last executing test programs: 14.205632675s ago: executing program 0 (id=203): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = fspick(r0, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 13.854028234s ago: executing program 0 (id=215): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x38) sendmmsg$inet6(r0, &(0x7f00000005c0)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0xb, @dev={0xfe, 0x80, '\x00', 0xa}}, 0x1c, 0x0}}], 0x1, 0x0) 3.756186836s ago: executing program 2 (id=244): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendto$l2tp(0xffffffffffffffff, 0x0, 0x0, 0xc008841, 0x0, 0x0) 2.597399795s ago: executing program 2 (id=247): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240)=[@in={0x2, 0x4e23, @multicast1}], 0x10) sendmmsg$inet6(r0, &(0x7f00000032c0)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x5}, 0x1c, &(0x7f0000000740)=[{&(0x7f0000000340)='n', 0x1}], 0x1}}], 0x1, 0x40044) 2.374443887s ago: executing program 2 (id=248): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1010000, &(0x7f0000000340)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d372c757466383d312c696f636861727365743d63703835372c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c7379735f696d6d757461626c652c73686f72746e616d653d6c6f7765722c696f636861727365743d61736369692c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c757466383d312c71756965742c756e695f786c6174653d312c756e695f786c6174653d3100000000000000026d653d6d697865642c72736469722c756e695f786c6174653d302c757466383d302c00"], 0x1, 0x379, &(0x7f0000000880)="$eJzs3U1oI1UcAPB/OmnSLmh7EwUhehO0bPemF1ukC4u9qAQ/DmJwuypJFVostodN60HxKHjUkzcFPXgQjyII4s2DV1cQP/Cge1vZxSfJ5GOapN2u2ErZ3w+avL73/u//JjMk02Hy+sJSNC9Ox6WrV3+OmZlSlJceW4prpZiPLPp2Y1xlQh0AcDpcSyn+TLnRtpnJIaUTmBYAcIy6n/8vRUQt5vOaN78+rH/y6Q8Ap17v7//Zw/occB0g4rVjmRIAcMzGrv/fv6+50v0p938tF+4KAABOq6eefe7x5dWIJ2u1mYj1t7fqW/V4ZNi+fCleiVasxdmYixsR+YlC56HUfTx/YXXlbK1Wa8cv81GPiKleYD0/U1jOuvHVWIy5mO/F9842UkrZ+c9WVxZrXRGx2+7mj/XSVn06zvTy/3Am1oYnHv1Buk8RF1ZXztV6A9TX+/HtiL3hjQqd+S/EXHz34mCYlPp3MK6uXF7sT3oYv1WvxsXBqzB+BeTQCyYAAAAAAAAAAAAAAAAAAAAAAHATC7WB+cH6OanznK+Us7Awob27Pk4e31sfaC9fHyhVU6T0xxsP1d/JYt/6QKPr82xZSBAAAAAAAAAAAAAAAAAAAAAGNrcr0Wi11jY2t3eaxUJ7Y3N7KiI6Na9+88lXszHe5yaFcp6iGjFIUeul3Wk2UtbvnLKI8fCsk7xf89HngxkX+1QHWzFxGtWDm1qtO+776f1hzb1Zf+S/h32ymLyBWWEaj46MvH5nPqVbeaEGhXPFmup49isppULNW8Xwy8+PDxiliPKt77id5lQc3Cd1CtfTy3f3X/3Glyn3wINzT19578Pfmo1WJ3N092BlY/NGajZK/c5HyN4bLnV3wfDYKEVeKBWPhPJhA+7tr2lk3//+zD3vfntw9igPa1Kx6fXO8TzSOcs359PRcSp5oTPNkabZYfh0byNaa9MjB/+E/T5W+Bf79K4Pvvg4pR9/PWpU4U1iauxto/TfvPsAAAAAAAAAAAAAAAAAAABFhe+K97503c4bpg+LeviJE5oeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJyI4f//LxT2dmOk5iiF6+0JUdW1jc2IyoTMf/0PWwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwO3qnwAAAP//7gFmJg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r0, r0, 0x0, 0xe3aa6ea) 1.93199841s ago: executing program 0 (id=218): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}) 1.672604424s ago: executing program 0 (id=249): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) mremap(&(0x7f000007e000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil) 1.671237313s ago: executing program 3 (id=257): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@random="c5a500429b3a", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x20, 0x66, 0x0, 0x3, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x4e1f, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x6, 0x100, @void}}}}}}}, 0x0) 1.334614971s ago: executing program 0 (id=251): syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000100)='./file2\x00', 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3dbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x7, 0x150, &(0x7f0000000300)="$eJzs27+KE1EUB+CTP2rUJrVYDNhYBfUJFIkgDihKCq0Uok0iAdOMVnkUX8c38CUWllTp7rI7S7KbTYotJrObfF8zB34MnFPMHO7AfH38czScTH9MPsyj02hE+2VksWhEN5rRitIsAIB9skgpjlNK6d4s7v+NlFLdHQEAVbP/AeDw2P8AcHiu7P9m3R0BAFX79PnLu1d53v+YZZ2Io1kxKAbltczfvM37z7Iz3dVd86IYtJb58zLPLud34sF5/mJjfjeePinz0+z1+3wtfxjD6scHAACAg9DLljae73u9bXlZXfg+sHZ+b8ej9s7GAACuYfr7z+jbePz9l0Jxi4r//yJuQBt7XNT9ZgKqtnro6+4EAAAAAAAAAAAAAADYZhe/E9U9IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKw7CQAA//+ueFEp") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r1, 0x200000000000019d, &(0x7f0000000240)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x1fd, r0, &(0x7f00000001c0)='&', 0x1, 0x40005}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2, 0x6, r0, &(0x7f0000000000)="bcf233f3b392d3f2e2965f41145df8c87defa3afc0ea7aec621e089fae7e5a4067c7bbc0d7efb23e8ae67c31d3d89c6f3d306fb02c768434bef6813d2dc04898a230c6cc8b5c36be1aba6656839dcd7b9569", 0x52, 0x51d, 0x0, 0x1, r0}]) 1.334480421s ago: executing program 1 (id=252): socket$igmp(0x2, 0x3, 0x2) socket$inet(0x2, 0x3, 0x2) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000000c0)="48000000140081fb7059ae08060c040002ff0f03f1cd823010a7ce9000000000000ec000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a0200000046", 0x48}], 0x1}, 0x4000000) 1.334356991s ago: executing program 3 (id=253): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xbf, &(0x7f0000000080)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb1, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x1, 0x81, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x77, 0x3, [{0x0, 0xc, "0800b28c590300000052"}, {0x5, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x0, 0xa, "0000000000800000"}, {0x7, 0x12, "73bc23f9ffffffa30900a301c8460000"}, {0x0, 0x12, "c8f46976e79ea788f03d9d3205927e3d"}]}, @cipso={0x86, 0x6, 0x20}]}}, 'o'}}}}}, 0x0) 1.132462851s ago: executing program 3 (id=254): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, r2, 0x9013}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET6={0x14, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x7}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 1.077929854s ago: executing program 1 (id=255): socket$inet_smc(0x2b, 0x1, 0x0) unshare(0x2a020400) pipe(&(0x7f0000000140)) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f, 0x0, 0x3837, 0x0, 0xfffffffffffffffc, 0x0, 0x8}, 0x0, 0x0, 0x0) 1.073102004s ago: executing program 2 (id=256): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x6e, &(0x7f00000001c0)={[0x7f]}, 0x8) close(r0) 804.593719ms ago: executing program 1 (id=258): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000080)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) listen(r0, 0x86a) poll(&(0x7f00000003c0)=[{r0, 0x44}], 0x1, 0x3) 804.285328ms ago: executing program 3 (id=259): sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000480)="d25a9850a9a91163f76c5357f3bbadf2656e10d77f85d1028e60ab4e45b931e71645d3d636e82cfdeaadb674e1693d4a7de63820fefc4f787e272b122ebbff6884b3de82f8a3df9a2d0b67e46c349917110300b94240185146e52ac1540130161b6534e99e466173af4c775f238fae344b198915446b576be4", 0x79, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 721.840622ms ago: executing program 0 (id=260): syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0) close(0x3) r0 = syz_open_dev$dvb_demux(&(0x7f00000002c0), 0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000200)={0x1007, {"9db867d09ed91aa9c5c29f2f1e4be6bf", "cc6c2d12e0353c0e42899a29fdefe3bc", "9defe9f49655f386b84e6bb715dac54f"}, 0x445, 0x7}) 578.79433ms ago: executing program 1 (id=261): r0 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x120, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mq_timedsend(r0, &(0x7f0000000600)='m', 0x1, 0x6, 0x0) mq_timedreceive(r0, &(0x7f000001a600)=""/102385, 0x18ff1, 0x0, 0x0) 451.384056ms ago: executing program 3 (id=262): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b00)=@delqdisc={0x174, 0x25, 0x8, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x6, 0xfff1}, {0xb, 0xd}, {0x8, 0x4}}, [@TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3d, 0x7, 0xfffd, 0x8, 0x2, 0x8, 0x3}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x1, 0x8000, 0xfff, 0x1, 0x1, 0x9, 0x9}}, {0x16, 0x2, [0xffff, 0xf, 0x0, 0x1, 0x6, 0xa, 0x1, 0x9, 0x3ff]}}, {{0x1c, 0x1, {0x5, 0x6, 0x2, 0x80000000, 0x0, 0x9, 0x84}}, {0x4}}]}, @TCA_STAB={0xd0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x6, 0x5, 0x5, 0x1, 0x4, 0x6, 0x5}}, {0xe, 0x2, [0x5, 0xff, 0x80, 0x1, 0x14]}}, {{0x1c, 0x1, {0x8, 0x7, 0x3ff, 0xfffffffe, 0x2, 0x5, 0x5, 0x3}}, {0xa, 0x2, [0x1ff, 0x5, 0x4]}}, {{0x1c, 0x1, {0x1, 0x40, 0x7, 0x979f, 0x0, 0x4000000, 0x6}}, {0x4}}, {{0x1c, 0x1, {0x3, 0x5, 0x0, 0x100, 0x0, 0xffffffff, 0x1, 0x3}}, {0xa, 0x2, [0xbf, 0x9c71, 0x1000]}}, {{0x1c, 0x1, {0x2, 0x1, 0x11, 0x3, 0x0, 0x1, 0x2001, 0x7}}, {0x12, 0x2, [0x428, 0xf93e, 0x8, 0xfba, 0x2c, 0x6d1, 0x3]}}]}, @TCA_RATE={0x6, 0x5, {0x8}}]}, 0x174}, 0x1, 0x0, 0x0, 0x40000c4}, 0x20008004) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x24}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f, 0xa1}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 400.741719ms ago: executing program 1 (id=263): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close(r1) mremap(&(0x7f000007e000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f000007f000/0x1000)=nil) 291.577985ms ago: executing program 2 (id=264): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x5d, 0x0, &(0x7f0000000780)="b44c806305624431ed3373010001000000bf7e47d5fe008c6390009c5bbd873094563683b788a1e78b46a2599f69c84033e65c1d6a53200386ce51d4a9c6157179af8a645c2b9c0614907dac12c6d3cd73c6f7e79b50b7773a97aad715", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 192.48161ms ago: executing program 3 (id=265): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) recvmmsg(r0, &(0x7f0000009080)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x400}], 0x2, 0x40012021, 0x0) sendmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 129.519813ms ago: executing program 1 (id=266): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1010000, &(0x7f0000000340)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d372c757466383d312c696f636861727365743d63703835372c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c7379735f696d6d757461626c652c73686f72746e616d653d6c6f7765722c696f636861727365743d61736369692c73686f72746e616d653d6c6f7765722c756e695f786c6174653d312c757466383d312c71756965742c756e695f786c6174653d312c756e695f786c6174653d3100000000000000026d653d6d697865642c72736469722c756e695f786c6174653d302c757466383d302c00"], 0x1, 0x379, &(0x7f0000000880)="$eJzs3U1oI1UcAPB/OmnSLmh7EwUhehO0bPemF1ukC4u9qAQ/DmJwuypJFVostodN60HxKHjUkzcFPXgQjyII4s2DV1cQP/Cge1vZxSfJ5GOapN2u2ErZ3w+avL73/u//JjMk02Hy+sJSNC9Ox6WrV3+OmZlSlJceW4prpZiPLPp2Y1xlQh0AcDpcSyn+TLnRtpnJIaUTmBYAcIy6n/8vRUQt5vOaN78+rH/y6Q8Ap17v7//Zw/occB0g4rVjmRIAcMzGrv/fv6+50v0p938tF+4KAABOq6eefe7x5dWIJ2u1mYj1t7fqW/V4ZNi+fCleiVasxdmYixsR+YlC56HUfTx/YXXlbK1Wa8cv81GPiKleYD0/U1jOuvHVWIy5mO/F9842UkrZ+c9WVxZrXRGx2+7mj/XSVn06zvTy/3Am1oYnHv1Buk8RF1ZXztV6A9TX+/HtiL3hjQqd+S/EXHz34mCYlPp3MK6uXF7sT3oYv1WvxsXBqzB+BeTQCyYAAAAAAAAAAAAAAAAAAAAAAHATC7WB+cH6OanznK+Us7Awob27Pk4e31sfaC9fHyhVU6T0xxsP1d/JYt/6QKPr82xZSBAAAAAAAAAAAAAAAAAAAAAGNrcr0Wi11jY2t3eaxUJ7Y3N7KiI6Na9+88lXszHe5yaFcp6iGjFIUeul3Wk2UtbvnLKI8fCsk7xf89HngxkX+1QHWzFxGtWDm1qtO+776f1hzb1Zf+S/h32ymLyBWWEaj46MvH5nPqVbeaEGhXPFmup49isppULNW8Xwy8+PDxiliPKt77id5lQc3Cd1CtfTy3f3X/3Glyn3wINzT19578Pfmo1WJ3N092BlY/NGajZK/c5HyN4bLnV3wfDYKEVeKBWPhPJhA+7tr2lk3//+zD3vfntw9igPa1Kx6fXO8TzSOcs359PRcSp5oTPNkabZYfh0byNaa9MjB/+E/T5W+Bf79K4Pvvg4pR9/PWpU4U1iauxto/TfvPsAAAAAAAAAAAAAAAAAAABFhe+K97503c4bpg+LeviJE5oeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJyI4f//LxT2dmOk5iiF6+0JUdW1jc2IyoTMf/0PWwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwO3qnwAAAP//7gFmJg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r0, r0, 0x0, 0xe3aa6ea) 0s ago: executing program 2 (id=267): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000028c0)='./file1\x00', 0x2a08800, &(0x7f0000000040)=ANY=[], 0x1, 0x6af, &(0x7f0000003180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x8da6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.32' (ED25519) to the list of known hosts. [ 69.637167][ T5755] cgroup: Unknown subsys name 'net' [ 69.753086][ T5755] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.494511][ T5755] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.770038][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.776831][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.941273][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.955267][ T5771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.965260][ T5771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.973569][ T5771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.984756][ T5771] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.994693][ T5771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.068906][ T5771] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.079538][ T5771] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.097046][ T5771] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.131953][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.145097][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.160780][ T5777] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.168948][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.177472][ T5782] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.195456][ T5777] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.203245][ T5782] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.214828][ T5777] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.235969][ T5777] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.252624][ T5777] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.285362][ T5777] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 73.293654][ T5776] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.304011][ T5776] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.324885][ T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.334289][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.403788][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 73.503198][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.511037][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.518681][ T5770] bridge_slave_0: entered allmulticast mode [ 73.526526][ T5770] bridge_slave_0: entered promiscuous mode [ 73.540097][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.547339][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.554712][ T5770] bridge_slave_1: entered allmulticast mode [ 73.561716][ T5770] bridge_slave_1: entered promiscuous mode [ 73.619181][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.631733][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.698456][ T5770] team0: Port device team_slave_0 added [ 73.707559][ T5770] team0: Port device team_slave_1 added [ 73.731043][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.738130][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.764303][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.789391][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.796903][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.823122][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.927022][ T5770] hsr_slave_0: entered promiscuous mode [ 73.933938][ T5770] hsr_slave_1: entered promiscuous mode [ 74.034690][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 74.124382][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 74.229723][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 74.313134][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.320501][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.327867][ T5773] bridge_slave_0: entered allmulticast mode [ 74.337582][ T5773] bridge_slave_0: entered promiscuous mode [ 74.370651][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.378035][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.385379][ T5773] bridge_slave_1: entered allmulticast mode [ 74.392338][ T5773] bridge_slave_1: entered promiscuous mode [ 74.444707][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.452022][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.459995][ T5774] bridge_slave_0: entered allmulticast mode [ 74.467861][ T5774] bridge_slave_0: entered promiscuous mode [ 74.476851][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.484123][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.492094][ T5774] bridge_slave_1: entered allmulticast mode [ 74.499890][ T5774] bridge_slave_1: entered promiscuous mode [ 74.533376][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.573366][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.611102][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.641991][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.649931][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.657606][ T5779] bridge_slave_0: entered allmulticast mode [ 74.664666][ T5779] bridge_slave_0: entered promiscuous mode [ 74.672023][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.686991][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.699156][ T5773] team0: Port device team_slave_0 added [ 74.708583][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.716240][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.723416][ T5779] bridge_slave_1: entered allmulticast mode [ 74.730862][ T5779] bridge_slave_1: entered promiscuous mode [ 74.737926][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.759300][ T5773] team0: Port device team_slave_1 added [ 74.777710][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.826644][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.839593][ T5774] team0: Port device team_slave_0 added [ 74.849028][ T5774] team0: Port device team_slave_1 added [ 74.855702][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.862758][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.889503][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.903432][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.917441][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.950256][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.957633][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.984014][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.025919][ T5779] team0: Port device team_slave_0 added [ 75.035963][ T5779] team0: Port device team_slave_1 added [ 75.045405][ T51] Bluetooth: hci0: command tx timeout [ 75.067027][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.074026][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.102865][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.116500][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.123575][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.149979][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.194334][ T5773] hsr_slave_0: entered promiscuous mode [ 75.202070][ T5773] hsr_slave_1: entered promiscuous mode [ 75.208713][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.216976][ T5773] Cannot create hsr debugfs directory [ 75.223294][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.230705][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.259498][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.272652][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.279906][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.308210][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.364776][ T5771] Bluetooth: hci1: command tx timeout [ 75.370505][ T51] Bluetooth: hci2: command tx timeout [ 75.426135][ T5774] hsr_slave_0: entered promiscuous mode [ 75.433259][ T5774] hsr_slave_1: entered promiscuous mode [ 75.439776][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.448097][ T51] Bluetooth: hci3: command tx timeout [ 75.448126][ T5774] Cannot create hsr debugfs directory [ 75.490086][ T5779] hsr_slave_0: entered promiscuous mode [ 75.496871][ T5779] hsr_slave_1: entered promiscuous mode [ 75.503329][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.511435][ T5779] Cannot create hsr debugfs directory [ 75.855613][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 75.871047][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 75.881411][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 75.891924][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 75.938132][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.987523][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.016771][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.025010][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.045159][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.058657][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.071075][ T2971] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.078526][ T2971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.100129][ T3003] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.107551][ T3003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.229011][ T5770] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.240073][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.259297][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.271497][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.282585][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.292783][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.423849][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.491802][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.502880][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.550526][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.584349][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.591553][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.631806][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.643118][ T991] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.650368][ T991] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.666718][ T991] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.673947][ T991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.704020][ T2971] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.711205][ T2971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.753759][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.792541][ T1136] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.800078][ T1136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.852665][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.868596][ T991] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.875828][ T991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.078175][ T5770] veth0_vlan: entered promiscuous mode [ 77.127048][ T5770] veth1_vlan: entered promiscuous mode [ 77.128653][ T51] Bluetooth: hci0: command tx timeout [ 77.247931][ T5770] veth0_macvtap: entered promiscuous mode [ 77.267859][ T5770] veth1_macvtap: entered promiscuous mode [ 77.332369][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.372864][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.428611][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.445303][ T51] Bluetooth: hci2: command tx timeout [ 77.445667][ T5771] Bluetooth: hci1: command tx timeout [ 77.481026][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.490964][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.502353][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.511733][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.525455][ T5771] Bluetooth: hci3: command tx timeout [ 77.563535][ T5773] veth0_vlan: entered promiscuous mode [ 77.576921][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.602766][ T5773] veth1_vlan: entered promiscuous mode [ 77.627893][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.739117][ T5773] veth0_macvtap: entered promiscuous mode [ 77.765932][ T2976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.781296][ T2976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.794134][ T5773] veth1_macvtap: entered promiscuous mode [ 77.804323][ T5774] veth0_vlan: entered promiscuous mode [ 77.868255][ T5774] veth1_vlan: entered promiscuous mode [ 77.879634][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.891789][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.903506][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.922056][ T5779] veth0_vlan: entered promiscuous mode [ 77.922491][ T2999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.937278][ T2999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.962079][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.979881][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.993735][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.004129][ T5779] veth1_vlan: entered promiscuous mode [ 78.032451][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.041727][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.050955][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.059869][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.178250][ T5830] syz.3.4[5830]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 78.191347][ T5774] veth0_macvtap: entered promiscuous mode [ 78.214552][ T5779] veth0_macvtap: entered promiscuous mode [ 78.230451][ T5830] loop3: detected capacity change from 0 to 1024 [ 78.238466][ T5774] veth1_macvtap: entered promiscuous mode [ 78.253470][ T5830] EXT4-fs: Ignoring removed oldalloc option [ 78.285227][ T5830] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 78.298765][ T5779] veth1_macvtap: entered promiscuous mode [ 78.334805][ T5830] EXT4-fs (loop3): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 78.335877][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.359378][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.380634][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.395212][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.406208][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.407468][ T5830] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.417029][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.418885][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.524064][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.555616][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.569541][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.581225][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.593318][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.606017][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.638981][ T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.639641][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.669849][ T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.682170][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.696800][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.718182][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.733565][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.750039][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.760294][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.776791][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.787177][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.798227][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.809668][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.811819][ T5836] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5'. [ 78.838399][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.849516][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.862919][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.873628][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.884335][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.896974][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.908954][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.025905][ T5779] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.050149][ T5838] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.067360][ T5779] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.084941][ T5779] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.093717][ T5779] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.191325][ T5838] kvm: user requested TSC rate below hardware speed [ 79.205794][ T5771] Bluetooth: hci0: command tx timeout [ 79.283585][ T2971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.308876][ T2971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.431301][ T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.440602][ T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.526954][ T5771] Bluetooth: hci2: command tx timeout [ 79.526964][ T51] Bluetooth: hci1: command tx timeout [ 79.582410][ T2971] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.605806][ T5771] Bluetooth: hci3: command tx timeout [ 79.621362][ T2971] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.858838][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.886927][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.053510][ T5858] loop3: detected capacity change from 0 to 256 [ 80.195403][ T5858] FAT-fs (loop3): Directory bread(block 64) failed [ 80.202389][ T5858] FAT-fs (loop3): Directory bread(block 65) failed [ 80.232568][ T5858] FAT-fs (loop3): Directory bread(block 66) failed [ 80.237676][ T5864] loop2: detected capacity change from 0 to 1024 [ 80.245367][ T5858] FAT-fs (loop3): Directory bread(block 67) failed [ 80.274405][ T5858] FAT-fs (loop3): Directory bread(block 68) failed [ 80.291934][ T5858] FAT-fs (loop3): Directory bread(block 69) failed [ 80.319503][ T5858] FAT-fs (loop3): Directory bread(block 70) failed [ 80.343062][ T5858] FAT-fs (loop3): Directory bread(block 71) failed [ 80.354002][ T5858] FAT-fs (loop3): Directory bread(block 72) failed [ 80.370768][ T5858] FAT-fs (loop3): Directory bread(block 73) failed [ 81.285272][ T5771] Bluetooth: hci0: command tx timeout [ 81.484156][ T5870] loop3: detected capacity change from 0 to 32768 [ 81.549273][ T5870] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 81.605054][ T5771] Bluetooth: hci1: command tx timeout [ 81.605065][ T51] Bluetooth: hci2: command tx timeout [ 81.640196][ T5870] XFS (loop3): Ending clean mount [ 81.685766][ T5771] Bluetooth: hci3: command tx timeout [ 81.893008][ T5894] Bluetooth: MGMT ver 1.22 [ 81.919064][ T5870] syz.3.17 (5870) used greatest stack depth: 19784 bytes left [ 81.969684][ T5770] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 83.184895][ T5866] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 83.388750][ T5866] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 83.405028][ T5866] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 83.424226][ T5866] usb 3-1: config 220 has an invalid descriptor of length 99, skipping remainder of the config [ 83.454525][ T5866] usb 3-1: config 220 has no interface number 2 [ 83.461305][ T5866] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 83.479680][ T5902] loop0: detected capacity change from 0 to 40427 [ 83.487361][ T5866] usb 3-1: config 220 interface 0 has no altsetting 0 [ 83.500346][ T5866] usb 3-1: config 220 interface 76 has no altsetting 0 [ 83.509013][ T5866] usb 3-1: config 220 interface 1 has no altsetting 0 [ 83.522961][ T5902] F2FS-fs (loop0): heap/no_heap options were deprecated [ 83.534892][ T5902] F2FS-fs (loop0): build fault injection attr: rate: 19, type: 0x7ffff [ 83.545815][ T5866] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 83.560344][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.579053][ T5902] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x77e8c [ 83.590633][ T5866] usb 3-1: Product: syz [ 83.597455][ T5866] usb 3-1: Manufacturer: syz [ 83.609167][ T5866] usb 3-1: SerialNumber: syz [ 83.645899][ T5902] F2FS-fs (loop0): invalid crc value [ 83.715168][ T5902] F2FS-fs (loop0): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21d/0x9b0 [ 83.761576][ T5902] F2FS-fs (loop0): Found nat_bits in checkpoint [ 83.918925][ T5866] usb 3-1: selecting invalid altsetting 0 [ 83.941418][ T5902] F2FS-fs (loop0): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650 [ 83.955475][ T5866] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 83.962031][ T5866] usb 3-1: No valid video chain found. [ 84.017551][ T5866] usb 3-1: selecting invalid altsetting 0 [ 84.030275][ T5866] usbtest: probe of 3-1:220.1 failed with error -22 [ 84.031263][ C1] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x597/0xe40 [ 84.067335][ T5866] usb 3-1: USB disconnect, device number 2 [ 84.146382][ T5902] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 84.287984][ T5902] F2FS-fs (loop0): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910 [ 84.388747][ T5902] F2FS-fs (loop0): inject checkpoint error in f2fs_balance_fs of f2fs_convert_inline_inode+0x792/0x800 [ 84.422423][ T5902] F2FS-fs (loop0): Stopped filesystem due to reason: 1 [ 84.754759][ T5926] netlink: 12 bytes leftover after parsing attributes in process `syz.2.32'. [ 84.940759][ T5922] loop1: detected capacity change from 0 to 32768 [ 85.672267][ T5944] ======================================================= [ 85.672267][ T5944] WARNING: The mand mount option has been deprecated and [ 85.672267][ T5944] and is ignored by this kernel. Remove the mand [ 85.672267][ T5944] option from the mount to silence this warning. [ 85.672267][ T5944] ======================================================= [ 85.707592][ C0] vkms_vblank_simulate: vblank timer overrun [ 86.431782][ T5962] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 86.833922][ T5958] loop1: detected capacity change from 0 to 32768 [ 86.896032][ T5951] loop3: detected capacity change from 0 to 32768 [ 86.903429][ T967] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.939501][ T5951] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.46 (5951) [ 86.968889][ T5951] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 86.990427][ T5951] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 87.009607][ T5958] JBD2: Ignoring recovery information on journal [ 87.010163][ T5951] BTRFS info (device loop3): setting nodatacow, compression disabled [ 87.025541][ T5951] BTRFS info (device loop3): setting datasum, datacow enabled [ 87.033169][ T5951] BTRFS info (device loop3): force clearing of disk cache [ 87.040529][ T5951] BTRFS info (device loop3): enabling ssd optimizations [ 87.048406][ T5951] BTRFS info (device loop3): using spread ssd allocation scheme [ 87.056960][ T5951] BTRFS info (device loop3): turning on sync discard [ 87.063812][ T5951] BTRFS info (device loop3): turning off barriers [ 87.071549][ T5951] BTRFS info (device loop3): enabling auto defrag [ 87.078402][ T5951] BTRFS info (device loop3): not using ssd optimizations [ 87.085972][ T5951] BTRFS info (device loop3): not using spread ssd allocation scheme [ 87.094127][ T5951] BTRFS info (device loop3): using free space tree [ 87.114564][ T967] usb 1-1: Using ep0 maxpacket: 16 [ 87.122192][ T967] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 87.139710][ T967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.152516][ T967] usb 1-1: config 0 descriptor?? [ 87.153403][ T8] cfg80211: failed to load regulatory.db [ 87.163422][ T967] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 87.227056][ T5958] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 87.328530][ T5951] BTRFS info (device loop3): rebuilding free space tree [ 87.348467][ T5958] (syz.1.38,5958,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 87.367065][ T5958] (syz.1.38,5958,0):update_backups:188 ERROR: status = -12 [ 87.385747][ T5958] ocfs2: Failed to update super blocks on 7,1 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it [ 87.633363][ T5773] ocfs2: Unmounting device (7,1) on (node local) [ 87.650910][ T28] audit: type=1800 audit(1776795764.895:2): pid=5951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.46" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 87.731886][ T5951] BTRFS info (device loop3): balance: start -sconvert=dup,soft,limit=25769803780 [ 87.749681][ T5951] BTRFS info (device loop3): balance: ended with status: 0 [ 87.935384][ T5770] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 87.992547][ T967] gspca_sonixj: reg_r err -71 [ 87.997821][ T967] sonixj: probe of 1-1:0.0 failed with error -71 [ 88.031425][ T967] usb 1-1: USB disconnect, device number 2 [ 89.315764][ T5991] loop3: detected capacity change from 0 to 32768 [ 89.543419][ T5996] loop2: detected capacity change from 0 to 40427 [ 89.557175][ T5996] F2FS-fs (loop2): heap/no_heap options were deprecated [ 89.568328][ T5996] F2FS-fs (loop2): build fault injection attr: rate: 19, type: 0x7ffff [ 89.578490][ T5996] F2FS-fs (loop2): build fault injection attr: rate: 0, type: 0x77e8c [ 89.589188][ T5996] F2FS-fs (loop2): invalid crc value [ 89.606896][ T5996] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21d/0x9b0 [ 89.663516][ T5996] F2FS-fs (loop2): Found nat_bits in checkpoint [ 89.759953][ T5996] F2FS-fs (loop2): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x134/0x650 [ 89.786043][ C1] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x597/0xe40 [ 89.833931][ T5996] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 89.915437][ T5996] F2FS-fs (loop2): inject no more block in inc_valid_node_count of f2fs_new_node_page+0x187/0x910 [ 89.967674][ T5996] F2FS-fs (loop2): inject checkpoint error in f2fs_balance_fs of f2fs_convert_inline_inode+0x792/0x800 [ 90.027096][ T5996] F2FS-fs (loop2): Stopped filesystem due to reason: 1 [ 90.354339][ T6008] loop1: detected capacity change from 0 to 32768 [ 90.453302][ T6008] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 90.643475][ T6008] XFS (loop1): Ending clean mount [ 90.881224][ T6021] loop3: detected capacity change from 0 to 32768 [ 90.901653][ T5773] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 90.957578][ T6021] JBD2: Ignoring recovery information on journal [ 91.121927][ T6021] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 91.315539][ T6021] (syz.3.60,6021,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 91.323861][ T6021] (syz.3.60,6021,0):update_backups:188 ERROR: status = -12 [ 91.355017][ T6021] ocfs2: Failed to update super blocks on 7,3 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it [ 91.518313][ T5770] ocfs2: Unmounting device (7,3) on (node local) [ 91.581871][ T6027] loop2: detected capacity change from 0 to 32768 [ 91.628847][ T6027] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.62 (6027) [ 91.651295][ T6027] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 91.665062][ T6027] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 91.679214][ T6027] BTRFS info (device loop2): using free space tree [ 91.772571][ T6027] BTRFS info (device loop2): enabling ssd optimizations [ 91.780856][ T6027] BTRFS info (device loop2): auto enabling async discard [ 92.108252][ T5779] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 94.595230][ T6072] loop1: detected capacity change from 0 to 32768 [ 94.618039][ T6072] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.72 (6072) [ 94.659600][ T6072] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 94.670991][ T6072] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 94.706224][ T6072] BTRFS info (device loop1): setting nodatacow, compression disabled [ 94.714390][ T6072] BTRFS info (device loop1): setting datasum, datacow enabled [ 94.786183][ T6072] BTRFS info (device loop1): force clearing of disk cache [ 94.793487][ T6072] BTRFS info (device loop1): enabling ssd optimizations [ 94.842879][ T6072] BTRFS info (device loop1): using spread ssd allocation scheme [ 94.878026][ T6072] BTRFS info (device loop1): turning on sync discard [ 94.894678][ T6072] BTRFS info (device loop1): turning off barriers [ 94.911475][ T6072] BTRFS info (device loop1): enabling auto defrag [ 94.940472][ T6072] BTRFS info (device loop1): not using ssd optimizations [ 94.971113][ T6072] BTRFS info (device loop1): not using spread ssd allocation scheme [ 94.996004][ T6072] BTRFS info (device loop1): using free space tree [ 95.127753][ T6072] BTRFS info (device loop1): rebuilding free space tree [ 95.276657][ T28] audit: type=1800 audit(1776795772.525:3): pid=6072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.72" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 95.303003][ T6072] BTRFS info (device loop1): balance: start -sconvert=dup,soft,limit=25769803780 [ 95.326762][ T6072] BTRFS info (device loop1): balance: ended with status: 0 [ 95.484913][ T5773] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 95.585063][ T6082] loop0: detected capacity change from 0 to 32768 [ 95.665421][ T6082] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 95.873578][ T6082] XFS (loop0): Ending clean mount [ 96.214639][ T5774] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 96.471771][ T6106] loop2: detected capacity change from 0 to 32768 [ 96.583723][ T6106] JBD2: Ignoring recovery information on journal [ 96.603942][ T6107] loop3: detected capacity change from 0 to 32768 [ 96.668706][ T6107] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.78 (6107) [ 96.722989][ T6107] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 96.742819][ T6106] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 96.752490][ T6107] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 96.814898][ T6107] BTRFS info (device loop3): using free space tree [ 96.966564][ T6107] BTRFS info (device loop3): enabling ssd optimizations [ 96.991973][ T6107] BTRFS info (device loop3): auto enabling async discard [ 97.003140][ T6106] (syz.2.77,6106,0):ocfs2_read_blocks_sync:112 ERROR: status = -12 [ 97.025125][ T6106] (syz.2.77,6106,0):update_backups:188 ERROR: status = -12 [ 97.032517][ T6106] ocfs2: Failed to update super blocks on 7,2 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it [ 97.186819][ T5779] ocfs2: Unmounting device (7,2) on (node local) [ 97.311167][ T5770] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 97.689451][ T5761] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 10 /dev/loop3 scanned by udevd (5761) [ 98.355523][ T6142] loop1: detected capacity change from 0 to 32768 [ 98.370776][ T6142] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.93 (6142) [ 98.431252][ T6142] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 98.455644][ T6142] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 98.467057][ T6142] BTRFS info (device loop1): setting nodatasum [ 98.480165][ T6142] BTRFS info (device loop1): force zlib compression, level 3 [ 98.495870][ T6142] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 98.547315][ T6142] BTRFS info (device loop1): use lzo compression, level 0 [ 98.558988][ T6142] BTRFS info (device loop1): turning on flush-on-commit [ 98.566372][ T6142] BTRFS info (device loop1): enabling auto defrag [ 98.602028][ T6142] BTRFS info (device loop1): max_inline at 4096 [ 98.623999][ T6142] BTRFS info (device loop1): using free space tree [ 98.785126][ T6142] BTRFS info (device loop1): enabling ssd optimizations [ 98.825970][ T6173] loop0: detected capacity change from 0 to 512 [ 98.843175][ T6173] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 98.874162][ T6173] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 98.937015][ T6173] EXT4-fs (loop0): 1 truncate cleaned up [ 99.056078][ T6173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.115331][ T28] audit: type=1800 audit(1776795776.355:4): pid=6173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.90" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 99.267238][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.368571][ T5773] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 100.118826][ T6185] loop0: detected capacity change from 0 to 32768 [ 100.154737][ T6185] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.92 (6185) [ 100.189477][ T6185] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 100.224806][ T6185] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 100.233837][ T6185] BTRFS info (device loop0): setting nodatacow, compression disabled [ 100.286633][ T6185] BTRFS info (device loop0): setting datasum, datacow enabled [ 100.314902][ T6185] BTRFS info (device loop0): force clearing of disk cache [ 100.326231][ T6185] BTRFS info (device loop0): enabling ssd optimizations [ 100.333244][ T6185] BTRFS info (device loop0): using spread ssd allocation scheme [ 100.373638][ T6185] BTRFS info (device loop0): turning on sync discard [ 100.394505][ T6185] BTRFS info (device loop0): turning off barriers [ 100.415701][ T6185] BTRFS info (device loop0): enabling auto defrag [ 100.422292][ T6185] BTRFS info (device loop0): not using ssd optimizations [ 100.444805][ T6188] loop1: detected capacity change from 0 to 32768 [ 100.461514][ T6185] BTRFS info (device loop0): not using spread ssd allocation scheme [ 100.475114][ T6188] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 100.514666][ T6185] BTRFS info (device loop0): using free space tree [ 100.817281][ T6185] BTRFS info (device loop0): rebuilding free space tree [ 100.934297][ T5761] BTRFS error: device /dev/loop1 already registered with a higher generation, found 8 expect 10 [ 101.013739][ T6191] loop2: detected capacity change from 0 to 32768 [ 101.083485][ T6191] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.106 (6191) [ 101.128089][ T28] audit: type=1800 audit(1776795778.375:5): pid=6185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.92" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 101.161730][ T6191] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 101.211158][ T6191] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 101.246543][ T6185] BTRFS info (device loop0): balance: start -sconvert=dup,soft,limit=25769803780 [ 101.253011][ T6191] BTRFS info (device loop2): setting nodatasum [ 101.275489][ T6191] BTRFS info (device loop2): force zlib compression, level 3 [ 101.313385][ T6185] BTRFS info (device loop0): balance: ended with status: 0 [ 101.321033][ T6191] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 101.354701][ T6191] BTRFS info (device loop2): use lzo compression, level 0 [ 101.374712][ T6191] BTRFS info (device loop2): turning on flush-on-commit [ 101.429365][ T6191] BTRFS info (device loop2): enabling auto defrag [ 101.439542][ T6191] BTRFS info (device loop2): max_inline at 4096 [ 101.458620][ T6191] BTRFS info (device loop2): using free space tree [ 101.507998][ T5774] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 101.677153][ T6230] GUP no longer grows the stack in syz.3.104 (6230): 200000004000-200000b36000 (200000000000) [ 101.692692][ T6230] CPU: 0 PID: 6230 Comm: syz.3.104 Not tainted syzkaller #0 [ 101.700185][ T6230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 101.710263][ T6230] Call Trace: [ 101.713561][ T6230] [ 101.716617][ T6230] dump_stack_lvl+0x18c/0x250 [ 101.721330][ T6230] ? show_regs_print_info+0x20/0x20 [ 101.726639][ T6230] ? load_image+0x420/0x420 [ 101.731161][ T6230] ? find_vma+0x134/0x1b0 [ 101.735525][ T6230] __get_user_pages+0xf0e/0x1380 [ 101.740672][ T6230] ? populate_vma_page_range+0x380/0x380 [ 101.746448][ T6230] ? __gup_longterm_locked+0x20f6/0x2b80 [ 101.752157][ T6230] ? down_read_killable+0x1d0/0x340 [ 101.757377][ T6230] __gup_longterm_locked+0x2251/0x2b80 [ 101.762899][ T6230] ? pin_user_pages_remote+0x220/0x220 [ 101.768402][ T6230] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 101.774411][ T6230] ? lock_chain_count+0x20/0x20 [ 101.779291][ T6230] ? internal_get_user_pages_fast+0x1fc6/0x2760 [ 101.785560][ T6230] internal_get_user_pages_fast+0x21bf/0x2760 [ 101.791917][ T6230] ? rcu_read_lock_sched_held+0x8a/0x110 [ 101.797572][ T6230] ? __bpf_trace_rcu_stall_warning+0x160/0x160 [ 101.804189][ T6230] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 101.810191][ T6230] ? get_user_pages_fast_only+0xa0/0xa0 [ 101.815846][ T6230] ? preempt_schedule_common+0x82/0xc0 [ 101.821328][ T6230] ? preempt_schedule+0xc0/0xd0 [ 101.826208][ T6230] ? schedule_preempt_disabled+0x20/0x20 [ 101.831868][ T6230] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 101.837785][ T6230] get_futex_key+0x1aa/0x1010 [ 101.842501][ T6230] ? try_to_wake_up+0x781/0x1190 [ 101.847459][ T6230] ? futex_setup_timer+0xc0/0xc0 [ 101.852439][ T6230] futex_wake+0x127/0x4f0 [ 101.856792][ T6230] ? futex_wake_mark+0x150/0x150 [ 101.861761][ T6230] ? __se_sys_mremap+0x898/0x11f0 [ 101.866818][ T6230] do_futex+0x35d/0x3e0 [ 101.870996][ T6230] ? __ia32_sys_get_robust_list+0x110/0x110 [ 101.876919][ T6230] __se_sys_futex+0x3a9/0x440 [ 101.881658][ T6230] ? __x64_sys_futex+0xf0/0xf0 [ 101.886445][ T6230] ? __x64_sys_futex+0x21/0xf0 [ 101.891254][ T6230] do_syscall_64+0x55/0xa0 [ 101.895724][ T6230] ? clear_bhb_loop+0x40/0x90 [ 101.900530][ T6230] ? clear_bhb_loop+0x40/0x90 [ 101.905253][ T6230] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.911177][ T6230] RIP: 0033:0x7f5a8779c819 [ 101.915718][ T6230] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.935361][ T6230] RSP: 002b:00007f5a886f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 101.943876][ T6230] RAX: ffffffffffffffda RBX: 00007f5a87a15fa0 RCX: 00007f5a8779c819 [ 101.951975][ T6230] RDX: 0000000000000001 RSI: 000000000000000a RDI: 0000200000000240 [ 101.959979][ T6230] RBP: 00007f5a87832c91 R08: 0000000000000000 R09: 0000000000000002 [ 101.967991][ T6230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.976078][ T6230] R13: 00007f5a87a16038 R14: 00007f5a87a15fa0 R15: 00007ffdad3cf118 [ 101.984083][ T6230] [ 102.152579][ T6191] BTRFS info (device loop2): enabling ssd optimizations [ 102.637065][ T5779] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 102.832598][ T5761] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (5761) [ 103.493704][ T6244] loop0: detected capacity change from 0 to 32768 [ 103.520197][ T6244] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop0 scanned by syz.0.103 (6244) [ 103.576984][ T6244] BTRFS info (device loop0): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 103.614310][ T6244] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 103.654939][ T6244] BTRFS info (device loop0): using free space tree [ 103.855172][ T6244] BTRFS info (device loop0): enabling ssd optimizations [ 103.863305][ T6244] BTRFS info (device loop0): auto enabling async discard [ 104.293841][ T6259] loop3: detected capacity change from 0 to 32768 [ 104.314031][ T6259] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.113 (6259) [ 104.396091][ T6259] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 104.426331][ T5774] BTRFS info (device loop0): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 104.469464][ T6259] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 104.504620][ T6259] BTRFS info (device loop3): setting nodatacow, compression disabled [ 104.520411][ T6259] BTRFS info (device loop3): setting datasum, datacow enabled [ 104.549808][ T6259] BTRFS info (device loop3): force clearing of disk cache [ 104.584080][ T6259] BTRFS info (device loop3): enabling ssd optimizations [ 104.626545][ T6259] BTRFS info (device loop3): using spread ssd allocation scheme [ 104.634273][ T6259] BTRFS info (device loop3): turning on sync discard [ 104.685489][ T6259] BTRFS info (device loop3): turning off barriers [ 104.692020][ T6259] BTRFS info (device loop3): enabling auto defrag [ 104.732588][ T6259] BTRFS info (device loop3): not using ssd optimizations [ 104.784074][ T6259] BTRFS info (device loop3): not using spread ssd allocation scheme [ 104.802229][ T6259] BTRFS info (device loop3): using free space tree [ 105.084897][ T6259] BTRFS info (device loop3): rebuilding free space tree [ 105.376113][ T28] audit: type=1800 audit(1776795782.625:6): pid=6259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.113" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 105.396407][ C1] vkms_vblank_simulate: vblank timer overrun [ 105.478385][ T6259] BTRFS info (device loop3): balance: start -sconvert=dup,soft,limit=25769803780 [ 105.503463][ T6259] BTRFS info (device loop3): balance: ended with status: 0 [ 105.616758][ T6296] loop0: detected capacity change from 0 to 32768 [ 105.659249][ T6296] BTRFS error: device /dev/loop0 already registered with a higher generation, found 8 expect 10 [ 105.766359][ T5770] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 105.790709][ T5764] I/O error, dev loop0, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 105.940672][ T6326] warning: `syz.1.129' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.078683][ T6328] capability: warning: `syz.2.130' uses 32-bit capabilities (legacy support in use) [ 106.185571][ T6328] program syz.2.130 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.675666][ T6337] loop1: detected capacity change from 0 to 256 [ 106.795572][ T6337] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.914679][ T6337] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 107.097450][ T6337] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d) [ 107.965034][ T6350] loop3: detected capacity change from 0 to 2048 [ 108.069964][ T6350] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.184445][ C0] sched: RT throttling activated [ 108.208265][ T28] audit: type=1800 audit(1776795785.455:7): pid=6350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.138" name="file3" dev="loop3" ino=1347 res=0 errno=0 [ 108.672900][ T6340] loop2: detected capacity change from 0 to 32768 [ 108.742108][ T6340] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 108.829229][ T6340] XFS (loop2): Ending clean mount [ 108.872867][ T6344] loop0: detected capacity change from 0 to 32768 [ 108.874173][ T6349] loop1: detected capacity change from 0 to 32768 [ 108.880994][ T6340] XFS (loop2): Quotacheck needed: Please wait. [ 108.906311][ T6344] XFS: ikeep mount option is deprecated. [ 108.930850][ T6349] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.137 (6349) [ 108.971786][ T6349] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 108.983051][ T6349] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 108.995799][ T6349] BTRFS info (device loop1): setting nodatacow, compression disabled [ 109.003534][ T6344] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 109.004055][ T6349] BTRFS info (device loop1): setting datasum, datacow enabled [ 109.068350][ T6349] BTRFS info (device loop1): force clearing of disk cache [ 109.082042][ T6340] XFS (loop2): Quotacheck: Done. [ 109.123961][ T6349] BTRFS info (device loop1): enabling ssd optimizations [ 109.131227][ T6349] BTRFS info (device loop1): using spread ssd allocation scheme [ 109.142684][ T6349] BTRFS info (device loop1): turning on sync discard [ 109.149509][ T6349] BTRFS info (device loop1): turning off barriers [ 109.154662][ T6344] XFS (loop0): Ending clean mount [ 109.156110][ T6349] BTRFS info (device loop1): enabling auto defrag [ 109.167734][ T6349] BTRFS info (device loop1): not using ssd optimizations [ 109.176160][ T6349] BTRFS info (device loop1): not using spread ssd allocation scheme [ 109.184206][ T6349] BTRFS info (device loop1): using free space tree [ 109.393333][ T6349] BTRFS info (device loop1): rebuilding free space tree [ 109.414795][ T5779] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 109.616028][ T5774] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 109.654570][ T28] audit: type=1800 audit(1776795786.895:8): pid=6349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.137" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 109.746058][ T6349] BTRFS info (device loop1): balance: start -sconvert=dup,soft,limit=25769803780 [ 109.769569][ T6349] BTRFS info (device loop1): balance: ended with status: 0 [ 109.953854][ T5773] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 110.549190][ T6401] loop1: detected capacity change from 0 to 64 [ 110.708192][ T6392] loop3: detected capacity change from 0 to 32768 [ 110.758298][ T6392] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.144 (6392) [ 110.852927][ T6392] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 110.900338][ T6392] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 110.958786][ T6392] BTRFS info (device loop3): enabling disk space caching [ 111.014630][ T6392] BTRFS info (device loop3): force clearing of disk cache [ 111.022479][ T6392] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 111.074692][ T6392] BTRFS info (device loop3): use zstd compression, level 3 [ 111.104635][ T6392] BTRFS info (device loop3): disk space caching is enabled [ 111.220644][ T6392] BTRFS info (device loop3): enabling ssd optimizations [ 111.254555][ T6392] BTRFS info (device loop3): auto enabling async discard [ 111.288124][ T6392] BTRFS info (device loop3): rebuilding free space tree [ 111.334050][ T6392] BTRFS info (device loop3): disabling free space tree [ 111.345048][ T6392] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 111.367023][ T6392] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 111.543397][ T5770] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 111.689592][ T5764] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop3 scanned by udevd (5764) [ 112.024568][ T967] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 112.214510][ T967] usb 4-1: Using ep0 maxpacket: 8 [ 112.248184][ T967] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.294373][ T967] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.344767][ T967] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 112.384795][ T967] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.434656][ T967] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 112.467805][ T967] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.625499][ T6430] loop2: detected capacity change from 0 to 32768 [ 112.651733][ T6430] XFS: ikeep mount option is deprecated. [ 112.722503][ T6430] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 112.745282][ T967] usb 4-1: GET_CAPABILITIES returned 0 [ 112.756185][ T967] usbtmc 4-1:16.0: can't read capabilities [ 112.836981][ T6430] XFS (loop2): Ending clean mount [ 112.972470][ T967] usb 4-1: USB disconnect, device number 2 [ 113.050631][ T6436] loop0: detected capacity change from 0 to 32768 [ 113.070182][ T5779] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 113.109408][ T6436] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 113.274330][ T6438] loop1: detected capacity change from 0 to 32768 [ 113.321270][ T6438] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.154 (6438) [ 113.399554][ T6438] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 113.429587][ T6436] XFS (loop0): Ending clean mount [ 113.435611][ T6438] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 113.444326][ T6438] BTRFS info (device loop1): setting nodatacow, compression disabled [ 113.469809][ T6436] XFS (loop0): Quotacheck needed: Please wait. [ 113.550399][ T6438] BTRFS info (device loop1): setting datasum, datacow enabled [ 113.564717][ T6438] BTRFS info (device loop1): force clearing of disk cache [ 113.568265][ T6436] XFS (loop0): Quotacheck: Done. [ 113.571939][ T6438] BTRFS info (device loop1): enabling ssd optimizations [ 113.640594][ T6438] BTRFS info (device loop1): using spread ssd allocation scheme [ 113.648781][ T6438] BTRFS info (device loop1): turning on sync discard [ 113.659616][ T6438] BTRFS info (device loop1): turning off barriers [ 113.684960][ T6438] BTRFS info (device loop1): enabling auto defrag [ 113.697995][ T5774] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 113.706926][ T6438] BTRFS info (device loop1): not using ssd optimizations [ 113.714005][ T6438] BTRFS info (device loop1): not using spread ssd allocation scheme [ 113.723866][ T6438] BTRFS info (device loop1): using free space tree [ 113.859186][ T6438] BTRFS info (device loop1): rebuilding free space tree [ 114.107878][ T28] audit: type=1800 audit(1776795791.345:9): pid=6438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.154" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 114.158332][ T6438] BTRFS info (device loop1): balance: start -sconvert=dup,soft,limit=25769803780 [ 114.167699][ T6482] loop2: detected capacity change from 0 to 128 [ 114.192799][ T6438] BTRFS info (device loop1): balance: ended with status: 0 [ 114.240856][ T6482] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 114.318556][ T5773] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 114.344838][ T5866] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 114.373971][ T6482] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 114.538494][ T5866] usb 4-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 114.554528][ T5866] usb 4-1: config 0 interface 0 has no altsetting 0 [ 114.575677][ T5866] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 114.604651][ T5866] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 114.647787][ T5866] usb 4-1: Product: syz [ 114.652039][ T5866] usb 4-1: Manufacturer: syz [ 114.664402][ T5866] usb 4-1: SerialNumber: syz [ 114.716543][ T5866] usb 4-1: config 0 descriptor?? [ 114.726241][ T6480] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 114.774088][ T5866] usb 4-1: selecting invalid altsetting 0 [ 114.823118][ T5779] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.009770][ T6480] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled [ 115.033125][ T5866] usb 4-1: USB disconnect, device number 3 [ 115.378614][ T6509] loop0: detected capacity change from 0 to 256 [ 115.417729][ T6509] FAT-fs (loop0): Directory bread(block 64) failed [ 115.440734][ T6509] FAT-fs (loop0): Directory bread(block 65) failed [ 115.449336][ T6509] FAT-fs (loop0): Directory bread(block 66) failed [ 115.464127][ T6509] FAT-fs (loop0): Directory bread(block 67) failed [ 115.471339][ T6509] FAT-fs (loop0): Directory bread(block 68) failed [ 115.483221][ T6509] FAT-fs (loop0): Directory bread(block 69) failed [ 115.490170][ T6509] FAT-fs (loop0): Directory bread(block 70) failed [ 115.502372][ T6509] FAT-fs (loop0): Directory bread(block 71) failed [ 115.509282][ T6509] FAT-fs (loop0): Directory bread(block 72) failed [ 115.521024][ T6509] FAT-fs (loop0): Directory bread(block 73) failed [ 115.655198][ T28] audit: type=1800 audit(1776795792.905:10): pid=6509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.167" name="file1" dev="loop0" ino=1048593 res=0 errno=0 [ 115.771891][ T6512] syz.0.167: attempt to access beyond end of device [ 115.771891][ T6512] loop0: rw=2049, sector=1224, nr_sectors = 8 limit=256 [ 115.820637][ T6504] loop1: detected capacity change from 0 to 32768 [ 115.842766][ T6504] XFS: ikeep mount option is deprecated. [ 115.912729][ T6504] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 116.063036][ T6521] loop3: detected capacity change from 0 to 2048 [ 116.112968][ T6504] XFS (loop1): Ending clean mount [ 116.121087][ T6521] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 116.175145][ T6521] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 116.214505][ T6521] UDF-fs: Scanning with blocksize 512 failed [ 116.279061][ T6521] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 116.404395][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.173'. [ 116.405590][ T5773] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 116.522537][ T1126] kworker/u4:6: attempt to access beyond end of device [ 116.522537][ T1126] loop0: rw=1, sector=1232, nr_sectors = 248 limit=256 [ 116.588206][ T1126] kworker/u4:6: attempt to access beyond end of device [ 116.588206][ T1126] loop0: rw=1, sector=1512, nr_sectors = 320 limit=256 [ 116.680220][ T1126] kworker/u4:6: attempt to access beyond end of device [ 116.680220][ T1126] loop0: rw=1, sector=1864, nr_sectors = 7472 limit=256 [ 116.758706][ T1126] kworker/u4:6: attempt to access beyond end of device [ 116.758706][ T1126] loop0: rw=1, sector=9336, nr_sectors = 3744 limit=256 [ 116.817693][ T6534] loop2: detected capacity change from 0 to 512 [ 116.829321][ T6534] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 116.918096][ T6534] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 116.991049][ T6534] EXT4-fs (loop2): 1 truncate cleaned up [ 117.017244][ T6534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.154556][ T5811] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 117.171340][ T5779] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.357334][ T5811] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 117.374536][ T5811] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 117.384089][ T5811] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 117.395574][ T5811] usb 2-1: config 220 has no interface number 2 [ 117.402298][ T5811] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 117.416072][ T5811] usb 2-1: config 220 interface 0 has no altsetting 0 [ 117.423071][ T5811] usb 2-1: config 220 interface 76 has no altsetting 0 [ 117.430484][ T5811] usb 2-1: config 220 interface 1 has no altsetting 0 [ 117.440774][ T5811] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 117.455262][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.463389][ T5811] usb 2-1: Product: syz [ 117.471425][ T5811] usb 2-1: Manufacturer: syz [ 117.477614][ T5811] usb 2-1: SerialNumber: syz [ 117.522249][ T6539] loop3: detected capacity change from 0 to 32768 [ 117.534686][ T6539] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 117.688192][ T5761] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 10 [ 117.721901][ T5811] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 117.744661][ T5811] usb 2-1: No valid video chain found. [ 117.750273][ T5811] usb 2-1: selecting invalid altsetting 0 [ 117.792569][ T5811] usb 2-1: selecting invalid altsetting 0 [ 117.804556][ T5811] usbtest: probe of 2-1:220.1 failed with error -22 [ 117.827500][ T5811] usb 2-1: USB disconnect, device number 2 [ 118.047286][ T6553] loop2: detected capacity change from 0 to 256 [ 118.181164][ T6553] FAT-fs (loop2): Directory bread(block 64) failed [ 118.201575][ T6553] FAT-fs (loop2): Directory bread(block 65) failed [ 118.210353][ T6553] FAT-fs (loop2): Directory bread(block 66) failed [ 118.217527][ T6553] FAT-fs (loop2): Directory bread(block 67) failed [ 118.225382][ T5866] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 118.233198][ T6553] FAT-fs (loop2): Directory bread(block 68) failed [ 118.253133][ T6553] FAT-fs (loop2): Directory bread(block 69) failed [ 118.264622][ T6553] FAT-fs (loop2): Directory bread(block 70) failed [ 118.271376][ T6553] FAT-fs (loop2): Directory bread(block 71) failed [ 118.292875][ T6553] FAT-fs (loop2): Directory bread(block 72) failed [ 118.300964][ T6553] FAT-fs (loop2): Directory bread(block 73) failed [ 118.428412][ T5866] usb 4-1: Using ep0 maxpacket: 8 [ 118.462378][ T5866] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 118.484764][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.504760][ T28] audit: type=1800 audit(1776795795.745:11): pid=6553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.185" name="file1" dev="loop2" ino=1048594 res=0 errno=0 [ 118.530622][ T5866] pvrusb2: Hardware description: Terratec Grabster AV400 [ 118.558434][ T5866] pvrusb2: ********** [ 118.562512][ T5866] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 118.611684][ T6564] syz.2.185: attempt to access beyond end of device [ 118.611684][ T6564] loop2: rw=2049, sector=1224, nr_sectors = 8 limit=256 [ 118.630267][ T5866] pvrusb2: Important functionality might not be entirely working. [ 118.638313][ T5866] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 118.670276][ T5866] pvrusb2: ********** [ 118.766303][ T2320] pvrusb2: Invalid write control endpoint [ 118.944949][ T2320] pvrusb2: Invalid write control endpoint [ 118.974331][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 119.003530][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 119.028991][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 119.037068][ T5866] usb 4-1: USB disconnect, device number 4 [ 119.064112][ T2320] pvrusb2: Device being rendered inoperable [ 119.094065][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 119.113579][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 119.140128][ T2976] kworker/u4:10: attempt to access beyond end of device [ 119.140128][ T2976] loop2: rw=1, sector=1232, nr_sectors = 248 limit=256 [ 119.166389][ T2320] pvrusb2: Attached sub-driver cx25840 [ 119.169465][ T6576] loop0: detected capacity change from 0 to 512 [ 119.172124][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 119.190712][ T2976] kworker/u4:10: attempt to access beyond end of device [ 119.190712][ T2976] loop2: rw=1, sector=1512, nr_sectors = 320 limit=256 [ 119.198525][ T6576] EXT4-fs: Ignoring removed nobh option [ 119.216724][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 119.233196][ T2976] kworker/u4:10: attempt to access beyond end of device [ 119.233196][ T2976] loop2: rw=1, sector=1864, nr_sectors = 2968 limit=256 [ 119.263403][ T2976] kworker/u4:10: attempt to access beyond end of device [ 119.263403][ T2976] loop2: rw=1, sector=4832, nr_sectors = 2432 limit=256 [ 119.289019][ T6576] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 119.344363][ T6576] EXT4-fs (loop0): 1 truncate cleaned up [ 119.353558][ T6576] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.398548][ T28] audit: type=1800 audit(1776795796.635:12): pid=6576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.194" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 119.452237][ T5774] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.831887][ T6589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.205'. [ 120.053529][ T6593] macvlan0: entered promiscuous mode [ 120.113735][ T6593] netlink: 'syz.3.200': attribute type 1 has an invalid length. [ 120.132843][ T6593] netlink: 'syz.3.200': attribute type 2 has an invalid length. [ 120.422483][ T6601] netlink: 4 bytes leftover after parsing attributes in process `syz.1.211'. [ 120.583153][ T6604] loop3: detected capacity change from 0 to 128 [ 120.611378][ T6607] loop1: detected capacity change from 0 to 256 [ 120.616390][ T6604] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.684881][ T6604] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 120.698344][ T6604] ext4 filesystem being mounted at /53/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.741892][ T6607] FAT-fs (loop1): Directory bread(block 64) failed [ 120.784737][ T6607] FAT-fs (loop1): Directory bread(block 65) failed [ 120.824681][ T6607] FAT-fs (loop1): Directory bread(block 66) failed [ 120.831295][ T6607] FAT-fs (loop1): Directory bread(block 67) failed [ 120.875400][ T6607] FAT-fs (loop1): Directory bread(block 68) failed [ 120.882020][ T6607] FAT-fs (loop1): Directory bread(block 69) failed [ 120.900393][ T6607] FAT-fs (loop1): Directory bread(block 70) failed [ 120.918070][ T5770] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 120.920959][ T6607] FAT-fs (loop1): Directory bread(block 71) failed [ 120.940117][ T6607] FAT-fs (loop1): Directory bread(block 72) failed [ 120.947252][ T6607] FAT-fs (loop1): Directory bread(block 73) failed [ 120.997485][ T1126] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.131695][ T1126] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.164526][ T28] audit: type=1800 audit(1776795798.405:13): pid=6607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.204" name="file1" dev="loop1" ino=1048595 res=0 errno=0 [ 121.241724][ T6610] bio_check_eod: 1 callbacks suppressed [ 121.241739][ T6610] syz.1.204: attempt to access beyond end of device [ 121.241739][ T6610] loop1: rw=2049, sector=1224, nr_sectors = 8 limit=256 [ 121.303370][ T1126] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.330024][ T6613] program syz.3.209 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.429737][ T1126] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.584752][ T5811] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 121.611129][ T2999] kworker/u4:11: attempt to access beyond end of device [ 121.611129][ T2999] loop1: rw=1, sector=1232, nr_sectors = 248 limit=256 [ 121.649403][ T2999] kworker/u4:11: attempt to access beyond end of device [ 121.649403][ T2999] loop1: rw=1, sector=1512, nr_sectors = 320 limit=256 [ 121.691467][ T2999] kworker/u4:11: attempt to access beyond end of device [ 121.691467][ T2999] loop1: rw=1, sector=1864, nr_sectors = 3000 limit=256 [ 121.740239][ T2999] kworker/u4:11: attempt to access beyond end of device [ 121.740239][ T2999] loop1: rw=1, sector=4864, nr_sectors = 3104 limit=256 [ 121.760764][ T2999] kworker/u4:11: attempt to access beyond end of device [ 121.760764][ T2999] loop1: rw=1, sector=7968, nr_sectors = 1560 limit=256 [ 121.790081][ T5811] usb 3-1: Using ep0 maxpacket: 8 [ 121.802320][ T5811] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 121.819045][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.866600][ T5811] pvrusb2: Hardware description: Terratec Grabster AV400 [ 121.873800][ T5811] pvrusb2: ********** [ 121.887284][ T5811] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 121.903024][ T5811] pvrusb2: Important functionality might not be entirely working. [ 121.913834][ T5811] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 121.955653][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 121.974834][ T5811] pvrusb2: ********** [ 121.979070][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 121.988785][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 121.998324][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 122.018022][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 122.034641][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 122.085828][ T2320] pvrusb2: Invalid write control endpoint [ 122.254253][ T2320] pvrusb2: Invalid write control endpoint [ 122.270098][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 122.304635][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 122.312524][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 122.342136][ T967] usb 3-1: USB disconnect, device number 3 [ 122.364808][ T2320] pvrusb2: Device being rendered inoperable [ 122.378656][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 122.387888][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 122.411238][ T2320] pvrusb2: Attached sub-driver cx25840 [ 122.424507][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 122.444501][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 122.703811][ T6617] chnl_net:caif_netlink_parms(): no params data found [ 122.857512][ T6617] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.864839][ T6617] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.872137][ T6617] bridge_slave_0: entered allmulticast mode [ 122.880094][ T6617] bridge_slave_0: entered promiscuous mode [ 122.967132][ T6617] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.987964][ T6617] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.008103][ T6617] bridge_slave_1: entered allmulticast mode [ 123.028101][ T6617] bridge_slave_1: entered promiscuous mode [ 123.175165][ T6643] netlink: 116 bytes leftover after parsing attributes in process `syz.1.220'. [ 123.217791][ T6617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.256264][ T6617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.345265][ T6649] loop1: detected capacity change from 0 to 256 [ 123.434741][ T8] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 123.451612][ T6649] FAT-fs (loop1): Directory bread(block 64) failed [ 123.475006][ T6649] FAT-fs (loop1): Directory bread(block 65) failed [ 123.481821][ T6617] team0: Port device team_slave_0 added [ 123.492504][ T6649] FAT-fs (loop1): Directory bread(block 66) failed [ 123.515931][ T6617] team0: Port device team_slave_1 added [ 123.524563][ T6649] FAT-fs (loop1): Directory bread(block 67) failed [ 123.531279][ T6649] FAT-fs (loop1): Directory bread(block 68) failed [ 123.579231][ T6649] FAT-fs (loop1): Directory bread(block 69) failed [ 123.625854][ T6649] FAT-fs (loop1): Directory bread(block 70) failed [ 123.632476][ T6649] FAT-fs (loop1): Directory bread(block 71) failed [ 123.641778][ T6649] FAT-fs (loop1): Directory bread(block 72) failed [ 123.649740][ T6649] FAT-fs (loop1): Directory bread(block 73) failed [ 123.662433][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.694154][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.722830][ T8] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 123.743686][ T1126] hsr_slave_0: left promiscuous mode [ 123.744257][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 123.770901][ T1126] hsr_slave_1: left promiscuous mode [ 123.775898][ T8] usb 4-1: SerialNumber: syz [ 123.784089][ T1126] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.800420][ T1126] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.826888][ T1126] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.850312][ T28] audit: type=1800 audit(1776795801.095:14): pid=6649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.224" name="file1" dev="loop1" ino=1048596 res=0 errno=0 [ 123.850540][ T1126] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.889901][ T1126] bridge_slave_1: left allmulticast mode [ 123.905785][ T1126] bridge_slave_1: left promiscuous mode [ 123.923597][ T1126] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.958616][ T1126] bridge_slave_0: left allmulticast mode [ 123.958834][ T6661] syz.1.224: attempt to access beyond end of device [ 123.958834][ T6661] loop1: rw=2049, sector=1224, nr_sectors = 8 limit=256 [ 123.964314][ T1126] bridge_slave_0: left promiscuous mode [ 123.974687][ T1126] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.013380][ T8] usb 4-1: 0:2 : does not exist [ 124.053242][ T8] usb 4-1: USB disconnect, device number 5 [ 124.095438][ T5771] Bluetooth: hci2: command tx timeout [ 124.122316][ T1126] veth1_macvtap: left promiscuous mode [ 124.144167][ T5764] udevd[5764]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.164987][ T1126] veth0_macvtap: left promiscuous mode [ 124.166744][ T5760] kernel read not supported for file /dsp1 (pid: 5760 comm: kworker/0:3) [ 124.198899][ T1126] veth1_vlan: left promiscuous mode [ 124.215048][ T1126] veth0_vlan: left promiscuous mode [ 124.471216][ T2971] kworker/u4:9: attempt to access beyond end of device [ 124.471216][ T2971] loop1: rw=1, sector=1232, nr_sectors = 248 limit=256 [ 124.502994][ T2971] kworker/u4:9: attempt to access beyond end of device [ 124.502994][ T2971] loop1: rw=1, sector=1512, nr_sectors = 320 limit=256 [ 124.525633][ T6669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.217'. [ 124.532588][ T2971] kworker/u4:9: attempt to access beyond end of device [ 124.532588][ T2971] loop1: rw=1, sector=1864, nr_sectors = 2168 limit=256 [ 125.115758][ T6680] loop3: detected capacity change from 0 to 512 [ 125.136343][ T6680] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 125.208015][ T6680] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.232: invalid indirect mapped block 256 (level 2) [ 125.285619][ T6680] EXT4-fs (loop3): 2 truncates cleaned up [ 125.293001][ T6680] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.378703][ T6680] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.232: bg 0: block 5: invalid block bitmap [ 125.407744][ T6680] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 125.438794][ T6680] EXT4-fs (loop3): This should not happen!! Data will be lost [ 125.438794][ T6680] [ 125.450006][ T6680] EXT4-fs (loop3): Total free blocks count 0 [ 125.456561][ T6680] EXT4-fs (loop3): Free/Dirty block details [ 125.462808][ T6680] EXT4-fs (loop3): free_blocks=0 [ 125.467979][ T6689] loop2: detected capacity change from 0 to 128 [ 125.477995][ T6680] EXT4-fs (loop3): dirty_blocks=2 [ 125.488788][ T6680] EXT4-fs (loop3): Block reservation details [ 125.498919][ T6680] EXT4-fs (loop3): i_reserved_data_blocks=2 [ 125.514578][ T8] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 125.599417][ T991] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 125.704592][ T8] usb 2-1: Using ep0 maxpacket: 8 [ 125.714057][ T8] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 125.735352][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.761341][ T6692] loop3: detected capacity change from 0 to 1024 [ 125.784250][ T8] pvrusb2: Hardware description: Terratec Grabster AV400 [ 125.792923][ T8] pvrusb2: ********** [ 125.796252][ T6692] EXT4-fs: Ignoring removed bh option [ 125.802929][ T8] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 125.814868][ T8] pvrusb2: Important functionality might not be entirely working. [ 125.822880][ T8] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 125.844485][ T8] pvrusb2: ********** [ 125.899735][ T6692] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.022517][ T2320] pvrusb2: Invalid write control endpoint [ 126.051737][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.162559][ T2320] pvrusb2: Invalid write control endpoint [ 126.174977][ T5771] Bluetooth: hci2: command tx timeout [ 126.204635][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 126.234389][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 126.242898][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 126.269333][ T6699] loop3: detected capacity change from 0 to 256 [ 126.279090][ T2320] pvrusb2: Device being rendered inoperable [ 126.304874][ T5809] usb 2-1: USB disconnect, device number 3 [ 126.310958][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 126.330408][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 126.342584][ T1126] team0 (unregistering): Port device team_slave_1 removed [ 126.352914][ T2320] pvrusb2: Attached sub-driver cx25840 [ 126.363417][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 126.384742][ T5811] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 126.386757][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 126.432940][ T6699] FAT-fs (loop3): Directory bread(block 64) failed [ 126.439995][ T6699] FAT-fs (loop3): Directory bread(block 65) failed [ 126.458309][ T6699] FAT-fs (loop3): Directory bread(block 66) failed [ 126.466503][ T6699] FAT-fs (loop3): Directory bread(block 67) failed [ 126.473405][ T6699] FAT-fs (loop3): Directory bread(block 68) failed [ 126.500080][ T1126] team0 (unregistering): Port device team_slave_0 removed [ 126.506075][ T6699] FAT-fs (loop3): Directory bread(block 69) failed [ 126.514104][ T6699] FAT-fs (loop3): Directory bread(block 70) failed [ 126.521404][ T6699] FAT-fs (loop3): Directory bread(block 71) failed [ 126.528373][ T6699] FAT-fs (loop3): Directory bread(block 72) failed [ 126.535112][ T6699] FAT-fs (loop3): Directory bread(block 73) failed [ 126.605216][ T5811] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 126.624537][ T5811] usb 3-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 126.636207][ T1126] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.637311][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.664871][ T5811] usb 3-1: config 0 descriptor?? [ 126.725120][ T28] audit: type=1800 audit(1776795803.965:15): pid=6699 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.229" name="file1" dev="loop3" ino=1048598 res=0 errno=0 [ 126.773231][ T1126] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.831170][ T6700] bio_check_eod: 1 callbacks suppressed [ 126.831187][ T6700] syz.3.229: attempt to access beyond end of device [ 126.831187][ T6700] loop3: rw=2049, sector=1224, nr_sectors = 8 limit=256 [ 127.129088][ T5811] elecom 0003:056E:011C.0001: item fetching failed at offset 2/40 [ 127.164137][ T5811] elecom: probe of 0003:056E:011C.0001 failed with error -22 [ 127.243181][ T2999] kworker/u4:11: attempt to access beyond end of device [ 127.243181][ T2999] loop3: rw=1, sector=1232, nr_sectors = 248 limit=256 [ 127.259008][ T2999] kworker/u4:11: attempt to access beyond end of device [ 127.259008][ T2999] loop3: rw=1, sector=1512, nr_sectors = 320 limit=256 [ 127.283172][ T2999] kworker/u4:11: attempt to access beyond end of device [ 127.283172][ T2999] loop3: rw=1, sector=1864, nr_sectors = 5144 limit=256 [ 127.353660][ T2999] kworker/u4:11: attempt to access beyond end of device [ 127.353660][ T2999] loop3: rw=1, sector=7008, nr_sectors = 5768 limit=256 [ 127.362237][ T5809] usb 3-1: USB disconnect, device number 4 [ 127.677894][ T1126] bond0 (unregistering): Released all slaves [ 127.801581][ T6617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.808613][ T6617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.836087][ T6617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.877871][ T6617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.895966][ T6617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 127.923320][ T6617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.052680][ T6617] hsr_slave_0: entered promiscuous mode [ 128.125545][ T6617] hsr_slave_1: entered promiscuous mode [ 128.146034][ T6617] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 128.153674][ T6617] Cannot create hsr debugfs directory [ 128.189774][ T6715] loop1: detected capacity change from 0 to 256 [ 128.244921][ T5771] Bluetooth: hci2: command tx timeout [ 128.356741][ T6715] FAT-fs (loop1): Directory bread(block 64) failed [ 128.379592][ T6715] FAT-fs (loop1): Directory bread(block 65) failed [ 128.396502][ T6715] FAT-fs (loop1): Directory bread(block 66) failed [ 128.403103][ T6715] FAT-fs (loop1): Directory bread(block 67) failed [ 128.444705][ T6715] FAT-fs (loop1): Directory bread(block 68) failed [ 128.451334][ T6715] FAT-fs (loop1): Directory bread(block 69) failed [ 128.459400][ T6716] loop3: detected capacity change from 0 to 4096 [ 128.515240][ T6715] FAT-fs (loop1): Directory bread(block 70) failed [ 128.521946][ T6715] FAT-fs (loop1): Directory bread(block 71) failed [ 128.543806][ T6721] loop2: detected capacity change from 0 to 512 [ 128.572145][ T6715] FAT-fs (loop1): Directory bread(block 72) failed [ 128.614590][ T6715] FAT-fs (loop1): Directory bread(block 73) failed [ 128.634581][ T6721] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 128.690288][ T6721] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz.2.236: invalid indirect mapped block 256 (level 2) [ 128.754237][ T6721] EXT4-fs (loop2): 2 truncates cleaned up [ 128.761524][ T6721] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.796134][ T6721] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm syz.2.236: bg 0: block 5: invalid block bitmap [ 128.834912][ T6721] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 128.876064][ T6721] EXT4-fs (loop2): This should not happen!! Data will be lost [ 128.876064][ T6721] [ 128.895660][ T6721] EXT4-fs (loop2): Total free blocks count 0 [ 128.910759][ T6721] EXT4-fs (loop2): Free/Dirty block details [ 128.920947][ T28] audit: type=1800 audit(1776795806.155:16): pid=6715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.241" name="file1" dev="loop1" ino=1048599 res=0 errno=0 [ 128.945257][ T6721] EXT4-fs (loop2): free_blocks=0 [ 128.971662][ T6721] EXT4-fs (loop2): dirty_blocks=2 [ 128.992795][ T6721] EXT4-fs (loop2): Block reservation details [ 129.024627][ T6721] EXT4-fs (loop2): i_reserved_data_blocks=2 [ 129.076170][ T6729] syz.1.241: attempt to access beyond end of device [ 129.076170][ T6729] loop1: rw=2049, sector=1224, nr_sectors = 8 limit=256 [ 129.173526][ T2971] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 129.519331][ T1126] kworker/u4:6: attempt to access beyond end of device [ 129.519331][ T1126] loop1: rw=1, sector=1232, nr_sectors = 248 limit=256 [ 129.566291][ T1126] kworker/u4:6: attempt to access beyond end of device [ 129.566291][ T1126] loop1: rw=1, sector=1512, nr_sectors = 320 limit=256 [ 129.614143][ T1126] kworker/u4:6: attempt to access beyond end of device [ 129.614143][ T1126] loop1: rw=1, sector=1864, nr_sectors = 3592 limit=256 [ 129.653296][ T1126] kworker/u4:6: attempt to access beyond end of device [ 129.653296][ T1126] loop1: rw=1, sector=5456, nr_sectors = 1952 limit=256 [ 129.864581][ T5809] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 129.866991][ T6617] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 129.906687][ T6617] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 129.938396][ T6617] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 129.959658][ T6617] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 130.039007][ T6747] loop1: detected capacity change from 0 to 128 [ 130.074552][ T5809] usb 4-1: Using ep0 maxpacket: 8 [ 130.097649][ T5809] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 130.124893][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.189249][ T5809] pvrusb2: Hardware description: Terratec Grabster AV400 [ 130.194897][ T6617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.225722][ T5809] pvrusb2: ********** [ 130.231108][ T5809] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 130.235323][ T6617] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.272806][ T5809] pvrusb2: Important functionality might not be entirely working. [ 130.285745][ T1126] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.290635][ T5809] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 130.293850][ T1126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.304514][ T5809] pvrusb2: ********** [ 130.326031][ T5771] Bluetooth: hci2: command tx timeout [ 130.363435][ T1126] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.370693][ T1126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.397279][ T2320] pvrusb2: Invalid write control endpoint [ 130.654079][ T2320] pvrusb2: Invalid write control endpoint [ 130.687871][ T2320] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 130.718274][ T967] usb 4-1: USB disconnect, device number 6 [ 130.732827][ T2320] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 130.754093][ T2320] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 130.773623][ T2320] pvrusb2: Device being rendered inoperable [ 130.792002][ T2320] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 130.815241][ T2320] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 130.837158][ T2320] pvrusb2: Attached sub-driver cx25840 [ 130.842696][ T2320] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 130.873645][ T2320] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 130.925244][ T5866] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 131.081346][ T6617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.127801][ T5866] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 131.161462][ T5866] usb 2-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 131.178796][ T6617] veth0_vlan: entered promiscuous mode [ 131.194597][ T5866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.201024][ T6617] veth1_vlan: entered promiscuous mode [ 131.225793][ T5866] usb 2-1: config 0 descriptor?? [ 131.333416][ T6617] veth0_macvtap: entered promiscuous mode [ 131.370170][ T6617] veth1_macvtap: entered promiscuous mode [ 131.473226][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.504668][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.525908][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.545322][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.560119][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.577293][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.596911][ T6617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.620592][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.641749][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.684805][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.706502][ T5866] elecom 0003:056E:011C.0002: item fetching failed at offset 2/40 [ 131.724523][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.747393][ T5866] elecom: probe of 0003:056E:011C.0002 failed with error -22 [ 131.755521][ T6617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.790357][ T6617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.818733][ T6617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.853651][ T6617] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.863140][ T6617] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.872917][ T6617] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.882040][ T6617] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.986864][ T5760] usb 2-1: USB disconnect, device number 4 [ 132.136830][ T2999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.162416][ T6789] loop2: detected capacity change from 0 to 256 [ 132.173647][ T2999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.258659][ T6789] FAT-fs (loop2): Directory bread(block 64) failed [ 132.268207][ T6789] FAT-fs (loop2): Directory bread(block 65) failed [ 132.276642][ T6789] FAT-fs (loop2): Directory bread(block 66) failed [ 132.283280][ T6789] FAT-fs (loop2): Directory bread(block 67) failed [ 132.297993][ T3003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.308090][ T6789] FAT-fs (loop2): Directory bread(block 68) failed [ 132.323009][ T3003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.329642][ T6789] FAT-fs (loop2): Directory bread(block 69) failed [ 132.345121][ T6789] FAT-fs (loop2): Directory bread(block 70) failed [ 132.358088][ T6789] FAT-fs (loop2): Directory bread(block 71) failed [ 132.375159][ T6789] FAT-fs (loop2): Directory bread(block 72) failed [ 132.392064][ T6789] FAT-fs (loop2): Directory bread(block 73) failed [ 132.655240][ T28] audit: type=1800 audit(1776795809.895:17): pid=6789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.248" name="file1" dev="loop2" ino=1048604 res=0 errno=0 [ 132.781904][ T6798] syz.2.248: attempt to access beyond end of device [ 132.781904][ T6798] loop2: rw=2049, sector=1224, nr_sectors = 8 limit=256 [ 133.192337][ T6817] loop0: detected capacity change from 0 to 128 [ 133.226901][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.233294][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.355391][ T2971] kworker/u4:9: attempt to access beyond end of device [ 133.355391][ T2971] loop2: rw=1, sector=1232, nr_sectors = 248 limit=256 [ 133.397764][ T2971] kworker/u4:9: attempt to access beyond end of device [ 133.397764][ T2971] loop2: rw=1, sector=1512, nr_sectors = 320 limit=256 [ 133.423221][ T2971] kworker/u4:9: attempt to access beyond end of device [ 133.423221][ T2971] loop2: rw=1, sector=1864, nr_sectors = 2512 limit=256 [ 133.467214][ T6821] netlink: 4 bytes leftover after parsing attributes in process `syz.3.254'. [ 133.482011][ T2971] kworker/u4:9: attempt to access beyond end of device [ 133.482011][ T2971] loop2: rw=1, sector=4376, nr_sectors = 2528 limit=256 [ 133.511326][ T2971] kworker/u4:9: attempt to access beyond end of device [ 133.511326][ T2971] loop2: rw=1, sector=6904, nr_sectors = 296 limit=256 [ 134.154873][ T967] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 134.260388][ T6849] program syz.2.264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.372842][ T6855] loop1: detected capacity change from 0 to 256 [ 134.381717][ T967] usb 1-1: Using ep0 maxpacket: 32 [ 134.413335][ T967] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 134.436447][ T967] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.483645][ T967] usb 1-1: config 0 descriptor?? [ 134.523820][ T6855] FAT-fs (loop1): Directory bread(block 64) failed [ 134.547153][ T967] as10x_usb: device has been detected [ 134.554810][ T6855] FAT-fs (loop1): Directory bread(block 65) failed [ 134.572546][ T967] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 134.583664][ T6855] FAT-fs (loop1): Directory bread(block 66) failed [ 134.616005][ T6855] FAT-fs (loop1): Directory bread(block 67) failed [ 134.656939][ T6855] FAT-fs (loop1): Directory bread(block 68) failed [ 134.667419][ T6861] loop2: detected capacity change from 0 to 1024 [ 134.675858][ T6855] FAT-fs (loop1): Directory bread(block 69) failed [ 134.688254][ T967] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 134.699756][ T6855] FAT-fs (loop1): Directory bread(block 70) failed [ 134.729050][ T6855] FAT-fs (loop1): Directory bread(block 71) failed [ 134.738774][ T6832] ------------[ cut here ]------------ [ 134.744330][ T6832] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 134.744460][ T6832] WARNING: CPU: 0 PID: 6832 at kernel/locking/mutex.c:582 __mutex_lock+0xb85/0xcc0 [ 134.753887][ T967] as10x_usb: error during firmware upload part1 [ 134.759706][ T6832] Modules linked in: [ 134.759723][ T6832] CPU: 0 PID: 6832 Comm: syz.0.260 Not tainted syzkaller #0 [ 134.759743][ T6832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 134.759753][ T6832] RIP: 0010:__mutex_lock+0xb85/0xcc0 [ 134.759781][ T6832] Code: 04 08 84 c0 0f 85 27 01 00 00 83 3d 34 55 fc 03 00 0f 85 95 f5 ff ff 48 c7 c7 80 b4 ca 8a 48 c7 c6 20 b5 ca 8a e8 eb e2 c1 f6 <0f> 0b e9 7b f5 ff ff 0f 0b e9 5f f9 ff ff 0f 0b e9 18 f6 ff ff e8 [ 134.759798][ T6832] RSP: 0018:ffffc900043d7aa0 EFLAGS: 00010246 [ 134.759815][ T6832] RAX: 237100681c873f00 RBX: ffff88807e736ce0 RCX: 0000000000080000 [ 134.759830][ T6832] RDX: ffffc900032b9000 RSI: 0000000000008dee RDI: 0000000000008def [ 134.759844][ T6832] RBP: ffffc900043d7bf8 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 134.759859][ T6832] R10: dffffc0000000000 R11: ffffed10171c5183 R12: 0000000000000000 [ 134.759873][ T6832] R13: 1ffff9200087af64 R14: dffffc0000000000 R15: 0000000000000000 [ 134.759887][ T6832] FS: 00007f5c08da46c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 134.759905][ T6832] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.759919][ T6832] CR2: 00007ff5b4d7a368 CR3: 000000007c42e000 CR4: 00000000003506f0 [ 134.759939][ T6832] Call Trace: [ 134.759946][ T6832] [ 134.759954][ T6832] ? trace_contention_end+0x39/0xe0 [ 134.759975][ T6832] ? __mutex_lock+0x315/0xcc0 [ 134.759993][ T6832] ? as102_dvb_dmx_start_feed+0x70/0x280 [ 134.760020][ T6832] ? mutex_lock_nested+0x20/0x20 [ 134.760038][ T6832] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 134.835872][ T967] Registered device nBox DVB-T Dongle [ 134.836679][ T6832] ? dmx_section_feed_start_filtering+0x55/0x690 [ 134.905436][ T967] usb 1-1: USB disconnect, device number 3 [ 134.907808][ T6832] ? mutex_lock_nested+0x20/0x20 [ 134.941206][ T6832] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 134.947366][ T6832] ? lock_chain_count+0x20/0x20 [ 134.952306][ T6832] ? _raw_spin_lock_irq+0xbb/0xf0 [ 134.957416][ T6832] as102_dvb_dmx_start_feed+0x70/0x280 [ 134.963016][ T6832] dmx_section_feed_start_filtering+0x4f5/0x690 [ 134.969330][ T6832] dvb_dmxdev_filter_start+0xcbd/0x10c0 [ 134.971965][ T6855] FAT-fs (loop1): Directory bread(block 72) failed [ 134.975065][ T6832] ? dvb_dmxdev_filter_set+0x2cc/0x580 [ 134.975098][ T6832] dvb_demux_do_ioctl+0x467/0x530 [ 134.975125][ T6832] dvb_usercopy+0x195/0x2b0 [ 134.975147][ T6832] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 134.984577][ T6855] FAT-fs (loop1): Directory bread(block 73) failed [ 134.987145][ T6832] ? dvb_generic_ioctl+0xb0/0xb0 [ 135.014859][ T6832] ? dvb_demux_poll+0x220/0x220 [ 135.019855][ T6832] dvb_demux_ioctl+0x29/0x30 [ 135.024526][ T6832] __se_sys_ioctl+0xfd/0x170 [ 135.029163][ T6832] do_syscall_64+0x55/0xa0 [ 135.033644][ T6832] ? clear_bhb_loop+0x40/0x90 [ 135.038527][ T6832] ? clear_bhb_loop+0x40/0x90 [ 135.043262][ T6832] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.049241][ T6832] RIP: 0033:0x7f5c07f9c819 [ 135.053713][ T6832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.073687][ T6832] RSP: 002b:00007f5c08da4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.082186][ T6832] RAX: ffffffffffffffda RBX: 00007f5c08215fa0 RCX: 00007f5c07f9c819 [ 135.090431][ T6832] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000003 [ 135.099143][ T6832] RBP: 00007f5c08032c91 R08: 0000000000000000 R09: 0000000000000000 [ 135.107303][ T6832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.115357][ T6832] R13: 00007f5c08216038 R14: 00007f5c08215fa0 R15: 00007ffdc3436188 [ 135.123738][ T6832] [ 135.128659][ T6832] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 135.135982][ T6832] CPU: 0 PID: 6832 Comm: syz.0.260 Not tainted syzkaller #0 [ 135.143307][ T6832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 135.153488][ T6832] Call Trace: [ 135.156803][ T6832] [ 135.159776][ T6832] dump_stack_lvl+0x18c/0x250 [ 135.164594][ T6832] ? show_regs_print_info+0x20/0x20 [ 135.169858][ T6832] ? load_image+0x420/0x420 [ 135.174420][ T6832] panic+0x2dc/0x730 [ 135.178384][ T6832] ? bpf_jit_dump+0xd0/0xd0 [ 135.182935][ T6832] __warn+0x2e0/0x470 [ 135.187043][ T6832] ? __mutex_lock+0xb85/0xcc0 [ 135.191846][ T6832] ? __mutex_lock+0xb85/0xcc0 [ 135.196561][ T6832] report_bug+0x2be/0x4f0 [ 135.200942][ T6832] ? __mutex_lock+0xb85/0xcc0 [ 135.205747][ T6832] ? __mutex_lock+0xb85/0xcc0 [ 135.210463][ T6832] ? __mutex_lock+0xb87/0xcc0 [ 135.214550][ T28] audit: type=1800 audit(1776795812.455:18): pid=6855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.266" name="file1" dev="loop1" ino=1048606 res=0 errno=0 [ 135.235845][ T6832] handle_bug+0xcf/0x120 [ 135.240280][ T6832] exc_invalid_op+0x1a/0x50 [ 135.244796][ T6832] asm_exc_invalid_op+0x1a/0x20 [ 135.249674][ T6832] RIP: 0010:__mutex_lock+0xb85/0xcc0 [ 135.254971][ T6832] Code: 04 08 84 c0 0f 85 27 01 00 00 83 3d 34 55 fc 03 00 0f 85 95 f5 ff ff 48 c7 c7 80 b4 ca 8a 48 c7 c6 20 b5 ca 8a e8 eb e2 c1 f6 <0f> 0b e9 7b f5 ff ff 0f 0b e9 5f f9 ff ff 0f 0b e9 18 f6 ff ff e8 [ 135.274589][ T6832] RSP: 0018:ffffc900043d7aa0 EFLAGS: 00010246 [ 135.280760][ T6832] RAX: 237100681c873f00 RBX: ffff88807e736ce0 RCX: 0000000000080000 [ 135.288770][ T6832] RDX: ffffc900032b9000 RSI: 0000000000008dee RDI: 0000000000008def [ 135.296757][ T6832] RBP: ffffc900043d7bf8 R08: ffff8880b8e28c13 R09: 1ffff110171c5182 [ 135.304738][ T6832] R10: dffffc0000000000 R11: ffffed10171c5183 R12: 0000000000000000 [ 135.312722][ T6832] R13: 1ffff9200087af64 R14: dffffc0000000000 R15: 0000000000000000 [ 135.320743][ T6832] ? trace_contention_end+0x39/0xe0 [ 135.325956][ T6832] ? __mutex_lock+0x315/0xcc0 [ 135.330642][ T6832] ? as102_dvb_dmx_start_feed+0x70/0x280 [ 135.336397][ T6832] ? mutex_lock_nested+0x20/0x20 [ 135.341369][ T6832] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 135.347022][ T6832] ? dmx_section_feed_start_filtering+0x55/0x690 [ 135.353464][ T6832] ? mutex_lock_nested+0x20/0x20 [ 135.358846][ T6832] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 135.364842][ T6832] ? lock_chain_count+0x20/0x20 [ 135.369701][ T6832] ? _raw_spin_lock_irq+0xbb/0xf0 [ 135.374740][ T6832] as102_dvb_dmx_start_feed+0x70/0x280 [ 135.380278][ T6832] dmx_section_feed_start_filtering+0x4f5/0x690 [ 135.386545][ T6832] dvb_dmxdev_filter_start+0xcbd/0x10c0 [ 135.392103][ T6832] ? dvb_dmxdev_filter_set+0x2cc/0x580 [ 135.397577][ T6832] dvb_demux_do_ioctl+0x467/0x530 [ 135.402710][ T6832] dvb_usercopy+0x195/0x2b0 [ 135.407230][ T6832] ? dvb_dmxdev_buffer_read+0x4c0/0x4c0 [ 135.412796][ T6832] ? dvb_generic_ioctl+0xb0/0xb0 [ 135.417761][ T6832] ? dvb_demux_poll+0x220/0x220 [ 135.422626][ T6832] dvb_demux_ioctl+0x29/0x30 [ 135.427283][ T6832] __se_sys_ioctl+0xfd/0x170 [ 135.431890][ T6832] do_syscall_64+0x55/0xa0 [ 135.436399][ T6832] ? clear_bhb_loop+0x40/0x90 [ 135.441174][ T6832] ? clear_bhb_loop+0x40/0x90 [ 135.445865][ T6832] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.451769][ T6832] RIP: 0033:0x7f5c07f9c819 [ 135.456374][ T6832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.476001][ T6832] RSP: 002b:00007f5c08da4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.484711][ T6832] RAX: ffffffffffffffda RBX: 00007f5c08215fa0 RCX: 00007f5c07f9c819 [ 135.492693][ T6832] RDX: 0000200000000200 RSI: 00000000403c6f2b RDI: 0000000000000003 [ 135.500684][ T6832] RBP: 00007f5c08032c91 R08: 0000000000000000 R09: 0000000000000000 [ 135.508760][ T6832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.516846][ T6832] R13: 00007f5c08216038 R14: 00007f5c08215fa0 R15: 00007ffdc3436188 [ 135.524932][ T6832] [ 135.528423][ T6832] Kernel Offset: disabled [ 135.532744][ T6832] Rebooting in 86400 seconds..