c1ce54a1c6f7a47b75aa95b9e8cb616be40a0000b1309ee426d1803ef09abb9509846c34b9ac0bf109cedbd12c850effda9ae677566159f9c83da7ff6e247e3ac43c0a663c8c83650692e474bac2c047b238601bd5187d6bed82fe2034512ef11b74a98252198c4402bcf3165561157678e9d50831c27d1094a04d8c7607d7164033cda7a81704824d3107f232de8c31f57de3f78727828e8206403db4", @ANYRES32], 0x1, 0x445c, &(0x7f000000c300)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x7351, 0x8001) ioctl$FITRIM(r0, 0x40406f06, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x100}) 471.362333ms ago: executing program 2 (id=371): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r1, 0x29, 0xc8, 0x0, 0xc000000) socket(0xa, 0x3, 0x3a) close_range(r0, 0xffffffffffffffff, 0x0) 333.683595ms ago: executing program 1 (id=372): r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000340)=[{}], 0x1, 0x1000) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x1}) 300.643816ms ago: executing program 2 (id=373): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000002c0)='rxrpc_peer\x00', r1}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, 'p'}], 0x18}, 0x0) 165.059428ms ago: executing program 2 (id=374): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000140), 0x8) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x4}, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x7, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x4}, 0x1c) 18.26137ms ago: executing program 1 (id=375): syz_io_uring_setup(0x44e, &(0x7f00000000c0)={0x0, 0x809abf, 0x1000, 0xfffffffe, 0x26}, 0x0, 0x0) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYRES8=0x0], 0xfd, 0x1bf, &(0x7f0000000300)="$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") mount$nfs(&(0x7f0000000100)='{.', 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) 0s ago: executing program 2 (id=376): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x81ff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.224' (ED25519) to the list of known hosts. syzkaller login: [ 63.885710][ T5776] cgroup: Unknown subsys name 'net' [ 64.050114][ T5776] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.439078][ T5776] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.845065][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.860118][ T5796] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.868353][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 66.877864][ T5796] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 66.886047][ T5796] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 66.894801][ T5796] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 66.902540][ T5796] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 66.909996][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 66.927328][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 66.943983][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 66.944014][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 66.959354][ T5798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.967536][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 66.976095][ T5799] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 66.976369][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 66.984689][ T5799] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 66.997639][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.998824][ T5799] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.005598][ T5797] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.013254][ T5799] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.020469][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.034195][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.043077][ T5798] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.050842][ T5798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.311896][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 67.459356][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.466889][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.474406][ T5790] bridge_slave_0: entered allmulticast mode [ 67.481471][ T5790] bridge_slave_0: entered promiscuous mode [ 67.560266][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.568357][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.575777][ T5790] bridge_slave_1: entered allmulticast mode [ 67.582459][ T5790] bridge_slave_1: entered promiscuous mode [ 67.621869][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.641590][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 67.656000][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 67.721342][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 67.766628][ T5790] team0: Port device team_slave_0 added [ 67.791112][ T5790] team0: Port device team_slave_1 added [ 67.797268][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 67.884925][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.891907][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.918593][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.935169][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.942414][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.949688][ T5785] bridge_slave_0: entered allmulticast mode [ 67.956729][ T5785] bridge_slave_0: entered promiscuous mode [ 67.965152][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.972262][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.979686][ T5785] bridge_slave_1: entered allmulticast mode [ 67.986872][ T5785] bridge_slave_1: entered promiscuous mode [ 67.999263][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.006257][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.032460][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.129872][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.137397][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.144933][ T5794] bridge_slave_0: entered allmulticast mode [ 68.151591][ T5794] bridge_slave_0: entered promiscuous mode [ 68.161242][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.173564][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.197044][ T5790] hsr_slave_0: entered promiscuous mode [ 68.206425][ T5790] hsr_slave_1: entered promiscuous mode [ 68.213672][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.220747][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.228774][ T5794] bridge_slave_1: entered allmulticast mode [ 68.236307][ T5794] bridge_slave_1: entered promiscuous mode [ 68.253062][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.260327][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.267868][ T5789] bridge_slave_0: entered allmulticast mode [ 68.274743][ T5789] bridge_slave_0: entered promiscuous mode [ 68.309560][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.316853][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.324236][ T5789] bridge_slave_1: entered allmulticast mode [ 68.330967][ T5789] bridge_slave_1: entered promiscuous mode [ 68.360672][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.376937][ T5785] team0: Port device team_slave_0 added [ 68.411079][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.422168][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.447094][ T5785] team0: Port device team_slave_1 added [ 68.458981][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.523279][ T5794] team0: Port device team_slave_0 added [ 68.547744][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.554866][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.580810][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.597581][ T5789] team0: Port device team_slave_0 added [ 68.605400][ T5789] team0: Port device team_slave_1 added [ 68.621795][ T5794] team0: Port device team_slave_1 added [ 68.642965][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.650041][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.677923][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.729419][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.736691][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.762926][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.779310][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.786671][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.812675][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.825416][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.832384][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.858793][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.870919][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.878125][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.904124][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.924497][ T5788] Bluetooth: hci2: command tx timeout [ 68.953972][ T5785] hsr_slave_0: entered promiscuous mode [ 68.960267][ T5785] hsr_slave_1: entered promiscuous mode [ 68.967009][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.975188][ T5785] Cannot create hsr debugfs directory [ 69.074418][ T5789] hsr_slave_0: entered promiscuous mode [ 69.083684][ T5797] Bluetooth: hci1: command tx timeout [ 69.089588][ T5798] Bluetooth: hci0: command tx timeout [ 69.089695][ T5789] hsr_slave_1: entered promiscuous mode [ 69.095839][ T5788] Bluetooth: hci3: command tx timeout [ 69.106756][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.115195][ T5789] Cannot create hsr debugfs directory [ 69.132301][ T5794] hsr_slave_0: entered promiscuous mode [ 69.139896][ T5794] hsr_slave_1: entered promiscuous mode [ 69.146204][ T5794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.153950][ T5794] Cannot create hsr debugfs directory [ 69.337701][ T5790] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.381022][ T5790] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.391411][ T5790] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.438317][ T5790] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.540993][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.576547][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.590512][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.608537][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.664618][ T5789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.676199][ T5789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.724077][ T5789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.736886][ T5789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.749709][ T5794] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.761627][ T5794] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.784535][ T5794] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.796794][ T5794] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.842719][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.922615][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.952874][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.960157][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.000050][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.020092][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.043079][ T3484] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.050219][ T3484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.071969][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.105943][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.120661][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.127801][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.147434][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.154575][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.193139][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.200321][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.215264][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.222422][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.281436][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.343154][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.406117][ T3484] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.413378][ T3484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.448625][ T3484] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.455818][ T3484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.704241][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.800540][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.840237][ T5790] veth0_vlan: entered promiscuous mode [ 70.877420][ T5790] veth1_vlan: entered promiscuous mode [ 70.941153][ T5785] veth0_vlan: entered promiscuous mode [ 70.951667][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.977734][ T5785] veth1_vlan: entered promiscuous mode [ 71.005384][ T5788] Bluetooth: hci2: command tx timeout [ 71.019189][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.030881][ T5790] veth0_macvtap: entered promiscuous mode [ 71.041865][ T5790] veth1_macvtap: entered promiscuous mode [ 71.065661][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.096609][ T5785] veth0_macvtap: entered promiscuous mode [ 71.119564][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.138563][ T5790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.148590][ T5790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.160703][ T5790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.168884][ T5797] Bluetooth: hci1: command tx timeout [ 71.170135][ T5790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.174898][ T5798] Bluetooth: hci0: command tx timeout [ 71.189102][ T5788] Bluetooth: hci3: command tx timeout [ 71.217204][ T5785] veth1_macvtap: entered promiscuous mode [ 71.286384][ T5789] veth0_vlan: entered promiscuous mode [ 71.330216][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.350250][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.368686][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.384667][ T5794] veth0_vlan: entered promiscuous mode [ 71.400369][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.411204][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.422980][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.433710][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.449637][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.459250][ T5785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.468356][ T5785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.478053][ T5785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.487229][ T5785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.508649][ T5794] veth1_vlan: entered promiscuous mode [ 71.529524][ T5789] veth1_vlan: entered promiscuous mode [ 71.569477][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.581094][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.600495][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.617741][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.655541][ T5794] veth0_macvtap: entered promiscuous mode [ 71.691332][ T5794] veth1_macvtap: entered promiscuous mode [ 71.717458][ T5789] veth0_macvtap: entered promiscuous mode [ 71.773720][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.790065][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.814776][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.841782][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.863172][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.875253][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.887457][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.904808][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.916855][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.926826][ T5794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.937627][ T5794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.949423][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.968090][ T5789] veth1_macvtap: entered promiscuous mode [ 72.010273][ T5794] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.020588][ T5794] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.029501][ T5794] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.041464][ T5794] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.084127][ T76] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.092168][ T76] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.141630][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.156249][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.169517][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.180521][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.192106][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.205567][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.226809][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.260207][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.289302][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.300384][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.315750][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.327254][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.361552][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.381549][ T5888] serio: Serial port ttyS3 [ 72.390523][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.411302][ T5789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.421031][ T5789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.429888][ T5789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.438747][ T5789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.628656][ T5892] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 72.655331][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.675670][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.741821][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.763599][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.780454][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.804011][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.824502][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.832366][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.040388][ T5897] syz.2.3[5897]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 73.100484][ T5798] Bluetooth: hci2: command tx timeout [ 73.124573][ T5897] loop2: detected capacity change from 0 to 2048 [ 73.167994][ T5901] Driver unsupported XDP return value 0 on prog (id 3) dev N/A, expect packet loss! [ 73.194678][ T5897] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 73.253917][ T5798] Bluetooth: hci0: command tx timeout [ 73.259418][ T5798] Bluetooth: hci3: command tx timeout [ 73.265467][ T5788] Bluetooth: hci1: command tx timeout [ 73.832999][ T5905] loop3: detected capacity change from 0 to 32768 [ 73.863518][ T5905] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.12 (5905) [ 73.914126][ T5905] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 73.953943][ T5905] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 73.962748][ T5905] BTRFS info (device loop3): setting nodatacow, compression disabled [ 73.993472][ T5905] BTRFS info (device loop3): max_inline at 0 [ 73.999553][ T5905] BTRFS info (device loop3): enabling disk space caching [ 74.016323][ T5905] BTRFS info (device loop3): turning off barriers [ 74.022803][ T5905] BTRFS info (device loop3): turning on flush-on-commit [ 74.051416][ T5905] BTRFS info (device loop3): doing ref verification [ 74.081926][ T5905] BTRFS info (device loop3): force clearing of disk cache [ 74.109065][ T5905] BTRFS info (device loop3): enabling ssd optimizations [ 74.118957][ T5903] loop0: detected capacity change from 0 to 40427 [ 74.137255][ T5905] BTRFS info (device loop3): max_inline at 4096 [ 74.180091][ T5905] BTRFS info (device loop3): disk space caching is enabled [ 74.204371][ T5903] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 74.235992][ T5903] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 74.304802][ T5903] F2FS-fs (loop0): Found nat_bits in checkpoint [ 74.437437][ T5905] BTRFS info (device loop3): auto enabling async discard [ 74.454629][ T5903] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 74.474689][ T5905] BTRFS info (device loop3): rebuilding free space tree [ 74.516379][ T5903] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 74.535156][ T5905] BTRFS info (device loop3): disabling free space tree [ 74.563587][ T5905] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 74.604359][ T5905] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 75.163648][ T5797] Bluetooth: hci2: command tx timeout [ 75.324643][ T5797] Bluetooth: hci3: command tx timeout [ 75.330113][ T5797] Bluetooth: hci1: command tx timeout [ 75.335801][ T5798] Bluetooth: hci0: command tx timeout [ 75.348829][ T5785] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 75.462343][ T5949] loop1: detected capacity change from 0 to 8192 [ 75.484265][ T5949] ======================================================= [ 75.484265][ T5949] WARNING: The mand mount option has been deprecated and [ 75.484265][ T5949] and is ignored by this kernel. Remove the mand [ 75.484265][ T5949] option from the mount to silence this warning. [ 75.484265][ T5949] ======================================================= [ 75.602709][ T5949] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 76.068411][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22'. [ 76.084279][ T5957] netlink: 28 bytes leftover after parsing attributes in process `syz.3.22'. [ 76.534635][ T5953] loop2: detected capacity change from 0 to 32768 [ 76.565196][ T5953] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.24 (5953) [ 76.621620][ T5953] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 76.647562][ T5953] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 76.673391][ T5953] BTRFS info (device loop2): turning on sync discard [ 76.680151][ T5953] BTRFS info (device loop2): allowing degraded mounts [ 76.713842][ T5965] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 76.753641][ T5953] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 76.786317][ T5953] BTRFS info (device loop2): trying to use backup root at mount time [ 76.823435][ T5953] BTRFS info (device loop2): enabling auto defrag [ 76.830039][ T5953] BTRFS info (device loop2): max_inline at 4096 [ 76.866616][ T5953] BTRFS info (device loop2): using free space tree [ 76.905006][ T5955] loop1: detected capacity change from 0 to 40427 [ 76.979070][ T5955] F2FS-fs (loop1): Invalid log blocks per segment (83886089) [ 77.025373][ T5955] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 77.065686][ T5955] F2FS-fs (loop1): invalid crc value [ 77.087244][ T12] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 77.164053][ T5955] F2FS-fs (loop1): Found nat_bits in checkpoint [ 77.173735][ T5953] BTRFS error (device loop2): failed to load root extent [ 77.193560][ T5953] BTRFS warning (device loop2): try to load backup roots slot 1 [ 77.215816][ T12] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 77.264292][ T5953] BTRFS warning (device loop2): couldn't read tree root [ 77.283536][ T5953] BTRFS warning (device loop2): try to load backup roots slot 2 [ 77.311478][ T12] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 77.332260][ T5953] BTRFS warning (device loop2): couldn't read tree root [ 77.347388][ T5953] BTRFS warning (device loop2): try to load backup roots slot 3 [ 77.388558][ T5953] BTRFS info (device loop2): enabling ssd optimizations [ 77.393683][ T5955] F2FS-fs (loop1): Start checkpoint disabled! [ 77.417923][ T5953] BTRFS info (device loop2): rebuilding free space tree [ 77.448530][ T5955] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 77.482708][ T5953] BTRFS info (device loop2): checking UUID tree [ 77.491063][ T5955] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 77.561259][ T5959] loop0: detected capacity change from 0 to 40427 [ 77.641331][ T5959] F2FS-fs (loop0): invalid crc value [ 77.700571][ T5959] F2FS-fs (loop0): Found nat_bits in checkpoint [ 77.943843][ T5959] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 78.125857][ T28] audit: type=1800 audit(1752526765.152:2): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.18" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 78.238144][ T6001] loop3: detected capacity change from 0 to 512 [ 78.255905][ T5790] syz-executor: attempt to access beyond end of device [ 78.255905][ T5790] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 78.257098][ T5794] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 78.282053][ T5790] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 78.317524][ T6001] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 78.394815][ T6001] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 78.418718][ T12] kworker/u4:1: attempt to access beyond end of device [ 78.418718][ T12] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 78.434509][ T12] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 78.451456][ T12] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 78.528875][ T6001] EXT4-fs (loop3): 1 truncate cleaned up [ 78.538305][ T6001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.675956][ T6001] EXT4-fs error (device loop3): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.3.33: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 78.702175][ T6001] EXT4-fs error (device loop3) in ext4_delete_entry:2800: Corrupt filesystem [ 78.711818][ T6001] EXT4-fs warning (device loop3): ext4_rename_delete:3778: inode #2: comm syz.3.33: Deleting old file: nlink 5, error=-117 [ 78.782905][ T5785] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.171798][ T6009] warning: `syz.3.38' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.261717][ T6013] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.490441][ T58] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 79.994066][ T5832] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.183471][ T5832] usb 1-1: Using ep0 maxpacket: 8 [ 80.199386][ T5832] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 80.212354][ T5832] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 80.224867][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.231883][ T5832] usb 1-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 80.250359][ T5832] usb 1-1: Product: syz [ 80.256128][ T5832] usb 1-1: Manufacturer: syz [ 80.260817][ T5832] usb 1-1: SerialNumber: syz [ 80.290665][ T5832] usb 1-1: config 0 descriptor?? [ 80.455078][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.469530][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 80.478768][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.489474][ T9] usb 3-1: Product: syz [ 80.498748][ T9] usb 3-1: Manufacturer: syz [ 80.508870][ T9] usb 3-1: SerialNumber: syz [ 80.519209][ T5832] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 81.005963][ T6050] program syz.1.52 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.083509][ T6052] netlink: 64 bytes leftover after parsing attributes in process `syz.1.53'. [ 81.323748][ T5832] gspca_sunplus: reg_w_riv err -71 [ 81.329006][ T5832] sunplus: probe of 1-1:0.0 failed with error -71 [ 81.359114][ T5832] usb 1-1: USB disconnect, device number 2 [ 81.550286][ T9] cdc_ncm 3-1:1.0: bind() failure [ 81.561839][ T9] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 81.573755][ T9] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 81.583101][ T9] usbtest: probe of 3-1:1.1 failed with error -71 [ 81.598627][ T9] usb 3-1: USB disconnect, device number 2 [ 81.604420][ T5778] udevd[5778]: failed to send result of seq 10706 to main daemon: Connection refused [ 81.821535][ T787] cfg80211: failed to load regulatory.db [ 81.908491][ T5832] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 81.930494][ T6068] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 81.937202][ T6068] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 81.949202][ T6068] vhci_hcd vhci_hcd.0: Device attached [ 82.030220][ T6069] vhci_hcd: connection closed [ 82.032408][ T48] vhci_hcd: stop threads [ 82.042676][ T48] vhci_hcd: release socket [ 82.047404][ T48] vhci_hcd: disconnect device [ 82.111525][ T6072] loop2: detected capacity change from 0 to 8 [ 82.126654][ T5832] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 82.130816][ T6072] SQUASHFS error: zlib decompression failed, data probably corrupt [ 82.137649][ T5832] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 82.149494][ T6072] SQUASHFS error: Failed to read block 0x9b: -5 [ 82.157408][ T5832] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 82.160321][ T6072] SQUASHFS error: Unable to read metadata cache entry [99] [ 82.170035][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.182834][ T6072] SQUASHFS error: Unable to read inode 0x127 [ 82.185533][ T5832] usb 2-1: Product: syz [ 82.195844][ T5832] usb 2-1: Manufacturer: syz [ 82.200461][ T5832] usb 2-1: SerialNumber: syz [ 82.263751][ T28] audit: type=1326 audit(1752526769.282:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.2.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb19552ab19 code=0x7ffc0000 [ 82.293453][ T28] audit: type=1326 audit(1752526769.282:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.2.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb19552ab19 code=0x7ffc0000 [ 82.323811][ T28] audit: type=1326 audit(1752526769.292:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.2.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb19552ab19 code=0x7ffc0000 [ 82.347282][ T28] audit: type=1326 audit(1752526769.292:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.2.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb19552ab19 code=0x7ffc0000 [ 82.373416][ T28] audit: type=1326 audit(1752526769.292:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.2.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb19552ab19 code=0x7ffc0000 [ 82.399680][ T28] audit: type=1326 audit(1752526769.292:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.2.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb19552ab19 code=0x7ffc0000 [ 82.434121][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 82.442918][ T28] audit: type=1326 audit(1752526769.292:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.2.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb19552ab19 code=0x7ffc0000 [ 82.471861][ T5832] usb 2-1: 0:2 : does not exist [ 82.482549][ T28] audit: type=1326 audit(1752526769.292:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.2.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb19552ab19 code=0x7ffc0000 [ 82.510499][ T28] audit: type=1326 audit(1752526769.292:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6071 comm="syz.2.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb19552ab19 code=0x7ffc0000 [ 82.539677][ T5832] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 82.608303][ T5832] usb 2-1: USB disconnect, device number 2 [ 82.787942][ T6074] loop3: detected capacity change from 0 to 4096 [ 82.852655][ T6074] ntfs: volume version 3.1. [ 83.025930][ T6080] netlink: 60 bytes leftover after parsing attributes in process `syz.0.65'. [ 83.128459][ T6084] capability: warning: `syz.0.67' uses 32-bit capabilities (legacy support in use) [ 83.142091][ T6082] vivid-002: disconnect [ 83.168630][ T6081] vivid-002: reconnect [ 83.174413][ T6084] program syz.0.67 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.362141][ T6095] loop1: detected capacity change from 0 to 16 [ 83.377321][ T6095] erofs: (device loop1): mounted with root inode @ nid 36. [ 83.415382][ T28] kauditd_printk_skb: 624 callbacks suppressed [ 83.415396][ T28] audit: type=1800 audit(1752526770.442:622): pid=6095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.72" name="file1" dev="loop1" ino=86 res=0 errno=0 [ 83.537755][ T787] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 83.594326][ T28] audit: type=1326 audit(1752526770.622:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.0.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cadd8e929 code=0x7ffc0000 [ 83.654858][ T28] audit: type=1326 audit(1752526770.622:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.0.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cadd8e929 code=0x7ffc0000 [ 83.692616][ T28] audit: type=1326 audit(1752526770.652:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.0.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3cadd8e929 code=0x7ffc0000 [ 83.717048][ T6104] netlink: 'syz.3.76': attribute type 10 has an invalid length. [ 83.725754][ T28] audit: type=1326 audit(1752526770.652:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.0.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cadd8e929 code=0x7ffc0000 [ 83.725797][ T28] audit: type=1326 audit(1752526770.652:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.0.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cadd8e929 code=0x7ffc0000 [ 83.725834][ T28] audit: type=1326 audit(1752526770.652:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.0.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f3cadd8e929 code=0x7ffc0000 [ 83.725870][ T28] audit: type=1326 audit(1752526770.652:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.0.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cadd8e929 code=0x7ffc0000 [ 83.725904][ T28] audit: type=1326 audit(1752526770.652:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.0.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3cadd8e929 code=0x7ffc0000 [ 83.781608][ T787] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.856247][ T6104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.76'. [ 83.873891][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.882854][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.891731][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.900487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.018678][ T787] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 84.091437][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.123569][ T787] usb 3-1: Product: syz [ 84.133739][ T787] usb 3-1: Manufacturer: syz [ 84.140553][ T6108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.150258][ T787] usb 3-1: SerialNumber: syz [ 85.189958][ T787] cdc_ncm 3-1:1.0: bind() failure [ 85.223458][ T787] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 85.230654][ T787] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 85.252465][ T787] usbtest: probe of 3-1:1.1 failed with error -71 [ 85.283402][ T787] usb 3-1: USB disconnect, device number 3 [ 85.513547][ T6130] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 85.533425][ T6130] syzkaller0: owner set to 6 [ 85.608663][ T6132] syz.0.88 uses obsolete (PF_INET,SOCK_PACKET) [ 86.003835][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.021741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 87.043345][ C1] sched: RT throttling activated [ 87.340240][ T6142] loop2: detected capacity change from 0 to 262144 [ 87.375398][ T6142] F2FS-fs (loop2): invalid crc value [ 87.398556][ T6142] F2FS-fs (loop2): Found nat_bits in checkpoint [ 87.427432][ T6142] F2FS-fs (loop2): Start checkpoint disabled! [ 87.443843][ T6142] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 87.901081][ T6155] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 88.108670][ T6154] loop1: detected capacity change from 0 to 8192 [ 88.160962][ T6154] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 88.183905][ T6154] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 88.223653][ T6154] REISERFS (device loop1): using ordered data mode [ 88.230229][ T6154] reiserfs: using flush barriers [ 88.283003][ T6154] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 88.340369][ T6154] REISERFS (device loop1): checking transaction log (loop1) [ 88.355780][ T6162] syzkaller1: entered promiscuous mode [ 88.361298][ T6162] syzkaller1: entered allmulticast mode [ 88.385192][ T6154] REISERFS (device loop1): Using r5 hash to sort names [ 88.406993][ T6154] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 89.443423][ T5832] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 89.630955][ T5832] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.651594][ T5832] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.676822][ T5832] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 89.696381][ T5832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 89.719157][ T5832] usb 2-1: SerialNumber: syz [ 89.947850][ T5832] usb 2-1: 0:2 : does not exist [ 89.989172][ T5832] usb 2-1: USB disconnect, device number 3 [ 90.094650][ T6181] loop2: detected capacity change from 0 to 40427 [ 90.130914][ T6181] F2FS-fs (loop2): Found nat_bits in checkpoint [ 90.170582][ T6195] @: renamed from vlan0 (while UP) [ 90.208331][ T6181] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 90.291311][ T5794] syz-executor: attempt to access beyond end of device [ 90.291311][ T5794] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 90.310655][ T5794] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 90.630007][ T6206] loop3: detected capacity change from 0 to 4096 [ 90.658108][ T6206] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 90.766384][ T6208] loop1: detected capacity change from 0 to 4096 [ 91.133722][ T6224] input: syz1 as /devices/virtual/input/input5 [ 91.449435][ T6230] loop2: detected capacity change from 0 to 32768 [ 91.456029][ T5832] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 91.467897][ T6230] (syz.2.129,6230,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 91.484422][ T6230] (syz.2.129,6230,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 91.513124][ T6230] JBD2: Ignoring recovery information on journal [ 91.550542][ T6230] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 91.580908][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807e466800: rx timeout, send abort [ 91.591603][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807e466800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 91.647495][ T5832] usb 4-1: config 0 has no interfaces? [ 91.653217][ T5832] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 91.667764][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.687257][ T5832] usb 4-1: config 0 descriptor?? [ 91.906664][ T6237] (syz.0.131,6237,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 91.917822][ T5832] usb 4-1: USB disconnect, device number 2 [ 91.932733][ T6230] syz.2.129 (6230) used greatest stack depth: 18736 bytes left [ 92.042245][ T5794] ocfs2: Unmounting device (7,2) on (node local) [ 92.212392][ T6243] loop0: detected capacity change from 0 to 2048 [ 92.377019][ T787] IPVS: starting estimator thread 0... [ 92.463538][ T6252] netlink: 16 bytes leftover after parsing attributes in process `syz.2.138'. [ 92.474802][ T6250] IPVS: using max 18 ests per chain, 43200 per kthread [ 92.604099][ T5814] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 92.634807][ T6241] loop1: detected capacity change from 0 to 40427 [ 92.660175][ T6241] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 92.673602][ T6241] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 92.736583][ T6241] F2FS-fs (loop1): Found nat_bits in checkpoint [ 92.815371][ T6241] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 92.826458][ T5814] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.836851][ T6241] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 92.854223][ T5814] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 92.876192][ T5814] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 92.885511][ T5814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.896998][ T5814] usb 1-1: Product: syz [ 92.901194][ T5814] usb 1-1: Manufacturer: syz [ 92.909604][ T5814] usb 1-1: SerialNumber: syz [ 92.944033][ T28] audit: type=1804 audit(1752526779.962:631): pid=6241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.134" name="/newroot/26/bus/bus" dev="loop1" ino=10 res=1 errno=0 [ 93.125924][ T5814] usb 1-1: 0:2 : does not exist [ 93.143050][ T5814] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 93.183632][ T5814] usb 1-1: USB disconnect, device number 3 [ 93.406132][ T28] audit: type=1326 audit(1752526780.432:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.2.150" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb19558e929 code=0x0 [ 93.614129][ T6289] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 93.662411][ T6291] process 'syz.1.151' launched '/dev/fd/3' with NULL argv: empty string added [ 94.010996][ T6304] loop3: detected capacity change from 0 to 8 [ 94.024336][ T5832] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 94.045915][ T6304] SQUASHFS error: Failed to read block 0x4de: -5 [ 94.053184][ T6304] SQUASHFS error: Failed to read block 0x4de: -5 [ 94.064944][ T28] audit: type=1800 audit(1752526781.092:633): pid=6304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.156" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 94.088690][ T6304] SQUASHFS error: Failed to read block 0x4de: -5 [ 94.096914][ T6304] SQUASHFS error: Failed to read block 0x4de: -5 [ 94.111613][ T6304] SQUASHFS error: Failed to read block 0x4de: -5 [ 94.120060][ T6304] SQUASHFS error: Failed to read block 0x4de: -5 [ 94.221345][ T5832] usb 2-1: Using ep0 maxpacket: 8 [ 94.236571][ T5832] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 94.250424][ T5832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.264252][ T5832] usb 2-1: Product: syz [ 94.268461][ T5832] usb 2-1: Manufacturer: syz [ 94.273504][ T5832] usb 2-1: SerialNumber: syz [ 94.280445][ T5832] usb 2-1: config 0 descriptor?? [ 94.289810][ T5832] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 94.392853][ T6316] loop0: detected capacity change from 0 to 512 [ 94.441703][ T6316] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.463742][ T6316] ext4 filesystem being mounted at /40/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.493414][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.517962][ T6316] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #4: comm syz.0.162: corrupted inode contents [ 94.539158][ T6316] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #4: comm syz.0.162: mark_inode_dirty error [ 94.570529][ T6316] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #4: comm syz.0.162: corrupted inode contents [ 94.587887][ T6316] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #4: comm syz.0.162: mark_inode_dirty error [ 94.602939][ T6316] Quota error (device loop0): write_blk: dquota write failed [ 94.617183][ T6316] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 94.629111][ T6316] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.162: Failed to acquire dquot type 1 [ 94.630682][ T6322] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #4: comm syz.0.162: corrupted inode contents [ 94.654990][ T6322] EXT4-fs error (device loop0): ext4_dirty_inode:6106: inode #4: comm syz.0.162: mark_inode_dirty error [ 94.669514][ T6322] EXT4-fs error (device loop0): ext4_do_update_inode:5230: inode #4: comm syz.0.162: corrupted inode contents [ 94.687290][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.703943][ T6322] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #4: comm syz.0.162: mark_inode_dirty error [ 94.717545][ T9] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 94.719025][ T6322] Quota error (device loop0): write_blk: dquota write failed [ 94.735299][ T6322] Quota error (device loop0): find_free_dqentry: Can't write quota data block 5 [ 94.739760][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.755250][ T6322] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 94.757245][ T9] usb 4-1: config 0 descriptor?? [ 94.772081][ T6322] EXT4-fs error (device loop0): ext4_acquire_dquot:6938: comm syz.0.162: Failed to acquire dquot type 1 [ 94.788988][ T6323] Quota error (device loop0): do_insert_tree: Inserting already present quota entry (block 7) [ 94.812700][ T6323] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota [ 94.927029][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.151231][ T6336] loop2: detected capacity change from 0 to 2048 [ 95.211437][ T6336] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.224205][ T9] dragonrise 0003:0079:0006.0001: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.3-1/input0 [ 95.267173][ T9] dragonrise 0003:0079:0006.0001: no inputs found [ 95.285659][ T9] dragonrise 0003:0079:0006.0001: force feedback init failed [ 95.320860][ T5832] gspca_sonixj: reg_w1 err -71 [ 95.336584][ T5794] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.387275][ T6344] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.393508][ T5832] sonixj: probe of 2-1:0.0 failed with error -71 [ 95.415797][ T5832] usb 2-1: USB disconnect, device number 4 [ 95.520953][ T9] usb 4-1: USB disconnect, device number 3 [ 95.737156][ T6356] loop0: detected capacity change from 0 to 2048 [ 95.745899][ T6356] EXT4-fs: Ignoring removed mblk_io_submit option [ 95.752362][ T6356] EXT4-fs: Ignoring removed i_version option [ 95.767273][ T6356] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.805844][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.085911][ T6371] Zero length message leads to an empty skb [ 96.458631][ T6369] loop0: detected capacity change from 0 to 40427 [ 96.471605][ T6369] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 96.479674][ T6369] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 96.496041][ T6369] F2FS-fs (loop0): invalid crc value [ 96.507211][ T6369] F2FS-fs (loop0): Found nat_bits in checkpoint [ 96.527795][ T6389] ALSA: mixer_oss: invalid OSS volume '' [ 96.574012][ T6369] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 96.581119][ T6369] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 96.782976][ T6402] loop2: detected capacity change from 0 to 16 [ 96.827507][ T6369] syz.0.181 (6369): drop_caches: 2 [ 96.828198][ T6402] erofs: (device loop2): mounted with root inode @ nid 36. [ 96.872226][ T5797] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 0] out[9000] [ 96.901000][ T6402] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[4096] [ 96.938125][ T6402] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[9000] [ 96.961482][ T6402] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[9000] [ 97.358894][ T6419] loop1: detected capacity change from 0 to 2048 [ 97.411811][ T6419] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.444275][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 97.528837][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.538600][ T6425] loop0: detected capacity change from 0 to 4096 [ 97.553954][ T6425] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 97.589340][ T6425] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 97.632025][ T9] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 97.650834][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.666956][ T6425] ntfs3: loop0: ino=1e, "bus" failed to parse mft record [ 97.675929][ T9] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 97.703385][ T9] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 97.713835][ T76] ntfs3: loop0: ino=1e, failed to parse mft record [ 97.721602][ T9] usb 4-1: Manufacturer: syz [ 97.728542][ T9] usb 4-1: config 0 descriptor?? [ 97.863402][ T9] rc_core: IR keymap rc-hauppauge not found [ 97.869355][ T9] Registered IR keymap rc-empty [ 97.887376][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 97.915106][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 98.035569][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 98.050698][ T27] usb 4-1: USB disconnect, device number 4 [ 98.146791][ T6427] loop1: detected capacity change from 0 to 32768 [ 98.212358][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 98.212371][ T28] audit: type=1800 audit(1752526785.232:636): pid=6427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.201" name="file1" dev="loop1" ino=4 res=0 errno=0 [ 98.921984][ T6447] loop0: detected capacity change from 0 to 40427 [ 98.929876][ T6447] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 98.938041][ T6447] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 98.959330][ T6447] F2FS-fs (loop0): invalid crc value [ 98.968059][ T6447] F2FS-fs (loop0): Found nat_bits in checkpoint [ 98.983678][ T27] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 99.038295][ T6447] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 99.046630][ T6447] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 99.152392][ T6447] syz.0.209: attempt to access beyond end of device [ 99.152392][ T6447] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 99.203134][ T27] usb 4-1: config 9 has an invalid interface number: 81 but max is 0 [ 99.225173][ T27] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 99.243403][ T27] usb 4-1: config 9 has no interface number 0 [ 99.259751][ T27] usb 4-1: config 9 interface 81 has no altsetting 0 [ 99.280360][ T27] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=f0.f4 [ 99.290570][ T6468] netlink: 'syz.2.216': attribute type 1 has an invalid length. [ 99.298748][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.308069][ T6468] netlink: 4 bytes leftover after parsing attributes in process `syz.2.216'. [ 99.318455][ T27] usb 4-1: Product: syz [ 99.323177][ T27] usb 4-1: Manufacturer: syz [ 99.329933][ T27] usb 4-1: SerialNumber: syz [ 99.552762][ T27] usbserial_generic 4-1:9.81: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 99.583507][ T27] usbserial_generic 4-1:9.81: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 99.613706][ T27] usbserial_generic 4-1:9.81: device has no bulk endpoints [ 99.633075][ T27] usb 4-1: USB disconnect, device number 5 [ 99.957979][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 99.968385][ T6484] loop0: detected capacity change from 0 to 32768 [ 99.975505][ T6484] XFS: attr2 mount option is deprecated. [ 99.992377][ T6484] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 100.001714][ T6484] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 100.031447][ T6484] XFS (loop0): Ending clean mount [ 100.044831][ T6484] XFS (loop0): Quotacheck needed: Please wait. [ 100.072605][ T6484] XFS (loop0): Quotacheck: Done. [ 100.143518][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 100.155997][ T9] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 100.163666][ T28] audit: type=1804 audit(1752526787.182:637): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.218" name="/newroot/59/file0/bus" dev="loop0" ino=4426 res=1 errno=0 [ 100.166104][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.195013][ T9] usb 2-1: Product: syz [ 100.199291][ T9] usb 2-1: Manufacturer: syz [ 100.206273][ T9] usb 2-1: SerialNumber: syz [ 100.214150][ T9] usb 2-1: config 0 descriptor?? [ 100.222785][ T9] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 100.342859][ T5790] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 100.503209][ T5814] kernel write not supported for file /media2 (pid: 5814 comm: kworker/0:4) [ 100.642267][ T9] gspca_stk1135: reg_w 0x0 err -71 [ 100.658243][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 100.673994][ T9] gspca_stk1135: Sensor write failed [ 100.679341][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 100.681549][ T6504] loop3: detected capacity change from 0 to 128 [ 100.701281][ T9] gspca_stk1135: Sensor write failed [ 100.704026][ T6504] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 100.718330][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 100.718346][ T9] gspca_stk1135: Sensor read failed [ 100.718368][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 100.718377][ T9] gspca_stk1135: Sensor read failed [ 100.718383][ T9] gspca_stk1135: Detected sensor type unknown (0x0) [ 100.718409][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 100.718417][ T9] gspca_stk1135: Sensor read failed [ 100.718437][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 100.718447][ T9] gspca_stk1135: Sensor read failed [ 100.718468][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 100.718477][ T9] gspca_stk1135: Sensor write failed [ 100.718499][ T9] gspca_stk1135: serial bus timeout: status=0x00 [ 100.718507][ T9] gspca_stk1135: Sensor write failed [ 100.718574][ T9] stk1135: probe of 2-1:0.0 failed with error -71 [ 100.901383][ T9] usb 2-1: USB disconnect, device number 5 [ 101.119892][ T6516] loop0: detected capacity change from 0 to 2048 [ 101.148532][ T6516] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.544368][ T6518] loop2: detected capacity change from 0 to 32768 [ 101.582263][ T28] audit: type=1800 audit(1752526788.602:638): pid=6518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.235" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 101.846467][ T6540] netlink: 'syz.0.246': attribute type 2 has an invalid length. [ 101.855292][ T6540] netlink: 132 bytes leftover after parsing attributes in process `syz.0.246'. [ 102.083642][ T5814] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 102.231785][ T6552] loop3: detected capacity change from 0 to 2048 [ 102.251912][ T6552] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 102.261935][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 102.316068][ T5814] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 102.327151][ T5814] usb 2-1: config 0 has no interface number 0 [ 102.333236][ T5814] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 102.357808][ T5814] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 102.380621][ T5814] usb 2-1: config 0 interface 255 has no altsetting 0 [ 102.390051][ T5785] UDF-fs: error (device loop3): udf_read_inode: (ino 1329) failed !bh [ 102.400159][ T5785] UDF-fs: error (device loop3): udf_read_inode: (ino 1329) failed !bh [ 102.416374][ T5814] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 102.429370][ T5814] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.455031][ T5814] usb 2-1: config 0 descriptor?? [ 102.463587][ T5814] ums-realtek 2-1:0.255: USB Mass Storage device detected [ 102.471696][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 102.487374][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.513413][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 102.528195][ T9] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 102.543176][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.553552][ T9] usb 1-1: config 0 descriptor?? [ 102.720090][ T5872] usb 2-1: USB disconnect, device number 6 [ 102.988213][ T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 102.999459][ T9] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 103.019911][ T9] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 103.269554][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.281344][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.289944][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.300591][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.309085][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 103.317290][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.345330][ T9] usb 1-1: USB disconnect, device number 4 [ 103.580971][ T6563] chnl_net:caif_netlink_parms(): no params data found [ 103.717671][ T6576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.259'. [ 103.729212][ T6563] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.737146][ T6563] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.745254][ T6563] bridge_slave_0: entered allmulticast mode [ 103.752608][ T6563] bridge_slave_0: entered promiscuous mode [ 103.762032][ T6563] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.770232][ T6563] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.777896][ T6563] bridge_slave_1: entered allmulticast mode [ 103.789044][ T6563] bridge_slave_1: entered promiscuous mode [ 103.858357][ T6563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.897082][ T6563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.006102][ T6563] team0: Port device team_slave_0 added [ 104.027150][ T6563] team0: Port device team_slave_1 added [ 104.085224][ T6563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.092215][ T6563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.144041][ T6563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.169247][ T6563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.193415][ T6563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.231201][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 104.243695][ T6563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.388024][ T6563] hsr_slave_0: entered promiscuous mode [ 104.404214][ T6563] hsr_slave_1: entered promiscuous mode [ 104.415495][ T6563] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.426803][ T9] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 104.444415][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.455518][ T6563] Cannot create hsr debugfs directory [ 104.465628][ T9] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 104.475176][ T9] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 104.493670][ T9] usb 3-1: Manufacturer: syz [ 104.500665][ T9] usb 3-1: config 0 descriptor?? [ 104.511859][ T6588] loop0: detected capacity change from 0 to 32768 [ 104.552336][ T6588] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 104.674798][ T9] rc_core: IR keymap rc-hauppauge not found [ 104.691543][ T9] Registered IR keymap rc-empty [ 104.702094][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 104.757293][ T6588] XFS (loop0): Ending clean mount [ 104.777843][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9 [ 104.833945][ T9] usb 3-1: USB disconnect, device number 4 [ 104.863734][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 105.047513][ T5790] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 105.048068][ T6563] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.069526][ T6563] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 105.103253][ T6563] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 105.119827][ T6563] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 105.200839][ T6614] loop1: detected capacity change from 0 to 512 [ 105.372257][ T6563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.405040][ T5788] Bluetooth: hci0: command tx timeout [ 105.412781][ T6614] EXT4-fs (loop1): Test dummy encryption mode enabled [ 105.453110][ T6563] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.476221][ T6614] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.268: corrupted in-inode xattr: invalid ea_ino [ 105.515162][ T3507] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.522355][ T3507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.531790][ T6614] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.268: couldn't read orphan inode 15 (err -117) [ 105.546113][ T6619] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 105.553949][ T6619] IPv6: NLM_F_CREATE should be set when creating new route [ 105.561291][ T6619] IPv6: NLM_F_CREATE should be set when creating new route [ 105.568592][ T6619] IPv6: NLM_F_CREATE should be set when creating new route [ 105.587050][ T6614] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.602794][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.610041][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.725608][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.060003][ T6563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.215191][ T27] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 106.277908][ T6563] veth0_vlan: entered promiscuous mode [ 106.292632][ T6563] veth1_vlan: entered promiscuous mode [ 106.322475][ T6563] veth0_macvtap: entered promiscuous mode [ 106.331874][ T6563] veth1_macvtap: entered promiscuous mode [ 106.338836][ T5872] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 106.357492][ T6563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.368883][ T6563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.379397][ T6563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.389859][ T6563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.400737][ T6563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.412257][ T6563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.419386][ T27] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 106.422246][ T6563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.442767][ T27] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 106.447911][ T6563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.458136][ T27] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 106.472254][ T6563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.472516][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.486577][ T6563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.500243][ T27] usb 2-1: Product: syz [ 106.500544][ T6563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.504914][ T27] usb 2-1: Manufacturer: syz [ 106.519458][ T27] usb 2-1: SerialNumber: syz [ 106.521025][ T6563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.527289][ T27] usb 2-1: config 0 descriptor?? [ 106.535465][ T6563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.540846][ T6639] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 106.555108][ T6563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.560708][ T6639] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 106.573154][ T6563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.584900][ T5872] usb 3-1: Using ep0 maxpacket: 16 [ 106.590989][ T6563] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.603102][ T6563] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.614276][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.625578][ T5872] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.635704][ T5872] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 106.646806][ T6563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.654435][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.676297][ T6563] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.686378][ T5872] usb 3-1: config 0 descriptor?? [ 106.705488][ T6563] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.714631][ T6563] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.724233][ T6563] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.840593][ T6639] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 106.860921][ T3507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.874239][ T6639] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 106.876900][ T3507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.935561][ T3442] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.943682][ T3442] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.023450][ T5833] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 107.116497][ T5872] input: HID 05ac:8241 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:05AC:8241.0003/input/input10 [ 107.204608][ T5833] usb 1-1: Using ep0 maxpacket: 32 [ 107.213777][ T5833] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 107.224036][ T5833] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 107.232707][ T5833] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 107.248719][ T5872] appleir 0003:05AC:8241.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 107.269154][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 107.280815][ T5833] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 107.297757][ T5833] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 107.336096][ T5833] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 107.369842][ T5833] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.391210][ T6653] loop4: detected capacity change from 0 to 32768 [ 107.392273][ T5833] usb 1-1: config 0 descriptor?? [ 107.402661][ T6653] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.256 (6653) [ 107.425270][ T6653] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 107.438770][ T6653] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 107.447716][ T6653] BTRFS info (device loop4): force clearing of disk cache [ 107.455102][ T6653] BTRFS info (device loop4): enabling auto defrag [ 107.461598][ T6653] BTRFS info (device loop4): max_inline at 0 [ 107.467804][ T6653] BTRFS info (device loop4): enabling disk space caching [ 107.475307][ T6653] BTRFS info (device loop4): disk space caching is enabled [ 107.485822][ T5788] Bluetooth: hci0: command tx timeout [ 107.519977][ T6653] BTRFS info (device loop4): enabling ssd optimizations [ 107.530257][ T6653] BTRFS info (device loop4): rebuilding free space tree [ 107.550522][ T6653] BTRFS info (device loop4): disabling free space tree [ 107.557747][ T6653] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 107.568907][ T6653] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 107.626923][ T5833] usblp 1-1:0.0: usblp1: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 107.700916][ T76] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 107.775526][ T6563] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 107.878777][ T5872] usb 1-1: USB disconnect, device number 5 [ 107.905863][ T5872] usblp1: removed [ 107.932136][ T27] dm9601 2-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 107.985026][ T9] usb 3-1: USB disconnect, device number 5 [ 108.001477][ T27] dm9601 2-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet, 6e:ea:6f:f9:9e:b4 [ 108.038593][ T27] usb 2-1: USB disconnect, device number 7 [ 108.054999][ T27] dm9601 2-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.1-1, Davicom DM96xx USB 10/100 Ethernet [ 108.560385][ T6677] loop0: detected capacity change from 0 to 4096 [ 108.981400][ T6691] loop1: detected capacity change from 0 to 512 [ 109.011046][ T6691] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 109.018758][ T6697] input: syz1 as /devices/virtual/input/input11 [ 109.040412][ T6691] UDF-fs: Scanning with blocksize 512 failed [ 109.064519][ T6691] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 109.092306][ T6691] UDF-fs: Scanning with blocksize 1024 failed [ 109.117182][ T6691] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 109.127766][ T6691] UDF-fs: Scanning with blocksize 2048 failed [ 109.144250][ T6691] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 109.169301][ T6691] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 109.563921][ T5788] Bluetooth: hci0: command tx timeout [ 109.735927][ T6699] loop4: detected capacity change from 0 to 32768 [ 109.772426][ T6703] loop2: detected capacity change from 0 to 32768 [ 109.785022][ T6699] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.292 (6699) [ 109.811816][ T6699] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 109.829804][ T6703] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 109.848971][ T6699] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 109.872608][ T6699] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 109.898600][ T6699] BTRFS info (device loop4): trying to use backup root at mount time [ 109.908432][ T6699] BTRFS info (device loop4): setting nodatasum [ 109.914730][ T6699] BTRFS info (device loop4): force zlib compression, level 3 [ 109.922260][ T6699] BTRFS info (device loop4): doing ref verification [ 109.928979][ T6699] BTRFS info (device loop4): turning on flush-on-commit [ 109.938249][ T6699] BTRFS info (device loop4): allowing degraded mounts [ 109.945161][ T6699] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 109.955038][ T6699] BTRFS info (device loop4): use lzo compression, level 0 [ 109.962185][ T6699] BTRFS info (device loop4): enabling ssd optimizations [ 109.970380][ T6699] BTRFS info (device loop4): using spread ssd allocation scheme [ 109.972485][ T6703] XFS (loop2): Ending clean mount [ 109.979172][ T6699] BTRFS info (device loop4): using free space tree [ 110.095706][ T6699] BTRFS info (device loop4): auto enabling async discard [ 110.132760][ T6739] Bluetooth: MGMT ver 1.22 [ 110.162889][ T28] audit: type=1800 audit(1752526797.182:639): pid=6699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.292" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 110.356937][ T6563] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 110.415543][ T5794] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 110.564177][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 110.768203][ T9] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 110.783470][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.841232][ T9] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 110.858727][ T9] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 110.887258][ T9] usb 1-1: Manufacturer: syz [ 110.912533][ T5872] kernel write not supported for file /sequencer (pid: 5872 comm: kworker/0:6) [ 110.927659][ T9] usb 1-1: config 0 descriptor?? [ 111.014414][ T9] rc_core: IR keymap rc-hauppauge not found [ 111.020378][ T9] Registered IR keymap rc-empty [ 111.038716][ T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 111.066826][ T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input12 [ 111.385005][ C0] igorplugusb 1-1:0.0: receive overflow, at least 3 lost [ 111.533518][ T5832] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 111.586767][ T9] usb 1-1: USB disconnect, device number 6 [ 111.644281][ T5788] Bluetooth: hci0: command tx timeout [ 111.719780][ T5832] usb 5-1: Using ep0 maxpacket: 16 [ 111.730565][ T5832] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 111.746812][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.758571][ T5832] usb 5-1: Product: syz [ 111.762819][ T5832] usb 5-1: Manufacturer: syz [ 111.767757][ T5832] usb 5-1: SerialNumber: syz [ 111.786516][ T5832] usb 5-1: config 0 descriptor?? [ 111.796736][ T5832] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 111.811770][ T5832] usb 5-1: Detected FT232H [ 111.999714][ T5832] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 112.237190][ T6782] syzkaller1: entered promiscuous mode [ 112.243841][ T6782] syzkaller1: entered allmulticast mode [ 112.294371][ T6784] loop1: detected capacity change from 0 to 1024 [ 112.378896][ T6784] hfsplus: request for non-existent node 16777216 in B*Tree [ 112.389442][ T6784] hfsplus: request for non-existent node 16777216 in B*Tree [ 112.398377][ T6784] hfsplus: request for non-existent node 16777216 in B*Tree [ 112.405751][ T6784] hfsplus: request for non-existent node 16777216 in B*Tree [ 112.436406][ T5832] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 112.473984][ T3507] hfsplus: request for non-existent node 16777216 in B*Tree [ 112.481573][ T3507] hfsplus: request for non-existent node 16777216 in B*Tree [ 112.660509][ T5872] usb 5-1: USB disconnect, device number 2 [ 112.692578][ T5872] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 112.706306][ T5872] ftdi_sio 5-1:0.0: device disconnected [ 112.959452][ T6788] loop1: detected capacity change from 0 to 32768 [ 112.971547][ T6788] XFS: noikeep mount option is deprecated. [ 112.997423][ T6788] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 113.083810][ T6788] XFS (loop1): Ending clean mount [ 113.110397][ T6788] XFS (loop1): Quotacheck needed: Please wait. [ 113.181291][ T6788] XFS (loop1): Quotacheck: Done. [ 113.363550][ T5789] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 113.843147][ T6827] trusted_key: syz.1.333 sent an empty control message without MSG_MORE. [ 113.904882][ T6818] loop0: detected capacity change from 0 to 32768 [ 113.921699][ T6818] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.329 (6818) [ 113.950785][ T6818] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 113.969203][ T6818] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 113.988123][ T6818] BTRFS info (device loop0): enabling disk space caching [ 114.003271][ T6818] BTRFS info (device loop0): doing ref verification [ 114.010383][ T6818] BTRFS info (device loop0): use zlib compression, level 3 [ 114.018065][ T6818] BTRFS info (device loop0): force clearing of disk cache [ 114.026466][ T6818] BTRFS info (device loop0): setting nodatacow, compression disabled [ 114.041095][ T6818] BTRFS info (device loop0): doing ref verification [ 114.049603][ T6818] BTRFS info (device loop0): disk space caching is enabled [ 114.147726][ T6818] BTRFS info (device loop0): enabling ssd optimizations [ 114.171071][ T6818] BTRFS info (device loop0): auto enabling async discard [ 114.192320][ T6818] BTRFS info (device loop0): rebuilding free space tree [ 114.223062][ T6818] BTRFS info (device loop0): disabling free space tree [ 114.230357][ T6818] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 114.235159][ T6854] capability: warning: `syz.4.339' uses deprecated v2 capabilities in a way that may be insecure [ 114.240737][ T6818] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 114.349827][ T28] audit: type=1800 audit(1752526801.372:640): pid=6818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.329" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 114.436365][ T28] audit: type=1800 audit(1752526801.422:641): pid=6818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.329" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 114.703986][ T787] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 114.773992][ T5790] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 114.893396][ T787] usb 2-1: Using ep0 maxpacket: 8 [ 114.902655][ T787] usb 2-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 114.940098][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.963392][ T787] usb 2-1: Product: syz [ 114.967611][ T787] usb 2-1: Manufacturer: syz [ 114.972232][ T787] usb 2-1: SerialNumber: syz [ 115.006072][ T787] usb 2-1: config 0 descriptor?? [ 115.233221][ T787] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 115.914518][ T28] audit: type=1326 audit(1752526802.932:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19558e929 code=0x7ffc0000 [ 115.946455][ T6915] syz.2.364 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 115.989272][ T28] audit: type=1326 audit(1752526802.932:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19558e929 code=0x7ffc0000 [ 116.012303][ T0] NOHZ tick-stop error: local softirq work is pending, handler #300!!! [ 116.022236][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 116.035979][ T28] audit: type=1326 audit(1752526802.932:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb19552ab19 code=0x7ffc0000 [ 116.059567][ T28] audit: type=1326 audit(1752526802.932:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb19552ab19 code=0x7ffc0000 [ 116.082370][ T28] audit: type=1326 audit(1752526802.932:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19558e929 code=0x7ffc0000 [ 116.146937][ T28] audit: type=1326 audit(1752526802.932:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb19552ab19 code=0x7ffc0000 [ 116.184006][ T28] audit: type=1326 audit(1752526802.932:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19558e929 code=0x7ffc0000 [ 116.272294][ T28] audit: type=1326 audit(1752526802.932:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19558e929 code=0x7ffc0000 [ 116.300678][ T787] gspca_sunplus: reg_w_riv err -71 [ 116.317868][ T787] sunplus: probe of 2-1:0.0 failed with error -71 [ 116.354197][ T787] usb 2-1: USB disconnect, device number 8 [ 116.379458][ T28] audit: type=1326 audit(1752526802.932:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb19558e929 code=0x7ffc0000 [ 116.503522][ T28] audit: type=1326 audit(1752526802.932:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.2.364" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb19552ab19 code=0x7ffc0000 [ 116.694347][ T6926] input: syz0 as /devices/virtual/input/input13 [ 117.161856][ T6928] loop4: detected capacity change from 0 to 32768 [ 117.278137][ T6928] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 117.368455][ T6945] loop1: detected capacity change from 0 to 256 [ 117.390710][ T6946] [ 117.393064][ T6946] ====================================================== [ 117.400071][ T6946] WARNING: possible circular locking dependency detected [ 117.407082][ T6946] 6.6.98-syzkaller #0 Not tainted [ 117.412083][ T6946] ------------------------------------------------------ [ 117.419077][ T6946] syz.4.370/6946 is trying to acquire lock: [ 117.424958][ T6946] ffff88805c16b498 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8){+.+.}-{3:3}, at: __ocfs2_move_extents_range+0x1a65/0x3360 [ 117.438200][ T6946] [ 117.438200][ T6946] but task is already holding lock: [ 117.445558][ T6946] ffff88805c14ed98 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: __ocfs2_move_extents_range+0x1371/0x3360 [ 117.458787][ T6946] [ 117.458787][ T6946] which lock already depends on the new lock. [ 117.458787][ T6946] [ 117.469179][ T6946] [ 117.469179][ T6946] the existing dependency chain (in reverse order) is: [ 117.478178][ T6946] [ 117.478178][ T6946] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 117.488695][ T6946] down_write+0x97/0x1f0 [ 117.493453][ T6946] __ocfs2_flush_truncate_log+0x351/0x10b0 [ 117.499780][ T6946] ocfs2_flush_truncate_log+0x4f/0x60 [ 117.505664][ T6946] ocfs2_sync_fs+0x117/0x310 [ 117.510765][ T6946] sync_filesystem+0x1c2/0x220 [ 117.516048][ T6946] generic_shutdown_super+0x6f/0x2b0 [ 117.521844][ T6946] kill_block_super+0x44/0x90 [ 117.527057][ T6946] deactivate_locked_super+0x97/0x100 [ 117.532958][ T6946] cleanup_mnt+0x429/0x4c0 [ 117.537893][ T6946] task_work_run+0x1ce/0x250 [ 117.543095][ T6946] exit_to_user_mode_loop+0xe6/0x110 [ 117.548897][ T6946] exit_to_user_mode_prepare+0xb1/0x140 [ 117.554968][ T6946] syscall_exit_to_user_mode+0x1a/0x50 [ 117.560942][ T6946] do_syscall_64+0x61/0xb0 [ 117.565869][ T6946] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.572274][ T6946] [ 117.572274][ T6946] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8){+.+.}-{3:3}: [ 117.582781][ T6946] __lock_acquire+0x2ddb/0x7c80 [ 117.588155][ T6946] lock_acquire+0x197/0x410 [ 117.593194][ T6946] down_write+0x97/0x1f0 [ 117.597980][ T6946] __ocfs2_move_extents_range+0x1a65/0x3360 [ 117.604400][ T6946] ocfs2_move_extents+0x379/0x940 [ 117.609950][ T6946] ocfs2_ioctl_move_extents+0x4e1/0x6c0 [ 117.616017][ T6946] ocfs2_ioctl+0x195/0x750 [ 117.620945][ T6946] __se_sys_ioctl+0xfd/0x170 [ 117.626053][ T6946] do_syscall_64+0x55/0xb0 [ 117.630985][ T6946] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 117.637477][ T6946] [ 117.637477][ T6946] other info that might help us debug this: [ 117.637477][ T6946] [ 117.647694][ T6946] Possible unsafe locking scenario: [ 117.647694][ T6946] [ 117.655135][ T6946] CPU0 CPU1 [ 117.660486][ T6946] ---- ---- [ 117.665836][ T6946] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 117.673118][ T6946] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8); [ 117.682933][ T6946] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 117.692837][ T6946] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#8); [ 117.700128][ T6946] [ 117.700128][ T6946] *** DEADLOCK *** [ 117.700128][ T6946] [ 117.708259][ T6946] 5 locks held by syz.4.370/6946: [ 117.713267][ T6946] #0: ffff888023e82418 (sb_writers#20){.+.+}-{0:0}, at: mnt_want_write_file+0x63/0x200 [ 117.723024][ T6946] #1: ffff88805d0db498 (&sb->s_type->i_mutex_key#27){+.+.}-{3:3}, at: ocfs2_move_extents+0x1a3/0x940 [ 117.734000][ T6946] #2: ffff88805d0db120 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_move_extents+0x36c/0x940 [ 117.745049][ T6946] #3: ffff88805c149818 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x165/0x4360 [ 117.758712][ T6946] #4: ffff88805c14ed98 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: __ocfs2_move_extents_range+0x1371/0x3360 [ 117.772367][ T6946] [ 117.772367][ T6946] stack backtrace: [ 117.778253][ T6946] CPU: 0 PID: 6946 Comm: syz.4.370 Not tainted 6.6.98-syzkaller #0 [ 117.786135][ T6946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 117.796182][ T6946] Call Trace: [ 117.799453][ T6946] [ 117.802379][ T6946] dump_stack_lvl+0x16c/0x230 [ 117.807053][ T6946] ? load_image+0x3b0/0x3b0 [ 117.811547][ T6946] ? show_regs_print_info+0x20/0x20 [ 117.816741][ T6946] ? print_circular_bug+0x12b/0x1a0 [ 117.821932][ T6946] check_noncircular+0x2bd/0x3c0 [ 117.826860][ T6946] ? look_up_lock_class+0x75/0x140 [ 117.831961][ T6946] ? print_deadlock_bug+0x5d0/0x5d0 [ 117.837151][ T6946] ? lockdep_lock+0xe0/0x220 [ 117.841737][ T6946] ? ocfs2_read_blocks+0x10ff/0x13e0 [ 117.847016][ T6946] ? _find_first_zero_bit+0xd3/0x100 [ 117.852292][ T6946] __lock_acquire+0x2ddb/0x7c80 [ 117.857160][ T6946] ? verify_lock_unused+0x140/0x140 [ 117.862351][ T6946] ? ocfs2_read_inode_block+0x11e/0x180 [ 117.867979][ T6946] ? ocfs2_read_inode_block_full+0x1a0/0x1a0 [ 117.873958][ T6946] ? do_raw_spin_unlock+0x121/0x230 [ 117.879157][ T6946] lock_acquire+0x197/0x410 [ 117.883649][ T6946] ? __ocfs2_move_extents_range+0x1a65/0x3360 [ 117.889703][ T6946] ? ocfs2_get_system_file_inode+0x1f1/0x7b0 [ 117.895676][ T6946] ? __might_sleep+0xe0/0xe0 [ 117.900255][ T6946] ? read_lock_is_recursive+0x20/0x20 [ 117.905616][ T6946] ? ocfs2_fast_symlink_read_folio+0x530/0x530 [ 117.911764][ T6946] ? ocfs2_lock_meta_allocator_move_extents+0x3bd/0x570 [ 117.918691][ T6946] down_write+0x97/0x1f0 [ 117.922926][ T6946] ? __ocfs2_move_extents_range+0x1a65/0x3360 [ 117.928982][ T6946] ? down_read_killable+0x340/0x340 [ 117.934174][ T6946] ? __lock_acquire+0x1334/0x7c80 [ 117.939189][ T6946] __ocfs2_move_extents_range+0x1a65/0x3360 [ 117.945082][ T6946] ? ocfs2_find_victim_alloc_group+0x970/0x970 [ 117.951236][ T6946] ? ocfs2_inode_lock_full_nested+0x154/0x1af0 [ 117.957381][ T6946] ? verify_lock_unused+0x140/0x140 [ 117.962570][ T6946] ? ocfs2_read_inode_block+0x11e/0x180 [ 117.968106][ T6946] ? ocfs2_read_inode_block_full+0x1a0/0x1a0 [ 117.974162][ T6946] ? do_raw_spin_unlock+0x121/0x230 [ 117.979360][ T6946] ? __might_sleep+0xe0/0xe0 [ 117.983941][ T6946] ? read_lock_is_recursive+0x20/0x20 [ 117.989392][ T6946] ? ocfs2_move_extents+0x17b/0x940 [ 117.994590][ T6946] ? down_write+0x162/0x1f0 [ 117.999081][ T6946] ? down_read_killable+0x340/0x340 [ 118.004266][ T6946] ? do_raw_spin_unlock+0x121/0x230 [ 118.009459][ T6946] ocfs2_move_extents+0x379/0x940 [ 118.014476][ T6946] ? ocfs2_validate_and_adjust_move_goal+0x460/0x460 [ 118.021147][ T6946] ? __might_fault+0xaa/0x120 [ 118.025818][ T6946] ? __lock_acquire+0x7c80/0x7c80 [ 118.030830][ T6946] ? __brelse+0x59/0x90 [ 118.035143][ T6946] ? ocfs2_validate_and_adjust_move_goal+0x324/0x460 [ 118.041827][ T6946] ocfs2_ioctl_move_extents+0x4e1/0x6c0 [ 118.047372][ T6946] ? ocfs2_dump_resv+0x580/0x580 [ 118.052305][ T6946] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 118.057754][ T6946] ocfs2_ioctl+0x195/0x750 [ 118.062168][ T6946] ? ocfs2_fileattr_set+0x7d0/0x7d0 [ 118.067359][ T6946] ? __fget_files+0x28/0x4d0 [ 118.071953][ T6946] ? bpf_lsm_file_ioctl+0x9/0x10 [ 118.076889][ T6946] ? security_file_ioctl+0x80/0xa0 [ 118.081992][ T6946] ? ocfs2_fileattr_set+0x7d0/0x7d0 [ 118.087182][ T6946] __se_sys_ioctl+0xfd/0x170 [ 118.091769][ T6946] do_syscall_64+0x55/0xb0 [ 118.096176][ T6946] ? clear_bhb_loop+0x40/0x90 [ 118.100847][ T6946] ? clear_bhb_loop+0x40/0x90 [ 118.105520][ T6946] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 118.111404][ T6946] RIP: 0033:0x7fe1a358e929 [ 118.115823][ T6946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.135422][ T6946] RSP: 002b:00007fe1a4352038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 118.143829][ T6946] RAX: ffffffffffffffda RBX: 00007fe1a37b6080 RCX: 00007fe1a358e929 [ 118.151787][ T6946] RDX: 00002000000000c0 RSI: 0000000040406f06 RDI: 0000000000000004 [ 118.159753][ T6946] RBP: 00007fe1a3610b39 R08: 0000000000000000 R09: 0000000000000000 [ 118.167799][ T6946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.175759][ T6946] R13: 0000000000000001 R14: 00007fe1a37b6080 R15: 00007fffa117ff58 [ 118.183776][ T6946] [ 118.326371][ T6563] (syz-executor,6563,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 118.339856][ T6563] ocfs2: Unmounting device (7,4) on (node local)