last executing test programs: 9.717353271s ago: executing program 3 (id=1194): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x10001, 0xb}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x70000000, 0xfffffffffffffee1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9.507645713s ago: executing program 3 (id=1197): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) 9.362602325s ago: executing program 3 (id=1198): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001700000008000300", @ANYRES32=r3, @ANYBLOB='H\x000'], 0x64}}, 0x0) 9.183749443s ago: executing program 3 (id=1201): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f0000000100)={[{@grpquota}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 9.149146022s ago: executing program 1 (id=1202): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000440), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) 9.042498083s ago: executing program 1 (id=1203): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f00000009c0)={&(0x7f0000000240)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000940)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev}}}], 0x20}, 0x0) recvmsg$kcm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/38}, {&(0x7f0000000040)=""/18}], 0x20, 0x0, 0xfffffffffffffce1}, 0x0) 8.959283799s ago: executing program 3 (id=1204): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020d3"]) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550c, 0x0) 8.946123613s ago: executing program 1 (id=1205): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000002400000038002f800c00020000000000000000002800038008000100000000001c00038006000300000000000600010000000000080002000200000008000300", @ANYRES32=r3], 0x54}}, 0x0) 8.851932725s ago: executing program 1 (id=1207): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x8100, &(0x7f0000000000)={0x0, 0x0, 0x20000}, 0x20) mount$tmpfs(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) 8.822412585s ago: executing program 1 (id=1208): r0 = io_uring_setup(0x177f, &(0x7f0000000340)) r1 = socket(0x2b, 0x1, 0x1) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x3}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x1e, &(0x7f0000000200), 0x8) close_range(r0, 0xffffffffffffffff, 0x0) 8.207909284s ago: executing program 1 (id=1212): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ac0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000100000000000b00000018000580080001"], 0x2c}}, 0x0) 7.716622885s ago: executing program 3 (id=1214): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r0, 0x407, 0x7000000) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r1, 0x407, 0x100000) 5.69364989s ago: executing program 0 (id=1226): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 4.765643792s ago: executing program 0 (id=1229): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0500000000000109022400010000000009040001090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_4={0x3, 0x1, 0x0, "3951b38e"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4, @local=@item_4={0x3, 0x2, 0x2, "849b9173"}, @local=@item_012={0x2, 0x2, 0x1, "0100"}, @global, @local=@item_4={0x3, 0x2, 0x7, "fa9e274a"}, @local=@item_4={0x3, 0x2, 0x2, "dc3e0803"}, @global=@item_012={0x1, 0x1, 0x0, "a7"}]}}, 0x0}, 0x0) 3.782725006s ago: executing program 4 (id=1235): r0 = syz_io_uring_setup(0x5169, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000000)=0x0) syz_io_uring_setup(0x2340, &(0x7f0000000280), &(0x7f0000000140)=0x0, &(0x7f0000000180)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, r3}}) io_uring_enter(r0, 0x5089, 0x0, 0x0, 0x0, 0x0) 3.146429393s ago: executing program 2 (id=1236): r0 = socket(0x2b, 0x1, 0x1) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) 3.14627266s ago: executing program 4 (id=1237): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=iso8859-9,dmask=00000000000000000000017,dmask=000000000000000\x00\x00000002,utf8,errors=remount-ro,utf8,iocharset=iso8859-13,errors=remount-ro,errors=conerrors=continue,\x00\x00\x00\x00\x00\x00\x00'], 0x1, 0x152f, &(0x7f00000037c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) 2.774970851s ago: executing program 4 (id=1238): sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000002100000008000300", @ANYRES32=0x0, @ANYBLOB="24002d8004000200000000000500010000000000050004"], 0x40}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000ddffffffff200000d808000300", @ANYRES32=r1, @ANYBLOB="2c002d8008"], 0x48}}, 0x0) 2.653997804s ago: executing program 0 (id=1239): r0 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) r2 = socket$pptp(0x18, 0x1, 0x2) syz_io_uring_setup(0x24fa, &(0x7f0000000180), &(0x7f0000000100)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r3, r1, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f0000000000)=@un=@abs}) io_uring_enter(r0, 0x4d92, 0x0, 0x0, 0x0, 0x3c000000) 2.496335675s ago: executing program 0 (id=1240): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, r1, 0x100ffffc}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @local}, r1}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000440)={0x12, 0x10, 0xfa00, {&(0x7f0000000300), r1, r0}}, 0x18) 1.734737649s ago: executing program 2 (id=1241): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410884, &(0x7f00000001c0)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nojournal_checksum}, {@nogrpid}, {@user_xattr}, {@nodioread_nolock}, {@jqfmt_vfsv0}, {@discard}]}, 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r0 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x33000, 0x0, 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) 1.732590253s ago: executing program 0 (id=1249): mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_mount_image$sysv(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x4008, &(0x7f00000004c0)=ANY=[@ANYRES8, @ANYRESOCT, @ANYBLOB="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"/352], 0x0, 0x9ec5, &(0x7f0000015380)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x441, 0x0) write$P9_RREMOVE(r0, &(0x7f0000000480)={0x7}, 0x7) write$6lowpan_enable(r0, &(0x7f00000000c0)='1', 0x1) 1.492808912s ago: executing program 0 (id=1242): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000001240)={0x8, {"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", 0x1000}}, 0xfffffd64) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={r0, 0x1f9}) 1.304470023s ago: executing program 2 (id=1243): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xe, 0xd, &(0x7f00000000c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x1, 0x95, &(0x7f0000000000)=""/149}, 0x90) syz_emit_ethernet(0x36, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @multicast1, 0x0, 0x20002, 'sed\x00'}, 0xfffffffffffffd09) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 1.004036817s ago: executing program 2 (id=1244): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000002500)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc) getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f0000002440)=""/139, &(0x7f0000000040)=0x8b) 826.186182ms ago: executing program 2 (id=1245): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)={@val, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0x3e) 703.907116ms ago: executing program 4 (id=1246): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='bpf\x00', 0x0, &(0x7f0000000100)='gid=1\x00nk]e') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0) sendfile(r1, r0, 0x0, 0x80000000) 264.062754ms ago: executing program 2 (id=1247): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x1, 0x0, 0x0) 263.705406ms ago: executing program 4 (id=1248): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x1, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000500)='htcp\x00', 0x5) shutdown(r0, 0x2) 0s ago: executing program 4 (id=1250): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000000700)={[{@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x184}}, {@data_journal}, {@nobh}, {@data_err_abort}, {@barrier}, {@nombcache}]}, 0x1, 0x4ec, &(0x7f0000000140)="$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") iopl(0x3) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) kernel console output (not intermixed with test programs): bulk endpoint 0x5 has invalid maxpacket 0 [ 145.235839][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 145.277367][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.328852][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 145.368709][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.468953][ T6944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.507869][ T6944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 145.614084][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 145.628756][ T9] usbtmc 5-1:16.0: can't read capabilities [ 145.817606][ T9] usb 5-1: USB disconnect, device number 6 [ 145.919854][ T5236] Bluetooth: hci2: command tx timeout [ 145.948711][ T6944] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 145.955912][ T6944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 145.985419][ T6944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.045094][ T6944] hsr_slave_0: entered promiscuous mode [ 146.056639][ T6944] hsr_slave_1: entered promiscuous mode [ 146.063580][ T6944] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.072861][ T6944] Cannot create hsr debugfs directory [ 147.283698][ T7094] loop4: detected capacity change from 0 to 4096 [ 147.339255][ T7094] ntfs3: loop4: Different NTFS sector size (1024) and media sector size (512). [ 147.511637][ T7094] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 147.595833][ T7094] ntfs3: loop4: Failed to initialize $Extend/$ObjId. [ 147.735883][ T6944] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 147.788472][ T6944] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 147.824338][ T6944] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 147.887303][ T6944] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 148.283008][ T7082] loop0: detected capacity change from 0 to 40427 [ 148.368233][ T7082] F2FS-fs (loop0): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 148.420695][ T7102] Bluetooth: MGMT ver 1.23 [ 148.448404][ T6944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 148.456525][ T7082] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 148.522159][ T7082] F2FS-fs (loop0): invalid crc value [ 148.601207][ T7082] F2FS-fs (loop0): Found nat_bits in checkpoint [ 148.625422][ T6944] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.796618][ T2958] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.803881][ T2958] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.830072][ T2958] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.837402][ T2958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.967146][ T6944] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 148.979030][ T6944] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.705151][ T5243] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.721498][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.749598][ T5243] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.811156][ T6944] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.872465][ T5243] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.919886][ T5243] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 149.931459][ T5243] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 150.235777][ T2958] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.270021][ T7144] warning: `syz.4.521' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 150.374945][ T2958] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.505530][ T5236] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 150.514026][ T5236] Bluetooth: hci0: command 0x0401 tx timeout [ 150.544294][ T2958] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.610905][ T2958] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.662143][ T7170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 150.697557][ T6944] veth0_vlan: entered promiscuous mode [ 150.762608][ T6944] veth1_vlan: entered promiscuous mode [ 151.039055][ T6944] veth0_macvtap: entered promiscuous mode [ 151.059512][ T2958] bridge_slave_1: left allmulticast mode [ 151.085869][ T2958] bridge_slave_1: left promiscuous mode [ 151.111827][ T2958] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.153348][ T2958] bridge_slave_0: left allmulticast mode [ 151.168223][ T2958] bridge_slave_0: left promiscuous mode [ 151.184482][ T2958] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.746920][ T7192] loop0: detected capacity change from 0 to 32768 [ 151.852391][ T7192] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 151.886997][ T2958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.913726][ T2958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.939296][ T2958] bond0 (unregistering): Released all slaves [ 151.994156][ T7197] macsec1: entered allmulticast mode [ 152.013037][ T5236] Bluetooth: hci1: command tx timeout [ 152.018820][ T7197] macvlan0: entered allmulticast mode [ 152.029299][ T7197] veth1_vlan: entered allmulticast mode [ 152.044894][ T7192] XFS (loop0): Ending clean mount [ 152.058508][ T7197] macvlan0: left allmulticast mode [ 152.072467][ T7197] veth1_vlan: left allmulticast mode [ 152.124404][ T6944] veth1_macvtap: entered promiscuous mode [ 152.185743][ T5227] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 152.221070][ T7130] chnl_net:caif_netlink_parms(): no params data found [ 152.439859][ T6944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.453066][ T7217] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 152.467461][ T6944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.478178][ T6944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.507365][ T6944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.535601][ T6944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.578825][ T6944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.597922][ T6944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.619740][ T6944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.641217][ T6944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.656901][ T6944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.671025][ T6944] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.822604][ T6944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.846161][ T6944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.867774][ T6944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.888937][ T6944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.908662][ T6944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.924520][ T6944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.934899][ T6944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.945757][ T6944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.958170][ T6944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.970988][ T6944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.983841][ T6944] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.995267][ T7130] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.007021][ T7130] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.014574][ T7130] bridge_slave_0: entered allmulticast mode [ 153.022353][ T7130] bridge_slave_0: entered promiscuous mode [ 153.103697][ T6944] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.143801][ T6944] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.170837][ T6944] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.190211][ T6944] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.202564][ T7130] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.211833][ T7130] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.219644][ T7130] bridge_slave_1: entered allmulticast mode [ 153.227074][ T7130] bridge_slave_1: entered promiscuous mode [ 153.308775][ T7130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.352123][ T2958] hsr_slave_0: left promiscuous mode [ 153.355714][ T7242] loop2: detected capacity change from 0 to 64 [ 153.391895][ T2958] hsr_slave_1: left promiscuous mode [ 153.401067][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.441556][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.482361][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.505438][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.529863][ T7244] netlink: 12 bytes leftover after parsing attributes in process `syz.4.538'. [ 153.569780][ T2958] veth1_macvtap: left promiscuous mode [ 153.575391][ T2958] veth0_macvtap: left promiscuous mode [ 153.581114][ T2958] veth1_vlan: left promiscuous mode [ 153.586471][ T2958] veth0_vlan: left promiscuous mode [ 153.670528][ T53] hfs: request for non-existent node 1573 in B*Tree [ 153.702078][ T53] hfs: request for non-existent node 1573 in B*Tree [ 153.814006][ T5282] kernel write not supported for file /uhid (pid: 5282 comm: kworker/1:4) [ 154.089331][ T5236] Bluetooth: hci1: command tx timeout [ 154.386950][ T7263] loop4: detected capacity change from 0 to 2048 [ 154.452750][ T7263] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.669396][ T7256] loop0: detected capacity change from 0 to 32768 [ 154.679322][ T7256] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.542 (7256) [ 154.726057][ T7256] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 154.771818][ T7256] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 154.789205][ T7256] BTRFS info (device loop0): using free-space-tree [ 154.863471][ T7268] loop4: detected capacity change from 0 to 1024 [ 155.245181][ T5227] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 155.756095][ T7130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.986020][ T7130] team0: Port device team_slave_0 added [ 156.048312][ T7130] team0: Port device team_slave_1 added [ 156.169005][ T5236] Bluetooth: hci1: command tx timeout [ 156.264976][ T7130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 156.285843][ T7130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.312479][ T7130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 156.328195][ T7130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 156.335319][ T7130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.361580][ T7130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 156.452242][ T2916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.478882][ T2916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.586260][ T7130] hsr_slave_0: entered promiscuous mode [ 156.602063][ T7130] hsr_slave_1: entered promiscuous mode [ 156.625224][ T7130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.663869][ T7130] Cannot create hsr debugfs directory [ 156.865373][ T2916] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.898868][ T2916] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.279352][ T7334] netlink: 'syz.2.564': attribute type 4 has an invalid length. [ 157.654656][ T7350] loop4: detected capacity change from 0 to 256 [ 157.713574][ T7350] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 157.929790][ T7317] loop0: detected capacity change from 0 to 32768 [ 157.974620][ T7359] mmap: syz.2.572 (7359): VmData 37457920 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 158.191317][ T7317] ERROR: (device loop0): dbFindCtl: Corrupt dmapctl page [ 158.191317][ T7317] [ 158.251511][ T5236] Bluetooth: hci1: command tx timeout [ 158.266306][ T7130] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 158.283600][ T7317] ERROR: (device loop0): remounting filesystem as read-only [ 158.402976][ T7365] ERROR: (device loop0): dbFindCtl: Corrupt dmapctl page [ 158.402976][ T7365] [ 158.420332][ T7130] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 158.478486][ T7130] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 158.523381][ T7130] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 158.571203][ T7379] syz.1.577 (7379) used obsolete PPPIOCDETACH ioctl [ 158.726514][ T7380] loop2: detected capacity change from 0 to 4096 [ 158.733121][ T5280] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 158.757640][ T7130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.775926][ T7380] ntfs3: loop2: Different NTFS sector size (1024) and media sector size (512). [ 158.824117][ T7130] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.881996][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.889200][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.940667][ T2987] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.947831][ T2987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.961280][ T5280] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 158.984662][ T5280] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 159.046677][ T5280] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 159.058843][ T7389] ntfs3: loop2: mft corrupted [ 159.115773][ T5280] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 159.134621][ T7130] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.168956][ T5280] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 159.223697][ T5280] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 159.277090][ T5280] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 159.308727][ T5280] usb 5-1: Product: syz [ 159.325527][ T5280] usb 5-1: Manufacturer: syz [ 159.381320][ T5280] cdc_wdm 5-1:1.0: skipping garbage [ 159.387145][ T5280] cdc_wdm 5-1:1.0: skipping garbage [ 159.426107][ T5280] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 159.452242][ T5280] cdc_wdm 5-1:1.0: Unknown control protocol [ 159.623707][ T7407] Bluetooth: MGMT ver 1.23 [ 159.628227][ T7407] Bluetooth: hci3: unsupported parameter 64512 [ 159.658129][ T5280] kernel write not supported for file /cdc-wdm0 (pid: 5280 comm: kworker/0:4) [ 159.694120][ T7407] Bluetooth: hci3: invalid length 0, exp 2 for type 14 [ 159.712547][ T5280] usb 5-1: USB disconnect, device number 7 [ 159.783060][ T7130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.918333][ T7415] loop0: detected capacity change from 0 to 1 [ 159.951868][ T7130] veth0_vlan: entered promiscuous mode [ 159.992581][ T7130] veth1_vlan: entered promiscuous mode [ 160.008968][ T7415] Dev loop0: unable to read RDB block 1 [ 160.018383][ T7415] loop0: unable to read partition table [ 160.046392][ T7415] loop0: partition table beyond EOD, truncated [ 160.058794][ T7415] loop_reread_partitions: partition scan of loop0 (Sa²¨êEÇ·>#|²‘ò÷J_dÛiÏôÇV3Qá~d!®=¨ßU5hcì»s-”‘3hгJíHvæ>l,Ô) failed (rc=-5) [ 160.091569][ T7130] veth0_macvtap: entered promiscuous mode [ 160.111407][ T7130] veth1_macvtap: entered promiscuous mode [ 160.160342][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.188728][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.198792][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.209397][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.219919][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.231162][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.241852][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.252710][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.262760][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.273467][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.285205][ T7130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.297902][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.308724][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.318971][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.330500][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.342404][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.353144][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.363098][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.373657][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.383606][ T7130] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.394268][ T7130] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.405638][ T7130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.419062][ T7130] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.428870][ T7130] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.437708][ T7130] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.446634][ T7130] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.674459][ T1068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.674488][ T1068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.697653][ T7393] loop1: detected capacity change from 0 to 40427 [ 160.799539][ T2987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.799570][ T2987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.868803][ T7393] F2FS-fs (loop1): Found nat_bits in checkpoint [ 161.173622][ T7430] loop0: detected capacity change from 0 to 32768 [ 161.352006][ T7393] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 161.588949][ T6944] syz-executor: attempt to access beyond end of device [ 161.588949][ T6944] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 161.639001][ T6944] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 162.202880][ T7434] loop3: detected capacity change from 0 to 32768 [ 162.289104][ T7434] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 162.515711][ T7434] XFS (loop3): Ending clean mount [ 162.550921][ T7434] XFS (loop3): Quotacheck needed: Please wait. [ 162.709658][ T7434] XFS (loop3): Quotacheck: Done. [ 162.893875][ T7436] loop2: detected capacity change from 0 to 40427 [ 162.904696][ T7130] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 162.954407][ T7436] F2FS-fs (loop2): invalid crc value [ 163.004855][ T7436] F2FS-fs (loop2): Found nat_bits in checkpoint [ 163.203080][ T7436] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 163.292897][ T7488] loop0: detected capacity change from 0 to 2048 [ 163.302785][ T29] audit: type=1800 audit(1724311908.662:42): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.592" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 163.309552][ T7488] udf: Unknown parameter 'adiç1Ë"czrÇo¨9¾­«nicb' [ 163.445747][ T29] audit: type=1800 audit(1724311908.802:43): pid=7436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.592" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 163.483090][ T7436] syz.2.592: attempt to access beyond end of device [ 163.483090][ T7436] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 163.563852][ T7495] loop0: detected capacity change from 0 to 256 [ 163.600038][ T6122] syz-executor: attempt to access beyond end of device [ 163.600038][ T6122] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 163.677705][ T6122] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 163.780736][ T7493] loop3: detected capacity change from 0 to 4096 [ 163.909743][ T7498] netlink: 12 bytes leftover after parsing attributes in process `syz.0.615'. [ 164.068173][ T29] audit: type=1800 audit(1724311909.422:44): pid=7493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.608" name="bus" dev="loop3" ino=33 res=0 errno=0 [ 164.158689][ T29] audit: type=1800 audit(1724311909.432:45): pid=7499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.608" name="bus" dev="loop3" ino=33 res=0 errno=0 [ 164.350245][ T7491] loop1: detected capacity change from 0 to 32768 [ 164.373909][ T7491] XFS: ikeep mount option is deprecated. [ 164.475628][ T7491] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 164.693369][ T7491] XFS (loop1): Ending clean mount [ 164.767406][ T7491] XFS (loop1): Quotacheck needed: Please wait. [ 164.895715][ T7491] XFS (loop1): Quotacheck: Done. [ 165.249692][ T6944] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 165.288897][ T29] audit: type=1326 audit(1724311910.632:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7528 comm="syz.3.624" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ee4379e79 code=0x0 [ 165.468426][ T7534] loop2: detected capacity change from 0 to 1024 [ 165.901098][ T7549] netlink: 'syz.0.633': attribute type 29 has an invalid length. [ 165.919433][ T7549] netlink: 'syz.0.633': attribute type 29 has an invalid length. [ 165.939824][ T7549] netlink: 'syz.0.633': attribute type 29 has an invalid length. [ 165.967560][ T7549] netlink: 'syz.0.633': attribute type 29 has an invalid length. [ 166.401582][ T7547] loop2: detected capacity change from 0 to 40427 [ 166.420107][ T7547] F2FS-fs (loop2): invalid crc value [ 166.437661][ T7547] F2FS-fs (loop2): Found nat_bits in checkpoint [ 166.691317][ T7547] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 166.745292][ T7567] loop0: detected capacity change from 0 to 1024 [ 166.806713][ T7567] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.807562][ T7570] loop3: detected capacity change from 0 to 256 [ 166.896181][ T7567] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 16777241 free clusters [ 166.959026][ T6122] syz-executor: attempt to access beyond end of device [ 166.959026][ T6122] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 166.990281][ T6122] syz-executor: attempt to access beyond end of device [ 166.990281][ T6122] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 167.005504][ T7570] FAT-fs (loop3): Directory bread(block 64) failed [ 167.012401][ T7570] FAT-fs (loop3): Directory bread(block 65) failed [ 167.036841][ T7570] FAT-fs (loop3): Directory bread(block 66) failed [ 167.076736][ T7570] FAT-fs (loop3): Directory bread(block 67) failed [ 167.104721][ T5227] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.118985][ T7570] FAT-fs (loop3): Directory bread(block 68) failed [ 167.128480][ T7570] FAT-fs (loop3): Directory bread(block 69) failed [ 167.179089][ T7570] FAT-fs (loop3): Directory bread(block 70) failed [ 167.186652][ T7570] FAT-fs (loop3): Directory bread(block 71) failed [ 167.289126][ T7570] FAT-fs (loop3): Directory bread(block 72) failed [ 167.295778][ T7570] FAT-fs (loop3): Directory bread(block 73) failed [ 167.424419][ T7583] netlink: 5288 bytes leftover after parsing attributes in process `syz.0.643'. [ 167.429260][ T53] kworker/u8:3: attempt to access beyond end of device [ 167.429260][ T53] loop2: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 167.446453][ T7582] loop1: detected capacity change from 0 to 2048 [ 167.448233][ T53] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 167.463456][ T53] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 167.466244][ T7583] openvswitch: netlink: IP tunnel dst address not specified [ 167.503778][ T53] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 167.510290][ T2958] kworker/u8:9: attempt to access beyond end of device [ 167.510290][ T2958] loop3: rw=1, sector=1224, nr_sectors = 4 limit=256 [ 167.548435][ T7582] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.677668][ T6944] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.866365][ T7596] ALSA: mixer_oss: invalid OSS volume 'D£ n*@\%΂`.%å½p€lÄ/¡á²“Î' [ 167.956765][ T7600] netlink: 'syz.0.651': attribute type 9 has an invalid length. [ 167.987902][ T1171] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 168.131962][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.208779][ T1171] usb 5-1: Using ep0 maxpacket: 16 [ 168.216138][ T1171] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 168.237880][ T1171] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 168.262811][ T1171] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.318701][ T1171] usb 5-1: New USB device found, idVendor=1770, idProduct=ff00, bcdDevice= 0.00 [ 168.327807][ T1171] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.361051][ T7606] loop1: detected capacity change from 0 to 512 [ 168.396502][ T7606] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 168.436811][ T1171] usb 5-1: config 0 descriptor?? [ 168.459238][ T7606] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 168.468041][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.651992][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.749525][ T7594] syz.3.650 (7594) used greatest stack depth: 18480 bytes left [ 168.861632][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.906262][ T7602] loop0: detected capacity change from 0 to 40427 [ 168.929469][ T7602] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 168.937294][ T7602] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 168.963165][ T7602] F2FS-fs (loop0): invalid crc value [ 169.000068][ T1171] gt683r_led 0003:1770:FF00.0006: unknown main item tag 0x7 [ 169.007485][ T1171] gt683r_led 0003:1770:FF00.0006: unknown main item tag 0x7 [ 169.015258][ T1171] gt683r_led 0003:1770:FF00.0006: unbalanced collection at end of report description [ 169.026058][ T1171] gt683r_led 0003:1770:FF00.0006: hid parsing failed [ 169.033807][ T1171] gt683r_led 0003:1770:FF00.0006: probe with driver gt683r_led failed with error -22 [ 169.051568][ T7602] F2FS-fs (loop0): Found nat_bits in checkpoint [ 169.172057][ T7602] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 169.179391][ T7602] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 169.213567][ T62] bridge_slave_1: left allmulticast mode [ 169.233077][ T5280] usb 5-1: USB disconnect, device number 8 [ 169.242269][ T62] bridge_slave_1: left promiscuous mode [ 169.248039][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.272808][ T29] audit: type=1800 audit(1724311914.632:47): pid=7602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.652" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 169.302836][ T7602] syz.0.652: attempt to access beyond end of device [ 169.302836][ T7602] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 169.337791][ T62] bridge_slave_0: left allmulticast mode [ 169.364078][ T62] bridge_slave_0: left promiscuous mode [ 169.371522][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.374837][ T5243] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 169.390263][ T5243] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 169.395494][ T7622] syz.0.652: attempt to access beyond end of device [ 169.395494][ T7622] loop0: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 169.401036][ T5243] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 169.421381][ T5243] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 169.446813][ T5243] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 169.456593][ T5243] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 170.331053][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.343825][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.356682][ T62] bond0 (unregistering): Released all slaves [ 170.747506][ T7655] loop3: detected capacity change from 0 to 256 [ 170.805380][ T7655] FAT-fs (loop3): Directory bread(block 64) failed [ 170.816238][ T7655] FAT-fs (loop3): Directory bread(block 65) failed [ 170.827820][ T7655] FAT-fs (loop3): Directory bread(block 66) failed [ 170.850230][ T7655] FAT-fs (loop3): Directory bread(block 67) failed [ 170.857653][ T7633] Bluetooth: Found 0 CAPI controller(s) on device 10:aa:aa:aa:aa:aa [ 170.898507][ T7655] FAT-fs (loop3): Directory bread(block 68) failed [ 170.931501][ T7655] FAT-fs (loop3): Directory bread(block 69) failed [ 170.963189][ T7655] FAT-fs (loop3): Directory bread(block 70) failed [ 171.008834][ T7655] FAT-fs (loop3): Directory bread(block 71) failed [ 171.029426][ T62] hsr_slave_0: left promiscuous mode [ 171.067022][ T7655] FAT-fs (loop3): Directory bread(block 72) failed [ 171.077059][ T62] hsr_slave_1: left promiscuous mode [ 171.089335][ T7655] FAT-fs (loop3): Directory bread(block 73) failed [ 171.106287][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.117103][ T29] audit: type=1326 audit(1724311916.472:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.1.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06a779e79 code=0x7ffc0000 [ 171.149126][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.190426][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.197917][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.209980][ T29] audit: type=1326 audit(1724311916.502:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.1.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06a779e79 code=0x7ffc0000 [ 171.288842][ T29] audit: type=1326 audit(1724311916.532:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.1.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd06a779e79 code=0x7ffc0000 [ 171.397296][ T62] veth1_macvtap: left promiscuous mode [ 171.403429][ T29] audit: type=1326 audit(1724311916.532:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.1.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06a779e79 code=0x7ffc0000 [ 171.449457][ T62] veth0_macvtap: left promiscuous mode [ 171.456968][ T62] veth1_vlan: left promiscuous mode [ 171.486863][ T29] audit: type=1326 audit(1724311916.532:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.1.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd06a779e79 code=0x7ffc0000 [ 171.511709][ T62] veth0_vlan: left promiscuous mode [ 171.538856][ T5236] Bluetooth: hci3: command tx timeout [ 171.559324][ T1068] kworker/u8:6: attempt to access beyond end of device [ 171.559324][ T1068] loop3: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 171.582484][ T7650] loop0: detected capacity change from 0 to 32768 [ 171.614922][ T29] audit: type=1326 audit(1724311916.532:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.1.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06a779e79 code=0x7ffc0000 [ 171.683944][ T7650] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.669 (7650) [ 171.756329][ T7650] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 171.779657][ T29] audit: type=1326 audit(1724311916.542:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.1.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd06a779e79 code=0x7ffc0000 [ 171.807862][ T7650] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 171.871662][ T7650] BTRFS info (device loop0): using free-space-tree [ 171.898994][ T29] audit: type=1326 audit(1724311916.542:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.1.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06a779e79 code=0x7ffc0000 [ 172.019308][ T29] audit: type=1326 audit(1724311916.542:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.1.671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7fd06a779e79 code=0x7ffc0000 [ 172.557462][ T5227] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 173.148193][ T5281] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 173.374190][ T5281] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 173.387154][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.419048][ T5281] usb 2-1: Product: syz [ 173.425951][ T5281] usb 2-1: Manufacturer: syz [ 173.435924][ T5281] usb 2-1: SerialNumber: syz [ 173.466595][ T7702] loop3: detected capacity change from 0 to 40427 [ 173.472426][ T5281] usb 2-1: config 0 descriptor?? [ 173.515546][ T7702] F2FS-fs (loop3): Found nat_bits in checkpoint [ 173.610534][ T5236] Bluetooth: hci3: command tx timeout [ 173.629861][ T62] team0 (unregistering): Port device team_slave_1 removed [ 173.667162][ T7665] loop4: detected capacity change from 0 to 65536 [ 173.677121][ T7702] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 173.743502][ T7665] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 173.793482][ T62] team0 (unregistering): Port device team_slave_0 removed [ 173.811616][ T7130] syz-executor: attempt to access beyond end of device [ 173.811616][ T7130] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 173.837881][ T7665] XFS (loop4): Ending clean mount [ 173.841053][ T7130] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 173.847037][ T7665] XFS (loop4): Quotacheck needed: Please wait. [ 173.901406][ T5281] usb 2-1: Firmware version (0.0) predates our first public release. [ 173.939040][ T5281] usb 2-1: Please update to version 0.2 or newer [ 173.978464][ T5281] usb 2-1: Firmware: build [ 174.000034][ T7665] XFS (loop4): Quotacheck: Done. [ 174.196507][ T5239] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 174.951182][ T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 175.151785][ T7742] syz_tun: entered promiscuous mode [ 175.161727][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 175.176741][ T7742] batadv_slave_0: entered promiscuous mode [ 175.183315][ T5281] usb 2-1: USB disconnect, device number 6 [ 175.199630][ T7742] syz_tun: left promiscuous mode [ 175.209739][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 175.221792][ T7742] batadv_slave_0: left promiscuous mode [ 175.242091][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 175.261914][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 175.299762][ T25] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 175.315523][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.344681][ T25] usb 4-1: config 0 descriptor?? [ 175.351064][ T7735] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 175.688860][ T5236] Bluetooth: hci3: command tx timeout [ 175.743995][ T7620] chnl_net:caif_netlink_parms(): no params data found [ 175.836520][ T25] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 175.848058][ T25] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 175.876173][ T25] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 175.905313][ T25] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 175.928956][ T25] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 175.946878][ T25] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 175.973459][ T25] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 176.020908][ T25] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 176.082840][ T7760] loop4: detected capacity change from 0 to 4096 [ 176.143242][ T7620] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.165232][ T7739] loop1: detected capacity change from 0 to 40427 [ 176.189719][ T9] usb 4-1: USB disconnect, device number 6 [ 176.196756][ T7620] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.203972][ T7739] F2FS-fs (loop1): invalid crc value [ 176.204430][ T7766] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 176.236208][ T7739] F2FS-fs (loop1): Found nat_bits in checkpoint [ 176.276319][ T7620] bridge_slave_0: entered allmulticast mode [ 176.313485][ T7620] bridge_slave_0: entered promiscuous mode [ 176.332611][ T7620] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.340693][ T7620] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.343167][ T7739] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 176.347978][ T7620] bridge_slave_1: entered allmulticast mode [ 176.379910][ T7620] bridge_slave_1: entered promiscuous mode [ 176.587281][ T7620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.602297][ T7620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.668107][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 176.668127][ T29] audit: type=1326 audit(1724311922.022:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.0.697" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f84c4b79e79 code=0x0 [ 176.716350][ T7620] team0: Port device team_slave_0 added [ 176.750562][ T7620] team0: Port device team_slave_1 added [ 176.821293][ T7620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 176.828409][ T7620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.879207][ T7620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 176.932880][ T7620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 176.933273][ T7788] loop3: detected capacity change from 0 to 64 [ 176.940116][ T7620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 176.972839][ T7620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.073557][ T7620] hsr_slave_0: entered promiscuous mode [ 177.090228][ T7790] loop4: detected capacity change from 0 to 2048 [ 177.108483][ T7790] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 177.160222][ T7620] hsr_slave_1: entered promiscuous mode [ 177.197729][ T7620] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.213640][ T7620] Cannot create hsr debugfs directory [ 177.306476][ T5239] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 177.316945][ T5239] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh [ 177.769445][ T5236] Bluetooth: hci3: command tx timeout [ 178.182017][ T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.443422][ T7818] loop3: detected capacity change from 0 to 2048 [ 178.480919][ T7818] NILFS (loop3): invalid segment: Checksum error in segment payload [ 178.483901][ T5243] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 178.501406][ T5243] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 178.510998][ T5243] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 178.520583][ T7818] NILFS (loop3): trying rollback from an earlier position [ 178.541207][ T5243] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 178.550525][ T5243] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 178.567456][ T5243] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 178.618482][ T7818] NILFS (loop3): recovery complete [ 178.646951][ T7823] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 178.672173][ T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.874645][ T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.001568][ T7820] loop1: detected capacity change from 0 to 40427 [ 179.045605][ T7820] F2FS-fs (loop1): Wrong NAT boundary, start(2560) end(462336) blocks(1024) [ 179.055371][ T7820] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 179.204238][ T7820] F2FS-fs (loop1): Found nat_bits in checkpoint [ 179.222007][ T7815] loop0: detected capacity change from 0 to 32768 [ 179.371560][ T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.401426][ T7815] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 179.456889][ T7820] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 179.466505][ T7820] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 179.496754][ T7820] syz.1.708: attempt to access beyond end of device [ 179.496754][ T7820] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 179.614428][ T6944] syz-executor: attempt to access beyond end of device [ 179.614428][ T6944] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 179.615226][ T7620] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 179.655580][ T6944] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 179.687020][ T7620] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 179.785640][ T7620] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 179.805368][ T7620] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 179.914816][ T7821] chnl_net:caif_netlink_parms(): no params data found [ 179.982977][ T7815] XFS (loop0): Ending clean mount [ 180.002294][ T7815] XFS (loop0): Quotacheck needed: Please wait. [ 180.133301][ T7815] XFS (loop0): Quotacheck: Done. [ 180.163265][ T62] bridge_slave_1: left allmulticast mode [ 180.169960][ T62] bridge_slave_1: left promiscuous mode [ 180.175781][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.200716][ T62] bridge_slave_0: left allmulticast mode [ 180.206479][ T62] bridge_slave_0: left promiscuous mode [ 180.212753][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.366871][ T5227] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 180.651813][ T5236] Bluetooth: hci4: command tx timeout [ 180.771272][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.787522][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.807807][ T62] bond0 (unregistering): Released all slaves [ 181.047201][ T7821] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.062344][ T7821] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.079442][ T7821] bridge_slave_0: entered allmulticast mode [ 181.086626][ T7821] bridge_slave_0: entered promiscuous mode [ 181.230118][ T7821] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.237288][ T7821] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.254019][ T7821] bridge_slave_1: entered allmulticast mode [ 181.261539][ T7821] bridge_slave_1: entered promiscuous mode [ 181.337290][ T7821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.363891][ T7821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.617407][ T7821] team0: Port device team_slave_0 added [ 181.668234][ T7821] team0: Port device team_slave_1 added [ 181.836637][ T62] hsr_slave_0: left promiscuous mode [ 181.884728][ T62] hsr_slave_1: left promiscuous mode [ 181.948987][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.956490][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.012331][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.028758][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.075956][ T62] veth1_macvtap: left promiscuous mode [ 182.098815][ T62] veth0_macvtap: left promiscuous mode [ 182.108793][ T62] veth1_vlan: left promiscuous mode [ 182.114174][ T62] veth0_vlan: left promiscuous mode [ 182.123474][ T7875] loop3: detected capacity change from 0 to 40427 [ 182.171622][ T7875] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 182.201107][ T7875] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 182.227146][ T7898] loop0: detected capacity change from 0 to 256 [ 182.258780][ T7875] F2FS-fs (loop3): invalid crc value [ 182.269102][ T7898] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 182.325065][ T7875] F2FS-fs (loop3): Found nat_bits in checkpoint [ 182.487769][ T7875] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 182.518828][ T7875] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 182.696406][ T7883] loop1: detected capacity change from 0 to 32768 [ 182.738671][ T5236] Bluetooth: hci4: command tx timeout [ 182.831343][ T7883] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 182.950997][ T7883] XFS (loop1): Ending clean mount [ 183.131309][ T7906] loop0: detected capacity change from 0 to 40427 [ 183.142967][ T7130] syz-executor: attempt to access beyond end of device [ 183.142967][ T7130] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 183.161391][ T7130] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 183.172172][ T6944] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 183.236732][ T7906] F2FS-fs (loop0): Found nat_bits in checkpoint [ 183.519285][ T7906] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 183.604385][ T7906] syz.0.725: attempt to access beyond end of device [ 183.604385][ T7906] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 183.642174][ T7906] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 184.158335][ T62] team0 (unregistering): Port device team_slave_1 removed [ 184.287386][ T62] team0 (unregistering): Port device team_slave_0 removed [ 184.763985][ T5281] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 184.809385][ T5236] Bluetooth: hci4: command tx timeout [ 184.897247][ T7620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.917395][ T7925] netlink: 830 bytes leftover after parsing attributes in process `syz.1.729'. [ 184.987774][ T5281] usb 1-1: Using ep0 maxpacket: 8 [ 184.996741][ T5281] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.008121][ T5281] usb 1-1: config 0 has no interfaces? [ 185.020976][ T5281] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 185.032314][ T5281] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.041651][ T7821] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.048962][ T7821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.076306][ T5281] usb 1-1: Product: syz [ 185.089206][ T7942] netlink: 9275 bytes leftover after parsing attributes in process `syz.1.733'. [ 185.100641][ T5281] usb 1-1: Manufacturer: syz [ 185.105492][ T5281] usb 1-1: SerialNumber: syz [ 185.119581][ T7821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.132032][ T5281] usb 1-1: config 0 descriptor?? [ 185.186462][ T7821] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.203201][ T7821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.281534][ T7821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.356740][ T7620] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.381418][ T5280] usb 1-1: USB disconnect, device number 7 [ 185.497030][ T2987] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.504383][ T2987] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.557235][ T7821] hsr_slave_0: entered promiscuous mode [ 185.580016][ T7821] hsr_slave_1: entered promiscuous mode [ 185.601461][ T7821] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.620491][ T7821] Cannot create hsr debugfs directory [ 185.650584][ T2987] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.657745][ T2987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.718797][ T1171] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 185.898761][ T1171] usb 4-1: Using ep0 maxpacket: 16 [ 185.978720][ T1171] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 185.990777][ T1171] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.013369][ T1171] usb 4-1: Product: syz [ 186.017651][ T1171] usb 4-1: Manufacturer: syz [ 186.045472][ T1171] usb 4-1: SerialNumber: syz [ 186.066498][ T1171] usb 4-1: config 0 descriptor?? [ 186.130980][ T1171] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 186.552750][ T7620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.695725][ T7620] veth0_vlan: entered promiscuous mode [ 186.756737][ T7620] veth1_vlan: entered promiscuous mode [ 186.889133][ T5236] Bluetooth: hci4: command tx timeout [ 186.913487][ T7620] veth0_macvtap: entered promiscuous mode [ 187.078227][ T7620] veth1_macvtap: entered promiscuous mode [ 187.119615][ T1171] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 187.163413][ T1171] usb 4-1: USB disconnect, device number 7 [ 187.177993][ T7821] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 187.214227][ T7821] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 187.251965][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.262900][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.274494][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.285810][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.300817][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.321675][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.348077][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 187.371417][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.396462][ T7620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 187.423728][ T7821] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 187.462511][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.493574][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.539039][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.567250][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.608276][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.651212][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.708773][ T7620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 187.751996][ T7620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 187.780153][ T7620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 187.788426][ T7821] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 187.817448][ T7620] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.833659][ T7620] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.847617][ T7620] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.866694][ T7620] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.982870][ T7994] loop0: detected capacity change from 0 to 32768 [ 188.101997][ T7821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.120879][ T7821] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.136152][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.143329][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.196629][ T2958] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.204794][ T2958] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.333004][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.348911][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.481002][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.502320][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.922541][ T7821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.178027][ T8012] loop1: detected capacity change from 0 to 32768 [ 189.226387][ T8012] XFS: ikeep mount option is deprecated. [ 189.253913][ T8012] XFS: ikeep mount option is deprecated. [ 189.336629][ T8012] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 189.402038][ T2916] bridge_slave_1: left allmulticast mode [ 189.411439][ T2916] bridge_slave_1: left promiscuous mode [ 189.417231][ T2916] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.583598][ T2916] bridge_slave_0: left allmulticast mode [ 189.609454][ T8018] loop3: detected capacity change from 0 to 40427 [ 189.615635][ T2916] bridge_slave_0: left promiscuous mode [ 189.625609][ T8056] loop2: detected capacity change from 0 to 128 [ 189.644569][ T2916] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.687384][ T8056] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 189.702420][ T8012] XFS (loop1): Ending clean mount [ 189.711984][ T8056] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 189.721203][ T8018] F2FS-fs (loop3): Found nat_bits in checkpoint [ 189.726406][ T8059] netlink: 'syz.0.753': attribute type 1 has an invalid length. [ 189.749078][ T8059] netlink: 9344 bytes leftover after parsing attributes in process `syz.0.753'. [ 189.759676][ T8059] netlink: 'syz.0.753': attribute type 1 has an invalid length. [ 189.785027][ T8012] XFS (loop1): Quotacheck needed: Please wait. [ 189.881040][ T8012] XFS (loop1): Quotacheck: Done. [ 189.893294][ T7620] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 189.910224][ T8018] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 190.075572][ T7130] syz-executor: attempt to access beyond end of device [ 190.075572][ T7130] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 190.117400][ T7130] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 190.129318][ T6944] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 190.791147][ T2916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.820615][ T2916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.832154][ T2916] bond0 (unregistering): Released all slaves [ 190.945045][ T8073] netlink: 132 bytes leftover after parsing attributes in process `syz.3.757'. [ 191.144457][ T8083] loop3: detected capacity change from 0 to 512 [ 191.156716][ T8083] EXT4-fs: Ignoring removed nomblk_io_submit option [ 191.227484][ T8083] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.761: corrupted in-inode xattr: invalid ea_ino [ 191.339728][ T8083] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.761: couldn't read orphan inode 15 (err -117) [ 191.368794][ T5236] Bluetooth: hci0: command 0x0401 tx timeout [ 191.369751][ T8083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 191.673093][ T7130] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.690155][ T7821] veth0_vlan: entered promiscuous mode [ 191.823756][ T2916] hsr_slave_0: left promiscuous mode [ 191.847658][ T2916] hsr_slave_1: left promiscuous mode [ 191.885928][ T8081] loop1: detected capacity change from 0 to 32768 [ 191.892889][ T2916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.901270][ T2916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.910812][ T8081] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.760 (8081) [ 191.916555][ T2916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.948812][ T2916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.958892][ T8081] BTRFS info (device loop1): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 191.970922][ T8081] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 191.986826][ T8081] BTRFS info (device loop1): using free-space-tree [ 192.041798][ T2916] veth1_macvtap: left promiscuous mode [ 192.055052][ T2916] veth0_macvtap: left promiscuous mode [ 192.067517][ T2916] veth1_vlan: left promiscuous mode [ 192.073712][ T2916] veth0_vlan: left promiscuous mode [ 192.319085][ T2638] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 192.499159][ T2638] usb 4-1: Using ep0 maxpacket: 32 [ 192.503375][ T6944] BTRFS info (device loop1): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 192.506857][ T2638] usb 4-1: config 0 has no interfaces? [ 192.527993][ T2638] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 192.538104][ T2638] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 192.548925][ T2638] usb 4-1: Product: syz [ 192.553225][ T2638] usb 4-1: Manufacturer: syz [ 192.567110][ T2638] usb 4-1: config 0 descriptor?? [ 192.902501][ T8124] loop1: detected capacity change from 0 to 128 [ 193.294367][ T8132] netlink: 104 bytes leftover after parsing attributes in process `syz.1.775'. [ 193.344368][ T2638] usb 4-1: USB disconnect, device number 8 [ 193.492858][ T8136] sock: sock_set_timeout: `syz.1.776' (pid 8136) tries to set negative timeout [ 193.532471][ T2916] team0 (unregistering): Port device team_slave_1 removed [ 193.696914][ T2916] team0 (unregistering): Port device team_slave_0 removed [ 194.245398][ T8142] loop1: detected capacity change from 0 to 32768 [ 194.268776][ T8142] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.780 (8142) [ 194.316520][ T8142] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 194.337550][ T8142] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 194.358233][ T8142] BTRFS info (device loop1): using free-space-tree [ 194.416798][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.423591][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.697959][ T7821] veth1_vlan: entered promiscuous mode [ 194.791221][ T7821] veth0_macvtap: entered promiscuous mode [ 194.851578][ T7821] veth1_macvtap: entered promiscuous mode [ 194.877655][ T8166] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 194.905578][ T7821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.907341][ T6944] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 194.917548][ T7821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.970152][ T7821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.002093][ T7821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.033352][ T7821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.078462][ T7821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.125057][ T7821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.164445][ T7821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.188125][ T8177] loop2: detected capacity change from 0 to 2048 [ 195.211974][ T7821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.232149][ T8177] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 195.281181][ T7821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.302585][ T7821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.318798][ T8177] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 195.357209][ T7821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.387123][ T7821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.423201][ T7821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.452879][ T7821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.485125][ T7821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.514531][ T7821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.579783][ T7821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.602155][ T8187] loop0: detected capacity change from 0 to 4096 [ 195.627617][ T7821] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.651709][ T8187] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 195.670877][ T7821] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.705838][ T8187] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 195.716344][ T7821] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.773164][ T8187] ntfs3: loop0: Failed to load $Extend (-22). [ 195.779851][ T7821] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.803863][ T8187] ntfs3: loop0: Failed to initialize $Extend. [ 196.204853][ T2958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.204879][ T2958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.259172][ T2958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.259198][ T2958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.456844][ T8209] loop4: detected capacity change from 0 to 1024 [ 196.571157][ T8209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.837470][ T8223] loop1: detected capacity change from 0 to 256 [ 196.859948][ T7821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.879554][ T8223] exfat: Deprecated parameter 'namecase' [ 196.921016][ T5281] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 196.942520][ T8223] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 197.132895][ T5281] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.174387][ T5281] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 197.222636][ T5281] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.243677][ T5281] usb 1-1: config 0 descriptor?? [ 197.480481][ T5281] usb 1-1: USB disconnect, device number 8 [ 197.691998][ T8220] loop2: detected capacity change from 0 to 40427 [ 197.736871][ T8220] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 197.758717][ T8220] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 197.821888][ T8220] F2FS-fs (loop2): Found nat_bits in checkpoint [ 197.973589][ T8220] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 197.981257][ T8224] loop3: detected capacity change from 0 to 32768 [ 198.001137][ T8220] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 198.009768][ T8224] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.804 (8224) [ 198.079107][ T8224] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 198.100611][ T8224] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 198.147522][ T7620] syz-executor: attempt to access beyond end of device [ 198.147522][ T7620] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 198.148871][ T8224] BTRFS info (device loop3): using free-space-tree [ 198.233057][ T7620] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 198.323715][ T8234] loop4: detected capacity change from 0 to 32768 [ 198.381331][ T5282] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 198.455353][ T8234] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 198.537324][ T7130] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 198.583034][ T8234] XFS (loop4): Ending clean mount [ 198.614063][ T5282] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.631098][ T5282] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 198.659144][ T5282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.687275][ T5282] usb 2-1: config 0 descriptor?? [ 198.787749][ T7821] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 198.928252][ T5282] usb 2-1: string descriptor 0 read error: -71 [ 198.945284][ T5282] usb 2-1: Found UVC 0.00 device (046d:08c1) [ 198.968951][ T5282] usb 2-1: No valid video chain found. [ 198.993325][ T5282] usb 2-1: USB disconnect, device number 7 [ 199.121466][ T8276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.815'. [ 199.762459][ T8297] nbd: device at index 3 is going down [ 199.787433][ T29] audit: type=1326 audit(1724311945.142:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.2.823" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc880579e79 code=0x0 [ 199.822524][ T29] audit: type=1326 audit(1724311945.142:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8283 comm="syz.2.823" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc880579e79 code=0x0 [ 199.998421][ T8303] loop3: detected capacity change from 0 to 128 [ 200.116281][ T8301] loop0: detected capacity change from 0 to 4096 [ 200.129809][ T8301] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 200.203484][ T8301] ntfs3: loop0: Failed to load $Extend (-22). [ 200.219200][ T8301] ntfs3: loop0: Failed to initialize $Extend. [ 200.500916][ T8309] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 200.538165][ T8309] x_tables: ip_tables: osf match: only valid for protocol 6 [ 200.575130][ T8313] raw_sendmsg: syz.0.834 forgot to set AF_INET. Fix it! [ 200.616681][ T8315] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 200.689473][ T8315] ipvlan0: entered promiscuous mode [ 200.710799][ T8315] ipvlan0: left promiscuous mode [ 200.716109][ T8318] capability: warning: `syz.3.837' uses 32-bit capabilities (legacy support in use) [ 200.726975][ T8315] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 201.045310][ T8328] loop1: detected capacity change from 0 to 2048 [ 201.096306][ T8332] loop4: detected capacity change from 0 to 256 [ 201.104001][ T8332] exfat: Deprecated parameter 'utf8' [ 201.119397][ T8332] exfat: Deprecated parameter 'namecase' [ 201.125300][ T8328] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.131629][ T8332] exfat: Deprecated parameter 'namecase' [ 201.147835][ T8332] exfat: Deprecated parameter 'utf8' [ 201.148215][ T8328] ext4 filesystem being mounted at /73/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 201.178099][ T8332] exFAT-fs (loop4): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d) [ 201.214764][ T8336] process 'syz.3.845' launched '/dev/fd/4' with NULL argv: empty string added [ 201.299880][ T6944] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.606611][ T8344] loop4: detected capacity change from 0 to 1024 [ 201.622236][ T8344] EXT4-fs: Ignoring removed oldalloc option [ 201.631963][ T8344] EXT4-fs (loop4): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 201.675821][ T8344] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 201.859905][ T7821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.887171][ T8359] loop1: detected capacity change from 0 to 512 [ 201.995196][ T8359] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 202.100382][ T8366] loop3: detected capacity change from 0 to 512 [ 202.155012][ T8366] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 202.192674][ T8366] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 202.220867][ T6944] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.236624][ T8366] System zones: 1-12 [ 202.242160][ T8366] EXT4-fs (loop3): 1 truncate cleaned up [ 202.249500][ T8366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.340228][ T29] audit: type=1800 audit(1724311947.702:61): pid=8366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.857" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 202.631962][ T7130] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.850358][ T8385] netlink: 8 bytes leftover after parsing attributes in process `syz.4.864'. [ 202.974590][ T8388] loop3: detected capacity change from 0 to 1764 [ 203.131489][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 203.307818][ T8396] loop0: detected capacity change from 0 to 4096 [ 203.435076][ T8398] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 203.468877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 203.540478][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 203.608859][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 203.617366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 203.626106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 203.769042][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 203.795054][ T8406] loop4: detected capacity change from 0 to 512 [ 203.835742][ T8406] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 203.846327][ T8406] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 204.086235][ T29] audit: type=1326 audit(1724311949.432:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8414 comm="syz.2.878" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc880579e79 code=0x0 [ 204.101415][ T8406] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 204.109038][ C0] vkms_vblank_simulate: vblank timer overrun [ 204.128713][ T8406] System zones: 0-2, 18-18, 34-34 [ 204.175372][ T8406] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 204.205172][ T8406] EXT4-fs (loop4): 1 truncate cleaned up [ 204.213452][ T8406] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 204.292873][ T29] audit: type=1800 audit(1724311949.642:63): pid=8406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.871" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 204.514217][ T8434] loop1: detected capacity change from 0 to 64 [ 204.577920][ T7821] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.827517][ T8440] loop1: detected capacity change from 0 to 64 [ 204.943689][ T29] audit: type=1800 audit(1724311950.282:64): pid=8440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.887" name="bus" dev="loop1" ino=8 res=0 errno=0 [ 205.216699][ T8451] loop1: detected capacity change from 0 to 128 [ 205.236094][ T8451] EXT4-fs: Ignoring removed nobh option [ 205.273419][ T8451] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 205.288674][ T8449] netlink: 44 bytes leftover after parsing attributes in process `syz.2.892'. [ 205.302106][ T8451] ext4 filesystem being mounted at /81/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 205.872483][ T8433] loop3: detected capacity change from 0 to 32768 [ 205.926350][ T8433] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 206.143911][ T6944] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 206.385430][ T8433] XFS (loop3): Ending clean mount [ 206.399628][ T8482] loop2: detected capacity change from 0 to 1024 [ 206.409209][ T5280] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 206.443390][ T8482] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 206.540916][ T8482] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.648888][ T5280] usb 5-1: Using ep0 maxpacket: 8 [ 206.663787][ T5280] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x2C, changing to 0xC [ 206.720460][ T7130] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 206.738300][ T5280] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 64 [ 206.771979][ T5280] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 2.40 [ 206.774451][ T7620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 206.782734][ T5280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.856647][ T8476] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 207.942753][ T5280] cdc_ncm 5-1:1.0: bind() failure [ 207.966482][ T5280] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71 [ 207.988109][ T5280] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71 [ 208.013998][ T5280] usbtest 5-1:1.1: probe with driver usbtest failed with error -71 [ 208.047553][ T5280] usb 5-1: USB disconnect, device number 9 [ 208.525771][ T8526] loop0: detected capacity change from 0 to 32768 [ 208.537914][ T8535] loop3: detected capacity change from 0 to 4096 [ 208.573635][ T8526] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.916 (8526) [ 208.587099][ T8535] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512). [ 208.616048][ T8537] loop1: detected capacity change from 0 to 512 [ 208.635726][ T8526] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 208.708621][ T8535] ntfs3: loop3: Failed to load $Extend (-22). [ 208.724715][ T8526] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 208.745857][ T8535] ntfs3: loop3: Failed to initialize $Extend. [ 208.768194][ T8537] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.780771][ T8526] BTRFS info (device loop0): using free-space-tree [ 208.822113][ T8537] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.030655][ T8537] EXT4-fs error (device loop1): ext4_get_first_dir_block:3538: inode #12: block 32: comm syz.1.921: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 209.146189][ T8537] EXT4-fs error (device loop1): ext4_get_first_dir_block:3541: inode #12: comm syz.1.921: directory missing '.' [ 209.373563][ T6944] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.624830][ T8574] vivid-007: disconnect [ 209.659034][ T8572] vivid-007: reconnect [ 209.893179][ T5227] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 210.949810][ T8585] loop1: detected capacity change from 0 to 32768 [ 210.969061][ T2638] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 211.011191][ T8585] XFS (loop1): Mounting V5 Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 211.149004][ T8585] XFS (loop1): Ending clean mount [ 211.202760][ T8590] loop4: detected capacity change from 0 to 32768 [ 211.225819][ T8594] loop0: detected capacity change from 0 to 32768 [ 211.234271][ T2638] usb 4-1: Using ep0 maxpacket: 8 [ 211.257031][ T8594] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.935 (8594) [ 211.290222][ T2638] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 211.298285][ T8590] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 211.308954][ T2638] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 211.318643][ T8594] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 211.320805][ T2638] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 211.341706][ T2638] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.347065][ T6944] XFS (loop1): Unmounting Filesystem bc2378ed-6193-40d5-9d59-7ebcb787b415 [ 211.355452][ T2638] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 211.373673][ T2638] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.389733][ T8594] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 211.410047][ T8594] BTRFS info (device loop0): using free-space-tree [ 211.524206][ T8590] XFS (loop4): Ending clean mount [ 211.594789][ T8602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.626193][ T29] audit: type=1800 audit(1724311956.982:65): pid=8594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.935" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 211.649431][ T8602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.697945][ T29] audit: type=1800 audit(1724311957.032:66): pid=8594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.935" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 211.721505][ T2638] usb 4-1: GET_CAPABILITIES returned 0 [ 211.727993][ T2638] usbtmc 4-1:16.0: can't read capabilities [ 211.805557][ T7821] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 211.833073][ T5227] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 211.895739][ T8647] loop2: detected capacity change from 0 to 256 [ 212.038425][ T5280] usb 4-1: USB disconnect, device number 9 [ 212.071567][ T8647] FAT-fs (loop2): Directory bread(block 64) failed [ 212.097294][ T8647] FAT-fs (loop2): Directory bread(block 65) failed [ 212.106577][ T8647] FAT-fs (loop2): Directory bread(block 66) failed [ 212.123612][ T8647] FAT-fs (loop2): Directory bread(block 67) failed [ 212.132232][ T8647] FAT-fs (loop2): Directory bread(block 68) failed [ 212.169646][ T8647] FAT-fs (loop2): Directory bread(block 69) failed [ 212.179855][ T8647] FAT-fs (loop2): Directory bread(block 70) failed [ 212.199134][ T8647] FAT-fs (loop2): Directory bread(block 71) failed [ 212.205873][ T8647] FAT-fs (loop2): Directory bread(block 72) failed [ 212.221878][ T8647] FAT-fs (loop2): Directory bread(block 73) failed [ 212.709198][ T5282] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 212.967506][ T5282] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 212.988926][ T5282] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 213.001920][ T8667] IPVS: Scheduler module ip_vs_sip not found [ 213.018841][ T5282] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 213.069026][ T5282] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 213.099031][ T5282] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 213.121585][ T5282] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 213.158985][ T5282] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 213.167141][ T5282] usb 5-1: Product: syz [ 213.203461][ T5282] usb 5-1: Manufacturer: syz [ 213.259743][ T5282] cdc_wdm 5-1:1.0: skipping garbage [ 213.267112][ T5282] cdc_wdm 5-1:1.0: skipping garbage [ 213.274221][ T5282] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 213.291242][ T5282] cdc_wdm 5-1:1.0: Unknown control protocol [ 213.509053][ T5282] usb 5-1: USB disconnect, device number 10 [ 213.836699][ T8694] gretap0: entered promiscuous mode [ 213.852654][ T8694] macsec1: entered promiscuous mode [ 213.869098][ T8694] macsec1: entered allmulticast mode [ 213.877823][ T8694] gretap0: entered allmulticast mode [ 213.933983][ T8694] gretap0: left allmulticast mode [ 213.945099][ T8694] gretap0: left promiscuous mode [ 214.158682][ T5282] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 214.261765][ T8708] loop2: detected capacity change from 0 to 1024 [ 214.325587][ T8708] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 214.376135][ T8708] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 214.422549][ T8708] EXT4-fs (loop2): journal inode is deleted [ 214.460584][ T5282] usb 1-1: config 0 has an invalid interface number: 18 but max is 0 [ 214.467991][ T8712] netlink: 'syz.4.972': attribute type 8 has an invalid length. [ 214.468906][ T5282] usb 1-1: config 0 has no interface number 0 [ 214.468951][ T5282] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.468984][ T5282] usb 1-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.507615][ T5282] usb 1-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 214.527667][ T5282] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 214.569157][ T5282] usb 1-1: Manufacturer: syz [ 214.600452][ T5282] usb 1-1: config 0 descriptor?? [ 215.070510][ T8704] loop1: detected capacity change from 0 to 32768 [ 215.092942][ T8721] loop4: detected capacity change from 0 to 1024 [ 215.097047][ T5282] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.18/0003:054C:03D5.0008/input/input12 [ 215.142460][ T8704] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 215.235954][ T5282] sony 0003:054C:03D5.0008: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.0-1/input18 [ 215.355109][ T5282] usb 1-1: USB disconnect, device number 9 [ 215.411812][ T8704] XFS (loop1): Ending clean mount [ 215.493765][ T8704] XFS (loop1): Quotacheck needed: Please wait. [ 215.571852][ T8708] loop2: detected capacity change from 0 to 32768 [ 215.619050][ T8708] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.969 (8708) [ 215.634186][ T8704] XFS (loop1): Quotacheck: Done. [ 215.668351][ T8732] loop4: detected capacity change from 0 to 4096 [ 215.709404][ T8708] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 215.756885][ T29] audit: type=1800 audit(1724311961.112:67): pid=8732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.976" name="bus" dev="loop4" ino=33 res=0 errno=0 [ 215.783115][ T8708] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 215.815762][ T8708] BTRFS info (device loop2): using free-space-tree [ 215.886865][ T29] audit: type=1800 audit(1724311961.112:68): pid=8732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.976" name="bus" dev="loop4" ino=33 res=0 errno=0 [ 215.962104][ T29] audit: type=1800 audit(1724311961.162:69): pid=8704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.967" name="bus" dev="loop1" ino=9292 res=0 errno=0 [ 215.996420][ T8742] loop3: detected capacity change from 0 to 1024 [ 216.015367][ T8742] EXT4-fs: Ignoring removed orlov option [ 216.043786][ T6944] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 216.060274][ T8742] EXT4-fs: Ignoring removed nomblk_io_submit option [ 216.209735][ T8742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.314775][ T8742] EXT4-fs error (device loop3): ext4_lookup:1811: inode #15: comm syz.3.978: unexpected EA_INODE flag [ 216.353730][ T8760] loop0: detected capacity change from 0 to 2048 [ 216.426566][ T8763] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 216.519919][ T7130] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.727241][ T7620] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 216.728972][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 216.792981][ T53] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 216.869327][ T8771] loop3: detected capacity change from 0 to 64 [ 216.887117][ T8773] loop1: detected capacity change from 0 to 4096 [ 216.895266][ T8773] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 216.933629][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 216.967976][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 217.022220][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 217.059759][ T8773] ntfs3: loop1: ino=1b, "file0" attr_set_size [ 217.084678][ T8773] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 217.094445][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 217.157701][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 217.203339][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.251856][ T9] usb 5-1: config 0 descriptor?? [ 217.263586][ T8775] loop0: detected capacity change from 0 to 4096 [ 217.279437][ T8765] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 217.330622][ T8775] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512). [ 217.510942][ T8775] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 217.544894][ T8775] ntfs3: loop0: Failed to load $Extend (-22). [ 217.583080][ T8775] ntfs3: loop0: Failed to initialize $Extend. [ 217.659705][ T29] audit: type=1800 audit(1724311963.022:70): pid=8775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.994" name="bus" dev="loop0" ino=33 res=0 errno=0 [ 217.722475][ T29] audit: type=1800 audit(1724311963.032:71): pid=8775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.994" name="bus" dev="loop0" ino=33 res=0 errno=0 [ 217.755641][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0xd [ 217.784156][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 217.802396][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 217.828785][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 217.855612][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 217.880313][ T9] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 217.909960][ T9] plantronics 0003:047F:FFFF.0009: No inputs registered, leaving [ 217.954794][ T9] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 218.033092][ T9] usb 5-1: USB disconnect, device number 11 [ 218.591915][ T8784] loop3: detected capacity change from 0 to 32768 [ 218.630439][ T8784] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.989 (8784) [ 218.719079][ T8784] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 218.761393][ T8782] loop2: detected capacity change from 0 to 32768 [ 218.781044][ T8784] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 218.828763][ T8784] BTRFS info (device loop3): using free-space-tree [ 219.183636][ T7130] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 219.304560][ T8833] loop4: detected capacity change from 0 to 64 [ 219.641857][ T8841] loop2: detected capacity change from 0 to 64 [ 219.680925][ T8839] loop3: detected capacity change from 0 to 4096 [ 219.766921][ T8839] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 219.857744][ T29] audit: type=1326 audit(1724311965.192:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8824 comm="syz.0.1003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f84c4b79e79 code=0x7fc00000 [ 219.936066][ T8839] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 219.997798][ T8847] netlink: 'syz.0.1013': attribute type 10 has an invalid length. [ 220.006337][ T8847] netlink: 55 bytes leftover after parsing attributes in process `syz.0.1013'. [ 220.097293][ T29] audit: type=1800 audit(1724311965.452:73): pid=8839 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1005" name="bus" dev="loop3" ino=0 res=0 errno=0 [ 220.313114][ T8855] loop4: detected capacity change from 0 to 256 [ 220.482387][ T8855] FAT-fs (loop4): Directory bread(block 64) failed [ 220.515373][ T8865] loop3: detected capacity change from 0 to 128 [ 220.521776][ T8855] FAT-fs (loop4): Directory bread(block 65) failed [ 220.522844][ T8855] FAT-fs (loop4): Directory bread(block 66) failed [ 220.556419][ T8855] FAT-fs (loop4): Directory bread(block 67) failed [ 220.565282][ T8865] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 220.573862][ T8855] FAT-fs (loop4): Directory bread(block 68) failed [ 220.584780][ T8855] FAT-fs (loop4): Directory bread(block 69) failed [ 220.591597][ T8855] FAT-fs (loop4): Directory bread(block 70) failed [ 220.600056][ T8855] FAT-fs (loop4): Directory bread(block 71) failed [ 220.606807][ T8855] FAT-fs (loop4): Directory bread(block 72) failed [ 220.609203][ T8865] ext4 filesystem being mounted at /97/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 220.613874][ T8855] FAT-fs (loop4): Directory bread(block 73) failed [ 220.755560][ T1068] kworker/u8:6: attempt to access beyond end of device [ 220.755560][ T1068] loop4: rw=1, sector=1224, nr_sectors = 12 limit=256 [ 220.780646][ T7130] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 221.810115][ T8883] loop1: detected capacity change from 0 to 2048 [ 221.885155][ T8883] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 221.918046][ T8883] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.071393][ T8883] fs-verity: sha512 using implementation "sha512-avx2" [ 222.209540][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 222.226839][ T6944] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.419379][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 222.435956][ T9] usb 5-1: config 0 has no interfaces? [ 222.454099][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 222.474764][ T9] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 222.490532][ T9] usb 5-1: Product: syz [ 222.495057][ T9] usb 5-1: Manufacturer: syz [ 222.511979][ T9] usb 5-1: config 0 descriptor?? [ 222.568190][ T8880] loop3: detected capacity change from 0 to 32768 [ 222.587561][ T8880] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1033 (8880) [ 222.611933][ T8880] BTRFS info (device loop3): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 222.628501][ T8880] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 222.678676][ T8880] BTRFS info (device loop3): using free-space-tree [ 222.940327][ T7130] BTRFS info (device loop3): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9 [ 223.271901][ T9] usb 5-1: USB disconnect, device number 12 [ 223.392094][ T8862] coredump: 504(syz.0.1018): interrupted: fatal signal pending [ 223.403422][ T8862] coredump: 504(syz.0.1018): written to core: VMAs: 34, size 99389440; core: 53996170 bytes, pos 91398144 [ 223.924073][ T8929] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 223.932113][ T8929] IPv6: NLM_F_CREATE should be set when creating new route [ 223.947736][ T8925] loop0: detected capacity change from 0 to 2048 [ 223.973335][ T8925] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 224.000637][ T8925] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 224.127782][ T8936] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1039'. [ 224.306412][ T8942] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1043'. [ 224.315742][ T8942] netlink: 'syz.2.1043': attribute type 7 has an invalid length. [ 224.325040][ T8942] netlink: 'syz.2.1043': attribute type 8 has an invalid length. [ 224.336114][ T8942] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1043'. [ 225.379142][ T8934] loop3: detected capacity change from 0 to 32768 [ 225.409661][ T8934] XFS: noikeep mount option is deprecated. [ 225.508820][ T8934] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 225.800651][ T8958] loop4: detected capacity change from 0 to 32768 [ 225.828706][ T8958] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1051 (8958) [ 225.864829][ T8958] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 225.875637][ T8958] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 225.883324][ T8951] loop0: detected capacity change from 0 to 32768 [ 225.884908][ T8958] BTRFS info (device loop4): using free-space-tree [ 225.959874][ T8934] XFS (loop3): Ending clean mount [ 225.971521][ T8934] XFS (loop3): Quotacheck needed: Please wait. [ 226.101894][ T8951] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 226.143186][ T8934] XFS (loop3): Quotacheck: Done. [ 226.395056][ T8951] XFS (loop0): Ending clean mount [ 226.440461][ T7130] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 226.703615][ T5227] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 226.912372][ T9023] sp0: Synchronizing with TNC [ 226.978498][ T9027] loop2: detected capacity change from 0 to 128 [ 227.470052][ T7821] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 228.003424][ T9050] xt_hashlimit: size too large, truncated to 1048576 [ 228.197138][ T9029] loop3: detected capacity change from 0 to 32768 [ 228.279836][ T9029] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 228.464933][ T9029] XFS (loop3): Ending clean mount [ 228.479006][ T9029] XFS (loop3): Quotacheck needed: Please wait. [ 228.550929][ T9029] XFS (loop3): Quotacheck: Done. [ 228.848645][ T29] audit: type=1800 audit(1724312230.135:74): pid=9074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1064" name="bus" dev="loop3" ino=9284 res=0 errno=0 [ 229.143168][ T7130] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 229.212578][ T9081] loop2: detected capacity change from 0 to 256 [ 229.373243][ T9081] Process accounting resumed [ 229.397103][ T9081] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 229.408130][ T9081] FAT-fs (loop2): Filesystem has been set read-only [ 229.608627][ T9081] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 230.273747][ T9093] loop0: detected capacity change from 0 to 4096 [ 230.303115][ T9093] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 230.482007][ T9093] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 231.857482][ T9119] loop4: detected capacity change from 0 to 32768 [ 232.363594][ T9144] loop0: detected capacity change from 0 to 128 [ 232.385404][ T9144] EXT4-fs: Ignoring removed nobh option [ 232.409682][ T5243] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 232.495101][ T9144] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 232.526509][ T9144] ext4 filesystem being mounted at /232/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 233.066994][ T9153] loop3: detected capacity change from 0 to 32768 [ 233.079687][ T9153] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1113 (9153) [ 233.095662][ T9153] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 233.102656][ T5227] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 233.106852][ T9153] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 233.124070][ T9153] BTRFS info (device loop3): using free-space-tree [ 233.164035][ T5280] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 233.375739][ T5280] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 233.414909][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 233.465379][ T5280] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 233.487496][ T5280] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 233.498452][ T9153] BTRFS info (device loop3): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 233.519671][ T5280] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.538761][ T5280] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.579807][ T5280] usb 5-1: config 0 descriptor?? [ 233.599995][ T9160] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 234.020911][ T5280] plantronics 0003:047F:FFFF.000A: unknown main item tag 0xd [ 234.037029][ T7130] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 234.040023][ T5280] plantronics 0003:047F:FFFF.000A: No inputs registered, leaving [ 234.066988][ T29] audit: type=1326 audit(1724312235.425:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9199 comm="syz.1.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06a779e79 code=0x7ffc0000 [ 234.100913][ T9203] netlink: 'syz.2.1126': attribute type 29 has an invalid length. [ 234.126541][ T5280] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 234.159072][ T29] audit: type=1326 audit(1724312235.425:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9199 comm="syz.1.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=119 compat=0 ip=0x7fd06a779e79 code=0x7ffc0000 [ 234.199855][ T9205] netlink: 'syz.2.1126': attribute type 29 has an invalid length. [ 234.225327][ T9203] netlink: 'syz.2.1126': attribute type 29 has an invalid length. [ 234.234793][ T29] audit: type=1326 audit(1724312235.425:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9199 comm="syz.1.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06a779e79 code=0x7ffc0000 [ 234.291626][ T9205] netlink: 'syz.2.1126': attribute type 29 has an invalid length. [ 234.314213][ T29] audit: type=1326 audit(1724312235.475:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9199 comm="syz.1.1124" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd06a779e79 code=0x7ffc0000 [ 234.488941][ T2638] usb 5-1: USB disconnect, device number 13 [ 234.613273][ T9214] vivid-007: disconnect [ 234.628926][ T9211] vivid-007: reconnect [ 234.794883][ T9213] loop2: detected capacity change from 0 to 4096 [ 234.898212][ T9223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1134'. [ 235.370466][ T9237] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1138'. [ 235.408673][ T9237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1138'. [ 235.423721][ T9239] loop4: detected capacity change from 0 to 128 [ 235.444274][ T9239] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 235.452821][ T9237] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1138'. [ 235.482286][ T9239] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 235.554309][ T7821] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 235.696381][ T9247] loop0: detected capacity change from 0 to 256 [ 236.225947][ T9260] netlink: 'syz.0.1148': attribute type 10 has an invalid length. [ 236.273155][ T9260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.660435][ T9264] loop0: detected capacity change from 0 to 2048 [ 236.712961][ T9254] loop3: detected capacity change from 0 to 32768 [ 236.739205][ T9231] loop1: detected capacity change from 0 to 40427 [ 236.756145][ T9264] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.782630][ T9231] F2FS-fs (loop1): Found nat_bits in checkpoint [ 236.874735][ T9254] ialloc: diAlloc returned -28! [ 236.983185][ T5227] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.016021][ T9231] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 237.142715][ T29] audit: type=1800 audit(1724312238.505:79): pid=9231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1136" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 237.206853][ T9267] f2fs_ckpt-7:1: attempt to access beyond end of device [ 237.206853][ T9267] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 237.207036][ T29] audit: type=1800 audit(1724312238.555:80): pid=9231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1136" name="file2" dev="loop1" ino=14 res=0 errno=0 [ 237.254280][ T9267] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 237.373681][ T9281] bridge1: entered promiscuous mode [ 237.379073][ T9281] bridge1: entered allmulticast mode [ 237.698973][ T5281] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 237.913845][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.926416][ T5281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.937073][ T5281] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 237.974960][ T5281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.029660][ T5281] usb 5-1: config 0 descriptor?? [ 238.244754][ T2638] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 238.479185][ T2638] usb 2-1: Using ep0 maxpacket: 8 [ 238.512575][ T5281] hid-led 0003:1D34:000A.000B: unknown main item tag 0x0 [ 238.553570][ T2638] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 238.566309][ T5281] hid-led 0003:1D34:000A.000B: unknown main item tag 0x0 [ 238.618145][ T2638] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 238.649134][ T5281] hid-led 0003:1D34:000A.000B: unknown main item tag 0x0 [ 238.674919][ T5281] hid-led 0003:1D34:000A.000B: unknown main item tag 0x0 [ 238.686462][ T2638] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 238.741351][ T5281] hid-led 0003:1D34:000A.000B: unknown main item tag 0x0 [ 238.766024][ T2638] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 238.801474][ T5281] hid-led 0003:1D34:000A.000B: probe with driver hid-led failed with error -71 [ 238.814665][ T2638] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 238.868379][ T5281] usb 5-1: USB disconnect, device number 14 [ 238.874719][ T2638] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 238.915088][ T2638] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 238.925939][ T2638] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.946264][ T2638] usb 2-1: Product: syz [ 238.956429][ T2638] usb 2-1: Manufacturer: syz [ 238.973461][ T2638] usb 2-1: SerialNumber: syz [ 239.202820][ T2638] cdc_ncm 2-1:1.0: bind() failure [ 239.213028][ T2638] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 239.226553][ T9304] loop3: detected capacity change from 0 to 2048 [ 239.248817][ T2638] cdc_ncm 2-1:1.1: bind() failure [ 239.264442][ T2638] usb 2-1: USB disconnect, device number 8 [ 239.274265][ T9304] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 239.527592][ T9299] loop0: detected capacity change from 0 to 32768 [ 239.544454][ T9299] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1162 (9299) [ 239.562305][ T9313] loop3: detected capacity change from 0 to 256 [ 239.600236][ T9299] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 239.621084][ T9313] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d) [ 239.641066][ T9299] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 239.647276][ T9315] loop4: detected capacity change from 0 to 16 [ 239.677647][ T9315] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 239.682426][ T9299] BTRFS info (device loop0): using free-space-tree [ 240.201209][ T5227] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 240.958478][ T9364] loop3: detected capacity change from 0 to 128 [ 240.997586][ T9361] loop2: detected capacity change from 0 to 4096 [ 241.004711][ T9364] EXT4-fs: Ignoring removed nobh option [ 241.031307][ T9364] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 241.062389][ T9364] ext4 filesystem being mounted at /121/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 241.172611][ T9373] loop1: detected capacity change from 0 to 64 [ 241.279199][ T2638] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 241.412699][ T9378] loop1: detected capacity change from 0 to 128 [ 241.423546][ T9376] pim6reg: entered allmulticast mode [ 241.451122][ T9376] pim6reg: left allmulticast mode [ 241.463202][ T7130] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 241.463428][ T9378] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 241.477768][ T2638] usb 5-1: Using ep0 maxpacket: 16 [ 241.486416][ T9378] ext4 filesystem being mounted at /143/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 241.497542][ T5282] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 241.579628][ T2638] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 241.582718][ T6944] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 241.590777][ T2638] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 241.610102][ T2638] usb 5-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 241.619434][ T2638] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.635382][ T2638] usb 5-1: config 0 descriptor?? [ 241.753105][ T5282] usb 1-1: Using ep0 maxpacket: 32 [ 241.766814][ T5282] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 241.781430][ T5282] usb 1-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 241.793946][ T5282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.824334][ T5282] usb 1-1: Product: syz [ 241.835413][ T5282] usb 1-1: Manufacturer: syz [ 241.861583][ T5282] usb 1-1: SerialNumber: syz [ 241.889954][ T5282] usb 1-1: config 0 descriptor?? [ 241.903767][ T5282] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 242.051200][ T2638] hid-led 0003:1294:1320.000C: unknown main item tag 0x2 [ 242.058331][ T2638] hid-led 0003:1294:1320.000C: unbalanced collection at end of report description [ 242.073634][ T2638] hid-led 0003:1294:1320.000C: probe with driver hid-led failed with error -22 [ 242.173368][ T1171] usb 1-1: USB disconnect, device number 10 [ 242.225659][ T9398] loop1: detected capacity change from 0 to 256 [ 242.246687][ T9398] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x17691978, utbl_chksum : 0xe619d30d) [ 242.297216][ T9] usb 5-1: USB disconnect, device number 15 [ 242.405833][ T9402] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1198'. [ 242.539405][ T9408] loop3: detected capacity change from 0 to 1024 [ 242.556503][ T9408] EXT4-fs: Ignoring removed nomblk_io_submit option [ 242.575857][ T9408] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 242.615782][ T9408] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 242.626711][ T9408] System zones: 0-1, 3-36 [ 242.645738][ T9408] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.992285][ T7130] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 243.110353][ T7130] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz-executor: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 243.645636][ T9420] loop0: detected capacity change from 0 to 32768 [ 243.666896][ T1068] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.720468][ T9420] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1206 (9420) [ 243.789799][ T9414] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 243.864048][ T1068] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.901722][ T9420] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 243.934295][ T9420] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 243.943193][ T9420] BTRFS info (device loop0): using free-space-tree [ 244.035089][ T9424] loop2: detected capacity change from 0 to 32768 [ 244.070588][ T9420] BTRFS info (device loop0): rebuilding free space tree [ 244.098393][ T9424] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1209 (9424) [ 244.171914][ T1068] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.307190][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 244.320232][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 244.331281][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 244.340719][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 244.350805][ T5236] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 244.358424][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 244.367875][ T9424] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 244.437186][ T5227] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 244.438839][ T9424] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 244.508727][ T9424] BTRFS info (device loop2): using free-space-tree [ 244.592570][ T1068] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.049555][ T7620] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 245.224076][ T5243] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 245.236779][ T5243] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 245.255220][ T5243] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 245.277044][ T5243] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 245.296977][ T5243] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 245.326678][ T5243] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 245.406344][ T9445] chnl_net:caif_netlink_parms(): no params data found [ 245.678842][ T9482] loop0: detected capacity change from 0 to 4096 [ 245.696044][ T1068] bridge_slave_1: left allmulticast mode [ 245.714444][ T9482] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 245.717261][ T1068] bridge_slave_1: left promiscuous mode [ 245.732799][ T1068] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.742253][ T1068] bridge_slave_0: left allmulticast mode [ 245.748107][ T1068] bridge_slave_0: left promiscuous mode [ 245.754977][ T1068] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.848419][ T9482] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 245.949613][ T9489] loop2: detected capacity change from 0 to 2048 [ 245.964957][ T9491] loop4: detected capacity change from 0 to 164 [ 246.026222][ T9489] Alternate GPT is invalid, using primary GPT. [ 246.042337][ T9489] loop2: p1 p2 p3 [ 246.569894][ T5236] Bluetooth: hci1: command tx timeout [ 246.705596][ T1068] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.719702][ T1068] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.760002][ T1068] bond0 (unregistering): Released all slaves [ 246.845231][ T9496] netlink: 'syz.4.1227': attribute type 64 has an invalid length. [ 247.062841][ T9445] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.086810][ T9445] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.097551][ T9445] bridge_slave_0: entered allmulticast mode [ 247.105553][ T9445] bridge_slave_0: entered promiscuous mode [ 247.239913][ T1171] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 247.328802][ T9445] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.346381][ T9445] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.358446][ T9445] bridge_slave_1: entered allmulticast mode [ 247.388312][ T9445] bridge_slave_1: entered promiscuous mode [ 247.459623][ T5236] Bluetooth: hci2: command tx timeout [ 247.498976][ T1171] usb 1-1: Using ep0 maxpacket: 16 [ 247.548066][ T1171] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.578096][ T1171] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.594053][ T9445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.615265][ T1171] usb 1-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 247.666809][ T1171] usb 1-1: config 0 interface 0 has no altsetting 0 [ 247.698068][ T1171] usb 1-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 247.711257][ T1171] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.748058][ T1171] usb 1-1: config 0 descriptor?? [ 247.785462][ T9445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.984878][ T1068] hsr_slave_0: left promiscuous mode [ 248.015451][ T1068] hsr_slave_1: left promiscuous mode [ 248.039089][ T1068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.046636][ T1068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.065055][ T9513] loop2: detected capacity change from 0 to 40427 [ 248.084450][ T1068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.093176][ T9513] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504) [ 248.101472][ T1068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.111245][ T9513] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 248.129043][ T9513] F2FS-fs (loop2): build fault injection attr: rate: 17008, type: 0x1fffff [ 248.147999][ T9513] F2FS-fs (loop2): invalid crc value [ 248.185603][ T9513] F2FS-fs (loop2): Found nat_bits in checkpoint [ 248.217055][ T1171] hid (null): no more usage index available [ 248.226713][ T1068] veth1_macvtap: left promiscuous mode [ 248.232431][ T1068] veth0_macvtap: left promiscuous mode [ 248.238076][ T1068] veth1_vlan: left promiscuous mode [ 248.250485][ T1171] hid-generic 0003:045E:05DA.000D: ignoring exceeding usage max [ 248.273509][ T1068] veth0_vlan: left promiscuous mode [ 248.283552][ T1171] hid-generic 0003:045E:05DA.000D: ignoring exceeding usage max [ 248.309138][ T1171] hid-generic 0003:045E:05DA.000D: no more usage index available [ 248.317017][ T1171] hid-generic 0003:045E:05DA.000D: item 0 4 2 2 parsing failed [ 248.330173][ T9513] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 248.345264][ T9513] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 248.349270][ T1171] hid-generic 0003:045E:05DA.000D: probe with driver hid-generic failed with error -22 [ 248.416157][ T9513] syz.2.1232: attempt to access beyond end of device [ 248.416157][ T9513] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 248.453241][ T1171] usb 1-1: USB disconnect, device number 11 [ 248.462735][ T9513] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 248.479599][ T9513] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 248.575173][ T9538] loop4: detected capacity change from 0 to 256 [ 248.651893][ T5236] Bluetooth: hci1: command tx timeout [ 248.784279][ T9538] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xac5c0b1f, utbl_chksum : 0xe619d30d) [ 249.418021][ T1068] team0 (unregistering): Port device team_slave_1 removed [ 249.530330][ T5236] Bluetooth: hci2: command tx timeout [ 249.537960][ T1068] team0 (unregistering): Port device team_slave_0 removed [ 250.017778][ T9550] loop0: detected capacity change from 0 to 128 [ 250.090431][ T9552] loop2: detected capacity change from 0 to 2048 [ 250.128475][ T9550] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 250.179638][ T9552] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.212733][ T5227] sysv_free_block: trying to free block not in datazone [ 250.227981][ T5227] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 250.408496][ T7620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.730370][ T5243] Bluetooth: hci1: command tx timeout [ 250.796768][ T9445] team0: Port device team_slave_0 added [ 250.806261][ T9445] team0: Port device team_slave_1 added [ 250.897185][ T9540] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1238'. [ 250.940290][ T9445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.968272][ T9445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.058645][ T9445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.115917][ T9445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.140418][ T9445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.210513][ T9445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.396084][ T9557] loop0: detected capacity change from 0 to 40427 [ 251.447062][ T9557] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 251.479673][ T9557] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 251.508145][ T9557] F2FS-fs (loop0): invalid crc value [ 251.573152][ T9557] F2FS-fs (loop0): Found nat_bits in checkpoint [ 251.609469][ T5236] Bluetooth: hci2: command tx timeout [ 251.699577][ T9590] ================================================================== [ 251.707703][ T9590] BUG: KASAN: slab-use-after-free in uprobe_mmap+0xb9a/0x11a0 [ 251.710796][ T9445] hsr_slave_0: entered promiscuous mode [ 251.715402][ T9590] Read of size 8 at addr ffff88802c672638 by task syz.4.1250/9590 [ 251.728792][ T9590] [ 251.731151][ T9590] CPU: 0 UID: 0 PID: 9590 Comm: syz.4.1250 Not tainted 6.11.0-rc4-next-20240822-syzkaller #0 [ 251.741342][ T9590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 251.751443][ T9590] Call Trace: [ 251.754774][ T9590] [ 251.757724][ T9590] dump_stack_lvl+0x241/0x360 [ 251.762464][ T9590] ? __pfx_dump_stack_lvl+0x10/0x10 [ 251.767691][ T9590] ? __pfx__printk+0x10/0x10 [ 251.772307][ T9590] ? _printk+0xd5/0x120 [ 251.776485][ T9590] ? __virt_addr_valid+0x183/0x530 [ 251.781607][ T9590] ? __virt_addr_valid+0x183/0x530 [ 251.786731][ T9590] print_report+0x169/0x550 [ 251.791255][ T9590] ? __virt_addr_valid+0x183/0x530 [ 251.796373][ T9590] ? __virt_addr_valid+0x183/0x530 [ 251.801496][ T9590] ? __virt_addr_valid+0x45f/0x530 [ 251.806809][ T9590] ? __phys_addr+0xba/0x170 [ 251.811335][ T9590] ? uprobe_mmap+0xb9a/0x11a0 [ 251.816123][ T9590] kasan_report+0x143/0x180 [ 251.820645][ T9590] ? uprobe_mmap+0xb9a/0x11a0 [ 251.825338][ T9590] uprobe_mmap+0xb9a/0x11a0 [ 251.829888][ T9590] ? __pfx_uprobe_mmap+0x10/0x10 [ 251.834871][ T9590] mmap_region+0x16ec/0x20a0 [ 251.839484][ T9590] ? mark_lock+0x9a/0x360 [ 251.843950][ T9590] ? __pfx_lock_acquire+0x10/0x10 [ 251.849001][ T9590] ? __pfx_mmap_region+0x10/0x10 [ 251.853979][ T9590] ? shmem_get_unmapped_area+0x2a7/0x8f0 [ 251.859649][ T9590] ? apparmor_capable+0x13b/0x1b0 [ 251.864696][ T9590] ? bpf_lsm_capable+0x9/0x10 [ 251.869425][ T9590] do_mmap+0x8f9/0x1010 [ 251.873615][ T9590] ? __pfx_do_mmap+0x10/0x10 [ 251.878324][ T9590] ? __pfx_down_write_killable+0x10/0x10 [ 251.883991][ T9590] ? common_file_perm+0x1a6/0x210 [ 251.889048][ T9590] vm_mmap_pgoff+0x1dd/0x3d0 [ 251.893661][ T9590] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 251.898814][ T9590] ? __fget_files+0x29/0x470 [ 251.903440][ T9590] ? __fget_files+0x3f6/0x470 [ 251.908151][ T9590] ksys_mmap_pgoff+0x4f1/0x720 [ 251.912940][ T9590] ? __x64_sys_mmap+0x7f/0x140 [ 251.917715][ T9590] do_syscall_64+0xf3/0x230 [ 251.922238][ T9590] ? clear_bhb_loop+0x35/0x90 [ 251.926937][ T9590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.932842][ T9590] RIP: 0033:0x7f1802d79e79 [ 251.937267][ T9590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.956882][ T9590] RSP: 002b:00007f1803b75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 251.965409][ T9590] RAX: ffffffffffffffda RBX: 00007f1802f15f80 RCX: 00007f1802d79e79 [ 251.973917][ T9590] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020002000 [ 251.981897][ T9590] RBP: 00007f1802de7916 R08: 0000000000000003 R09: 0000000000000000 [ 251.989881][ T9590] R10: 0000000000002012 R11: 0000000000000246 R12: 0000000000000000 [ 251.997861][ T9590] R13: 0000000000000000 R14: 00007f1802f15f80 R15: 00007ffcb299ba18 [ 252.005852][ T9590] [ 252.008911][ T9590] [ 252.011252][ T9590] Allocated by task 9352: [ 252.015583][ T9590] kasan_save_track+0x3f/0x80 [ 252.020369][ T9590] __kasan_kmalloc+0x98/0xb0 [ 252.025057][ T9590] __kmalloc_node_noprof+0x22a/0x440 [ 252.030627][ T9590] __kvmalloc_node_noprof+0x72/0x1b0 [ 252.035927][ T9590] bpf_uprobe_multi_link_attach+0x43e/0xb90 [ 252.041844][ T9590] link_create+0x6e9/0x870 [ 252.046265][ T9590] __sys_bpf+0x4bc/0x810 [ 252.050522][ T9590] __x64_sys_bpf+0x7c/0x90 [ 252.054966][ T9590] do_syscall_64+0xf3/0x230 [ 252.059480][ T9590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.065384][ T9590] [ 252.067716][ T9590] Freed by task 9352: [ 252.071698][ T9590] kasan_save_track+0x3f/0x80 [ 252.076395][ T9590] kasan_save_free_info+0x40/0x50 [ 252.081434][ T9590] __kasan_slab_free+0x59/0x70 [ 252.086204][ T9590] kfree+0x196/0x3e0 [ 252.090112][ T9590] bpf_uprobe_multi_link_attach+0xa7d/0xb90 [ 252.096020][ T9590] link_create+0x6e9/0x870 [ 252.100438][ T9590] __sys_bpf+0x4bc/0x810 [ 252.104692][ T9590] __x64_sys_bpf+0x7c/0x90 [ 252.109121][ T9590] do_syscall_64+0xf3/0x230 [ 252.113641][ T9590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.119800][ T9590] [ 252.122125][ T9590] The buggy address belongs to the object at ffff88802c672600 [ 252.122125][ T9590] which belongs to the cache kmalloc-96 of size 96 [ 252.136006][ T9590] The buggy address is located 56 bytes inside of [ 252.136006][ T9590] freed 96-byte region [ffff88802c672600, ffff88802c672660) [ 252.149632][ T9590] [ 252.151957][ T9590] The buggy address belongs to the physical page: [ 252.158371][ T9590] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88802c672680 pfn:0x2c672 [ 252.168445][ T9590] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 252.176533][ T9590] page_type: 0xfdffffff(slab) [ 252.181262][ T9590] raw: 00fff00000000200 ffff888015841280 ffffea00008af690 ffffea00006db390 [ 252.189952][ T9590] raw: ffff88802c672680 0000000000200003 00000001fdffffff 0000000000000000 [ 252.198561][ T9590] page dumped because: kasan: bad access detected [ 252.204996][ T9590] page_owner tracks the page as allocated [ 252.210718][ T9590] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 963, tgid 963 (kworker/u8:5), ts 72104904614, free_ts 72080148836 [ 252.231417][ T9590] post_alloc_hook+0x1f3/0x230 [ 252.236215][ T9590] get_page_from_freelist+0x3131/0x3280 [ 252.241792][ T9590] __alloc_pages_noprof+0x29e/0x780 [ 252.247012][ T9590] alloc_slab_page+0x5f/0x120 [ 252.251721][ T9590] allocate_slab+0x5a/0x2f0 [ 252.256243][ T9590] ___slab_alloc+0xcd1/0x14b0 [ 252.260940][ T9590] __slab_alloc+0x58/0xa0 [ 252.265631][ T9590] __kmalloc_cache_noprof+0x1d5/0x2c0 [ 252.271038][ T9590] nsim_fib_event_nb+0x17c/0x10b0 [ 252.276090][ T9590] notifier_call_chain+0x19f/0x3e0 [ 252.281241][ T9590] atomic_notifier_call_chain+0xdb/0x180 [ 252.286910][ T9590] call_fib_notifiers+0x31/0x60 [ 252.291790][ T9590] fib6_add+0x1bd5/0x4430 [ 252.296137][ T9590] ip6_ins_rt+0x106/0x170 [ 252.300527][ T9590] __ipv6_ifa_notify+0x5d2/0x1230 [ 252.305577][ T9590] addrconf_dad_completed+0x181/0xcd0 [ 252.310958][ T9590] page last free pid 5230 tgid 5230 stack trace: [ 252.317287][ T9590] free_unref_page+0xc07/0xd90 [ 252.322144][ T9590] __slab_free+0x31b/0x3d0 [ 252.326576][ T9590] qlist_free_all+0x9e/0x140 [ 252.331179][ T9590] kasan_quarantine_reduce+0x14f/0x170 [ 252.336644][ T9590] __kasan_slab_alloc+0x23/0x80 [ 252.341503][ T9590] kmem_cache_alloc_noprof+0x135/0x2a0 [ 252.347063][ T9590] fib_table_insert+0x604/0x1f30 [ 252.352100][ T9590] fib_magic+0x3d8/0x620 [ 252.356346][ T9590] fib_add_ifaddr+0x40c/0x5e0 [ 252.361036][ T9590] fib_netdev_event+0x375/0x490 [ 252.365890][ T9590] notifier_call_chain+0x19f/0x3e0 [ 252.371012][ T9590] __dev_notify_flags+0x207/0x400 [ 252.376047][ T9590] dev_change_flags+0xf0/0x1a0 [ 252.380825][ T9590] do_setlink+0xcd0/0x41f0 [ 252.385252][ T9590] rtnl_newlink+0x180d/0x20a0 [ 252.389949][ T9590] rtnetlink_rcv_msg+0x73f/0xcf0 [ 252.394892][ T9590] [ 252.397213][ T9590] Memory state around the buggy address: [ 252.402841][ T9590] ffff88802c672500: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 252.410993][ T9590] ffff88802c672580: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 252.419057][ T9590] >ffff88802c672600: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 252.427115][ T9590] ^ [ 252.433006][ T9590] ffff88802c672680: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 252.441070][ T9590] ffff88802c672700: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 252.449134][ T9590] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 252.588115][ T9590] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 252.595369][ T9590] CPU: 1 UID: 0 PID: 9590 Comm: syz.4.1250 Not tainted 6.11.0-rc4-next-20240822-syzkaller #0 [ 252.605568][ T9590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 252.615663][ T9590] Call Trace: [ 252.618967][ T9590] [ 252.621919][ T9590] dump_stack_lvl+0x241/0x360 [ 252.626637][ T9590] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.631876][ T9590] ? __pfx__printk+0x10/0x10 [ 252.636586][ T9590] ? preempt_schedule+0xe1/0xf0 [ 252.641484][ T9590] ? vscnprintf+0x5d/0x90 [ 252.645853][ T9590] panic+0x349/0x880 [ 252.649756][ T9590] ? check_panic_on_warn+0x21/0xb0 [ 252.654880][ T9590] ? __pfx_panic+0x10/0x10 [ 252.659300][ T9590] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 252.665280][ T9590] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 252.671608][ T9590] ? print_report+0x502/0x550 [ 252.676301][ T9590] check_panic_on_warn+0x86/0xb0 [ 252.681263][ T9590] ? uprobe_mmap+0xb9a/0x11a0 [ 252.685948][ T9590] end_report+0x77/0x160 [ 252.690213][ T9590] kasan_report+0x154/0x180 [ 252.694855][ T9590] ? uprobe_mmap+0xb9a/0x11a0 [ 252.699573][ T9590] uprobe_mmap+0xb9a/0x11a0 [ 252.704116][ T9590] ? __pfx_uprobe_mmap+0x10/0x10 [ 252.709084][ T9590] mmap_region+0x16ec/0x20a0 [ 252.713782][ T9590] ? mark_lock+0x9a/0x360 [ 252.718121][ T9590] ? __pfx_lock_acquire+0x10/0x10 [ 252.723259][ T9590] ? __pfx_mmap_region+0x10/0x10 [ 252.728205][ T9590] ? shmem_get_unmapped_area+0x2a7/0x8f0 [ 252.733861][ T9590] ? apparmor_capable+0x13b/0x1b0 [ 252.738907][ T9590] ? bpf_lsm_capable+0x9/0x10 [ 252.743601][ T9590] do_mmap+0x8f9/0x1010 [ 252.747773][ T9590] ? __pfx_do_mmap+0x10/0x10 [ 252.752380][ T9590] ? __pfx_down_write_killable+0x10/0x10 [ 252.758465][ T9590] ? common_file_perm+0x1a6/0x210 [ 252.763540][ T9590] vm_mmap_pgoff+0x1dd/0x3d0 [ 252.768157][ T9590] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 252.773289][ T9590] ? __fget_files+0x29/0x470 [ 252.777909][ T9590] ? __fget_files+0x3f6/0x470 [ 252.782632][ T9590] ksys_mmap_pgoff+0x4f1/0x720 [ 252.787410][ T9590] ? __x64_sys_mmap+0x7f/0x140 [ 252.792196][ T9590] do_syscall_64+0xf3/0x230 [ 252.796808][ T9590] ? clear_bhb_loop+0x35/0x90 [ 252.801495][ T9590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.807401][ T9590] RIP: 0033:0x7f1802d79e79 [ 252.811831][ T9590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.831459][ T9590] RSP: 002b:00007f1803b75038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 252.840091][ T9590] RAX: ffffffffffffffda RBX: 00007f1802f15f80 RCX: 00007f1802d79e79 [ 252.848089][ T9590] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020002000 [ 252.856107][ T9590] RBP: 00007f1802de7916 R08: 0000000000000003 R09: 0000000000000000 [ 252.864290][ T9590] R10: 0000000000002012 R11: 0000000000000246 R12: 0000000000000000 [ 252.872276][ T9590] R13: 0000000000000000 R14: 00007f1802f15f80 R15: 00007ffcb299ba18 [ 252.880438][ T9590] [ 252.883668][ T9590] Kernel Offset: disabled [ 252.888472][ T9590] Rebooting in 86400 seconds..