last executing test programs: 37.156107617s ago: executing program 4: unshare(0x8000400) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0x40049409, &(0x7f0000000000)) 37.066702881s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffe}], {0x95, 0x0, 0x0, 0x1a03d3}}, &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000140)=""/250}, 0x80) 36.962764286s ago: executing program 4: syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000ac0)='./bus\x00', 0x200801, &(0x7f0000000080)=ANY=[@ANYBLOB="003bfa19521420d9a7ab9b5c58b9ed030962f330bd5745f618be44a73c5c1c7e57784b88", @ANYRES64], 0x1, 0x19a, &(0x7f0000000b00)="$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") r0 = fsmount(0xffffffffffffffff, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x40, &(0x7f00000000c0)={[{@noacl}, {@skip_balance}, {@compress}, {@compress_algo={'compress', 0x3d, 'zlib'}}, {@discard}, {@enospc_debug}, {@max_inline={'max_inline', 0x3d, [0x74, 0x39]}}, {@noflushoncommit}, {@ssd_spread}, {@compress}]}, 0x1, 0x55a8, &(0x7f0000005680)="$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") r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x24142, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(r2, 0xc0109428, &(0x7f0000000140)={0x1, 0x1}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendfile(r2, r3, 0x0, 0x1000000201002) 36.387342885s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000a50000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 35.864042227s ago: executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000280)={0x1d, r1}, 0x10, &(0x7f0000000300)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "000066a100"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f00000002c0)={&(0x7f0000000100)={0x1, 0x0, 0x0, {0x0, 0x2710}, {}, {0x0, 0x1}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "4907c45e8e4ad2fd"}}, 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x1d, r1}, 0x10, &(0x7f00000001c0)={&(0x7f00000004c0)={0x2, 0xf41, 0x0, {}, {}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "9dc35700d5295ebc07a620284b8ddfcc446b57e6bbd78d75343f4a7df070cbf6f45507eef0471e0e2fe76973295f8e816e18a99c908adaf90e99efb07f0bedce"}}, 0x80}}, 0x0) 35.20066616s ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000440)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000cc0)={[{@nomblk_io_submit}, {@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@test_dummy_encryption}, {@test_dummy_encryption}, {@journal_async_commit}, {@noinit_itable}, {@data_journal}, {@usrjquota}, {@nombcache}, {@prjquota}, {@grpquota}, {@nobh}]}, 0x4, 0x420, &(0x7f0000000000)="$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") lstat(&(0x7f0000000240)='./file0\x00', 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000e80)={[{@barrier}, {@part={'part', 0x3d, 0x40}}, {@nobarrier}, {@nls={'nls', 0x3d, 'maccroatian'}}, {@uid}, {@gid}, {@nobarrier}, {@nodecompose}]}, 0x1, 0x5e7, &(0x7f0000000680)="$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") lgetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=ANY=[@ANYBLOB='user.'], 0x0, 0x0) 35.048167483s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x4, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffffe}], {0x95, 0x0, 0x0, 0x1a03d3}}, &(0x7f0000000100)='GPL\x00', 0x3, 0xfa, &(0x7f0000000140)=""/250}, 0x80) 34.972198985s ago: executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{r1}, &(0x7f00000009c0), &(0x7f0000000a00)='%pi6 \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r2}, 0x10) write$cgroup_type(r0, &(0x7f0000000140), 0x9) 34.895619117s ago: executing program 1: open(&(0x7f0000000100)='./file0\x00', 0x101bff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902"], 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2218050, &(0x7f0000000140)=ANY=[], 0x1, 0x1522, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="020309fcec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 34.699463057s ago: executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="b9ff0b078059268cb89e14f088a82de0ffff200000000002000aac14140ce000000d49e832f0", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1b010000000000406c256d0000000800000109022400010000000009040000010300000009210000000122050009058103"], 0x0) mkdirat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x2) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0022050000f50abba214fd7da4c9f61e2db0f6069554dc59f0de2a5ed2c6234847b0577c30376cd85dba1f4060b683ee605c4f1d8a4ab72f5c63e05195aa62da1deb28388147c37cd414c8b8c286d05426019391a2199e55e58d070a68e06010b11f17a5011cac3cda1958f4213de7d1195852"], 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='ext4_sync_file_exit\x00'}, 0x10) write$cgroup_int(r3, &(0x7f0000000200), 0x43400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00', 0x4, 0xad, &(0x7f00000003c0)=""/173}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='jbd2_handle_stats\x00'}, 0x10) 34.512601236s ago: executing program 3: syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000005d40)='./file0\x00', 0x200000, &(0x7f0000000140)=ANY=[@ANYBLOB="75737271756f74612c00e513aa5cfaa2f4340700000053855e39265e3354af0024b01cef6de26ae56cf210f8b286ad24af500cee604dd143ef63fe0a1353763fe64d8fe49c91620807e2b84a30ef37a6b09d6c36a66fcbf632f343d8c351992181a7f9845e6498b53491d711caa0e952c88a77d46d73bb3af5422ef14af9be974a142d2d3a3e33b0cfed2f6edbf1d5ead796def6a1f32298b619"], 0x1, 0x5d93, &(0x7f0000011840)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='./file1/file3\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) 34.48771706s ago: executing program 4: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/class/power_supply', 0x0, 0x0) ioctl$VT_SETMODE(r0, 0x5450, 0x0) mq_open(&(0x7f0000000000)=']-\x00', 0x40, 0x0, 0x0) mq_open(0x0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000100)={0x0, 0x40, 0x70000}) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x111040, 0x0) write$P9_RSTAT(0xffffffffffffffff, 0x0, 0x0) r1 = mq_open(&(0x7f00000005c0)='&\x00', 0x40, 0xaa, &(0x7f00000000c0)={0x3f, 0xffff, 0xcb, 0x8}) ioctl$BTRFS_IOC_FS_INFO(r1, 0x5450, 0x0) shutdown(0xffffffffffffffff, 0x1) r2 = open(&(0x7f0000000000)='./file0\x00', 0x840, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x802088, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x81081, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x83bcc4ea27907bf, 0x0) r3 = inotify_init1(0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x5452, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/dmi', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r4, 0x5450, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f00000004c0)={&(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, 0x0}, 0x0) dup2(r7, r8) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0x7, 0x0, 0x0) setresuid(0x0, r5, 0x0) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x2200, 0x21) setxattr$security_evm(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 33.846357869s ago: executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000800)={'batadv_slave_0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000300)=0x1000, 0x4) socket$packet(0x11, 0x0, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x10) close(r0) 33.660776198s ago: executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 33.609951666s ago: executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@local, 0x0, 0x33}, 0x2, @in6=@dev, 0x0, 0x4, 0x0, 0x1}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 33.464642158s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000e3d66461d0a2f0f7f3ec98a1cdb80d794f2d38d2173c0769c057e25953a859fe097247", @ANYRES16=r2, @ANYBLOB="010000000000000000001b0000000400cc0008009a0002000000"], 0x20}}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESOCT=r4, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280)={0x7}, 0x20) syz_usb_control_io$hid(r3, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220f00000003a8407a730b93bff1d4b37488dffc"], 0x0}, 0x0) r6 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = userfaultfd(0x1) readv(r8, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0xc9}], 0x1) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x4000, 0x0, &(0x7f0000ffb000/0x4000)=nil) ioctl$HIDIOCGUSAGE(r6, 0xc018480b, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)={0x80, 0x8, 0x2}, 0x18) close(r0) ioctl$HIDIOCGREPORT(r6, 0x501c4814, 0x0) 33.266201249s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000000) 32.60976347s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000a50000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 32.469298103s ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000100000000000000000007008209", @ANYRES32=r3, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="04000000e0000300000000000000000000010b0008"], 0x38}}, 0x0) r4 = inotify_init() inotify_add_watch(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001540)={&(0x7f0000001500)='kmem_cache_free\x00'}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058000000"], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) getxattr(0x0, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="180000005800010000000000000000000200000000000000bda459e42fb7cbe5734fbc86c70560df5d284d137a13ed4ff4876990eb525f9d490b5fca8a883eac585cf534c69d443e820751edad06b11c841cbbef5f876af0711bdc8b459c42a7d5c103a68978d0d608ba7651f3086201"], 0x18}}, 0x0) 32.431293668s ago: executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000000c0)=0x20, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bind$xdp(r0, &(0x7f00000001c0)={0x2c, 0x6, r2}, 0x10) 31.750043484s ago: executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in, 0x2, 0x401, 0x0, 0x1, 0x21}, 0x9c) 31.671969316s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept$alg(r1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0xc74, 0x2) ioctl$vim2m_VIDIOC_TRY_FMT(r2, 0xc0205647, &(0x7f0000000940)={0xf010000}) 31.617703504s ago: executing program 0: syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000005d40)='./file0\x00', 0x200000, &(0x7f0000000140)=ANY=[@ANYBLOB="75737271756f74612c00e513aa5cfaa2f4340700000053855e39265e3354af0024b01cef6de26ae56cf210f8b286ad24af500cee604dd143ef63fe0a1353763fe64d8fe49c91620807e2b84a30ef37a6b09d6c36a66fcbf632f343d8c351992181a7f9845e6498b53491d711caa0e952c88a77d46d73bb3af5422ef14af9be974a142d2d3a3e33b0cfed2f6edbf1d5ead796def6a1f32298b619"], 0x1, 0x5d93, &(0x7f0000011840)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='./file1/file3\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0/file3\x00', 0x0) 31.25636418s ago: executing program 0: memfd_create(&(0x7f0000000340)='D\xa3\xd5Wj\x00\x00x0\xc1\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xc9\rDa\x16\xbd\x1a\xb2w\b', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) userfaultfd(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r6, r5, &(0x7f0000002080)=0x64, 0x23b) 30.011603583s ago: executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x840000000002, 0x3, 0xfa) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@delneigh={0x28, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x28}}, 0x0) 29.809360474s ago: executing program 3: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./bus\x00', 0x1200840, &(0x7f0000000640)={[{@fat=@debug}, {@fat=@errors_continue}, {@shortname_mixed}, {@numtail}, {@utf8no}, {@shortname_win95}, {@uni_xlateno}, {@fat=@dos1xfloppy}, {@utf8}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@utf8no}, {@uni_xlateno}]}, 0x3, 0x377, &(0x7f00000002c0)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x24, r1, 0xc4fc9e906872338b, 0x0, 0x0, {{0x15}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x117, 0x0, 0x1, [{0x4, 0x2}]}]}, 0x24}}, 0x0) 3.251161306s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xb}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 2.452834949s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000003c000100000000000000000d04"], 0x24}}, 0x0) 2.420627075s ago: executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000480)={0xa}) 0s ago: executing program 0: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x17, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b8000005000000a0", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) kernel console output (not intermixed with test programs): n turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 63.279178][ T3793] loop3: detected capacity change from 0 to 8 [ 63.531973][ T3812] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 63.569549][ T3812] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 63.579831][ T3804] loop2: detected capacity change from 0 to 512 [ 63.614556][ T3812] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 63.634611][ T3812] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 63.663616][ T3818] loop3: detected capacity change from 0 to 128 [ 63.807031][ T3804] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 63.824611][ T3804] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 63.871377][ T3804] EXT4-fs error (device loop2): __ext4_iget:4861: inode #11: block 1: comm syz-executor.2: invalid block [ 63.894400][ T3804] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz-executor.2: couldn't read orphan inode 11 (err -117) [ 63.931264][ T3834] loop1: detected capacity change from 0 to 8 [ 63.943579][ T3804] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,commit=0x0000000000000005,mblk_io_submit,stripe=0x0000000000000004,auto_da_alloc=0x0000000000000000,dioread_nolock,lazytime,max_batch_time=0x0000000000000009,,errors=continue. Quota mode: none. [ 64.212458][ T3851] EXT4-fs warning (device sda1): ext4_group_extend:1823: can't shrink FS - resize aborted [ 64.415643][ T3854] loop3: detected capacity change from 0 to 128 [ 64.706131][ T3868] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.943136][ T3884] loop0: detected capacity change from 0 to 8 [ 64.953788][ T3886] EXT4-fs warning (device sda1): ext4_group_extend:1823: can't shrink FS - resize aborted [ 65.004747][ T3571] Bluetooth: hci3: command 0x1407 tx timeout [ 65.014446][ T3888] loop3: detected capacity change from 0 to 128 [ 65.053868][ T3890] loop1: detected capacity change from 0 to 128 [ 65.109444][ T3888] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 65.128868][ T3888] ext4 filesystem being mounted at /root/syzkaller-testdir1905966445/syzkaller.ewtZba/20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 65.164600][ C1] vkms_vblank_simulate: vblank timer overrun [ 65.172643][ T21] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 65.483673][ T3911] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 65.483673][ T3911] The task syz-executor.0 (3911) triggered the difference, watch for misbehavior. [ 65.575087][ T21] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 65.601411][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.621104][ T21] usb 5-1: config 0 descriptor?? [ 65.847064][ T3923] loop0: detected capacity change from 0 to 4096 [ 65.856300][ T3927] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 65.954971][ T3923] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 65.997173][ T3923] ntfs3: loop0: Failed to load $LogFile. [ 66.278455][ T3922] loop2: detected capacity change from 0 to 40427 [ 66.376638][ T3922] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 66.389636][ T3922] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 66.407801][ T3922] F2FS-fs (loop2): Found nat_bits in checkpoint [ 66.439611][ T3922] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 66.446834][ T3922] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 66.507248][ T3922] attempt to access beyond end of device [ 66.507248][ T3922] loop2: rw=2049, want=45104, limit=40427 [ 66.524311][ T13] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 66.725093][ T3957] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.909599][ T3964] loop3: detected capacity change from 0 to 1024 [ 66.934310][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.945363][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.955159][ T13] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 66.964529][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.982523][ T3964] EXT4-fs (loop3): Test dummy encryption mode enabled [ 66.994181][ T13] usb 1-1: config 0 descriptor?? [ 66.998473][ T3964] EXT4-fs (loop3): Ignoring removed orlov option [ 67.080231][ T3970] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.1'. [ 67.081954][ T3964] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 67.212297][ T3972] kernel profiling enabled (shift: 63) [ 67.241197][ T3972] profiling shift: 63 too large [ 67.247489][ T3964] EXT4-fs (loop3): Cannot change quota options when quota turned on [ 67.395943][ T3987] loop3: detected capacity change from 0 to 128 [ 67.483180][ T3987] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 67.489393][ T13] hid-thrustmaster 0003:044F:B65D.0001: unbalanced collection at end of report description [ 67.513925][ T3987] ext4 filesystem being mounted at /root/syzkaller-testdir1905966445/syzkaller.ewtZba/26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 67.518272][ T13] hid-thrustmaster 0003:044F:B65D.0001: parse failed with error -22 [ 67.568961][ T13] hid-thrustmaster: probe of 0003:044F:B65D.0001 failed with error -22 [ 67.664231][ T21] usb 5-1: Cannot set autoneg [ 67.670062][ T21] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 67.684139][ T21] usb 5-1: USB disconnect, device number 2 [ 67.717514][ T3575] usb 1-1: USB disconnect, device number 2 [ 67.735171][ T3571] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 68.065093][ T3571] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 68.144773][ T3571] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.153819][ T3571] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.170643][ T3571] usb 3-1: config 0 interface 0 has no altsetting 0 [ 68.269489][ T3571] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.290270][ T3571] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.314340][ T4007] loop4: detected capacity change from 0 to 512 [ 68.320811][ T3571] usb 3-1: config 0 interface 0 has no altsetting 0 [ 68.374363][ T4007] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 68.387426][ T4007] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 68.421266][ T4007] EXT4-fs error (device loop4): __ext4_iget:4861: inode #11: block 1: comm syz-executor.4: invalid block [ 68.433416][ T4007] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz-executor.4: couldn't read orphan inode 11 (err -117) [ 68.446574][ T3571] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.456415][ T4007] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,user_xattr,commit=0x0000000000000005,mblk_io_submit,stripe=0x0000000000000004,auto_da_alloc=0x0000000000000000,dioread_nolock,lazytime,max_batch_time=0x0000000000000009,,errors=continue. Quota mode: none. [ 68.483554][ T3571] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.495338][ T3571] usb 3-1: config 0 interface 0 has no altsetting 0 [ 68.538950][ T4017] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 68.608616][ T3571] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.636259][ T3571] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.649467][ T3571] usb 3-1: config 0 interface 0 has no altsetting 0 [ 68.757227][ T3571] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.774909][ T3571] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.802022][ T4027] EXT4-fs warning (device sda1): ext4_group_extend:1823: can't shrink FS - resize aborted [ 68.812351][ T3571] usb 3-1: config 0 interface 0 has no altsetting 0 [ 68.890064][ T4026] Invalid ELF header magic: != ELF [ 68.904619][ T3571] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.917720][ T3571] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.941222][ T3571] usb 3-1: config 0 interface 0 has no altsetting 0 [ 69.060755][ T3571] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.076271][ T3571] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.098725][ T3571] usb 3-1: config 0 interface 0 has no altsetting 0 [ 69.224300][ T3571] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 69.233215][ T3571] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 69.260845][ T3571] usb 3-1: config 0 interface 0 has no altsetting 0 [ 69.328057][ T4032] loop4: detected capacity change from 0 to 32768 [ 69.402829][ T4032] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (4032) [ 69.480122][ T3571] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 69.501930][ T3571] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 69.524108][ T3571] usb 3-1: Product: syz [ 69.528307][ T3571] usb 3-1: Manufacturer: syz [ 69.532903][ T3571] usb 3-1: SerialNumber: syz [ 69.606621][ T3571] usb 3-1: config 0 descriptor?? [ 69.629127][ T4032] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 69.668285][ T3571] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 69.677155][ T4032] BTRFS info (device loop4): using free space tree [ 69.683964][ T4032] BTRFS info (device loop4): has skinny extents [ 69.973396][ T3575] usb 3-1: USB disconnect, device number 2 [ 69.994110][ C0] usb 3-1: yurex_control_callback - control failed: -71 [ 70.010860][ T3575] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 70.036170][ T4032] BTRFS info (device loop4): enabling ssd optimizations [ 70.092978][ T4096] loop1: detected capacity change from 0 to 1024 [ 70.133949][ T4100] loop0: detected capacity change from 0 to 512 [ 70.193516][ T4101] loop3: detected capacity change from 0 to 4096 [ 70.256345][ T4100] EXT4-fs (loop0): mounted filesystem without journal. Opts: resgid=0x0000000000000000,noload,noblock_validity,,errors=continue. Quota mode: none. [ 70.291348][ T3572] Bluetooth: hci3: command 0x1407 tx timeout [ 70.309657][ T4100] EXT4-fs warning (device loop0): dx_probe:868: inode #2: comm syz-executor.0: Unimplemented hash flags: 0x0001 [ 70.331602][ T4100] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz-executor.0: Corrupt directory, running e2fsck is recommended [ 70.363883][ T4100] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 3: comm syz-executor.0: path /root/syzkaller-testdir3226953516/syzkaller.d84P7N/38/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0 [ 70.418934][ T4101] NILFS (loop3): invalid segment: Checksum error in segment payload [ 70.480249][ T4101] NILFS (loop3): trying rollback from an earlier position [ 70.536247][ T154] hfsplus: b-tree write err: -5, ino 4 [ 70.551031][ T154] hfsplus: b-tree write err: -5, ino 8 [ 70.568353][ T4101] NILFS (loop3): recovery complete [ 70.601072][ T4105] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 70.958780][ T4117] loop1: detected capacity change from 0 to 2048 [ 71.061499][ T4117] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 71.145224][ T4117] attempt to access beyond end of device [ 71.145224][ T4117] loop1: rw=524288, want=33554432, limit=2048 [ 71.152637][ T4134] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.295353][ T4141] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 71.328323][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.335102][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.402404][ T4141] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 71.451625][ T4141] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 71.583175][ T4147] loop4: detected capacity change from 0 to 4096 [ 71.746504][ T4147] NILFS (loop4): invalid segment: Checksum error in segment payload [ 71.763243][ T4147] NILFS (loop4): trying rollback from an earlier position [ 71.845240][ T4147] NILFS (loop4): recovery complete [ 71.905610][ T4166] loop3: detected capacity change from 0 to 1024 [ 71.914339][ T4169] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 71.962601][ T4168] loop1: detected capacity change from 0 to 2048 [ 72.008652][ T4126] loop0: detected capacity change from 0 to 32768 [ 72.047386][ T4168] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024) [ 72.078140][ T4126] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (4126) [ 72.101793][ T4168] attempt to access beyond end of device [ 72.101793][ T4168] loop1: rw=524288, want=33554432, limit=2048 [ 72.117865][ T4171] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 72.132040][ T154] hfsplus: b-tree write err: -5, ino 4 [ 72.138902][ T154] hfsplus: b-tree write err: -5, ino 8 [ 72.205720][ T4126] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 72.226848][ T4126] BTRFS info (device loop0): using free space tree [ 72.278703][ T4175] loop4: detected capacity change from 0 to 128 [ 72.306056][ T4126] BTRFS info (device loop0): has skinny extents [ 72.556657][ T4189] FAT-fs (loop4): Directory bread(block 1837) failed [ 72.739516][ T4189] FAT-fs (loop4): Directory bread(block 1837) failed [ 72.747115][ T4189] FAT-fs (loop4): Directory bread(block 1837) failed [ 72.754132][ T4189] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000726) [ 72.762208][ T4189] FAT-fs (loop4): Filesystem has been set read-only [ 72.769212][ T4189] FAT-fs (loop4): Directory bread(block 1837) failed [ 72.778304][ T4194] FAT-fs (loop4): Directory bread(block 1837) failed [ 72.827917][ T4126] BTRFS info (device loop0): enabling ssd optimizations [ 73.212621][ T4214] loop3: detected capacity change from 0 to 4096 [ 73.361004][ T4214] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 73.399510][ T4228] loop0: detected capacity change from 0 to 512 [ 73.585287][ T4228] EXT4-fs (loop0): 1 truncate cleaned up [ 73.684136][ T4228] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 73.722611][ T3777] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.911017][ T4214] ntfs3: loop3: failed to convert "076c" to cp863 [ 74.008846][ T3777] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.159620][ T3777] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.173019][ T4247] loop0: detected capacity change from 0 to 2048 [ 74.254094][ T4247] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 74.370929][ T4251] loop3: detected capacity change from 0 to 4096 [ 74.401241][ T4247] attempt to access beyond end of device [ 74.401241][ T4247] loop0: rw=524288, want=33554432, limit=2048 [ 74.418414][ T3777] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.433257][ T4254] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.511189][ T4251] NILFS (loop3): invalid segment: Checksum error in segment payload [ 74.534182][ T4251] NILFS (loop3): trying rollback from an earlier position [ 74.643995][ T4251] NILFS (loop3): recovery complete [ 74.659646][ T4256] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 74.675315][ T4257] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 74.783372][ T4234] loop1: detected capacity change from 0 to 32768 [ 74.808384][ T4249] loop2: detected capacity change from 0 to 32768 [ 74.862620][ T4249] XFS: attr2 mount option is deprecated. [ 74.873185][ T4234] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (4234) [ 75.017938][ T4234] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 75.027774][ T4249] XFS (loop2): Mounting V5 Filesystem [ 75.032766][ T4234] BTRFS info (device loop1): using free space tree [ 75.044578][ T4234] BTRFS info (device loop1): has skinny extents [ 75.071344][ T4274] loop3: detected capacity change from 0 to 2048 [ 75.113833][ T4252] chnl_net:caif_netlink_parms(): no params data found [ 75.118965][ T4274] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 75.266380][ T4249] XFS (loop2): Ending clean mount [ 75.404237][ T4249] XFS (loop2): Quotacheck needed: Please wait. [ 76.229940][ T9] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 [ 76.260859][ T9] XFS (loop2): Unmount and run xfs_repair [ 76.263707][ T4307] loop0: detected capacity change from 0 to 512 [ 76.273355][ T9] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 76.306691][ T9] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff RMB3............ [ 76.319970][ T4234] BTRFS info (device loop1): enabling ssd optimizations [ 76.355963][ T4103] Bluetooth: hci0: command 0x0409 tx timeout [ 76.434938][ T4315] loop3: detected capacity change from 0 to 1024 [ 76.447689][ T1281] cfg80211: failed to load regulatory.db [ 76.526438][ T4307] EXT4-fs (loop0): 1 truncate cleaned up [ 76.537130][ T4307] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none. [ 76.558787][ T9] 00000010: 00 00 02 00 00 00 00 14 00 00 00 01 00 00 00 80 ................ [ 76.659786][ T9] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 76.796927][ T9] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01 ....[.;......... [ 76.835374][ T4252] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.894473][ T4252] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.914793][ T9] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00 ................ [ 76.933992][ T9] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb ................ [ 76.936639][ T4252] device bridge_slave_0 entered promiscuous mode [ 76.974471][ T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02 ................ [ 77.003900][ T9] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00 ................ [ 77.024555][ T154] hfsplus: b-tree write err: -5, ino 4 [ 77.035676][ T4252] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.043255][ T4252] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.069209][ T9] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74 [ 77.098797][ T4252] device bridge_slave_1 entered promiscuous mode [ 77.177418][ T9] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x659/0xa60 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 77.208226][ T9] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 77.238950][ T4249] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 77.290016][ T3532] XFS (loop2): Unmounting Filesystem [ 77.426881][ T4252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.468545][ T4252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.500772][ T4341] loop3: detected capacity change from 0 to 256 [ 77.586504][ T4252] team0: Port device team_slave_0 added [ 77.635822][ T4252] team0: Port device team_slave_1 added [ 77.674273][ T4341] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 77.712792][ T4349] sockfs: Unknown parameter 'fd' [ 77.723526][ T4344] loop1: detected capacity change from 0 to 2048 [ 77.895745][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.902710][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.974188][ T4344] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.076954][ T4252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.166753][ T4252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.197758][ T4252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.223676][ C1] vkms_vblank_simulate: vblank timer overrun [ 78.243179][ T4252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.277845][ T4349] loop0: detected capacity change from 0 to 32768 [ 78.401429][ T4252] device hsr_slave_0 entered promiscuous mode [ 78.429949][ T4252] device hsr_slave_1 entered promiscuous mode [ 78.440177][ T4252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.444272][ T3574] Bluetooth: hci0: command 0x041b tx timeout [ 78.454862][ T4252] Cannot create hsr debugfs directory [ 78.531096][ T4349] XFS (loop0): Mounting V5 Filesystem [ 78.552188][ T3777] device hsr_slave_0 left promiscuous mode [ 78.588405][ T3777] device hsr_slave_1 left promiscuous mode [ 78.605955][ T3777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.620399][ T3777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 78.649846][ T3777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.674144][ T4349] XFS (loop0): Ending clean mount [ 78.699652][ T3777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 78.752932][ T3777] device bridge_slave_1 left promiscuous mode [ 78.766099][ T3777] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.797751][ T3777] device bridge_slave_0 left promiscuous mode [ 78.808710][ T3777] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.872721][ T3777] device veth1_macvtap left promiscuous mode [ 78.886425][ T3777] device veth0_macvtap left promiscuous mode [ 78.896230][ T3777] device veth1_vlan left promiscuous mode [ 78.908344][ T3777] device veth0_vlan left promiscuous mode [ 78.980059][ T4394] loop3: detected capacity change from 0 to 512 [ 79.012932][ T4397] loop1: detected capacity change from 0 to 1024 [ 79.077182][ T4394] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 256 (level 2) [ 79.123261][ T4394] EXT4-fs (loop3): 2 truncates cleaned up [ 79.134002][ T1225] hfsplus: b-tree write err: -5, ino 4 [ 79.148131][ T4394] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 79.199592][ T4404] loop2: detected capacity change from 0 to 256 [ 79.263080][ T3528] EXT4-fs error (device loop3): ext4_map_blocks:601: inode #2: block 13: comm syz-executor.3: lblock 0 mapped to illegal pblock 13 (length 1) [ 79.294781][ T4404] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.307898][ T3528] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor.3: error -117 reading directory block [ 79.326201][ T4404] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 79.337773][ T3528] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5789: Corrupt filesystem [ 79.408651][ T3528] EXT4-fs error (device loop3): ext4_dirty_inode:5993: inode #2: comm syz-executor.3: mark_inode_dirty error [ 79.799541][ T4420] loop2: detected capacity change from 0 to 4096 [ 79.882369][ T4420] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 79.953659][ T3777] team0 (unregistering): Port device team_slave_1 removed [ 79.994395][ T3777] team0 (unregistering): Port device team_slave_0 removed [ 80.028240][ T3777] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.046587][ T3777] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.173002][ T3777] bond0 (unregistering): Released all slaves [ 80.287746][ T3531] XFS (loop0): Unmounting Filesystem [ 80.517927][ T3571] Bluetooth: hci0: command 0x040f tx timeout [ 80.865026][ T4444] loop0: detected capacity change from 0 to 256 [ 80.891184][ T4444] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.965973][ T4444] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 81.131583][ T25] audit: type=1804 audit(1718202724.638:2): pid=4455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3226953516/syzkaller.d84P7N/53/bus" dev="sda1" ino=1950 res=1 errno=0 [ 81.177607][ T4455] Invalid ELF header magic: != ELF [ 81.237853][ T25] audit: type=1800 audit(1718202724.668:3): pid=4455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1950 res=0 errno=0 [ 81.380919][ T4252] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.486576][ T4252] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.535786][ T4252] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.576360][ T4252] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.629350][ T4445] chnl_net:caif_netlink_parms(): no params data found [ 81.653964][ T4466] loop2: detected capacity change from 0 to 2048 [ 81.914991][ T4466] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 81.943403][ T4463] loop0: detected capacity change from 0 to 32768 [ 81.971812][ T4450] loop1: detected capacity change from 0 to 40427 [ 81.998290][ T4445] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.008238][ T4463] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (4463) [ 82.023435][ T4445] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.037218][ T4450] F2FS-fs (loop1): invalid crc value [ 82.075768][ T4450] F2FS-fs (loop1): Found nat_bits in checkpoint [ 82.083108][ T4463] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 82.104902][ T4445] device bridge_slave_0 entered promiscuous mode [ 82.116629][ T4463] BTRFS info (device loop0): using free space tree [ 82.156539][ T4463] BTRFS info (device loop0): has skinny extents [ 82.161856][ T4445] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.190760][ T4445] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.228190][ T4445] device bridge_slave_1 entered promiscuous mode [ 82.293802][ T4252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.327799][ T4450] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 82.427078][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.460862][ T1225] BTRFS warning (device loop0): checksum verify failed on 1052672 wanted 0x58309832 found 0x04d38776 level 0 [ 82.484800][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.495376][ T4445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.536339][ T4463] BTRFS error (device loop0): failed to read chunk root [ 82.540502][ T3530] attempt to access beyond end of device [ 82.540502][ T3530] loop1: rw=2049, want=45128, limit=40427 [ 82.572011][ T4252] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.591306][ T4445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.602250][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.608601][ T4321] Bluetooth: hci0: command 0x0419 tx timeout [ 82.611937][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.625292][ T21] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.632364][ T21] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.715664][ T4463] BTRFS error (device loop0): open_ctree failed [ 82.773149][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.815820][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.824880][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.833304][ T21] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.840433][ T21] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.894485][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.903297][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.940999][ T4445] team0: Port device team_slave_0 added [ 83.050043][ T4445] team0: Port device team_slave_1 added [ 83.066564][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.087204][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.095188][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 83.109717][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.131884][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.142825][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.159080][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.171229][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.189511][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.316119][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.333855][ T4252] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.349177][ T4445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.362169][ T4445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.393609][ T4517] loop0: detected capacity change from 0 to 4096 [ 83.458702][ T4445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.520490][ T4445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.528537][ T4445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.628722][ T4445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.717005][ T4533] loop1: detected capacity change from 0 to 256 [ 83.815445][ T4533] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.848273][ T4445] device hsr_slave_0 entered promiscuous mode [ 83.867944][ T4533] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 83.897608][ T4445] device hsr_slave_1 entered promiscuous mode [ 83.922689][ T4445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.947454][ T4445] Cannot create hsr debugfs directory [ 83.970826][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.009934][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.057852][ T4252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.072536][ T25] audit: type=1804 audit(1718202727.578:4): pid=4541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir945142419/syzkaller.R7AAqn/74/bus" dev="sda1" ino=1955 res=1 errno=0 [ 84.073829][ T4541] Invalid ELF header magic: != ELF [ 84.185301][ T25] audit: type=1800 audit(1718202727.578:5): pid=4541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1955 res=0 errno=0 [ 84.498374][ T4445] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.678923][ T4445] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.740713][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.761007][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.809239][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.831114][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.879077][ T4445] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.929895][ T4252] device veth0_vlan entered promiscuous mode [ 84.938291][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.951711][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.973553][ T4252] device veth1_vlan entered promiscuous mode [ 85.027040][ T4445] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.082965][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 85.098795][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 85.118353][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 85.147642][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 85.178180][ T4252] device veth0_macvtap entered promiscuous mode [ 85.190193][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 85.267174][ T4252] device veth1_macvtap entered promiscuous mode [ 85.300895][ T4577] loop0: detected capacity change from 0 to 2048 [ 85.354609][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.388624][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.420885][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.445570][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.464442][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.484397][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.504169][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.509812][ T4577] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 85.524089][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.541368][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.542445][ T4591] 9pnet: p9_fd_create_tcp (4591): problem connecting socket to 127.0.0.1 [ 85.602970][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 85.612082][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.633598][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.654981][ T3576] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.665593][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.680414][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.691214][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.706240][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.722102][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.736748][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.747030][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.758388][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.769238][ T4580] delete_channel: no stack [ 85.778604][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.834402][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.843155][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.872155][ T4252] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.887923][ T4252] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.905131][ T4252] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.924609][ T4252] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.981372][ T4445] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.011007][ T4445] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.062885][ T4445] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.093979][ T4445] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 86.164341][ T3576] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 86.322439][ T299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.346335][ T299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.397698][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 86.421565][ T3576] usb 2-1: Using ep0 maxpacket: 32 [ 86.454746][ T299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.473249][ T299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.489919][ T4445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.516347][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 86.554308][ T3576] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 86.565751][ T3576] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 86.590471][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.609732][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 86.645308][ T4445] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.748210][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 86.758218][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 86.774594][ T3576] usb 2-1: New USB device found, idVendor=2040, idProduct=4903, bcdDevice=a7.f0 [ 86.804083][ T3576] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.804764][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.812095][ T3576] usb 2-1: Product: syz [ 86.819221][ T3569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.852985][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.877844][ T3576] usb 2-1: Manufacturer: syz [ 86.882468][ T3576] usb 2-1: SerialNumber: syz [ 86.884732][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.912449][ T3569] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.919685][ T3569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.925505][ T3576] usb 2-1: config 0 descriptor?? [ 86.958420][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.979223][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.996634][ T3576] hdpvr 2-1:0.0: Could not find bulk-in endpoint [ 87.003034][ T3576] hdpvr: probe of 2-1:0.0 failed with error -12 [ 87.018975][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.033601][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.066346][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.114941][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.145012][ T3575] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.179942][ T4445] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 87.200036][ T1281] usb 2-1: USB disconnect, device number 2 [ 87.241988][ T4445] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.244328][ T4321] Bluetooth: hci1: command 0x040f tx timeout [ 87.296738][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 87.307288][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.338027][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.358407][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 87.384778][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 87.405804][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 87.519067][ T4647] binder: transaction release 10 bad handle 1, ret = -22 [ 87.877217][ T3777] device hsr_slave_0 left promiscuous mode [ 87.915262][ T3777] device hsr_slave_1 left promiscuous mode [ 87.940192][ T3777] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.985719][ T3777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.028165][ T3777] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.073777][ T4665] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 88.084850][ T3777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.114353][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 88.136983][ T3777] device bridge_slave_1 left promiscuous mode [ 88.144086][ T3777] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.159600][ T3777] device bridge_slave_0 left promiscuous mode [ 88.174944][ T3777] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.201079][ T3777] device veth1_macvtap left promiscuous mode [ 88.214171][ T3777] device veth0_macvtap left promiscuous mode [ 88.224456][ T3777] device veth1_vlan left promiscuous mode [ 88.230400][ T3777] device veth0_vlan left promiscuous mode [ 88.425693][ T4669] UBIFS error (pid: 4669): cannot open "./file0", error -22 [ 88.485870][ T3777] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 88.539086][ T3777] bond1 (unregistering): Released all slaves [ 88.708094][ T3777] team0 (unregistering): Port device team_slave_1 removed [ 88.735684][ T3777] team0 (unregistering): Port device team_slave_0 removed [ 88.759250][ T3777] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.324567][ T13] Bluetooth: hci1: command 0x0419 tx timeout [ 89.460635][ T3777] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.591711][ T3777] bond0 (unregistering): Released all slaves [ 89.649803][ T4667] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.659028][ T4667] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.667835][ T4667] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.676606][ T4667] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 89.761006][ T4445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.779333][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.789220][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.799655][ T4679] binder: BINDER_SET_CONTEXT_MGR already set [ 89.811647][ T4679] binder: 4678:4679 ioctl 4018620d 20000040 returned -16 [ 89.855792][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.865735][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.947192][ T4445] device veth0_vlan entered promiscuous mode [ 89.970552][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.010500][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.088598][ T4445] device veth1_vlan entered promiscuous mode [ 90.093245][ T4693] loop2: detected capacity change from 0 to 4096 [ 90.732791][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.744759][ T4693] NILFS (loop2): invalid segment: Checksum error in segment payload [ 90.759764][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.793069][ T4693] NILFS (loop2): trying rollback from an earlier position [ 90.793459][ T4699] loop0: detected capacity change from 0 to 512 [ 90.801594][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.816483][ T3690] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.830374][ T4693] NILFS (loop2): recovery complete [ 90.838090][ T4700] loop4: detected capacity change from 0 to 2048 [ 90.842809][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.847570][ T4701] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 90.876440][ T4700] UDF-fs: bad mount option "adiç1Ë"czrÇo¨9¾­«nicb" or missing value [ 90.940913][ T4699] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 90.948409][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.959714][ T4699] ext4 filesystem being mounted at /root/syzkaller-testdir3226953516/syzkaller.d84P7N/70/file0 supports timestamps until 2038 (0x7fffffff) [ 91.016900][ T4445] device veth0_macvtap entered promiscuous mode [ 91.041413][ T4708] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 91.070480][ T4445] device veth1_macvtap entered promiscuous mode [ 91.097675][ T4699] EXT4-fs error (device loop0): ext4_do_update_inode:5160: inode #2: comm syz-executor.0: corrupted inode contents [ 91.152337][ T4699] EXT4-fs error (device loop0): ext4_dirty_inode:5993: inode #2: comm syz-executor.0: mark_inode_dirty error [ 91.170913][ T4445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.183480][ T4699] EXT4-fs error (device loop0): ext4_do_update_inode:5160: inode #2: comm syz-executor.0: corrupted inode contents [ 91.214204][ T4445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.239497][ T4699] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz-executor.0: mark_inode_dirty error [ 91.246571][ T4445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.263364][ T4445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.281319][ T4445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.292484][ T4445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.303110][ T4445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.321090][ T4445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.343978][ T4445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.364231][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 91.372528][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 91.418059][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.439225][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.472393][ T4445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.493004][ T4445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.554236][ T4445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.574730][ T4445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.620385][ T4445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.656667][ T4445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.692597][ T4445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.712917][ T4445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.755458][ T4445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.776400][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.802032][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.837178][ T4733] loop0: detected capacity change from 0 to 256 [ 91.842611][ T4445] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.861020][ T4445] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.877886][ T4445] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.896870][ T4445] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.906685][ T4731] loop1: detected capacity change from 0 to 4096 [ 92.003371][ T4731] NILFS (loop1): invalid segment: Checksum error in segment payload [ 92.037100][ T4731] NILFS (loop1): trying rollback from an earlier position [ 92.107365][ T299] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.143227][ T299] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.151134][ T4731] NILFS (loop1): recovery complete [ 92.214806][ T4741] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 92.327750][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.426780][ T299] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.465218][ T299] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.481148][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.806959][ T4754] loop3: detected capacity change from 0 to 4096 [ 92.870092][ T4767] loop1: detected capacity change from 0 to 512 [ 92.931852][ T4754] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 92.961076][ T4767] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 93.051667][ T4767] EXT4-fs error (device loop1): ext4_xattr_block_list:719: inode #15: comm syz-executor.1: corrupted xattr block 33 [ 93.093379][ T4776] EXT4-fs error (device loop1): ext4_xattr_block_get:546: inode #15: comm syz-executor.1: corrupted xattr block 33 [ 93.244620][ T4754] ntfs3: loop3: failed to convert "076c" to cp863 [ 93.442430][ T4790] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 93.684428][ T25] audit: type=1800 audit(1852420465.191:6): pid=4793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 93.770912][ T4808] loop0: detected capacity change from 0 to 2048 [ 93.896930][ T4808] UDF-fs: bad mount option "adiç1Ë"czrÇo¨9¾­«nicb" or missing value [ 94.429384][ T4827] 8021q: adding VLAN 0 to HW filter on device bond2 [ 94.490411][ T4827] team0: Port device bond2 added [ 94.560861][ T4814] loop3: detected capacity change from 0 to 32768 [ 94.721447][ T4838] loop0: detected capacity change from 0 to 1024 [ 94.847269][ T4838] EXT4-fs (loop0): Test dummy encryption mode enabled [ 94.888830][ T4840] loop4: detected capacity change from 0 to 4096 [ 94.904498][ T4838] EXT4-fs (loop0): Ignoring removed orlov option [ 94.970510][ T4838] EXT4-fs (loop0): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback. [ 95.183521][ T4854] loop3: detected capacity change from 0 to 256 [ 95.232816][ T4856] loop2: detected capacity change from 0 to 2048 [ 95.347353][ T4834] netlink: 44306 bytes leftover after parsing attributes in process `syz-executor.0'. [ 95.381894][ T4857] loop4: detected capacity change from 0 to 16 [ 95.408447][ T4856] UDF-fs: bad mount option "adiç1Ë"czrÇo¨9¾­«nicb" or missing value [ 95.481023][ T4857] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 96.829737][ T4882] loop3: detected capacity change from 0 to 512 [ 96.934502][ T4882] EXT4-fs (loop3): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 97.030772][ T4880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.066214][ T4880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.150361][ T4880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.164131][ T1066] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 97.222500][ T4880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.511082][ T4912] loop2: detected capacity change from 0 to 256 [ 97.525082][ T1066] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 97.557289][ T1066] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.575813][ T1066] usb 2-1: config 0 descriptor?? [ 97.597386][ T4917] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 97.655310][ T4921] loop3: detected capacity change from 0 to 128 [ 97.669875][ T25] audit: type=1800 audit(1852420469.181:7): pid=4902 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 97.712313][ T4912] FAT-fs (loop2): Directory bread(block 64) failed [ 97.720530][ T4912] FAT-fs (loop2): Directory bread(block 65) failed [ 97.743690][ T4912] FAT-fs (loop2): Directory bread(block 66) failed [ 97.762026][ T4912] FAT-fs (loop2): Directory bread(block 67) failed [ 97.779159][ T4912] FAT-fs (loop2): Directory bread(block 68) failed [ 97.789239][ T4912] FAT-fs (loop2): Directory bread(block 69) failed [ 97.832241][ T4912] FAT-fs (loop2): Directory bread(block 70) failed [ 97.844737][ T4912] FAT-fs (loop2): Directory bread(block 71) failed [ 97.854867][ T4912] FAT-fs (loop2): Directory bread(block 72) failed [ 97.861421][ T4912] FAT-fs (loop2): Directory bread(block 73) failed [ 98.149539][ T4939] device syz_tun entered promiscuous mode [ 98.215612][ T4941] loop2: detected capacity change from 0 to 512 [ 98.270566][ T25] audit: type=1326 audit(1852420469.781:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4944 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8e1faf6ea9 code=0x0 [ 98.293438][ T4925] loop4: detected capacity change from 0 to 32768 [ 98.311428][ T4941] EXT4-fs (loop2): EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31 [ 98.356366][ T4925] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (4925) [ 98.436917][ T4925] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 98.463774][ T4925] BTRFS info (device loop4): turning off barriers [ 98.483033][ T4925] BTRFS info (device loop4): force clearing of disk cache [ 98.527562][ T4925] BTRFS info (device loop4): doing ref verification [ 98.569924][ T4925] BTRFS info (device loop4): using free space tree [ 98.607804][ T4925] BTRFS info (device loop4): has skinny extents [ 98.865525][ T4946] loop0: detected capacity change from 0 to 32768 [ 98.910157][ T4925] BTRFS info (device loop4): enabling ssd optimizations [ 98.921259][ T4925] BTRFS info (device loop4): clearing free space tree [ 98.936064][ T4925] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 98.954252][ T1066] usb 2-1: Cannot set autoneg [ 98.959817][ T1066] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -71 [ 98.964311][ T4946] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (4946) [ 98.980507][ T1066] usb 2-1: USB disconnect, device number 3 [ 98.989235][ T4925] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 99.046325][ T4925] BTRFS info (device loop4): creating free space tree [ 99.060493][ T4946] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 99.072565][ T4925] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 99.083689][ T4925] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 99.105767][ T4946] BTRFS info (device loop0): turning off barriers [ 99.112398][ T4946] BTRFS info (device loop0): setting nodatasum [ 99.119624][ T4925] BTRFS info (device loop4): checking UUID tree [ 99.134384][ T4946] BTRFS info (device loop0): use zlib compression, level 3 [ 99.157417][ T4946] BTRFS info (device loop0): using free space tree [ 99.179973][ T4946] BTRFS info (device loop0): has skinny extents [ 99.596229][ T4982] loop2: detected capacity change from 0 to 40427 [ 99.703961][ T4982] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 99.737358][ T4982] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 99.862978][ T4982] F2FS-fs (loop2): Found nat_bits in checkpoint [ 100.055804][ T4982] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 100.065249][ T4982] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 100.157668][ T4982] attempt to access beyond end of device [ 100.157668][ T4982] loop2: rw=2049, want=78792, limit=40427 [ 100.238713][ T5019] loop4: detected capacity change from 0 to 4096 [ 100.279733][ T4982] attempt to access beyond end of device [ 100.279733][ T4982] loop2: rw=2049, want=78784, limit=40427 [ 100.339084][ T5019] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 100.391630][ T25] audit: type=1800 audit(1852420471.901:9): pid=5017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 100.566916][ T9] attempt to access beyond end of device [ 100.566916][ T9] loop2: rw=1, want=77856, limit=40427 [ 100.638879][ T9] attempt to access beyond end of device [ 100.638879][ T9] loop2: rw=1, want=77960, limit=40427 [ 100.646922][ T5030] loop0: detected capacity change from 0 to 256 [ 100.702603][ T3532] attempt to access beyond end of device [ 100.702603][ T3532] loop2: rw=2051, want=77952, limit=40427 [ 100.736851][ T3532] F2FS-fs (loop2): Issue discard(9732, 9732, 12) failed, ret: -5 [ 100.737598][ T5035] device syz_tun entered promiscuous mode [ 101.025415][ T5044] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 101.073289][ T5044] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 101.110689][ T25] audit: type=1326 audit(1852420472.621:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5048 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6cfcf7cea9 code=0x0 [ 101.378453][ T5026] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 101.806910][ T5026] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 101.834078][ T5026] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 101.864106][ T5026] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 101.879389][ T5052] loop4: detected capacity change from 0 to 32768 [ 101.890023][ T5047] loop0: detected capacity change from 0 to 32768 [ 101.894113][ T5026] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.907452][ T5066] loop2: detected capacity change from 0 to 4096 [ 101.924253][ T5026] usb 4-1: config 0 descriptor?? [ 101.973687][ T5056] loop1: detected capacity change from 0 to 40427 [ 101.975772][ T5047] XFS (loop0): Mounting V5 Filesystem [ 101.982078][ T5026] hub 4-1:0.0: USB hub found [ 101.993002][ T5052] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (5052) [ 102.043966][ T5056] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 102.060689][ T5052] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 102.069534][ T5056] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 102.096807][ T5052] BTRFS info (device loop4): turning off barriers [ 102.104278][ T5056] F2FS-fs (loop1): invalid crc value [ 102.112664][ T5052] BTRFS info (device loop4): setting nodatasum [ 102.120102][ T5052] BTRFS info (device loop4): use zlib compression, level 3 [ 102.128663][ T5047] XFS (loop0): Ending clean mount [ 102.136294][ T5052] BTRFS info (device loop4): using free space tree [ 102.143077][ T5052] BTRFS info (device loop4): has skinny extents [ 102.166514][ T5047] capability: warning: `syz-executor.0' uses deprecated v2 capabilities in a way that may be insecure [ 102.183138][ T5078] loop2: detected capacity change from 0 to 16 [ 102.194378][ T5026] hub 4-1:0.0: 1 port detected [ 102.212721][ T5056] F2FS-fs (loop1): Found nat_bits in checkpoint [ 102.272130][ T5078] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 102.296357][ T5056] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 102.304176][ T5056] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 102.362552][ T3531] XFS (loop0): Unmounting Filesystem [ 102.379339][ T25] audit: type=1800 audit(1852420473.891:11): pid=5056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=F22E4E90 dev="loop1" ino=14 res=0 errno=0 [ 102.440297][ T3530] attempt to access beyond end of device [ 102.440297][ T3530] loop1: rw=2049, want=45112, limit=40427 [ 102.641289][ T5026] usb 4-1: USB disconnect, device number 2 [ 103.325923][ T5124] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 103.351573][ T5126] loop1: detected capacity change from 0 to 256 [ 103.695384][ T5139] loop1: detected capacity change from 0 to 2048 [ 103.762276][ T5106] loop0: detected capacity change from 0 to 32768 [ 103.822161][ T5106] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (5106) [ 103.850678][ T5139] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.889705][ T5106] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 103.928179][ T5106] BTRFS info (device loop0): using free space tree [ 103.950457][ T5106] BTRFS info (device loop0): has skinny extents [ 103.955725][ T5115] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 103.968541][ T5122] loop3: detected capacity change from 0 to 32768 [ 104.190537][ T5143] loop4: detected capacity change from 0 to 32768 [ 104.197218][ T5106] BTRFS info (device loop0): enabling ssd optimizations [ 104.229510][ T5168] syz-executor.1 (5168): /proc/5167/oom_adj is deprecated, please use /proc/5167/oom_score_adj instead. [ 104.344389][ T25] audit: type=1804 audit(1852420475.851:12): pid=5173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4272716916/syzkaller.XsJaME/43/file0/file1" dev="loop4" ino=4 res=1 errno=0 [ 104.370229][ T5115] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 104.403554][ T1225] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared) [ 104.410485][ T5115] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.432199][ T5174] find_entry called with index >= next_index [ 104.454814][ T5174] find_entry called with index >= next_index [ 104.460825][ T5174] find_entry called with index >= next_index [ 104.471394][ T5115] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 104.503132][ T5115] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.523311][ T5179] loop1: detected capacity change from 0 to 256 [ 104.527585][ T5115] usb 3-1: config 0 descriptor?? [ 104.590844][ T5115] hub 3-1:0.0: USB hub found [ 104.640193][ T5181] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 104.805613][ T5115] hub 3-1:0.0: 1 port detected [ 104.818471][ T5186] syz-executor.3 (pid 5186) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 105.054371][ T5028] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 105.070556][ T5182] kernel read not supported for file /usbmon0 (pid: 5182 comm: kworker/0:19) [ 105.195719][ T5199] Invalid option length (1047364) for dns_resolver key [ 105.246136][ T5115] usb 3-1: USB disconnect, device number 3 [ 105.344194][ T5028] usb 1-1: Using ep0 maxpacket: 16 [ 105.447312][ T5193] loop4: detected capacity change from 0 to 32768 [ 105.484361][ T5028] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.499654][ T5028] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.516437][ T5028] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.526562][ T5028] usb 1-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.00 [ 105.536080][ T5028] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.568952][ T5193] XFS (loop4): Mounting V5 Filesystem [ 105.575596][ T5028] usb 1-1: config 0 descriptor?? [ 105.717206][ T5227] fscrypt: key with description 'fscrypt:0000111122223333' is too short (got 57 bytes, need 64+ bytes) [ 105.749113][ T5193] XFS (loop4): Ending clean mount [ 105.789353][ T5193] XFS (loop4): Quotacheck needed: Please wait. [ 105.855199][ T5193] XFS (loop4): Quotacheck: Done. [ 105.909092][ T4252] XFS (loop4): Unmounting Filesystem [ 106.021702][ T21] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 106.097450][ T5257] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 106.115141][ T5028] waltop 0003:172F:0037.0002: unknown main item tag 0x0 [ 106.123318][ T5028] waltop 0003:172F:0037.0002: unknown main item tag 0x0 [ 106.143182][ T5028] waltop 0003:172F:0037.0002: unknown main item tag 0x0 [ 106.151656][ T5028] waltop 0003:172F:0037.0002: unknown main item tag 0x0 [ 106.163517][ T5028] waltop 0003:172F:0037.0002: unknown main item tag 0x0 [ 106.198857][ T5028] waltop 0003:172F:0037.0002: hidraw0: USB HID v0.00 Device [HID 172f:0037] on usb-dummy_hcd.0-1/input0 [ 106.249333][ T5265] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 106.320195][ T5270] fscrypt: key with description 'fscrypt:0000111122223333' is too short (got 57 bytes, need 64+ bytes) [ 106.335664][ T5028] usb 1-1: USB disconnect, device number 3 [ 106.394463][ T21] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 106.403089][ T21] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.419695][ T5274] loop1: detected capacity change from 0 to 256 [ 106.447641][ T5272] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 106.460482][ T21] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 106.483422][ T21] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 106.525512][ T5274] exfat: Deprecated parameter 'utf8' [ 106.583745][ T5274] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d) [ 106.614409][ T21] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 106.623471][ T21] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 106.664156][ T21] usb 4-1: Product: syz [ 106.671831][ T21] usb 4-1: Manufacturer: syz [ 106.677237][ T5285] loop4: detected capacity change from 0 to 1024 [ 106.715112][ T21] cdc_wdm 4-1:1.0: skipping garbage [ 106.726740][ T21] cdc_wdm 4-1:1.0: invalid descriptor buffer length [ 106.766956][ T21] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 106.810170][ T5295] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 106.828369][ T5295] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 106.931984][ T5182] usb 4-1: USB disconnect, device number 3 [ 106.980993][ T5303] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 107.007838][ T5304] Invalid option length (1047364) for dns_resolver key [ 107.027253][ T4417] hfsplus: b-tree write err: -5, ino 4 [ 107.139424][ T5312] loop2: detected capacity change from 0 to 256 [ 107.157589][ T5310] loop0: detected capacity change from 0 to 256 [ 107.176733][ T5312] exfat: Deprecated parameter 'utf8' [ 107.209894][ T5312] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xc61f63e4, utbl_chksum : 0xe619d30d) [ 107.261062][ T5317] loop4: detected capacity change from 0 to 256 [ 107.291557][ T5310] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 107.307941][ T5294] loop1: detected capacity change from 0 to 32768 [ 107.343499][ T5317] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 107.413595][ T5328] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 107.452458][ T5294] XFS (loop1): Mounting V5 Filesystem [ 107.483533][ T5328] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 107.613744][ T5331] Zero length message leads to an empty skb [ 107.626199][ T5339] loop2: detected capacity change from 0 to 1024 [ 107.636456][ T5337] loop3: detected capacity change from 0 to 512 [ 107.736753][ T5294] XFS (loop1): Ending clean mount [ 107.744015][ T5337] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,minixdf,,errors=continue. Quota mode: writeback. [ 107.788729][ T5337] ext4 filesystem being mounted at /root/syzkaller-testdir3428006233/syzkaller.Yh8SaW/26/bus supports timestamps until 2038 (0x7fffffff) [ 107.802944][ T5294] XFS (loop1): Quotacheck needed: Please wait. [ 107.821617][ T5352] Invalid option length (1047364) for dns_resolver key [ 107.938927][ T5294] XFS (loop1): Quotacheck: Done. [ 107.951152][ T1225] hfsplus: b-tree write err: -5, ino 4 [ 108.050359][ T5359] loop0: detected capacity change from 0 to 1024 [ 108.142331][ T5364] loop2: detected capacity change from 0 to 256 [ 108.156343][ T3530] XFS (loop1): Unmounting Filesystem [ 108.232781][ T5364] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 108.248313][ T5367] loop4: detected capacity change from 0 to 256 [ 108.291069][ T5369] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 108.306146][ T5365] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 108.341713][ T5367] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 108.577807][ T3531] hfsplus: bad catalog entry type [ 108.630206][ T5382] loop4: detected capacity change from 0 to 512 [ 108.760919][ T5382] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,minixdf,,errors=continue. Quota mode: writeback. [ 108.777963][ T5382] ext4 filesystem being mounted at /root/syzkaller-testdir4272716916/syzkaller.XsJaME/54/bus supports timestamps until 2038 (0x7fffffff) [ 108.818402][ T5394] loop1: detected capacity change from 0 to 256 [ 108.961288][ T4417] hfsplus: b-tree write err: -5, ino 4 [ 108.972654][ T5394] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 109.004666][ T1225] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.099209][ T1225] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.268138][ T1225] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.505606][ T1225] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.730549][ T5437] loop3: detected capacity change from 0 to 1024 [ 109.829078][ T25] audit: type=1326 audit(1852420481.341:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5441 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f88041b7ea9 code=0x0 [ 109.904431][ T5437] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 109.937856][ T5437] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 109.948804][ T5437] EXT4-fs error (device loop3): ext4_get_journal_inode:5159: comm syz-executor.3: inode #1: comm syz-executor.3: iget: illegal inode # [ 109.965249][ T5437] EXT4-fs (loop3): no journal found [ 109.970520][ T5437] EXT4-fs (loop3): can't get journal size [ 110.005913][ T5437] EXT4-fs (loop3): mounted filesystem without journal. Opts: auto_da_alloc=0x0000000000000005,journal_dev=0x0000000000000003,nouid32,noblock_validity,noload,data=writeback,,errors=continue. Quota mode: writeback. [ 110.269586][ T5450] loop4: detected capacity change from 0 to 32768 [ 110.418796][ T5434] chnl_net:caif_netlink_parms(): no params data found [ 110.460965][ T5450] XFS (loop4): Mounting V5 Filesystem [ 110.474585][ T5427] loop2: detected capacity change from 0 to 32766 [ 110.547213][ T5427] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (5427) [ 110.597270][ T5468] sctp: [Deprecated]: syz-executor.3 (pid 5468) Use of int in maxseg socket option. [ 110.597270][ T5468] Use struct sctp_assoc_value instead [ 110.650303][ T5427] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 110.659307][ T5427] BTRFS info (device loop2): using free space tree [ 110.665951][ T5427] BTRFS info (device loop2): has skinny extents [ 110.709013][ T5427] BTRFS error (device loop2): device total_bytes should be at most 16776192 but found 16777216 [ 110.720466][ T5427] BTRFS error (device loop2): failed to read chunk tree: -22 [ 110.793797][ T5450] XFS (loop4): Ending clean mount [ 110.843085][ T5450] XFS (loop4): Quotacheck needed: Please wait. [ 110.893644][ T5468] loop3: detected capacity change from 0 to 4096 [ 110.923990][ T5427] BTRFS error (device loop2): open_ctree failed [ 110.930126][ T3882] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by udevd (3882) [ 110.951272][ T5468] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 111.017789][ T5450] XFS (loop4): Quotacheck: Done. [ 111.023180][ T5421] overlayfs: overlapping lowerdir path [ 111.147709][ T5434] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.183214][ T5434] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.234000][ T5434] device bridge_slave_0 entered promiscuous mode [ 111.247469][ T5434] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.267774][ T4252] XFS (loop4): Unmounting Filesystem [ 111.334215][ T5434] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.342461][ T5434] device bridge_slave_1 entered promiscuous mode [ 111.708537][ T5434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.724129][ T4321] Bluetooth: hci2: command 0x0409 tx timeout [ 112.122488][ T5434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.500351][ T5434] team0: Port device team_slave_0 added [ 112.560459][ T5434] team0: Port device team_slave_1 added [ 112.702058][ T5434] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.714191][ T5114] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 112.717218][ T5434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.785010][ T5534] loop4: detected capacity change from 0 to 1024 [ 112.811683][ T5434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.860727][ T5434] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.875513][ T5434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.926208][ T5434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.941500][ T1225] device hsr_slave_0 left promiscuous mode [ 112.952862][ T1225] device hsr_slave_1 left promiscuous mode [ 112.965726][ T1225] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.987963][ T1225] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.998370][ T1225] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.007035][ T1225] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.019176][ T1225] device bridge_slave_1 left promiscuous mode [ 113.025900][ T1225] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.041963][ T1225] device bridge_slave_0 left promiscuous mode [ 113.048792][ T1225] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.072246][ T1225] device veth1_macvtap left promiscuous mode [ 113.084603][ T5114] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 113.120650][ T5114] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.131793][ T1225] device veth0_macvtap left promiscuous mode [ 113.147825][ T1225] device veth1_vlan left promiscuous mode [ 113.167567][ T5114] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 113.187443][ T1225] device veth0_vlan left promiscuous mode [ 113.201071][ T5545] loop1: detected capacity change from 0 to 32768 [ 113.208733][ T5114] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 113.242716][ T4297] hfsplus: b-tree write err: -5, ino 4 [ 113.344349][ T5114] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 113.351143][ T5545] XFS (loop1): Mounting V5 Filesystem [ 113.364168][ T5114] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 113.372196][ T5114] usb 3-1: Product: syz [ 113.394640][ T5556] loop4: detected capacity change from 0 to 4096 [ 113.398036][ T5114] usb 3-1: Manufacturer: syz [ 113.416782][ T5556] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 113.466352][ T5545] XFS (loop1): Ending clean mount [ 113.469846][ T5556] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 113.475212][ T5545] XFS (loop1): Quotacheck needed: Please wait. [ 113.479951][ T5114] cdc_wdm 3-1:1.0: skipping garbage [ 113.496137][ T5114] cdc_wdm 3-1:1.0: invalid descriptor buffer length [ 113.503151][ T5114] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 113.513433][ T5556] ntfs3: loop4: Failed to load $BadClus. [ 113.587310][ T5545] XFS (loop1): Quotacheck: Done. [ 113.629331][ T5556] overlayfs: upper fs does not support tmpfile. [ 113.680122][ T3530] XFS (loop1): Unmounting Filesystem [ 113.727623][ T5114] usb 3-1: USB disconnect, device number 4 [ 113.794382][ T4321] Bluetooth: hci2: command 0x041b tx timeout [ 113.857770][ T1225] team0 (unregistering): Port device team_slave_1 removed [ 113.879106][ T1225] team0 (unregistering): Port device team_slave_0 removed [ 113.892575][ T1225] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.908622][ T1225] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.939906][ T5564] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET) [ 114.069711][ T1225] bond0 (unregistering): Released all slaves [ 114.130443][ T5468] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 114.276385][ T5434] device hsr_slave_0 entered promiscuous mode [ 114.336995][ T5434] device hsr_slave_1 entered promiscuous mode [ 114.800336][ T5569] loop1: detected capacity change from 0 to 32768 [ 114.905660][ T5569] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 114.960100][ T5569] BTRFS info (device loop1): using free space tree [ 114.988461][ T5569] BTRFS info (device loop1): has skinny extents [ 115.320254][ T5569] BTRFS info (device loop1): enabling ssd optimizations [ 115.393250][ T5585] loop2: detected capacity change from 0 to 32768 [ 115.441310][ T5434] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 115.498383][ T5434] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 115.555308][ T5577] loop3: detected capacity change from 0 to 40427 [ 115.629169][ T5577] F2FS-fs (loop3): invalid crc value [ 115.701033][ T5577] F2FS-fs (loop3): Found nat_bits in checkpoint [ 115.734470][ T5434] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 115.738279][ T5585] XFS (loop2): Mounting V5 Filesystem [ 115.760251][ T5577] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 115.789329][ T5434] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.825907][ T4445] attempt to access beyond end of device [ 115.825907][ T4445] loop3: rw=2049, want=45104, limit=40427 [ 115.888522][ T4321] Bluetooth: hci2: command 0x040f tx timeout [ 116.021624][ T5585] XFS (loop2): Ending clean mount [ 116.036167][ T5585] XFS (loop2): Quotacheck needed: Please wait. [ 116.099633][ T5642] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 116.132775][ T5585] XFS (loop2): Quotacheck: Done. [ 116.274932][ T5434] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.290479][ T5646] sctp: [Deprecated]: syz-executor.1 (pid 5646) Use of int in maxseg socket option. [ 116.290479][ T5646] Use struct sctp_assoc_value instead [ 116.302967][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 116.315509][ T1066] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 116.319964][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 116.335456][ T3532] XFS (loop2): Unmounting Filesystem [ 116.358200][ T5434] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.397018][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 116.423946][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 116.453339][ T4321] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.460484][ T4321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.503678][ T5649] loop1: detected capacity change from 0 to 4096 [ 116.506854][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 116.552649][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 116.572567][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 116.590030][ T5649] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 116.593351][ T4321] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.606157][ T4321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.648740][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 116.685455][ T1066] usb 5-1: config 27 has an invalid descriptor of length 111, skipping remainder of the config [ 116.734752][ T1066] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 28277, setting to 1024 [ 116.776798][ T1066] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 116.791243][ T1066] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.824821][ T1066] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 116.843927][ T1066] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.884402][ T5640] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 116.909693][ T1066] usb 5-1: invalid MIDI in EP 0 [ 116.935537][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 116.984546][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 117.038381][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 117.095339][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 117.156552][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 117.194778][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 117.236049][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 117.305863][ T5434] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 117.851167][ T3797] udevd[3797]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.980306][ T4323] Bluetooth: hci2: command 0x0419 tx timeout [ 118.049740][ T1066] snd-usb-audio: probe of 5-1:27.0 failed with error -22 [ 118.075039][ T5434] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 118.075832][ T1066] usb 5-1: USB disconnect, device number 3 [ 118.166383][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 118.185225][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 118.211676][ T5494] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 118.564368][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 118.620916][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 118.656442][ T5434] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 118.757757][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 118.779360][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 118.853579][ T5434] device veth0_vlan entered promiscuous mode [ 118.871100][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 118.889487][ T5182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 118.917834][ T5434] device veth1_vlan entered promiscuous mode [ 118.931881][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 118.944134][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 118.965398][ T5028] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 118.988820][ T5646] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 119.045006][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 119.055854][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 119.075421][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 119.087336][ T5434] device veth0_macvtap entered promiscuous mode [ 119.108572][ T5434] device veth1_macvtap entered promiscuous mode [ 119.164176][ T1066] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 119.214761][ T5434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.230789][ T5434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.243039][ T5434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.257932][ T5434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.534661][ T1066] usb 4-1: config 27 has an invalid descriptor of length 111, skipping remainder of the config [ 119.596172][ T5434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.632149][ T1066] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 28277, setting to 1024 [ 119.797341][ T5434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.836273][ T1066] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 119.914889][ T5434] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.924506][ T1066] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.934778][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 119.951428][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 119.961809][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 119.963027][ T5694] loop2: detected capacity change from 0 to 40427 [ 119.970786][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 119.977569][ T1066] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 119.996469][ T5434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.013554][ T5434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.016551][ T1066] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.031455][ T5434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.074388][ T5721] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 120.092370][ T5694] F2FS-fs (loop2): invalid crc value [ 120.117244][ T1066] usb 4-1: invalid MIDI in EP 0 [ 120.148085][ T5434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.184830][ T5694] F2FS-fs (loop2): Found nat_bits in checkpoint [ 120.223725][ T5434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 120.268791][ T1066] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 120.276311][ T5434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 120.299443][ T5434] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 120.344874][ T5694] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 120.352777][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 120.362649][ T4418] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 120.385261][ T5434] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.400855][ T5434] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.425038][ T5005] usb 4-1: USB disconnect, device number 4 [ 120.445645][ T5434] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.454815][ T5434] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 120.465423][ T3532] attempt to access beyond end of device [ 120.465423][ T3532] loop2: rw=2049, want=45104, limit=40427 [ 120.691050][ T5760] loop1: detected capacity change from 0 to 4096 [ 120.725368][ T5681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.753318][ T5681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.797703][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 120.798329][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.808618][ T5762] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 120.871564][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.919457][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 121.129951][ T25] audit: type=1804 audit(1852420492.641:14): pid=5773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3428006233/syzkaller.Yh8SaW/48/bus" dev="sda1" ino=1941 res=1 errno=0 [ 121.282159][ T25] audit: type=1326 audit(1852420492.791:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5772 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f212211cea9 code=0x0 [ 121.422780][ T5784] loop0: detected capacity change from 0 to 4096 [ 121.498334][ T5784] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 121.533464][ T5784] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 121.564463][ T5784] ntfs3: loop0: Failed to load $BadClus. [ 121.702176][ T5776] loop1: detected capacity change from 0 to 32768 [ 121.722790][ T5784] overlayfs: upper fs does not support tmpfile. [ 121.770774][ T5789] loop0: detected capacity change from 0 to 1024 [ 121.851320][ T5789] EXT4-fs (loop0): Ignoring removed oldalloc option [ 121.871271][ T5789] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,noinit_itable,usrquota,data_err=abort,data_err=abort,oldalloc,,errors=continue. Quota mode: writeback. [ 122.047827][ T5793] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.057061][ T5793] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.065848][ T5793] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.074579][ T5793] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.347875][ T5810] loop3: detected capacity change from 0 to 64 [ 122.453666][ T5810] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 122.459168][ T5819] loop4: detected capacity change from 0 to 22 [ 122.535184][ T5819] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 122.536599][ T5810] MINIX-fs warning: remounting unchecked fs, running fsck is recommended [ 122.588111][ T4323] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 122.591000][ T5819] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 122.650590][ T5824] loop2: detected capacity change from 0 to 1024 [ 122.721094][ T5824] EXT4-fs (loop2): Ignoring removed oldalloc option [ 122.759872][ T5824] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,noinit_itable,usrquota,data_err=abort,data_err=abort,oldalloc,,errors=continue. Quota mode: writeback. [ 122.986920][ T4323] usb 1-1: config 27 has an invalid descriptor of length 111, skipping remainder of the config [ 123.009949][ T4323] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 28277, setting to 1024 [ 123.036030][ T5838] loop3: detected capacity change from 0 to 256 [ 123.044293][ T4323] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024 [ 123.078990][ T5838] exfat: Deprecated parameter 'utf8' [ 123.081452][ T4323] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.096610][ T5839] loop4: detected capacity change from 0 to 4096 [ 123.116724][ T5838] exfat: Deprecated parameter 'utf8' [ 123.123821][ T4323] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 123.163691][ T4323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.169093][ T5838] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 123.208513][ T5846] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 123.219598][ T5805] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 123.269775][ T4323] usb 1-1: invalid MIDI in EP 0 [ 123.444817][ T4323] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 123.479009][ T4323] usb 1-1: USB disconnect, device number 4 [ 123.513320][ T5858] loop1: detected capacity change from 0 to 2048 [ 123.562824][ T5858] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 123.696561][ T5877] loop4: detected capacity change from 0 to 256 [ 123.897204][ T5881] syz-executor.2[5881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 123.897651][ T5881] syz-executor.2[5881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.014295][ T5877] exfat: Deprecated parameter 'utf8' [ 124.221594][ T5877] exfat: Deprecated parameter 'utf8' [ 124.435954][ T5877] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 125.179276][ T5885] loop0: detected capacity change from 0 to 22 [ 125.251299][ T5885] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 125.341484][ T5885] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 125.374727][ T5899] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 125.400823][ T5899] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 125.453894][ T5903] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 125.558066][ T3879] udevd[3879]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.734544][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 125.743710][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!! [ 125.752857][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 125.761847][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 125.770843][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 125.779918][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 125.788904][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 125.797920][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 125.806898][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 127.616144][ T5926] sched: RT throttling activated [ 127.892969][ T5934] loop2: detected capacity change from 0 to 22 [ 128.006247][ T5934] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 128.069885][ T5934] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 128.217017][ T5947] loop2: detected capacity change from 0 to 8 [ 128.224929][ T5946] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 128.294991][ T5947] squashfs image failed sanity check [ 128.298668][ T5953] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 128.315648][ T5953] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 128.326801][ T5956] loop1: detected capacity change from 0 to 256 [ 128.335090][ T5957] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 128.376228][ T5956] FAT-fs (loop1): Unrecognized mount option "fowner<00000000000000000000" or missing value [ 128.417692][ T5961] [U] [ 128.420905][ T5961] [U] [ 128.423604][ T5961] [U] [ 128.426307][ T5961] [U] [ 128.438084][ T5961] [U] [ 128.440817][ T5961] [U] [ 128.443519][ T5961] [U] [ 128.446213][ T5961] [U] [ 128.454662][ T5961] [U] [ 128.457394][ T5961] [U] [ 128.460181][ T5961] [U] [ 128.471012][ T5959] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 128.486525][ T5960] [U] [ 128.489890][ T5959] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 128.669716][ T5972] loop3: detected capacity change from 0 to 256 [ 128.867808][ T5987] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 128.910997][ T5990] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 128.917376][ T5972] xt_CT: You must specify a L4 protocol and not use inversions on it [ 128.926805][ T5990] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 129.098193][ T5999] [U] [ 129.101012][ T5999] [U] [ 129.103713][ T5999] [U] [ 129.106413][ T5999] [U] [ 129.125515][ T5999] [U] [ 129.128230][ T5999] [U] [ 129.130911][ T5999] [U] [ 129.133608][ T5999] [U] [ 129.187850][ T5999] [U] [ 129.190581][ T5999] [U] [ 129.193288][ T5999] [U] [ 129.260710][ T5997] [U] [ 129.264284][ T5947] loop2: detected capacity change from 0 to 32768 [ 129.345261][ T5947] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (5947) [ 129.461158][ T5947] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 129.507379][ T5947] BTRFS info (device loop2): use zlib compression, level 3 [ 129.548934][ T5947] BTRFS info (device loop2): turning on sync discard [ 129.584275][ T5947] BTRFS info (device loop2): max_inline at 0 [ 129.621187][ T5947] BTRFS info (device loop2): enabling ssd optimizations [ 129.642395][ T6015] loop4: detected capacity change from 0 to 1024 [ 129.662045][ T5947] BTRFS info (device loop2): using spread ssd allocation scheme [ 129.701028][ T5947] BTRFS info (device loop2): using free space tree [ 129.727135][ T5947] BTRFS info (device loop2): has skinny extents [ 130.011654][ T1225] hfsplus: b-tree write err: -5, ino 4 [ 130.155051][ T6006] loop1: detected capacity change from 0 to 40427 [ 130.219280][ T25] audit: type=1804 audit(1852420501.731:16): pid=5947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2512407631/syzkaller.kuki19/149/file0/bus" dev="loop2" ino=263 res=1 errno=0 [ 130.230219][ T6006] F2FS-fs (loop1): invalid crc value [ 130.319041][ T6006] F2FS-fs (loop1): Found nat_bits in checkpoint [ 130.402265][ T6062] __nla_validate_parse: 1 callbacks suppressed [ 130.402281][ T6062] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 130.463978][ T6055] loop4: detected capacity change from 0 to 4096 [ 130.480504][ T6006] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0 [ 130.507135][ T1225] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 130.512029][ T6062] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 130.531118][ T6006] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 130.693471][ T6055] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 130.774661][ T3530] attempt to access beyond end of device [ 130.774661][ T3530] loop1: rw=2049, want=45104, limit=40427 [ 130.829295][ T6055] ntfs: volume version 3.1. [ 130.936669][ T6072] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 130.945109][ T6055] ntfs: (device loop4): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set maccenteuro. You might want to try to use the mount option nls=utf8. [ 131.032823][ T6055] ntfs: (device loop4): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 131.046213][ T6076] loop2: detected capacity change from 0 to 1024 [ 131.291064][ T299] hfsplus: b-tree write err: -5, ino 4 [ 131.378524][ T6037] loop0: detected capacity change from 0 to 40427 [ 131.524431][ T6037] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 131.532105][ T6037] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 131.764577][ T6094] overlayfs: failed to resolve './file0': -2 [ 131.947402][ T6037] F2FS-fs (loop0): invalid crc value [ 132.217585][ T6095] loop1: detected capacity change from 0 to 764 [ 132.230717][ T6037] F2FS-fs (loop0): Found nat_bits in checkpoint [ 132.366198][ T6095] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 133.227092][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.233409][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.243311][ T6037] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 133.501676][ T6037] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 133.665603][ T6119] loop3: detected capacity change from 0 to 1024 [ 133.762020][ T6125] loop4: detected capacity change from 0 to 256 [ 133.819316][ T154] hfsplus: b-tree write err: -5, ino 4 [ 133.909526][ T6125] xt_CT: You must specify a L4 protocol and not use inversions on it [ 133.951907][ T6132] loop2: detected capacity change from 0 to 256 [ 133.960862][ T6125] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 133.998849][ T6135] loop1: detected capacity change from 0 to 128 [ 134.035606][ T6132] exfat: Deprecated parameter 'utf8' [ 134.046597][ T6135] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (16076!=39978) [ 134.097395][ T6132] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 134.143766][ T6135] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 134.158921][ T25] audit: type=1800 audit(1852420505.671:17): pid=6140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1966 res=0 errno=0 [ 134.233192][ T6135] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:510: comm syz-executor.1: Block bitmap for bg 0 marked uninitialized [ 134.268208][ T6148] loop3: detected capacity change from 0 to 64 [ 134.300997][ T6150] loop4: detected capacity change from 0 to 1024 [ 134.414795][ T5681] hfsplus: b-tree write err: -5, ino 4 [ 134.469951][ T5027] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 134.499203][ T5027] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 134.562785][ T5027] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 134.785193][ T25] audit: type=1800 audit(1852420506.301:18): pid=6178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1964 res=0 errno=0 [ 135.741017][ T6191] netlink: zone id is out of range [ 135.760995][ T6191] netlink: get zone limit has 4 unknown bytes [ 136.012983][ T6208] loop1: detected capacity change from 0 to 1024 [ 136.135723][ T6208] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 136.143077][ T6208] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 136.224776][ T6204] loop0: detected capacity change from 0 to 40427 [ 136.256667][ T6208] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,errors=remount-ro,dioread_nolock,max_dir_size_kb=0x0000000000000009,nomblk_io_submit,data_err=abort,. Quota mode: writeback. [ 136.333569][ T6204] F2FS-fs (loop0): invalid crc value [ 136.395642][ T6204] F2FS-fs (loop0): Found nat_bits in checkpoint [ 136.445726][ T6204] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 136.476033][ T6224] loop2: detected capacity change from 0 to 64 [ 136.921309][ T25] audit: type=1800 audit(1852420508.291:19): pid=6228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file2" dev="loop0" ino=10 res=0 errno=0 [ 137.404824][ T5434] attempt to access beyond end of device [ 137.404824][ T5434] loop0: rw=2049, want=45112, limit=40427 [ 137.466311][ T6219] loop4: detected capacity change from 0 to 32768 [ 137.535950][ T6205] loop3: detected capacity change from 0 to 32768 [ 137.653939][ T6219] XFS (loop4): Mounting V5 Filesystem [ 137.790821][ T6205] XFS (loop3): Mounting V5 Filesystem [ 137.862167][ T6219] XFS (loop4): Ending clean mount [ 138.002347][ T6258] device bond0 entered promiscuous mode [ 138.008479][ T6205] XFS (loop3): Ending clean mount [ 138.008762][ T6258] device bond_slave_0 entered promiscuous mode [ 138.034403][ T6258] device bond_slave_1 entered promiscuous mode [ 138.051507][ T6264] netlink: zone id is out of range [ 138.060403][ T6264] netlink: get zone limit has 4 unknown bytes [ 138.064424][ T6205] XFS (loop3): Quotacheck needed: Please wait. [ 138.090930][ T4252] XFS (loop4): Unmounting Filesystem [ 138.291160][ T6205] XFS (loop3): Quotacheck: Done. [ 138.296321][ T25] audit: type=1800 audit(1852420509.801:20): pid=6269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1962 res=0 errno=0 [ 138.365265][ T6271] binder: 6270:6271 ioctl c0306201 0 returned -14 [ 138.444221][ T4445] XFS (loop3): Unmounting Filesystem [ 138.458575][ T6276] loop1: detected capacity change from 0 to 256 [ 138.569749][ T6276] FAT-fs (loop1): Unrecognized mount option "n" or missing value [ 138.609411][ T6281] loop0: detected capacity change from 0 to 64 [ 138.667639][ T6285] loop4: detected capacity change from 0 to 764 [ 138.807411][ T6276] loop1: detected capacity change from 0 to 512 [ 138.830900][ T6285] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 138.875407][ T6276] EXT4-fs error (device loop1): ext4_get_journal_inode:5159: comm syz-executor.1: inode #196608: comm syz-executor.1: iget: illegal inode # [ 139.068131][ T6276] EXT4-fs (loop1): Remounting filesystem read-only [ 139.099472][ T6276] EXT4-fs (loop1): no journal found [ 139.115260][ T25] audit: type=1800 audit(1852420510.631:21): pid=6298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1965 res=0 errno=0 [ 139.121517][ T6276] EXT4-fs (loop1): can't get journal size [ 139.330147][ T6276] EXT4-fs (loop1): failed to initialize system zone (-22) [ 139.399966][ T6311] loop0: detected capacity change from 0 to 1764 [ 139.408845][ T6276] EXT4-fs (loop1): mount failed [ 139.677672][ T6313] loop3: detected capacity change from 0 to 40427 [ 139.737277][ T6316] loop4: detected capacity change from 0 to 64 [ 139.747890][ T6313] F2FS-fs (loop3): invalid crc value [ 139.970998][ T6313] F2FS-fs (loop3): Found nat_bits in checkpoint [ 140.421744][ T6313] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 141.034611][ T25] audit: type=1800 audit(1852420512.451:22): pid=6333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file2" dev="loop3" ino=10 res=0 errno=0 [ 141.055376][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.549079][ T4445] attempt to access beyond end of device [ 141.549079][ T4445] loop3: rw=2049, want=45112, limit=40427 [ 141.618660][ T25] audit: type=1800 audit(1852420513.131:23): pid=6339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1955 res=0 errno=0 [ 141.639276][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.755415][ T25] audit: type=1326 audit(1852420513.261:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6341 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb0e523ea9 code=0x0 [ 141.860748][ T6335] loop1: detected capacity change from 0 to 32768 [ 141.973252][ T6335] XFS (loop1): Mounting V5 Filesystem [ 141.991028][ T6356] loop4: detected capacity change from 0 to 1764 [ 142.210368][ T6335] XFS (loop1): Ending clean mount [ 142.242162][ T6335] XFS (loop1): Quotacheck needed: Please wait. [ 142.894997][ T6335] XFS (loop1): Quotacheck: Done. [ 143.033557][ T6378] syz-executor.4 sent an empty control message without MSG_MORE. [ 143.088945][ T3530] XFS (loop1): Unmounting Filesystem [ 143.475024][ T6400] loop0: detected capacity change from 0 to 1764 [ 143.620137][ T6407] overlayfs: failed to resolve './file0': -2 [ 144.347285][ T6411] loop1: detected capacity change from 0 to 256 [ 144.512563][ T6418] loop3: detected capacity change from 0 to 512 [ 145.176990][ T6411] FAT-fs (loop1): Directory bread(block 64) failed [ 145.187844][ T6418] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 145.200047][ T6411] FAT-fs (loop1): Directory bread(block 65) failed [ 145.215488][ T6418] EXT4-fs (loop3): Test dummy encryption mode enabled [ 145.222585][ T6418] EXT4-fs (loop3): Test dummy encryption mode enabled [ 145.235047][ T6418] EXT4-fs (loop3): Mount option "journal_async_commit" incompatible with ext3 [ 145.286955][ T6411] FAT-fs (loop1): Directory bread(block 66) failed [ 145.295927][ T6411] FAT-fs (loop1): Directory bread(block 67) failed [ 145.302636][ T6411] FAT-fs (loop1): Directory bread(block 68) failed [ 145.310648][ T6411] FAT-fs (loop1): Directory bread(block 69) failed [ 145.320757][ T6426] mmap: syz-executor.0 (6426) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 145.322969][ T6411] FAT-fs (loop1): Directory bread(block 70) failed [ 145.363238][ T6426] 9pnet: Insufficient options for proto=fd [ 145.373732][ T6411] FAT-fs (loop1): Directory bread(block 71) failed [ 145.401613][ T6411] FAT-fs (loop1): Directory bread(block 72) failed [ 145.411968][ T6418] loop3: detected capacity change from 0 to 1024 [ 145.448421][ T6411] FAT-fs (loop1): Directory bread(block 73) failed [ 145.535629][ T6418] hfsplus: xattr searching failed [ 145.654651][ T6435] loop4: detected capacity change from 0 to 8 [ 145.679252][ T6435] squashfs image failed sanity check [ 145.799185][ T6441] loop1: detected capacity change from 0 to 16 [ 145.879827][ T6424] loop2: detected capacity change from 0 to 32768 [ 145.880449][ T6441] erofs: (device loop1): mounted with root inode @ nid 36. [ 145.904260][ T5112] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 146.005796][ T6424] XFS (loop2): Mounting V5 Filesystem [ 146.099524][ T6424] XFS (loop2): Ending clean mount [ 146.166415][ T3532] XFS (loop2): Unmounting Filesystem [ 146.199873][ T6435] loop4: detected capacity change from 0 to 32768 [ 146.250021][ T6454] loop1: detected capacity change from 0 to 1764 [ 146.285420][ T6435] BTRFS: device fsid d552757d-9c39-40e3-95f0-16d819589928 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (6435) [ 146.304596][ T5112] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 146.316079][ T5112] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 146.322059][ T6435] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 146.328834][ T5112] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 146.342690][ T6435] BTRFS info (device loop4): use zlib compression, level 3 [ 146.351549][ T5112] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 146.364395][ T6435] BTRFS info (device loop4): turning on sync discard [ 146.382964][ T5112] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.383415][ T6435] BTRFS info (device loop4): max_inline at 0 [ 146.401794][ T5112] usb 1-1: config 0 descriptor?? [ 146.418359][ T6435] BTRFS info (device loop4): enabling ssd optimizations [ 146.434476][ T6435] BTRFS info (device loop4): using spread ssd allocation scheme [ 146.454513][ T6434] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 146.499697][ T6435] BTRFS info (device loop4): using free space tree [ 146.541513][ T6435] BTRFS info (device loop4): has skinny extents [ 146.956477][ T5112] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 147.343766][ T5112] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 147.371622][ T5112] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 147.395754][ T5112] usb 1-1: USB disconnect, device number 5 [ 147.401148][ T6478] loop2: detected capacity change from 0 to 512 [ 147.525549][ T6478] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 147.538963][ T6478] EXT4-fs (loop2): Test dummy encryption mode enabled [ 147.549373][ T6478] EXT4-fs (loop2): Test dummy encryption mode enabled [ 147.560570][ T6478] EXT4-fs (loop2): Mount option "journal_async_commit" incompatible with ext3 [ 147.634015][ T25] audit: type=1804 audit(1852420519.141:25): pid=6435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4272716916/syzkaller.XsJaME/128/file0/bus" dev="loop4" ino=263 res=1 errno=0 [ 147.743190][ T6478] loop2: detected capacity change from 0 to 1024 [ 147.797967][ T6478] hfsplus: xattr searching failed [ 147.916540][ T3590] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 148.117763][ T4323] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 148.257415][ T5109] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 148.375981][ T4323] usb 2-1: Using ep0 maxpacket: 8 [ 148.514364][ T4323] usb 2-1: config 0 has no interfaces? [ 148.562218][ T6510] loop3: detected capacity change from 0 to 32768 [ 148.615931][ T4323] usb 2-1: config 0 has no interfaces? [ 148.645632][ T5109] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.666910][ T5109] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.714329][ T4323] usb 2-1: config 0 has no interfaces? [ 148.774336][ T5109] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 148.787990][ T5109] usb 3-1: New USB device strings: Mfr=8, Product=0, SerialNumber=0 [ 148.798285][ T5109] usb 3-1: Manufacturer: syz [ 148.814559][ T5109] usb 3-1: config 0 descriptor?? [ 148.904380][ T4323] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 148.916672][ T4323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.925433][ T4323] usb 2-1: Product: syz [ 148.930318][ T4323] usb 2-1: Manufacturer: syz [ 148.940304][ T4323] usb 2-1: SerialNumber: syz [ 148.945280][ T13] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 148.970575][ T4323] usb 2-1: config 0 descriptor?? [ 149.219981][ T6497] loop1: detected capacity change from 0 to 256 [ 149.335405][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 149.335466][ T6497] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 149.359551][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 149.370797][ T6497] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 149.374195][ T5112] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 149.404515][ T13] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 149.410716][ T4418] usb 2-1: USB disconnect, device number 4 [ 149.434159][ T13] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 149.464078][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.483014][ T13] usb 1-1: config 0 descriptor?? [ 149.507490][ T6528] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 149.614292][ T5109] usbhid 3-1:0.0: can't add hid device: -71 [ 149.620939][ T5109] usbhid: probe of 3-1:0.0 failed with error -71 [ 149.648323][ T5109] usb 3-1: USB disconnect, device number 5 [ 149.754315][ T5112] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 149.770411][ T5112] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 149.781150][ T5112] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 149.799506][ T5112] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 149.809305][ T5112] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.826685][ T5112] usb 4-1: config 0 descriptor?? [ 149.965878][ T13] plantronics 0003:047F:FFFF.0005: unknown main item tag 0xd [ 149.984407][ T13] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 150.008978][ T13] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 150.159562][ T6547] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 150.277153][ T13] usb 1-1: USB disconnect, device number 6 [ 150.308171][ T5112] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 150.322325][ T5112] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 150.353621][ T5112] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 151.193589][ T6554] loop0: detected capacity change from 0 to 32768 [ 151.877259][ T6558] ODEBUG: Out of memory. ODEBUG disabled [ 152.463636][ T6558] syz-executor.0 (6558): drop_caches: 2 [ 152.775845][ T6562] loop3: detected capacity change from 0 to 256 [ 152.901439][ T6562] FAT-fs (loop3): Directory bread(block 64) failed [ 152.924126][ T6562] FAT-fs (loop3): Directory bread(block 65) failed [ 152.931009][ T6562] FAT-fs (loop3): Directory bread(block 66) failed [ 152.942779][ T6562] FAT-fs (loop3): Directory bread(block 67) failed [ 152.949712][ T6562] FAT-fs (loop3): Directory bread(block 68) failed [ 152.961582][ T6562] FAT-fs (loop3): Directory bread(block 69) failed [ 152.961866][ T5112] usb 4-1: USB disconnect, device number 5 [ 152.968732][ T6562] FAT-fs (loop3): Directory bread(block 70) failed [ 152.980978][ T6562] FAT-fs (loop3): Directory bread(block 71) failed [ 152.997842][ T6562] FAT-fs (loop3): Directory bread(block 72) failed [ 153.008782][ T6562] FAT-fs (loop3): Directory bread(block 73) failed [ 153.048727][ T6562] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 155.314132][ T1069] Bluetooth: hci1: command 0x0409 tx timeout [ 157.394181][ T4418] Bluetooth: hci1: command 0x041b tx timeout [ 159.474155][ T5112] Bluetooth: hci1: command 0x040f tx timeout [ 161.554403][ T4418] Bluetooth: hci1: command 0x0419 tx timeout [ 175.794153][ T4418] Bluetooth: hci4: command 0x0406 tx timeout [ 175.794611][ T1069] Bluetooth: hci3: command 0x0406 tx timeout [ 181.634121][ T4418] Bluetooth: hci5: command 0x0409 tx timeout [ 182.354133][ T1069] Bluetooth: hci7: command 0x0409 tx timeout [ 182.360176][ T1069] Bluetooth: hci6: command 0x0409 tx timeout [ 183.714150][ T4418] Bluetooth: hci5: command 0x041b tx timeout [ 184.434136][ T5112] Bluetooth: hci6: command 0x041b tx timeout [ 184.441080][ T5112] Bluetooth: hci7: command 0x041b tx timeout [ 184.674147][ T4418] Bluetooth: hci8: command 0x0409 tx timeout [ 185.794150][ T4418] Bluetooth: hci5: command 0x040f tx timeout [ 186.514316][ T4418] Bluetooth: hci7: command 0x040f tx timeout [ 186.521146][ T4418] Bluetooth: hci6: command 0x040f tx timeout [ 186.754143][ T5112] Bluetooth: hci8: command 0x041b tx timeout [ 187.884166][ T4418] Bluetooth: hci5: command 0x0419 tx timeout [ 188.594147][ T4418] Bluetooth: hci6: command 0x0419 tx timeout [ 188.600218][ T4418] Bluetooth: hci7: command 0x0419 tx timeout [ 188.834124][ T4418] Bluetooth: hci8: command 0x040f tx timeout [ 190.914109][ T5112] Bluetooth: hci8: command 0x0419 tx timeout [ 194.204505][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.210813][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.394134][ T5112] Bluetooth: hci0: command 0x0406 tx timeout [ 220.354186][ T4323] Bluetooth: hci9: command 0x0409 tx timeout [ 222.434108][ T13] Bluetooth: hci9: command 0x041b tx timeout [ 224.514238][ T1069] Bluetooth: hci9: command 0x040f tx timeout [ 226.594111][ T4323] Bluetooth: hci9: command 0x0419 tx timeout [ 232.114240][ T4323] Bluetooth: hci2: command 0x0406 tx timeout [ 246.684223][ T4323] Bluetooth: hci10: command 0x0409 tx timeout [ 247.395528][ T13] Bluetooth: hci12: command 0x0409 tx timeout [ 247.400926][ T5494] Bluetooth: hci11: command 0x0409 tx timeout [ 248.754156][ T1069] Bluetooth: hci10: command 0x041b tx timeout [ 249.474311][ T13] Bluetooth: hci11: command 0x041b tx timeout [ 249.480904][ T13] Bluetooth: hci12: command 0x041b tx timeout [ 249.794133][ T13] Bluetooth: hci13: command 0x0409 tx timeout [ 250.834098][ T4418] Bluetooth: hci10: command 0x040f tx timeout [ 251.554152][ T13] Bluetooth: hci12: command 0x040f tx timeout [ 251.560864][ T13] Bluetooth: hci11: command 0x040f tx timeout [ 251.874116][ T4323] Bluetooth: hci13: command 0x041b tx timeout [ 252.914215][ T4323] Bluetooth: hci10: command 0x0419 tx timeout [ 253.634123][ T4323] Bluetooth: hci11: command 0x0419 tx timeout [ 253.643699][ T4323] Bluetooth: hci12: command 0x0419 tx timeout [ 253.954133][ T13] Bluetooth: hci13: command 0x040f tx timeout [ 255.644352][ T1377] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.650651][ T1377] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.044153][ T13] Bluetooth: hci13: command 0x0419 tx timeout [ 278.194268][ T4323] Bluetooth: hci1: command 0x0406 tx timeout [ 285.394210][ T13] Bluetooth: hci14: command 0x0409 tx timeout [ 287.474110][ T5494] Bluetooth: hci14: command 0x041b tx timeout [ 289.554118][ T5494] Bluetooth: hci14: command 0x040f tx timeout [ 291.634204][ T4418] Bluetooth: hci14: command 0x0419 tx timeout [ 294.674410][ T27] INFO: task syz-executor.1:6544 blocked for more than 143 seconds. [ 294.682415][ T27] Not tainted 5.15.160-syzkaller #0 [ 294.701974][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 294.710973][ T27] task:syz-executor.1 state:D stack:26424 pid: 6544 ppid: 3530 flags:0x00004006 2028/09/13 01:17:46 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 294.725404][ T27] Call Trace: [ 294.728867][ T27] [ 294.752924][ T27] __schedule+0x12c4/0x45b0 [ 294.778675][ T27] ? release_firmware_map_entry+0x190/0x190 [ 294.784849][ T27] ? __mutex_trylock_common+0x8d/0x2e0 [ 294.790325][ T27] ? do_raw_spin_unlock+0x137/0x8b0 [ 294.804183][ T27] schedule+0x11b/0x1f0 [ 294.808356][ T27] schedule_preempt_disabled+0xf/0x20 [ 294.813723][ T27] __mutex_lock_common+0xe34/0x25a0 [ 294.850830][ T27] ? rtnetlink_rcv_msg+0x94c/0xee0 [ 294.878713][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 294.883965][ T27] mutex_lock_nested+0x17/0x20 [ 294.889086][ T27] rtnetlink_rcv_msg+0x94c/0xee0 [ 294.898613][ T27] ? rtnetlink_bind+0x80/0x80 [ 294.903309][ T27] ? __local_bh_enable_ip+0x164/0x1f0 [ 294.909047][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 294.919053][ T27] ? __local_bh_enable_ip+0x164/0x1f0 [ 294.924676][ T27] ? local_bh_enable+0x5/0x20 [ 294.929358][ T27] ? _local_bh_enable+0xa0/0xa0 [ 294.938923][ T27] ? __dev_queue_xmit+0x1c56/0x3230 [ 294.944401][ T27] ? __copy_skb_header+0x47b/0x600 [ 294.949520][ T27] ? dev_queue_xmit+0x20/0x20 [ 294.959520][ T27] ? memcpy+0x3c/0x60 [ 294.963518][ T27] ? __copy_skb_header+0x47b/0x600 [ 294.970046][ T27] netlink_rcv_skb+0x1cf/0x410 [ 294.979336][ T27] ? rtnetlink_bind+0x80/0x80 [ 294.984270][ T27] ? netlink_ack+0xb10/0xb10 [ 294.988883][ T27] netlink_unicast+0x7b6/0x980 [ 294.993653][ T27] ? netlink_detachskb+0x90/0x90 [ 295.003584][ T27] ? __virt_addr_valid+0x39e/0x450 [ 295.028405][