last executing test programs: 4.601137054s ago: executing program 4 (id=1695): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000fc0)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000003e40)={0x0, 0x0, &(0x7f0000003e00)={&(0x7f0000000000)={0x24, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x24}}, 0x0) 4.144287235s ago: executing program 4 (id=1708): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = syz_io_uring_setup(0xf03, &(0x7f0000000080)={0x0, 0x0, 0x800}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000340)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r1, 0x0, &(0x7f0000000180)='/', 0x1, 0x2110}) io_uring_enter(r2, 0x2, 0x0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x0, 0x2, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void, @val={0xc, 0x99, {0xdf, 0x7d}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4d0) 4.001952357s ago: executing program 4 (id=1700): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = fanotify_init(0xf00, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) fanotify_mark(r1, 0x105, 0x1800003a, r2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.808376944s ago: executing program 1 (id=1701): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$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") r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="b3019c28", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000140)=0x10001, 0x4) recvmmsg(r0, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000000c0)=@nl, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)=""/186}, {0xffffffffffffffff}], 0x0, &(0x7f0000000280)=""/239}}, {{&(0x7f0000000e80)=@vsock={0x28, 0x0, 0x0, @host}, 0x0, &(0x7f0000000680)=[{&(0x7f0000000400)=""/18}, {&(0x7f0000000440)=""/110}, {&(0x7f00000004c0)=""/165}, {&(0x7f0000001540)=""/4096}, {&(0x7f0000000580)=""/245}], 0x0, &(0x7f0000000700)=""/27}}, {{&(0x7f0000000740)=@nfc, 0x0, &(0x7f0000000c00), 0x0, &(0x7f0000000cc0)=""/180}}], 0x4000000000001f1, 0x10162, 0x0) 3.808067614s ago: executing program 4 (id=1703): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r1, r0, 0x0, 0x20000023893) 3.676654965s ago: executing program 4 (id=1705): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x0) syz_emit_ethernet(0x1162, &(0x7f0000001b00)=ANY=[@ANYBLOB="01"], 0x0) 3.40205972s ago: executing program 1 (id=1709): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4}}}]}]}], {0x14}}, 0x50}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000000000000014001a80100004800c00088008"], 0x34}}, 0x0) 3.267992622s ago: executing program 1 (id=1710): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000010, &(0x7f0000000080), 0x1, 0x513, &(0x7f00000010c0)="$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") r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000000)='./file1\x00', 0x80000000) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='user.incfs.metadata\x00') 3.267851422s ago: executing program 2 (id=1711): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x221}, 0x14}}, 0x0) 3.267784212s ago: executing program 4 (id=1712): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1008002, &(0x7f0000000280), 0x1, 0x5d8, &(0x7f0000001200)="$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") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) quotactl$Q_GETINFO(0xffffffff80000501, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 3.266862652s ago: executing program 0 (id=1720): prctl$PR_SET_SECUREBITS(0x1c, 0x1e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r1, r1, 0x0) syz_mount_image$reiserfs(&(0x7f0000000540), &(0x7f00000002c0)='./file0\x00', 0x10010, &(0x7f00000001c0), 0xfa, 0x1119, &(0x7f0000003600)="$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") 3.143829123s ago: executing program 2 (id=1713): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0) ftruncate(r0, 0x3292e291) 3.010250614s ago: executing program 2 (id=1714): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000001c0)={0x0, 0x10}, &(0x7f0000000200)=0x8) 2.49032296s ago: executing program 0 (id=1716): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000010c0)="a7", 0x1, 0x20004010, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2, 0xfffffffe}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="9d", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e22, 0xee55, @private2}, 0x1c) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000002140)=""/4080, &(0x7f0000001080)=0xff0) 2.414351267s ago: executing program 1 (id=1717): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000980)=ANY=[@ANYBLOB="bcea"]) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCRMFF(r1, 0x40044581, 0x0) 2.294278537s ago: executing program 0 (id=1718): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000005, 0x12, r1, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2711, 0x0, &(0x7f0000000040)=0x4f) 2.146138671s ago: executing program 0 (id=1719): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x40, &(0x7f0000006940)=ANY=[@ANYRES8=0x0], 0x6, 0x6297, &(0x7f0000012e80)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) rename(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)='./bus\x00') r0 = open(&(0x7f0000001780)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x3000}], 0x1, 0x7800, 0x0, 0x3) 2.075617167s ago: executing program 2 (id=1722): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@ref_verify}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x224805, 0x0, 0x0, 0x0, &(0x7f0000000bc0)) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fsync(r0) 2.071488147s ago: executing program 3 (id=1723): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x1c, 0x1a, 0x0, 0x0, 0x0, {0xa}}, 0x1c}}, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x11, &(0x7f00000077c0)={r1}, 0x8) 1.943676509s ago: executing program 3 (id=1724): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, r2, 0x11, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 1.874634815s ago: executing program 3 (id=1725): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x401, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port1\x00', 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}) dup3(r0, r1, 0x0) 1.768777864s ago: executing program 3 (id=1726): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000e40), 0xffffffffffffffff) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000440)={0x1c, r1, 0x305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) 1.36134675s ago: executing program 0 (id=1727): syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f00000000c0)='./bus\x00', 0x8, &(0x7f0000000640)={[{@nogc_merge}, {@checkpoint_diasble}, {@alloc_mode_def}, {@fastboot}, {@inline_data}, {@nogc_merge}, {@inline_data}, {@acl}, {@heap}, {@noinline_data}, {@noextent_cache}, {@compress_chksum}, {@jqfmt_vfsold}, {@noextent_cache}, {@nouser_xattr}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) symlinkat(&(0x7f0000000380)='./file8/file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') renameat2(0xffffffffffffff9c, &(0x7f00000008c0)='./file4\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file7\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file7\x00', 0x2) 1.36109905s ago: executing program 3 (id=1728): syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000000140)='./file0\x00', 0x200800, &(0x7f0000000380)={[{@lazytime}, {@inode32}, {@filestreams}, {@pquota}, {@inode64}, {@uquota}, {@noikeep}, {@attr2}, {@inode32}]}, 0x6, 0x9606, &(0x7f0000009680)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000014c0)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x9, 0x4800003e, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) 270.075046ms ago: executing program 1 (id=1729): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05030500d3fc030000004788031c", 0xe, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 269.957326ms ago: executing program 2 (id=1730): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000010c0)="a7", 0x1, 0x20004010, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2, 0xfffffffe}, 0x1c) sendto$inet6(r0, &(0x7f0000000000)="9d", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e22, 0xee55, @private2}, 0x1c) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000002140)=""/4080, &(0x7f0000001080)=0xff0) 186.335323ms ago: executing program 3 (id=1731): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000040)={r1, &(0x7f00000007c0), 0x20000004}, 0x20) 113.60906ms ago: executing program 1 (id=1732): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000480)={[{@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@data_err_ignore}]}, 0x3, 0x4db, &(0x7f0000000500)="$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") mknod$loop(&(0x7f00000000c0)='./bus\x00', 0x400, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='pids.current\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xc, r1}) 115.69µs ago: executing program 0 (id=1733): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x31) r2 = io_uring_setup(0x1d7f, &(0x7f00000004c0)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0xd, 0x0, 0x0) 0s ago: executing program 2 (id=1734): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000004000000000000000000190095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001840)={r0, r2, 0x25, 0x0, @val=@netfilter}, 0x40) syz_emit_ethernet(0xfdef, &(0x7f00000000c0)=ANY=[], 0x0) kernel console output (not intermixed with test programs): fferent from the interface descriptor's value: 9 [ 176.164921][ T26] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 176.166972][ T6595] device bridge_slave_0 entered promiscuous mode [ 176.184894][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.210125][ T26] usb 2-1: config 0 descriptor?? [ 176.229212][ T6595] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.279270][ T6595] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.295022][ T6618] XFS (loop2): Ending clean mount [ 176.308583][ T6595] device bridge_slave_1 entered promiscuous mode [ 176.458394][ T6595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.469706][ T4707] XFS (loop2): Unmounting Filesystem [ 176.511259][ T6595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.695134][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 176.703730][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 176.725000][ T6595] team0: Port device team_slave_0 added [ 176.731760][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 176.741022][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 176.749040][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 176.762588][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 176.775010][ T6648] loop3: detected capacity change from 0 to 64 [ 176.783274][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 176.791470][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 176.799152][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 176.806796][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 176.815777][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 176.824837][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 176.836914][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 176.844384][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 176.852468][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 176.860478][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 176.868673][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 176.876116][ T3654] Bluetooth: hci5: command tx timeout [ 176.882321][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 176.889989][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 176.915981][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 176.933330][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 176.943371][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 176.959268][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 176.972087][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 176.982075][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 176.994423][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 177.004599][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 177.021966][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 177.031969][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 177.044239][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 177.054340][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 177.069070][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 177.080345][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 177.091468][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 177.102485][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 177.113714][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 177.131459][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 177.140353][ T26] plantronics 0003:047F:FFFF.0007: unknown main item tag 0x0 [ 177.154654][ T26] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 177.204358][ T26] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 177.218900][ T6650] loop4: detected capacity change from 0 to 32768 [ 177.224136][ T26] usb 2-1: USB disconnect, device number 10 [ 177.266837][ T6650] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1074 (6650) [ 177.306400][ T6650] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 177.331131][ T6650] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 177.339464][ T6595] team0: Port device team_slave_1 added [ 177.369267][ T6650] BTRFS info (device loop4): using free space tree [ 177.448699][ T6595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.455746][ T6595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.482959][ T6595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.518909][ T6595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.527483][ T6595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.554247][ T6650] BTRFS info (device loop4): enabling ssd optimizations [ 177.555156][ T6595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.747365][ T6595] device hsr_slave_0 entered promiscuous mode [ 177.759370][ T6595] device hsr_slave_1 entered promiscuous mode [ 177.788230][ T6595] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.834041][ T6595] Cannot create hsr debugfs directory [ 177.882226][ T4026] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 177.890554][ T6678] loop3: detected capacity change from 0 to 1024 [ 178.371306][ T51] hfsplus: b-tree write err: -5, ino 4 [ 178.477893][ T6691] loop2: detected capacity change from 0 to 256 [ 178.495706][ T6691] exfat: Deprecated parameter 'utf8' [ 178.509485][ T6691] exfat: Deprecated parameter 'utf8' [ 178.515060][ T6691] exfat: Deprecated parameter 'namecase' [ 178.541977][ T6691] exfat: Deprecated parameter 'utf8' [ 178.569914][ T6691] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001213e, chksum : 0xd5e0710c, utbl_chksum : 0xe619d30d) [ 178.946216][ T3655] Bluetooth: hci5: command tx timeout [ 179.382824][ T4047] device hsr_slave_0 left promiscuous mode [ 179.404197][ T4047] device hsr_slave_1 left promiscuous mode [ 179.424678][ T4047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.432537][ T4240] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 179.456587][ T4047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.484879][ T4047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.488576][ T6733] loop4: detected capacity change from 0 to 128 [ 179.514886][ T4047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.534610][ T4047] device bridge_slave_1 left promiscuous mode [ 179.536986][ T6733] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 179.543929][ T4047] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.550053][ T6733] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038 (0x7fffffff) [ 179.568399][ T4047] device bridge_slave_0 left promiscuous mode [ 179.574850][ T4047] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.633896][ T4047] device veth1_macvtap left promiscuous mode [ 179.653572][ T4047] device veth0_macvtap left promiscuous mode [ 179.662315][ T4047] device veth1_vlan left promiscuous mode [ 179.680467][ T4047] device veth0_vlan left promiscuous mode [ 179.686589][ T4240] usb 3-1: Using ep0 maxpacket: 8 [ 179.760312][ T4026] EXT4-fs (loop4): unmounting filesystem. [ 179.806243][ T4240] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 179.814768][ T4240] usb 3-1: config 179 has no interface number 0 [ 179.826814][ T4240] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 179.851684][ T4240] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 179.865420][ T4240] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 179.876710][ T4240] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 179.889033][ T4240] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 179.902399][ T4240] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 179.911671][ T4240] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.946211][ T6716] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 180.265032][ T4240] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input15 [ 180.611466][ T4047] team0 (unregistering): Port device team_slave_1 removed [ 180.674673][ T4047] team0 (unregistering): Port device team_slave_0 removed [ 180.734055][ T4047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.799067][ T4047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.911429][ T14] usb 3-1: USB disconnect, device number 7 [ 180.916000][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 180.926178][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 180.941724][ T14] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 181.026145][ T3655] Bluetooth: hci5: command tx timeout [ 181.105567][ T6748] loop2: detected capacity change from 0 to 4096 [ 181.115289][ T6748] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 181.201463][ T6748] ntfs3: loop2: ino=1f, "bus" ntfs_iget5 [ 181.285386][ T4707] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22. [ 181.293091][ T4707] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22. [ 181.319181][ T4707] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 181.532027][ T4047] bond0 (unregistering): Released all slaves [ 181.763116][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1109'. [ 181.777383][ T6757] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1109'. [ 182.280237][ T6595] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 182.297228][ T6770] loop4: detected capacity change from 0 to 128 [ 182.320540][ T6595] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 182.351803][ T6595] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 182.385325][ T6595] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 182.440752][ T6770] syz.4.1115: attempt to access beyond end of device [ 182.440752][ T6770] loop4: rw=2049, sector=128, nr_sectors = 1 limit=128 [ 182.490271][ T6770] Buffer I/O error on dev loop4, logical block 128, lost async page write [ 182.522538][ T6770] syz.4.1115: attempt to access beyond end of device [ 182.522538][ T6770] loop4: rw=2049, sector=145, nr_sectors = 10 limit=128 [ 182.614148][ T6595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.636136][ T6776] loop3: detected capacity change from 0 to 512 [ 182.657812][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 182.671420][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.672741][ T6776] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1118: invalid indirect mapped block 256 (level 2) [ 182.725373][ T6776] EXT4-fs (loop3): Remounting filesystem read-only [ 182.740538][ T6776] EXT4-fs (loop3): 2 truncates cleaned up [ 182.746814][ T6595] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.755924][ T6776] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 182.856191][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 182.880762][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 182.926699][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.933909][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.966235][ T3645] EXT4-fs (loop3): unmounting filesystem. [ 182.969134][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 183.012797][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.052830][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.060029][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.092850][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 183.106204][ T3654] Bluetooth: hci5: command tx timeout [ 183.173223][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 183.176168][ T27] audit: type=1326 audit(1726197177.450:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6791 comm="syz.4.1125" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21f697def9 code=0x0 [ 183.187512][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 183.285538][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 183.313988][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.339406][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 183.365280][ T6795] loop3: detected capacity change from 0 to 4096 [ 183.370557][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.381868][ T6795] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 183.398536][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 183.432768][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 183.457205][ T6795] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 183.459049][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 183.494048][ T6795] ntfs3: loop3: ino=1e, "file1" attr_set_size [ 183.499915][ T6595] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.522295][ T6595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 183.545610][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 183.564894][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 183.668697][ T6774] loop1: detected capacity change from 0 to 40427 [ 183.685483][ T6774] F2FS-fs (loop1): invalid crc value [ 183.703331][ T6774] F2FS-fs (loop1): Found nat_bits in checkpoint [ 183.782729][ T6774] F2FS-fs (loop1): Start checkpoint disabled! [ 183.807447][ T6774] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 183.920193][ T6774] syz.1.1117: attempt to access beyond end of device [ 183.920193][ T6774] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 184.097383][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 184.126280][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 184.141776][ T6796] loop2: detected capacity change from 0 to 40427 [ 184.152403][ T6796] F2FS-fs (loop2): invalid crc value [ 184.155377][ T6595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.160256][ T6796] F2FS-fs (loop2): Found nat_bits in checkpoint [ 184.231852][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 184.243635][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 184.269762][ T33] kworker/u4:2: attempt to access beyond end of device [ 184.269762][ T33] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 184.288949][ T6796] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 184.300127][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 184.321350][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 184.342542][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 184.374750][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 184.393290][ T6595] device veth0_vlan entered promiscuous mode [ 184.407887][ T4707] syz-executor: attempt to access beyond end of device [ 184.407887][ T4707] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 184.443337][ T6595] device veth1_vlan entered promiscuous mode [ 184.484641][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 184.503815][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 184.514150][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 184.531345][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 184.545656][ T6595] device veth0_macvtap entered promiscuous mode [ 184.599016][ T6595] device veth1_macvtap entered promiscuous mode [ 184.625393][ T6595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.644907][ T6595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.655538][ T6595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.672099][ T6595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.685049][ T6595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.709117][ T6595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.732369][ T6595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.756151][ T6595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.804940][ T6595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.820222][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 184.832811][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 184.852141][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 184.896825][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 184.924431][ T6595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.955177][ T6595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.973463][ T6824] loop4: detected capacity change from 0 to 512 [ 184.980016][ T6595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.991816][ T6595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.015641][ T6595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.030824][ T6595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.044753][ T6595] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.056771][ T6595] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.073496][ T6595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.090914][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 185.103717][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 185.134490][ T6595] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.168720][ T6595] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.175365][ T6824] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #3: comm syz.4.1134: corrupted inode contents [ 185.179773][ T6595] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.199228][ T6595] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.266077][ T6824] EXT4-fs error (device loop4): ext4_dirty_inode:6086: inode #3: comm syz.4.1134: mark_inode_dirty error [ 185.322719][ T6824] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #3: comm syz.4.1134: corrupted inode contents [ 185.367471][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.380132][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.382350][ T6824] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #3: comm syz.4.1134: mark_inode_dirty error [ 185.405933][ T6837] loop1: detected capacity change from 0 to 1024 [ 185.421199][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 185.438311][ T6824] Quota error (device loop4): write_blk: dquota write failed [ 185.451360][ T1069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.465722][ T1069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.484493][ T6824] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 185.507709][ T6824] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.1134: Failed to acquire dquot type 0 [ 185.520939][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 185.574231][ T6824] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.1134: corrupted inode contents [ 185.597283][ T6824] EXT4-fs error (device loop4): ext4_dirty_inode:6086: inode #16: comm syz.4.1134: mark_inode_dirty error [ 185.630218][ T6824] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.1134: corrupted inode contents [ 185.663547][ T6824] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #16: comm syz.4.1134: mark_inode_dirty error [ 185.697096][ T6824] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.1134: corrupted inode contents [ 185.734686][ T6824] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 185.761884][ T6824] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #16: comm syz.4.1134: corrupted inode contents [ 185.774215][ T6837] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6 [ 185.782940][ T6824] EXT4-fs error (device loop4): ext4_truncate:4311: inode #16: comm syz.4.1134: mark_inode_dirty error [ 185.797513][ T6824] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 185.813087][ T6824] EXT4-fs (loop4): 1 truncate cleaned up [ 185.836741][ T6824] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 185.843706][ T6851] loop2: detected capacity change from 0 to 2048 [ 185.862113][ T6824] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038 (0x7fffffff) [ 185.884504][ T6851] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 186.177018][ T6857] loop0: detected capacity change from 0 to 1024 [ 186.184143][ T6857] EXT4-fs: Ignoring removed orlov option [ 186.210565][ T6857] EXT4-fs: Ignoring removed nomblk_io_submit option [ 186.262746][ T4026] EXT4-fs (loop4): unmounting filesystem. [ 186.282144][ T33] Quota error (device loop4): do_check_range: Getting block 3925999616 out of range 1-5 [ 186.324350][ T6857] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 186.347465][ T33] EXT4-fs error (device loop4): ext4_release_dquot:6823: comm kworker/u4:2: Failed to release dquot type 0 [ 186.378481][ T33] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 186.404514][ T33] EXT4-fs error (device loop4): ext4_release_dquot:6823: comm kworker/u4:2: Failed to release dquot type 1 [ 186.572098][ T6595] EXT4-fs (loop0): unmounting filesystem. [ 186.665490][ T6880] loop0: detected capacity change from 0 to 256 [ 186.677961][ T6880] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 186.696106][ T14] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 186.705270][ T6880] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 186.734562][ T6880] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 186.745238][ T6880] UDF-fs: Scanning with blocksize 512 failed [ 186.757945][ T6880] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 186.777494][ T6880] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 186.839391][ T6884] loop2: detected capacity change from 0 to 1024 [ 186.966238][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 187.286546][ T14] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 187.323690][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.343884][ T14] usb 2-1: Product: syz [ 187.360991][ T14] usb 2-1: Manufacturer: syz [ 187.365759][ T14] usb 2-1: SerialNumber: syz [ 187.389177][ T14] usb 2-1: config 0 descriptor?? [ 187.439045][ T6911] loop4: detected capacity change from 0 to 1024 [ 187.459331][ T6911] EXT4-fs: Ignoring removed oldalloc option [ 187.504197][ T6911] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 187.559003][ T6918] loop2: detected capacity change from 0 to 764 [ 187.568671][ T6918] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 187.648489][ T4026] EXT4-fs (loop4): unmounting filesystem. [ 187.863707][ T6928] loop2: detected capacity change from 0 to 64 [ 187.981614][ T6900] loop3: detected capacity change from 0 to 32768 [ 188.061463][ T6900] XFS (loop3): Mounting V5 Filesystem [ 188.078904][ T14] peak_usb 2-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 188.089177][ T14] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 188.102418][ T14] peak_usb 2-1:0.0 can0: sending command failure: -22 [ 188.196727][ T14] peak_usb: probe of 2-1:0.0 failed with error -22 [ 188.287173][ T6900] XFS (loop3): Ending clean mount [ 188.311932][ T26] usb 2-1: USB disconnect, device number 11 [ 188.406808][ T3645] XFS (loop3): Unmounting Filesystem [ 188.495992][ T6953] binder: 6952:6953 ioctl c0306201 200001c0 returned -14 [ 189.154150][ T6970] Bluetooth: MGMT ver 1.22 [ 189.487080][ T6955] loop2: detected capacity change from 0 to 40427 [ 189.509923][ T6955] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 189.536511][ T6955] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 189.673460][ T6955] F2FS-fs (loop2): Found nat_bits in checkpoint [ 189.806552][ T6955] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 189.883570][ T6955] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 189.906646][ T6955] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 189.948055][ T6955] F2FS-fs (loop2): Found FS corruption, run fsck to fix. [ 190.193025][ T6974] loop3: detected capacity change from 0 to 32768 [ 190.207200][ T6974] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1192 (6974) [ 190.207915][ T6993] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1198'. [ 190.256617][ T6974] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 190.291536][ T6974] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 190.313367][ T6974] BTRFS info (device loop3): setting nodatacow, compression disabled [ 190.352145][ T6974] BTRFS info (device loop3): enabling auto defrag [ 190.358739][ T6974] BTRFS info (device loop3): max_inline at 0 [ 190.364760][ T6974] BTRFS info (device loop3): using free space tree [ 190.406097][ T4233] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 190.607396][ T6982] loop1: detected capacity change from 0 to 32768 [ 190.666088][ T4233] usb 1-1: Using ep0 maxpacket: 32 [ 190.687789][ T6982] XFS (loop1): Mounting V5 Filesystem [ 190.726580][ T14] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 190.834273][ T6982] XFS (loop1): Ending clean mount [ 190.851375][ T6982] XFS (loop1): Quotacheck needed: Please wait. [ 190.911728][ T6982] XFS (loop1): Quotacheck: Done. [ 190.946242][ T4233] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 190.955363][ T4233] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.985953][ T3645] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 190.988135][ T4233] usb 1-1: Product: syz [ 191.000483][ T4233] usb 1-1: Manufacturer: syz [ 191.005209][ T4233] usb 1-1: SerialNumber: syz [ 191.061482][ T4233] usb 1-1: config 0 descriptor?? [ 191.132224][ T14] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 191.143941][ T14] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 191.169657][ T14] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 191.195981][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.258434][ T6999] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 191.397599][ T3638] XFS (loop1): Unmounting Filesystem [ 191.435328][ T7003] loop4: detected capacity change from 0 to 32768 [ 191.473743][ T7003] [ 191.473743][ T7003] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.473743][ T7003] [ 191.534622][ T7003] find_entry called with index = 0 [ 191.579529][ T7003] read_mapping_page failed! [ 191.601250][ T7003] ERROR: (device loop4): txCommit: [ 191.601250][ T7003] [ 191.669292][ T7025] read_mapping_page failed! [ 191.696113][ T7025] ERROR: (device loop4): txCommit: [ 191.696113][ T7025] [ 191.697087][ T4230] usb 3-1: USB disconnect, device number 8 [ 191.791824][ T4233] peak_usb 1-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 191.811786][ T4233] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 191.825176][ T7027] loop3: detected capacity change from 0 to 4096 [ 191.836025][ T6842] read_mapping_page failed! [ 191.841389][ T6842] ERROR: (device loop4): txCommit: [ 191.841389][ T6842] [ 191.849505][ T4233] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 191.864551][ T6842] jfs_write_inode: jfs_commit_inode failed! [ 191.870914][ T7027] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 191.893566][ T4026] [ 191.893566][ T4026] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.893566][ T4026] [ 191.908446][ T7029] loop1: detected capacity change from 0 to 128 [ 191.914255][ T7027] ntfs: volume version 3.1. [ 191.936387][ T4233] peak_usb: probe of 1-1:0.0 failed with error -22 [ 191.950054][ T4026] [ 191.950054][ T4026] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 191.950054][ T4026] [ 191.950312][ T7027] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set iso8859-9. You might want to try to use the mount option nls=utf8. [ 191.984343][ T7027] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 192.028580][ T4233] usb 1-1: USB disconnect, device number 9 [ 192.409974][ T7041] cifs: Unknown parameter '_LI !BEJFAi_^wktcُE|,2' [ 192.816175][ T4233] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 193.056124][ T4233] usb 5-1: Using ep0 maxpacket: 8 [ 193.176183][ T4233] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 193.184442][ T4233] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 193.221552][ T4233] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 193.262585][ T4233] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 193.282891][ T4233] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 193.315989][ T4233] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 193.325484][ T7045] loop2: detected capacity change from 0 to 32768 [ 193.344903][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.393488][ T7045] XFS (loop2): Mounting V5 Filesystem [ 193.421913][ T7065] loop3: detected capacity change from 0 to 256 [ 193.496903][ T7045] XFS (loop2): Ending clean mount [ 193.530462][ T7045] XFS (loop2): Quotacheck needed: Please wait. [ 193.636028][ T4233] usb 5-1: usb_control_msg returned -32 [ 193.642027][ T4233] usbtmc 5-1:16.0: can't read capabilities [ 193.655631][ T7045] XFS (loop2): Quotacheck: Done. [ 193.689062][ T7054] loop0: detected capacity change from 0 to 32768 [ 193.708614][ T7054] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1213 (7054) [ 193.725231][ T7054] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 193.736025][ T7054] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 193.744912][ T7054] BTRFS info (device loop0): setting nodatacow, compression disabled [ 193.754023][ T7054] BTRFS info (device loop0): enabling auto defrag [ 193.761010][ T7054] BTRFS info (device loop0): max_inline at 0 [ 193.770673][ T7054] BTRFS info (device loop0): using free space tree [ 194.003383][ T4707] XFS (loop2): Unmounting Filesystem [ 194.225787][ T7096] loop1: detected capacity change from 0 to 512 [ 194.236002][ T3654] Bluetooth: hci5: command tx timeout [ 194.308404][ T1272] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.314806][ T1272] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.377892][ T6595] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 194.401254][ T7096] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 194.423615][ T7096] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038 (0x7fffffff) [ 194.619329][ T7106] loop3: detected capacity change from 0 to 1764 [ 194.824470][ T3638] EXT4-fs (loop1): unmounting filesystem. [ 194.869073][ T7112] delete_channel: no stack [ 195.014902][ T7117] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 195.044033][ T7117] xt_CT: You must specify a L4 protocol and not use inversions on it [ 195.097443][ T7114] loop1: detected capacity change from 0 to 4096 [ 195.131230][ T7114] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 195.156967][ T7114] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 195.181015][ T7114] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 195.213393][ T7114] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 195.243451][ T7114] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 195.277077][ T7114] ntfs: volume version 3.1. [ 195.294166][ T7114] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 195.307204][ T7126] TCP: MD5 Hash failed for (172.20.20.187, 0)->(172.20.20.170, 20002) L3 index 0 [ 195.317414][ T7114] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 195.557357][ T4235] usb 5-1: USB disconnect, device number 7 [ 195.560182][ T7128] loop3: detected capacity change from 0 to 4096 [ 195.654949][ T7134] Zero length message leads to an empty skb [ 195.687111][ T7128] ntfs: volume version 3.1. [ 195.701753][ T7134] tipc: Started in network mode [ 195.715996][ T7134] tipc: Node identity aaaaaaaaaa34, cluster identity 4711 [ 195.750368][ T7134] tipc: Enabled bearer , priority 0 [ 196.060705][ T7118] loop2: detected capacity change from 0 to 40427 [ 196.091058][ T7118] F2FS-fs (loop2): invalid crc value [ 196.142518][ T7118] F2FS-fs (loop2): Found nat_bits in checkpoint [ 196.258232][ T7118] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 196.305224][ T7118] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 196.386366][ T3653] Bluetooth: hci2: command 0x0406 tx timeout [ 196.386445][ T3656] Bluetooth: hci0: command 0x0406 tx timeout [ 196.553661][ T4707] syz-executor: attempt to access beyond end of device [ 196.553661][ T4707] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 196.622705][ T7138] loop1: detected capacity change from 0 to 40427 [ 196.643301][ T7138] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 196.651776][ T7138] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 196.695376][ T7159] loop3: detected capacity change from 0 to 4096 [ 196.711329][ T7159] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512) [ 196.731955][ T7138] F2FS-fs (loop1): Found nat_bits in checkpoint [ 196.759415][ T7159] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 196.859130][ T7165] device syz_tun entered promiscuous mode [ 196.868146][ T4233] tipc: Node number set to 10398378 [ 196.905122][ T7138] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 196.917756][ T7138] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 196.925751][ T51] ntfs3: loop3: ntfs3_write_inode r=5 failed, -22. [ 196.935019][ T3645] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 197.056989][ T7138] syz.1.1239: attempt to access beyond end of device [ 197.056989][ T7138] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 197.073385][ T7170] loop0: detected capacity change from 0 to 512 [ 197.130073][ T7170] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 197.147273][ T7170] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038 (0x7fffffff) [ 197.228539][ T3638] syz-executor: attempt to access beyond end of device [ 197.228539][ T3638] loop1: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 197.543333][ T6595] EXT4-fs (loop0): unmounting filesystem. [ 197.935688][ T7194] loop2: detected capacity change from 0 to 64 [ 198.079648][ T3656] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 198.088573][ T3656] Bluetooth: hci2: Injecting HCI hardware error event [ 198.102047][ T3654] Bluetooth: hci2: hardware error 0x00 [ 198.676143][ T151] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 198.708558][ T7225] loop0: detected capacity change from 0 to 8 [ 198.740586][ T7225] squashfs: Unknown parameter '000000000000000000000xffffffffffffffff0xffffffffffffffff' [ 198.759904][ T7229] loop2: detected capacity change from 0 to 512 [ 198.771330][ T7228] loop4: detected capacity change from 0 to 512 [ 198.793232][ T7228] EXT4-fs (loop4): orphan cleanup on readonly fs [ 198.798338][ T7219] loop3: detected capacity change from 0 to 8192 [ 198.810524][ T7228] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1273: bg 0: block 248: padding at end of block bitmap is not set [ 198.845558][ T7229] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 198.856244][ T7229] ext4 filesystem being mounted at /163/file0 supports timestamps until 2038 (0x7fffffff) [ 198.870548][ T7219] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 198.887134][ T7219] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 198.902295][ T7228] __quota_error: 13 callbacks suppressed [ 198.902328][ T7228] Quota error (device loop4): write_blk: dquota write failed [ 198.934034][ T7219] REISERFS (device loop3): using ordered data mode [ 198.939247][ T7228] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 198.952294][ T7228] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.1273: Failed to acquire dquot type 1 [ 198.955010][ T4707] EXT4-fs (loop2): unmounting filesystem. [ 198.974661][ T7219] reiserfs: using flush barriers [ 198.980253][ T7228] EXT4-fs (loop4): 1 truncate cleaned up [ 198.983912][ T7219] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 199.012110][ T7228] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 199.032220][ T7228] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 199.043414][ T7219] REISERFS (device loop3): checking transaction log (loop3) [ 199.056408][ T151] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 199.067997][ T151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.087541][ T7228] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 199.094595][ T7228] ext4 filesystem being remounted at /229/bus supports timestamps until 2038 (0x7fffffff) [ 199.106887][ T151] usb 2-1: config 0 descriptor?? [ 199.129668][ T7228] Quota error (device loop4): write_blk: dquota write failed [ 199.142634][ T7228] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 199.166982][ T151] cp210x 2-1:0.0: cp210x converter detected [ 199.186078][ T7228] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.1273: Failed to acquire dquot type 1 [ 199.271036][ T7219] REISERFS (device loop3): Using tea hash to sort names [ 199.279098][ T4026] EXT4-fs (loop4): unmounting filesystem. [ 199.292280][ T7219] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 199.474352][ T7246] loop0: detected capacity change from 0 to 4096 [ 199.485763][ T7247] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 199.502154][ T7246] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 199.509596][ T7247] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [2 4 0x0 SD] (nlink == 1) not found (pos 3) [ 199.562387][ T7246] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 199.577834][ T151] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 199.578255][ T26] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 199.661084][ T27] audit: type=1800 audit(1726197193.940:92): pid=7246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1280" name="bus" dev="loop0" ino=0 res=0 errno=0 [ 199.681274][ C1] vkms_vblank_simulate: vblank timer overrun [ 199.775748][ T7253] netlink: 'syz.3.1282': attribute type 1 has an invalid length. [ 199.856118][ T26] usb 3-1: Using ep0 maxpacket: 16 [ 199.859187][ T151] usb 2-1: cp210x converter now attached to ttyUSB0 [ 199.883070][ T7257] loop0: detected capacity change from 0 to 1024 [ 199.921327][ T7257] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 200.062371][ T4233] usb 2-1: USB disconnect, device number 12 [ 200.078749][ T4233] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 200.087440][ T4233] cp210x 2-1:0.0: device disconnected [ 200.130431][ T6595] EXT4-fs (loop0): unmounting filesystem. [ 200.136262][ T26] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 200.136298][ T26] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.136320][ T26] usb 3-1: Product: syz [ 200.136337][ T26] usb 3-1: Manufacturer: syz [ 200.136354][ T26] usb 3-1: SerialNumber: syz [ 200.138348][ T26] usb 3-1: config 0 descriptor?? [ 200.148478][ T3654] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 200.239258][ T26] as10x_usb: device has been detected [ 200.245279][ T26] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 200.322666][ T26] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 200.363623][ T26] as10x_usb: error during firmware upload part1 [ 200.380382][ T26] Registered device Sky IT Digital Key (green led) [ 200.435538][ T7273] Bluetooth: hci3: unsupported parameter 64512 [ 200.474936][ T7275] loop3: detected capacity change from 0 to 1024 [ 200.493680][ T7275] hfsplus: failed to load root directory [ 200.501164][ T7273] Bluetooth: hci3: invalid len left 4, exp >= 104 [ 200.508543][ T7242] random: crng reseeded on system resumption [ 201.022009][ T7289] tipc: Resetting bearer [ 201.097726][ T7289] netlink: 'syz.4.1300': attribute type 1 has an invalid length. [ 201.135918][ T7289] netlink: 'syz.4.1300': attribute type 2 has an invalid length. [ 201.164571][ T7269] loop0: detected capacity change from 0 to 32768 [ 201.201284][ T3819] usb 3-1: USB disconnect, device number 9 [ 201.226992][ T7269] XFS (loop0): Mounting V5 Filesystem [ 201.257817][ T3819] Unregistered device Sky IT Digital Key (green led) [ 201.258984][ T3819] as10x_usb: device has been disconnected [ 201.357247][ T7269] XFS (loop0): Ending clean mount [ 201.388389][ T7269] XFS (loop0): Quotacheck needed: Please wait. [ 201.444656][ T7269] XFS (loop0): Quotacheck: Done. [ 201.551262][ T6595] XFS (loop0): Unmounting Filesystem [ 201.746176][ T7318] loop1: detected capacity change from 0 to 128 [ 201.753495][ T7318] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 201.812831][ T7318] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 201.827317][ T7320] device syzkaller1 entered promiscuous mode [ 201.953336][ T7324] loop3: detected capacity change from 0 to 256 [ 202.036814][ T9] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 202.185180][ T7334] loop4: detected capacity change from 0 to 256 [ 202.280896][ T7336] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 202.288269][ T7336] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 202.345649][ T7342] loop1: detected capacity change from 0 to 256 [ 202.353067][ T7336] vhci_hcd vhci_hcd.0: Device attached [ 202.374420][ T7344] loop3: detected capacity change from 0 to 1024 [ 202.396239][ T7340] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 202.402841][ T7340] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 202.417673][ T7340] vhci_hcd vhci_hcd.0: Device attached [ 202.421579][ T7345] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(5) [ 202.429729][ T7345] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 202.439701][ T7344] hfsplus: bad catalog entry type [ 202.526932][ T26] vhci_hcd: vhci_device speed not set [ 202.540943][ T33] hfsplus: b-tree write err: -5, ino 4 [ 202.557560][ T7340] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(13) [ 202.564384][ T7340] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 202.595143][ T7336] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(8) [ 202.595967][ T26] usb 9-1: new full-speed USB device number 2 using vhci_hcd [ 202.601720][ T7336] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 202.635911][ T7345] vhci_hcd vhci_hcd.0: Device attached [ 202.665602][ T7336] vhci_hcd vhci_hcd.0: Device attached [ 202.689631][ T7340] vhci_hcd vhci_hcd.0: Device attached [ 202.730441][ T7351] vhci_hcd: connection closed [ 202.734067][ T7347] vhci_hcd: connection closed [ 202.734102][ T7343] vhci_hcd: connection closed [ 202.744470][ T7337] vhci_hcd: connection reset by peer [ 202.766806][ T6842] vhci_hcd: stop threads [ 202.773536][ T6842] vhci_hcd: release socket [ 202.818425][ T7352] vhci_hcd: connection closed [ 202.823262][ T6842] vhci_hcd: disconnect device [ 202.836503][ T6842] vhci_hcd: stop threads [ 202.840898][ T6842] vhci_hcd: release socket [ 202.845537][ T6842] vhci_hcd: disconnect device [ 202.856596][ T6842] vhci_hcd: stop threads [ 202.861001][ T6842] vhci_hcd: release socket [ 202.878469][ T6842] vhci_hcd: disconnect device [ 202.883614][ T6842] vhci_hcd: stop threads [ 202.891396][ T7362] loop3: detected capacity change from 0 to 128 [ 202.898439][ T6842] vhci_hcd: release socket [ 202.903339][ T6842] vhci_hcd: disconnect device [ 202.908870][ T6842] vhci_hcd: stop threads [ 202.913663][ T6842] vhci_hcd: release socket [ 202.919099][ T7326] loop2: detected capacity change from 0 to 32768 [ 202.920515][ T6842] vhci_hcd: disconnect device [ 202.936619][ T7362] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 202.984785][ T7326] XFS (loop2): DAX unsupported by block device. Turning off DAX. [ 203.002690][ T7326] XFS (loop2): Mounting V5 Filesystem [ 203.011522][ T7370] overlayfs: missing 'lowerdir' [ 203.027206][ T3819] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 203.102531][ T7326] XFS (loop2): Ending clean mount [ 203.115364][ T7326] XFS (loop2): Quotacheck needed: Please wait. [ 203.125015][ T7377] loop3: detected capacity change from 0 to 256 [ 203.222658][ T7326] XFS (loop2): Quotacheck: Done. [ 203.266360][ T3819] usb 2-1: Using ep0 maxpacket: 16 [ 203.351456][ T4707] XFS (loop2): Unmounting Filesystem [ 203.435116][ T7385] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1333'. [ 203.532264][ T7386] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 203.587114][ T3819] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 203.620766][ T3819] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.647735][ T3819] usb 2-1: Product: syz [ 203.671941][ T3819] usb 2-1: Manufacturer: syz [ 203.683876][ T3819] usb 2-1: SerialNumber: syz [ 203.725700][ C0] vkms_vblank_simulate: vblank timer overrun [ 203.740082][ T3819] usb 2-1: config 0 descriptor?? [ 203.769336][ T33] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.793645][ T3819] as10x_usb: device has been detected [ 203.806489][ T3819] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 203.904004][ T3819] usb 2-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 203.945175][ T3819] as10x_usb: error during firmware upload part1 [ 203.963837][ T3819] Registered device Sky IT Digital Key (green led) [ 204.028059][ T7358] random: crng reseeded on system resumption [ 204.082037][ T33] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.300125][ T33] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.374221][ T7401] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 204.460886][ T33] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.666378][ T3656] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 204.689357][ T3656] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 204.696329][ T4235] usb 2-1: USB disconnect, device number 13 [ 204.707090][ T3656] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 204.717582][ T3656] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 204.725366][ T3656] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 204.732934][ T3656] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 204.760609][ T4235] Unregistered device Sky IT Digital Key (green led) [ 204.792869][ T4235] as10x_usb: device has been disconnected [ 205.043547][ T33] tipc: Left network mode [ 205.221319][ T7402] chnl_net:caif_netlink_parms(): no params data found [ 205.716472][ T3819] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 205.812487][ T151] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 205.846288][ T3819] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 206.010432][ T7402] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.025968][ T7402] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.045339][ T7402] device bridge_slave_0 entered promiscuous mode [ 206.097186][ T7415] loop0: detected capacity change from 0 to 32768 [ 206.104962][ T7415] XFS: ikeep mount option is deprecated. [ 206.127578][ T151] usb 3-1: Using ep0 maxpacket: 32 [ 206.127783][ T7402] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.140313][ T7415] XFS: ikeep mount option is deprecated. [ 206.146386][ T7402] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.154067][ T7440] loop1: detected capacity change from 0 to 512 [ 206.167316][ T7402] device bridge_slave_1 entered promiscuous mode [ 206.204877][ T7440] ext4: Unknown parameter 'nouser_xattr' [ 206.232408][ T7415] XFS (loop0): Mounting V5 Filesystem [ 206.296563][ T151] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 206.304959][ T151] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 206.319433][ T7402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.355382][ T151] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 206.374527][ T151] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 206.389340][ T7415] XFS (loop0): Ending clean mount [ 206.409503][ T151] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 206.420171][ T7415] XFS (loop0): Quotacheck needed: Please wait. [ 206.432643][ T151] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 206.451129][ T151] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 206.474331][ T151] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.493829][ T151] usb 3-1: config 0 descriptor?? [ 206.527275][ T7415] XFS (loop0): Quotacheck: Done. [ 206.620186][ T7402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.647361][ T6595] XFS (loop0): Unmounting Filesystem [ 206.795627][ T3654] Bluetooth: hci1: command tx timeout [ 206.827491][ T151] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 206.869083][ T7402] team0: Port device team_slave_0 added [ 206.878806][ T7402] team0: Port device team_slave_1 added [ 206.921107][ T7458] tipc: Enabled bearer , priority 10 [ 207.005686][ T151] usb 3-1: USB disconnect, device number 10 [ 207.017946][ T151] usblp0: removed [ 207.283956][ T7402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.297581][ T7402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.346312][ T7402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.412350][ T7402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.427062][ T7402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.494129][ T7402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.509640][ T7469] loop4: detected capacity change from 0 to 128 [ 207.523176][ T151] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 207.749673][ T26] vhci_hcd: vhci_device speed not set [ 207.806413][ T151] usb 1-1: Using ep0 maxpacket: 16 [ 207.821282][ T7402] device hsr_slave_0 entered promiscuous mode [ 207.842099][ T7402] device hsr_slave_1 entered promiscuous mode [ 207.866694][ T7402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.874340][ T7402] Cannot create hsr debugfs directory [ 208.107713][ T151] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 208.121436][ T151] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.146261][ T151] usb 1-1: Product: syz [ 208.150559][ T151] usb 1-1: Manufacturer: syz [ 208.155450][ T151] usb 1-1: SerialNumber: syz [ 208.172606][ T151] usb 1-1: config 0 descriptor?? [ 208.252515][ T151] as10x_usb: device has been detected [ 208.266332][ T151] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 208.294503][ T151] usb 1-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 208.319751][ T151] as10x_usb: error during firmware upload part1 [ 208.332639][ T151] Registered device Sky IT Digital Key (green led) [ 208.341965][ T33] device hsr_slave_0 left promiscuous mode [ 208.366465][ T33] device hsr_slave_1 left promiscuous mode [ 208.376747][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.384251][ T33] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.403116][ T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.415934][ T33] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.438117][ T33] device bridge_slave_1 left promiscuous mode [ 208.444570][ T33] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.477514][ T33] device bridge_slave_0 left promiscuous mode [ 208.485883][ T33] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.493856][ T7463] random: crng reseeded on system resumption [ 208.590128][ T33] device veth1_macvtap left promiscuous mode [ 208.608970][ T33] device veth0_macvtap left promiscuous mode [ 208.629811][ T33] device veth1_vlan left promiscuous mode [ 208.651005][ T33] device veth0_vlan left promiscuous mode [ 208.866901][ T3654] Bluetooth: hci1: command tx timeout [ 209.244170][ T3821] usb 1-1: USB disconnect, device number 10 [ 209.275758][ T3821] Unregistered device Sky IT Digital Key (green led) [ 209.284140][ T3821] as10x_usb: device has been disconnected [ 209.345359][ T7493] loop2: detected capacity change from 0 to 32768 [ 209.386881][ T7493] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1372 (7493) [ 209.409211][ T7493] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 209.451261][ T7493] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 209.477767][ T7493] BTRFS info (device loop2): setting nodatacow, compression disabled [ 209.495942][ T7493] BTRFS info (device loop2): turning on flush-on-commit [ 209.496563][ T151] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 209.506153][ T7493] BTRFS info (device loop2): enabling auto defrag [ 209.527464][ T7493] BTRFS info (device loop2): max_inline at 0 [ 209.533538][ T7493] BTRFS info (device loop2): using free space tree [ 209.572444][ T7491] loop4: detected capacity change from 0 to 32768 [ 209.612067][ T7491] find_entry called with index = 0 [ 209.626128][ T7491] read_mapping_page failed! [ 209.661017][ T7491] ERROR: (device loop4): txCommit: [ 209.661017][ T7491] [ 209.780321][ T7493] BTRFS info (device loop2): enabling ssd optimizations [ 209.857065][ T27] audit: type=1800 audit(1726197204.140:93): pid=7493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1372" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 209.949538][ T4707] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 209.970630][ T151] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 209.979348][ T151] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 209.990960][ T151] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 210.002189][ T151] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 210.016696][ T151] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 210.026399][ T151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.037079][ T151] usb 2-1: config 0 descriptor?? [ 210.065313][ T7495] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 210.538474][ T151] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xd [ 210.552013][ T151] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 210.601647][ T151] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 210.643062][ T33] team0 (unregistering): Port device team_slave_1 removed [ 210.730147][ T33] team0 (unregistering): Port device team_slave_0 removed [ 210.813518][ T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.903867][ T151] usb 2-1: USB disconnect, device number 14 [ 210.956486][ T3656] Bluetooth: hci1: command tx timeout [ 211.263340][ T7522] loop0: detected capacity change from 0 to 40427 [ 211.312578][ T7522] F2FS-fs (loop0): Found nat_bits in checkpoint [ 211.408250][ T7522] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 211.441666][ T7522] syz.0.1378: attempt to access beyond end of device [ 211.441666][ T7522] loop0: rw=34817, sector=77824, nr_sectors = 848 limit=40427 [ 211.550836][ T6595] syz-executor: attempt to access beyond end of device [ 211.550836][ T6595] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 211.747952][ T3655] Bluetooth: hci4: command 0x0406 tx timeout [ 211.777849][ T33] bond0 (unregistering): Released all slaves [ 212.142250][ T7538] loop2: detected capacity change from 0 to 256 [ 212.209211][ T7538] exFAT-fs (loop2): Invalid boot checksum (boot checksum : 0x1105abd0, checksum : 0x1119abd0) [ 212.224545][ T7535] loop1: detected capacity change from 0 to 32768 [ 212.231738][ T7538] exFAT-fs (loop2): invalid boot region [ 212.270275][ T7538] exFAT-fs (loop2): failed to recognize exfat type [ 212.277075][ T7541] netlink: 'syz.0.1383': attribute type 11 has an invalid length. [ 212.277199][ T7535] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1381 (7535) [ 212.340210][ T7535] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 212.357907][ T7535] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 212.367386][ T7535] BTRFS info (device loop1): setting nodatacow, compression disabled [ 212.375754][ T7535] BTRFS info (device loop1): setting datacow [ 212.382748][ T7535] BTRFS info (device loop1): doing ref verification [ 212.390169][ T7535] BTRFS info (device loop1): force clearing of disk cache [ 212.397764][ T7535] BTRFS info (device loop1): turning off barriers [ 212.412052][ T7535] BTRFS info (device loop1): enabling ssd optimizations [ 212.421832][ T7535] BTRFS info (device loop1): using spread ssd allocation scheme [ 212.437059][ T7535] BTRFS info (device loop1): not using ssd optimizations [ 212.455946][ T7535] BTRFS info (device loop1): not using spread ssd allocation scheme [ 212.464067][ T7535] BTRFS info (device loop1): using free space tree [ 212.557024][ T7560] loop0: detected capacity change from 0 to 256 [ 212.590945][ T7535] BTRFS info (device loop1): rebuilding free space tree [ 212.649415][ T27] audit: type=1800 audit(1726197206.930:94): pid=7535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1381" name="file0" dev="loop1" ino=258 res=0 errno=0 [ 212.676279][ T3821] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 212.681821][ T7535] fs-verity: sha512 using implementation "sha512-avx2" [ 212.724625][ T7535] BTRFS info (device loop1): setting compat-ro feature flag for VERITY (0x4) [ 212.845268][ T3638] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 212.848072][ T7402] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 212.870933][ T7402] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 212.881532][ T7402] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 212.895090][ T7402] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 212.955960][ T3821] usb 3-1: Using ep0 maxpacket: 16 [ 213.030066][ T3654] Bluetooth: hci1: command tx timeout [ 213.288487][ T7402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.298656][ T3821] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 213.308475][ T3821] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 213.326191][ T3821] usb 3-1: Product: syz [ 213.326708][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 213.330394][ T3821] usb 3-1: Manufacturer: syz [ 213.347823][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 213.356185][ T3821] usb 3-1: SerialNumber: syz [ 213.378048][ T3821] usb 3-1: config 0 descriptor?? [ 213.386987][ T7402] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.424599][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 213.453925][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.480399][ T7573] syz.1.1387[7573] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 213.480536][ T7573] syz.1.1387[7573] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 213.502106][ T1069] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.520824][ T1069] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.553605][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 213.569502][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 213.582430][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 213.592526][ T1069] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.599752][ T1069] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.609206][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.626950][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.639147][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.655727][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.655737][ T3686] usb 3-1: USB disconnect, device number 11 [ 213.682165][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.702153][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.718179][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.734243][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.753397][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.779680][ T7402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.822611][ T7402] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 213.832464][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 213.841660][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 214.102279][ T7592] loop1: detected capacity change from 0 to 256 [ 214.116877][ T7592] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 214.172686][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 214.196584][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 214.220662][ T7402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.284607][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 214.302689][ T7596] loop2: detected capacity change from 0 to 2048 [ 214.306977][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 214.362490][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 214.383001][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 214.399526][ T7402] device veth0_vlan entered promiscuous mode [ 214.410336][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 214.419273][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 214.421770][ T7596] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 214.441197][ T7402] device veth1_vlan entered promiscuous mode [ 214.480801][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 214.506034][ T7596] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1398: bg 0: block 234: padding at end of block bitmap is not set [ 214.506886][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 214.539648][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 214.548775][ T7596] EXT4-fs (loop2): Remounting filesystem read-only [ 214.552967][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 214.567595][ T7402] device veth0_macvtap entered promiscuous mode [ 214.601332][ T7402] device veth1_macvtap entered promiscuous mode [ 214.642872][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.666834][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.689248][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.703291][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.713959][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.724824][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.737253][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.748009][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.760240][ T4707] EXT4-fs (loop2): unmounting filesystem. [ 214.760389][ T7402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.788274][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.801820][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.814528][ T7610] loop0: detected capacity change from 0 to 1024 [ 214.821053][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.832034][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.845990][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.867258][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.887604][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.917617][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.933643][ T7402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.945939][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 214.961978][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 214.971202][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 214.986720][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 214.996060][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 215.004978][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 215.016260][ T6266] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 215.039108][ T7402] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.053999][ T7402] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.064344][ T7402] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.064796][ T7610] EXT4-fs: Ignoring removed orlov option [ 215.079973][ T7402] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.104806][ T7610] EXT4-fs (loop0): Test dummy encryption mode enabled [ 215.171107][ T7610] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 215.198379][ T6842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.221961][ T1069] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.222144][ T6842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.250508][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 215.259352][ T1069] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.276597][ T6266] usb 2-1: Using ep0 maxpacket: 16 [ 215.305624][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 215.341605][ T6595] EXT4-fs (loop0): unmounting filesystem. [ 215.416277][ T6266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.456190][ T6266] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.468957][ T6266] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 215.481946][ T6266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.499175][ T6266] usb 2-1: config 0 descriptor?? [ 215.578613][ T7631] batman_adv: batadv0: Adding interface: macvlan2 [ 215.585359][ T7631] batman_adv: batadv0: The MTU of interface macvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.616245][ T7631] batman_adv: batadv0: Not using interface macvlan2 (retrying later): interface not active [ 215.795982][ T3686] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 215.977036][ T7608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.003004][ T7608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.044327][ T6266] hid (null): unknown global tag 0xd [ 216.050134][ T3686] usb 1-1: Using ep0 maxpacket: 8 [ 216.065213][ T6266] hid (null): unknown global tag 0xd [ 216.086443][ T6266] hid (null): report_id 40203 is invalid [ 216.092151][ T6266] hid (null): invalid report_size -1862471209 [ 216.106018][ T6266] hid (null): invalid report_size -1217885453 [ 216.116337][ T6266] hid (null): bogus close delimiter [ 216.121723][ T6266] hid (null): unknown global tag 0xc [ 216.129095][ T7639] loop2: detected capacity change from 0 to 32768 [ 216.136566][ T6266] hid (null): global environment stack overflow [ 216.154660][ T7646] loop3: detected capacity change from 0 to 256 [ 216.188890][ T7639] XFS (loop2): Mounting V5 Filesystem [ 216.195013][ T27] audit: type=1804 audit(1726197210.470:95): pid=7646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1417" name="/newroot/6/file0/file1" dev="loop3" ino=1048653 res=1 errno=0 [ 216.217479][ T3686] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 216.227166][ T3686] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 216.239206][ T3686] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 216.250491][ T3686] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 216.260737][ T3686] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.274077][ T3686] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 216.283887][ T6266] usb 2-1: string descriptor 0 read error: -71 [ 216.290480][ T3686] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.321969][ T6266] usb 2-1: Max retries (5) exceeded reading string descriptor 200 [ 216.331362][ T6266] letsketch: probe of 0003:6161:4D15.0009 failed with error -32 [ 216.354396][ T6266] usb 2-1: USB disconnect, device number 15 [ 216.369870][ T7639] XFS (loop2): Ending clean mount [ 216.382657][ T7639] XFS (loop2): Quotacheck needed: Please wait. [ 216.414124][ T7659] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1419'. [ 216.444605][ T7639] XFS (loop2): Quotacheck: Done. [ 216.554647][ T4707] XFS (loop2): Unmounting Filesystem [ 216.560887][ T7663] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 216.576630][ T3686] usb 1-1: usb_control_msg returned -32 [ 216.588417][ T3686] usbtmc 1-1:16.0: can't read capabilities [ 217.117247][ T7680] loop2: detected capacity change from 0 to 1024 [ 217.141401][ T7680] hfsplus: inconsistency in B*Tree (31,16,0,1,0) [ 217.149308][ T7680] hfsplus: failed to load root directory [ 217.293574][ T7683] loop2: detected capacity change from 0 to 256 [ 217.308365][ T7683] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 217.368285][ T7683] FAT-fs (loop2): FAT read failed (blocknr 64) [ 217.513292][ T7689] loop3: detected capacity change from 0 to 512 [ 217.557317][ T7689] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 217.571458][ T7689] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 217.584001][ T7689] System zones: 0-1, 15-15, 18-18, 34-34 [ 217.591436][ T7689] EXT4-fs (loop3): orphan cleanup on readonly fs [ 217.598080][ T7689] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0 [ 217.607543][ T7689] EXT4-fs warning (device loop3): ext4_enable_quotas:7035: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 217.622579][ T7689] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 217.630358][ T7689] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1432: bg 0: block 40: padding at end of block bitmap is not set [ 217.656041][ T7689] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6172: Corrupt filesystem [ 217.672624][ T7689] EXT4-fs (loop3): 1 truncate cleaned up [ 217.678933][ T7689] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 217.692493][ T4232] kernel write not supported for file /input/event3 (pid: 4232 comm: kworker/1:11) [ 217.783666][ T7402] EXT4-fs (loop3): unmounting filesystem. [ 217.869366][ T7702] loop3: detected capacity change from 0 to 512 [ 217.909230][ T7702] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 217.936273][ T7702] ext4 filesystem being mounted at /16/bus supports timestamps until 2038 (0x7fffffff) [ 218.553501][ T3686] usb 1-1: USB disconnect, device number 11 [ 218.829071][ T7717] loop2: detected capacity change from 0 to 32768 [ 218.871842][ T7402] EXT4-fs (loop3): unmounting filesystem. [ 218.929107][ T7717] XFS (loop2): Mounting V5 Filesystem [ 219.097460][ T7717] XFS (loop2): Ending clean mount [ 219.123912][ T7717] XFS (loop2): Quotacheck needed: Please wait. [ 219.244167][ T7717] XFS (loop2): Quotacheck: Done. [ 219.274092][ T7744] tipc: Started in network mode [ 219.279114][ T7744] tipc: Node identity ac1414aa, cluster identity 4711 [ 219.289887][ T7744] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 219.297854][ T7744] tipc: Enabled bearer , priority 10 [ 219.410286][ T4707] XFS (loop2): Unmounting Filesystem [ 219.427360][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 219.562608][ T7751] loop1: detected capacity change from 0 to 1024 [ 219.569256][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 219.605121][ T7719] loop0: detected capacity change from 0 to 32768 [ 219.705976][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 219.720272][ T7719] XFS (loop0): Mounting V5 Filesystem [ 219.835506][ T7719] XFS (loop0): Ending clean mount [ 219.845908][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 219.847787][ T1069] hfsplus: b-tree write err: -5, ino 8 [ 219.908332][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 219.978386][ T7719] XFS (loop0): User initiated shutdown received. [ 219.985062][ T7719] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:491). Shutting down filesystem. [ 219.986032][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 220.048487][ T7769] XFS (loop0): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -5, agno 0 [ 220.067284][ T7719] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 220.126062][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 220.159556][ T6595] XFS (loop0): Unmounting Filesystem [ 220.207861][ T27] audit: type=1326 audit(1726197214.490:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7772 comm="syz.3.1462" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f433e17def9 code=0x0 [ 220.265938][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 220.409617][ T4232] tipc: Node number set to 2886997162 [ 220.472091][ T3821] hid-generic 0000:0000:0000.000A: unknown main item tag 0x7 [ 220.486120][ T3821] hid-generic 0000:0000:0000.000A: ignoring exceeding usage max [ 220.505738][ T3821] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 220.517234][ T3821] hid-generic 0000:0000:0000.000A: unknown main item tag 0x6 [ 220.524910][ T3821] hid-generic 0000:0000:0000.000A: unknown main item tag 0xd [ 220.547066][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 220.550942][ T3821] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz0] on syz0 [ 220.577567][ T3656] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 220.592264][ T3656] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 220.610422][ T3656] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 220.620563][ T3656] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 220.636707][ T3656] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 220.645279][ T3656] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 220.815903][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 220.972432][ T7791] input: syz0 as /devices/virtual/input/input17 [ 221.065108][ T7793] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1468'. [ 221.225789][ T7782] chnl_net:caif_netlink_parms(): no params data found [ 221.370435][ T7775] loop1: detected capacity change from 0 to 40427 [ 221.400245][ T7775] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(262146) root(3) [ 221.414404][ T7807] loop0: detected capacity change from 0 to 16 [ 221.440441][ T7775] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 221.440743][ T7807] erofs: (device loop0): erofs_read_superblock: invalid sb_extslots 4208 (more than a fs block) [ 221.469914][ T7782] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.480925][ T7782] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.503999][ T7782] device bridge_slave_0 entered promiscuous mode [ 221.523959][ T7775] F2FS-fs (loop1): Found nat_bits in checkpoint [ 221.532297][ T7782] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.554128][ T7782] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.573198][ T7782] device bridge_slave_1 entered promiscuous mode [ 221.637186][ T7782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.668211][ T7775] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 221.672945][ T7782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.679796][ T7775] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 221.752019][ T7808] f2fs_ckpt-7:1: attempt to access beyond end of device [ 221.752019][ T7808] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 221.812785][ T7782] team0: Port device team_slave_0 added [ 221.828683][ T7782] team0: Port device team_slave_1 added [ 221.933952][ T7782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.949046][ T7782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.990532][ T7782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.078522][ T7782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.092346][ T7782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.127736][ T7782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.144470][ T7818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1476'. [ 222.281004][ T7782] device hsr_slave_0 entered promiscuous mode [ 222.298449][ T7821] loop0: detected capacity change from 0 to 8 [ 222.300516][ T7782] device hsr_slave_1 entered promiscuous mode [ 222.316873][ T7821] squashfs: Unknown parameter 'F$d-;YD<3X߮Nq4Sŕs۵ZQPu2%lW\Yf:?x|:BE}Ce2f' [ 222.331660][ T7782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.348518][ T7782] Cannot create hsr debugfs directory [ 222.438171][ T7829] loop2: detected capacity change from 0 to 1024 [ 222.633757][ T51] hfsplus: b-tree write err: -5, ino 3 [ 222.705999][ T3656] Bluetooth: hci2: command tx timeout [ 222.992326][ T7841] loop2: detected capacity change from 0 to 512 [ 223.052541][ T7782] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.087136][ T7841] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 223.120196][ T7841] System zones: 0-2, 18-18, 34-35 [ 223.138451][ T7841] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 223.138791][ T7849] loop3: detected capacity change from 0 to 512 [ 223.175478][ T7841] ext4 filesystem being mounted at /211/file0 supports timestamps until 2038 (0x7fffffff) [ 223.204339][ T7849] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 223.269149][ T7849] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038 (0x7fffffff) [ 223.299954][ T7782] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.389780][ T7402] EXT4-fs (loop3): unmounting filesystem. [ 223.429630][ T4707] EXT4-fs (loop2): unmounting filesystem. [ 223.482175][ T7782] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.693888][ T7782] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.036495][ T7880] loop3: detected capacity change from 0 to 64 [ 224.089631][ T27] audit: type=1800 audit(1726197218.370:97): pid=7880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1499" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 224.113885][ T7782] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 224.253908][ T7882] loop0: detected capacity change from 0 to 8192 [ 224.281463][ T7882] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 224.302086][ T7882] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 224.311739][ T7882] REISERFS (device loop0): using ordered data mode [ 224.329829][ T7882] reiserfs: using flush barriers [ 224.336243][ T7882] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 224.370696][ T7882] REISERFS (device loop0): checking transaction log (loop0) [ 224.388255][ T7882] REISERFS (device loop0): Using tea hash to sort names [ 224.398760][ T7882] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 224.417640][ T7782] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 224.430917][ T7782] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 224.442022][ T7782] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 224.465990][ C1] net_ratelimit: 3 callbacks suppressed [ 224.466012][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 224.580215][ T7886] REISERFS warning (device loop0): jdm-20007 reiserfs_chown_xattrs: Couldn't chown all xattrs (-22) [ 224.580215][ T7886] [ 224.605523][ T7782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.639757][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 224.657546][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 224.685499][ T7782] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.723047][ T7891] loop3: detected capacity change from 0 to 128 [ 224.734428][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 224.751950][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 224.761339][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.768585][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.786153][ T3656] Bluetooth: hci2: command tx timeout [ 224.827771][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 224.841097][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 224.872441][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 224.899382][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.906601][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.916845][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 224.934991][ T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 224.947591][ T26] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 224.986878][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 225.012722][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 225.059575][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 225.073826][ T7901] loop0: detected capacity change from 0 to 64 [ 225.078458][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 225.115313][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 225.153080][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 225.171388][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 225.190473][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 225.220781][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 225.237959][ T7782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 225.320989][ T7909] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 225.336484][ T26] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.376066][ T26] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 225.412572][ T26] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 225.445963][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.477538][ T26] usb 2-1: config 0 descriptor?? [ 225.506097][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 225.702457][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 225.715490][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 225.717580][ T7925] loop2: detected capacity change from 0 to 1024 [ 225.752301][ T7782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.757093][ T7925] EXT4-fs: Ignoring removed oldalloc option [ 225.766872][ T945] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 225.788416][ T7925] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 225.810929][ T7925] EXT4-fs (loop2): Cannot use DAX on a filesystem that may contain inline data [ 225.959314][ T26] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 225.988000][ T26] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 226.016057][ T945] usb 1-1: Using ep0 maxpacket: 32 [ 226.136380][ T945] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 226.168572][ T945] usb 1-1: config 1 has no interface number 1 [ 226.177478][ T945] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 226.214849][ T945] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 226.286983][ T4191] usb 2-1: USB disconnect, device number 16 [ 226.393589][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 226.396512][ T945] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 226.405879][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 226.425924][ T945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.445998][ T945] usb 1-1: Product: syz [ 226.460831][ T945] usb 1-1: Manufacturer: syz [ 226.465586][ T945] usb 1-1: SerialNumber: syz [ 226.493134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 226.506945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 226.520412][ T7782] device veth0_vlan entered promiscuous mode [ 226.541620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 226.545989][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 226.564524][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 226.612445][ T7782] device veth1_vlan entered promiscuous mode [ 226.620689][ T7952] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 226.632710][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 226.643745][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 226.652098][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 226.675271][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 226.706997][ T7782] device veth0_macvtap entered promiscuous mode [ 226.715712][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 226.735754][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 226.745733][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 226.770977][ T7782] device veth1_macvtap entered promiscuous mode [ 226.796265][ T945] usb 1-1: 2:1 : no UAC_FORMAT_TYPE desc [ 226.860206][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.871044][ T3654] Bluetooth: hci2: command tx timeout [ 226.891968][ T945] usb 1-1: USB disconnect, device number 12 [ 226.907492][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.927773][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.963170][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.987874][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.009699][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.029349][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.040723][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.051494][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.062551][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.078220][ T7782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.092143][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.123393][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.144069][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.171849][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.203244][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.217459][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.239961][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.275765][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.285764][ T7782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.305931][ T7782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.324568][ T7782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.333642][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 227.353019][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 227.366945][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 227.384745][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 227.408773][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 227.451897][ T7782] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.471602][ T7782] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.501347][ T7782] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.536208][ T7782] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.587213][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 227.748201][ T6842] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.766351][ T26] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 227.782197][ T6842] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.815595][ T102] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 227.854706][ T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.874490][ T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.901190][ T7986] loop2: detected capacity change from 0 to 128 [ 227.916957][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 228.126437][ T26] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 228.326343][ T26] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 228.330659][ T7972] loop0: detected capacity change from 0 to 32768 [ 228.349774][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.368917][ T26] usb 4-1: Product: syz [ 228.373164][ T26] usb 4-1: Manufacturer: syz [ 228.379224][ T7972] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1535 (7972) [ 228.393542][ T26] usb 4-1: SerialNumber: syz [ 228.430441][ T7972] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 228.451096][ T7972] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 228.462660][ T26] cdc_ncm 4-1:1.0: skipping garbage [ 228.470491][ T7972] BTRFS info (device loop0): use no compression [ 228.491003][ T7972] BTRFS info (device loop0): force zlib compression, level 3 [ 228.505769][ T7972] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 228.559278][ T7972] BTRFS info (device loop0): use lzo compression, level 0 [ 228.586140][ T7972] BTRFS info (device loop0): turning on flush-on-commit [ 228.593302][ T7972] BTRFS info (device loop0): enabling auto defrag [ 228.625024][ T7972] BTRFS info (device loop0): using free space tree [ 228.632422][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 228.690552][ T7972] BTRFS info (device loop0): enabling ssd optimizations [ 228.871375][ T6595] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 228.950476][ T3656] Bluetooth: hci2: command tx timeout [ 229.440788][ T8002] loop2: detected capacity change from 0 to 32768 [ 229.519989][ T8002] jfs_strtoUCS: char2uni returned -22. [ 229.548039][ T8002] charset = cp932, char = 0xfe [ 229.566237][ T26] cdc_ncm 4-1:1.0: bind() failure [ 229.596267][ T26] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 229.636175][ T26] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 229.666133][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 229.674098][ T26] usbtest: probe of 4-1:1.1 failed with error -71 [ 229.694514][ T26] usb 4-1: USB disconnect, device number 8 [ 229.771753][ T8005] loop1: detected capacity change from 0 to 40427 [ 229.782376][ T8005] F2FS-fs (loop1): invalid crc value [ 229.797166][ T8005] F2FS-fs (loop1): Found nat_bits in checkpoint [ 229.926709][ T8005] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 230.059766][ T3638] syz-executor: attempt to access beyond end of device [ 230.059766][ T3638] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 230.656068][ T3685] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 230.705964][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 230.886070][ T26] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 230.896694][ T8050] loop3: detected capacity change from 0 to 32768 [ 230.912580][ T27] audit: type=1800 audit(1726197225.190:98): pid=8050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1562" name="bus" dev="loop3" ino=7 res=0 errno=0 [ 231.033638][ T8050] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 231.033638][ T8050] [ 231.060511][ T8050] ERROR: (device loop3): remounting filesystem as read-only [ 231.071956][ T8050] ialloc: diAlloc returned -5! [ 231.074425][ T8062] ERROR: (device loop3): dbAlloc: the hint is outside the map [ 231.074425][ T8062] [ 231.088338][ T3685] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.115962][ T3685] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.125962][ T26] usb 2-1: Using ep0 maxpacket: 32 [ 231.137518][ T3685] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 231.146352][ T8062] ialloc: diAlloc returned -5! [ 231.161416][ T3685] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 231.176546][ T3685] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.196393][ T3685] usb 1-1: config 0 descriptor?? [ 231.409875][ T26] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 231.425981][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.434049][ T26] usb 2-1: Product: syz [ 231.442427][ T26] usb 2-1: Manufacturer: syz [ 231.447507][ T26] usb 2-1: SerialNumber: syz [ 231.464467][ T26] usb 2-1: config 0 descriptor?? [ 231.677678][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 231.695353][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 231.715111][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 231.735896][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 231.743402][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 231.746278][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 231.758596][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 231.771952][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 231.780748][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 231.794516][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 231.803059][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 231.810595][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 231.818079][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 231.825480][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 231.833266][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 231.840803][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 231.848380][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 231.856260][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 231.863746][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 231.871357][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 231.880437][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 231.888306][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 231.895748][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 231.924248][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 231.936008][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 231.936227][ T26] airspy 2-1:0.0: Board ID: 00 [ 231.943452][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 231.943483][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 231.943508][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 231.943534][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 231.943564][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 231.951661][ T26] airspy 2-1:0.0: Firmware version: [ 231.976936][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 232.008245][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 232.016913][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 232.024448][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 232.032820][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 232.040453][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 232.048414][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 232.055929][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 232.063444][ T3685] plantronics 0003:047F:FFFF.000C: unknown main item tag 0x0 [ 232.072217][ T3685] plantronics 0003:047F:FFFF.000C: No inputs registered, leaving [ 232.111022][ T3685] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 232.159440][ T3685] usb 1-1: USB disconnect, device number 13 [ 232.245497][ T8093] device macvlan2 entered promiscuous mode [ 232.596212][ T26] airspy 2-1:0.0: usb_control_msg() failed -71 request 12 [ 232.620241][ T26] airspy 2-1:0.0: Registered as swradio16 [ 232.633575][ T26] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 232.652881][ T26] usb 2-1: USB disconnect, device number 17 [ 232.762114][ T8112] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 232.786007][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 232.826089][ T3686] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 233.181016][ T8125] loop1: detected capacity change from 0 to 512 [ 233.201624][ T3686] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.224089][ T8125] Quota error (device loop1): do_check_range: Getting dqdh_entries 1536 out of range 0-14 [ 233.226165][ T3686] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.243069][ T8125] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 233.255932][ T3686] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 233.275935][ T3686] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.285047][ T3686] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.295740][ T3686] usb 4-1: config 0 descriptor?? [ 233.313517][ T8125] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz.1.1592: Failed to acquire dquot type 1 [ 233.352227][ T8125] EXT4-fs (loop1): 1 truncate cleaned up [ 233.368136][ T8125] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 233.386686][ T8125] ext4 filesystem being mounted at /320/file0 supports timestamps until 2038 (0x7fffffff) [ 233.444554][ T3638] EXT4-fs (loop1): unmounting filesystem. [ 233.564024][ T8131] loop1: detected capacity change from 0 to 4096 [ 233.626759][ T8131] ntfs: volume version 3.1. [ 233.787995][ T3686] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 233.795566][ T3686] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0 [ 233.826059][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 233.833273][ T3686] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving [ 233.861448][ T3686] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 233.862022][ T8141] loop1: detected capacity change from 0 to 64 [ 234.068631][ T4232] usb 4-1: USB disconnect, device number 9 [ 234.337098][ T8168] device syzkaller1 entered promiscuous mode [ 234.385574][ T8172] loop0: detected capacity change from 0 to 128 [ 234.710033][ T8184] loop3: detected capacity change from 0 to 128 [ 234.745542][ T8184] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 234.791666][ T8184] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038 (0x7fffffff) [ 234.865995][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 234.955778][ T7402] EXT4-fs (loop3): unmounting filesystem. [ 235.166791][ T8208] loop2: detected capacity change from 0 to 64 [ 235.409283][ T8218] loop3: detected capacity change from 0 to 64 [ 235.906469][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 236.886387][ T8246] loop1: detected capacity change from 0 to 32768 [ 236.945998][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 236.971021][ T8246] XFS (loop1): Mounting V5 Filesystem [ 237.098080][ T8246] XFS (loop1): Ending clean mount [ 237.247436][ T3638] XFS (loop1): Unmounting Filesystem [ 237.274485][ T8303] loop3: detected capacity change from 0 to 4096 [ 237.285095][ T8303] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 237.525717][ T8303] ntfs3: loop3: ino=1f, "bus" ntfs_iget5 [ 237.669170][ T7402] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 237.694592][ T7402] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 237.725170][ T7402] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 237.854745][ T8317] loop1: detected capacity change from 0 to 128 [ 237.986107][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 238.017429][ T8317] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 238.043218][ T8317] ext4 filesystem being mounted at /proc/736/cgroup supports timestamps until 2038 (0x7fffffff) [ 238.114056][ T8317] EXT4-fs (loop1): unmounting filesystem. [ 238.194253][ T8301] loop2: detected capacity change from 0 to 32768 [ 238.243634][ T8301] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.1666 (8301) [ 238.493394][ T8334] loop0: detected capacity change from 0 to 512 [ 238.530246][ T8334] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #3: comm syz.0.1681: corrupted inode contents [ 238.554646][ T8334] EXT4-fs error (device loop0): ext4_dirty_inode:6086: inode #3: comm syz.0.1681: mark_inode_dirty error [ 238.577386][ T8334] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #3: comm syz.0.1681: corrupted inode contents [ 238.599537][ T8334] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #3: comm syz.0.1681: mark_inode_dirty error [ 238.620633][ T8334] Quota error (device loop0): write_blk: dquota write failed [ 238.635174][ T8334] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 238.652695][ T8334] EXT4-fs error (device loop0): ext4_acquire_dquot:6800: comm syz.0.1681: Failed to acquire dquot type 0 [ 238.679387][ T8334] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.1681: corrupted inode contents [ 238.700019][ T8334] EXT4-fs error (device loop0): ext4_dirty_inode:6086: inode #16: comm syz.0.1681: mark_inode_dirty error [ 238.715640][ T8334] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.1681: corrupted inode contents [ 238.735426][ T8334] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.1681: mark_inode_dirty error [ 238.755281][ T8334] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.1681: corrupted inode contents [ 238.778118][ T8334] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 238.793960][ T8334] EXT4-fs error (device loop0): ext4_do_update_inode:5224: inode #16: comm syz.0.1681: corrupted inode contents [ 238.820673][ T8334] EXT4-fs error (device loop0): ext4_truncate:4311: inode #16: comm syz.0.1681: mark_inode_dirty error [ 238.839530][ T8334] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 238.855823][ C0] sched: RT throttling activated [ 238.859156][ T8301] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 238.875614][ T8334] EXT4-fs (loop0): 1 truncate cleaned up [ 238.876110][ T8301] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 238.891785][ T8301] BTRFS info (device loop2): using free space tree [ 238.926137][ T8334] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 238.935229][ T8334] ext4 filesystem being mounted at /115/file1 supports timestamps until 2038 (0x7fffffff) [ 239.025964][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 239.067672][ T8319] loop3: detected capacity change from 0 to 131072 [ 239.089176][ T8319] F2FS-fs (loop3): Found nat_bits in checkpoint [ 239.170979][ T8319] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 239.189074][ T6595] EXT4-fs (loop0): unmounting filesystem. [ 239.209020][ T9] Quota error (device loop0): do_check_range: Getting block 3925999616 out of range 1-5 [ 239.241159][ T9] EXT4-fs error (device loop0): ext4_release_dquot:6823: comm kworker/u4:0: Failed to release dquot type 0 [ 239.292993][ T9] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 239.336730][ T9] EXT4-fs error (device loop0): ext4_release_dquot:6823: comm kworker/u4:0: Failed to release dquot type 1 [ 239.351184][ T8301] BTRFS info (device loop2): enabling ssd optimizations [ 239.616643][ T4707] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 239.700080][ T27] audit: type=1326 audit(1726197233.980:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8372 comm="syz.0.1688" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efc5cb7def9 code=0x0 [ 240.066124][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 240.069766][ T8381] netlink: 'syz.4.1702': attribute type 2 has an invalid length. [ 240.487175][ T8391] loop2: detected capacity change from 0 to 512 [ 240.545358][ T8391] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #3: comm syz.2.1694: corrupted inode contents [ 240.567970][ T8391] EXT4-fs error (device loop2): ext4_dirty_inode:6086: inode #3: comm syz.2.1694: mark_inode_dirty error [ 240.590707][ T8391] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #3: comm syz.2.1694: corrupted inode contents [ 240.603183][ T8391] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #3: comm syz.2.1694: mark_inode_dirty error [ 240.617924][ T8391] Quota error (device loop2): write_blk: dquota write failed [ 240.625744][ T8391] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 240.636339][ T8391] EXT4-fs error (device loop2): ext4_acquire_dquot:6800: comm syz.2.1694: Failed to acquire dquot type 0 [ 240.649158][ T8391] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #16: comm syz.2.1694: corrupted inode contents [ 240.661698][ T8391] EXT4-fs error (device loop2): ext4_dirty_inode:6086: inode #16: comm syz.2.1694: mark_inode_dirty error [ 240.676288][ T8391] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #16: comm syz.2.1694: corrupted inode contents [ 240.688905][ T8391] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.1694: mark_inode_dirty error [ 240.702264][ T8391] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #16: comm syz.2.1694: corrupted inode contents [ 240.716651][ T8391] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 240.725682][ T8391] EXT4-fs error (device loop2): ext4_do_update_inode:5224: inode #16: comm syz.2.1694: corrupted inode contents [ 240.738501][ T8391] EXT4-fs error (device loop2): ext4_truncate:4311: inode #16: comm syz.2.1694: mark_inode_dirty error [ 240.751720][ T8391] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 240.761956][ T8391] EXT4-fs (loop2): 1 truncate cleaned up [ 240.767968][ T8391] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 240.777035][ T8391] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038 (0x7fffffff) [ 240.857642][ T4707] EXT4-fs (loop2): unmounting filesystem. [ 240.893065][ T1069] Quota error (device loop2): do_check_range: Getting block 3925999616 out of range 1-5 [ 240.935991][ T1069] EXT4-fs error (device loop2): ext4_release_dquot:6823: comm kworker/u4:5: Failed to release dquot type 0 [ 240.966224][ T1069] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 240.986027][ T1069] EXT4-fs error (device loop2): ext4_release_dquot:6823: comm kworker/u4:5: Failed to release dquot type 1 [ 241.105966][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 241.140877][ T8400] loop0: detected capacity change from 0 to 4096 [ 241.169079][ T8400] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 241.245451][ T8400] ntfs3: loop0: ino=1f, "bus" ntfs_iget5 [ 241.275721][ T8409] loop1: detected capacity change from 0 to 512 [ 241.384596][ T6595] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22. [ 241.392686][ T8409] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 241.409450][ T6595] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22. [ 241.439658][ T8416] device syz_tun entered promiscuous mode [ 241.445706][ T6595] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 241.452915][ T8409] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038 (0x7fffffff) [ 241.464089][ T8416] device syz_tun left promiscuous mode [ 241.554021][ T3638] EXT4-fs (loop1): unmounting filesystem. [ 241.868375][ T8431] loop1: detected capacity change from 0 to 512 [ 241.941300][ T8431] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #3: comm syz.1.1710: corrupted inode contents [ 241.982323][ T8399] loop3: detected capacity change from 0 to 40427 [ 241.991808][ T8431] EXT4-fs error (device loop1): ext4_dirty_inode:6086: inode #3: comm syz.1.1710: mark_inode_dirty error [ 242.015310][ T8399] F2FS-fs (loop3): invalid crc value [ 242.017123][ T8425] loop0: detected capacity change from 0 to 8192 [ 242.036188][ T8399] F2FS-fs (loop3): Found nat_bits in checkpoint [ 242.043804][ T8431] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #3: comm syz.1.1710: corrupted inode contents [ 242.066583][ T8425] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 242.079880][ T8431] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.1710: mark_inode_dirty error [ 242.105895][ T8425] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 242.115161][ T8425] REISERFS (device loop0): using ordered data mode [ 242.126013][ T8431] Quota error (device loop1): write_blk: dquota write failed [ 242.133611][ T8431] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz.1.1710: Failed to acquire dquot type 0 [ 242.146177][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 242.146634][ T8425] reiserfs: using flush barriers [ 242.165715][ T8399] F2FS-fs (loop3): Start checkpoint disabled! [ 242.176487][ T8431] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #16: comm syz.1.1710: corrupted inode contents [ 242.196083][ T8425] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 242.213596][ T8399] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 242.221703][ T8431] EXT4-fs error (device loop1): ext4_dirty_inode:6086: inode #16: comm syz.1.1710: mark_inode_dirty error [ 242.234355][ T8425] REISERFS (device loop0): checking transaction log (loop0) [ 242.242718][ T8431] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #16: comm syz.1.1710: corrupted inode contents [ 242.263661][ T8425] REISERFS (device loop0): Using r5 hash to sort names [ 242.271072][ T8431] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.1710: mark_inode_dirty error [ 242.271199][ T8399] syz.3.1698: attempt to access beyond end of device [ 242.271199][ T8399] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 242.282475][ T8425] REISERFS (device loop0): using 3.5.x disk format [ 242.285538][ T8431] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #16: comm syz.1.1710: corrupted inode contents [ 242.342356][ T8431] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 242.354004][ T8431] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #16: comm syz.1.1710: corrupted inode contents [ 242.376050][ T8431] EXT4-fs error (device loop1): ext4_truncate:4311: inode #16: comm syz.1.1710: mark_inode_dirty error [ 242.387843][ T8431] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 242.424297][ T8431] EXT4-fs (loop1): 1 truncate cleaned up [ 242.443492][ T8431] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 242.466046][ T8431] ext4 filesystem being mounted at /340/file1 supports timestamps until 2038 (0x7fffffff) [ 242.477056][ T1069] kworker/u4:5: attempt to access beyond end of device [ 242.477056][ T1069] loop3: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 242.587158][ T3638] EXT4-fs (loop1): unmounting filesystem. [ 242.616374][ T6842] EXT4-fs error (device loop1): ext4_release_dquot:6823: comm kworker/u4:8: Failed to release dquot type 0 [ 242.636463][ T6842] EXT4-fs error (device loop1): ext4_release_dquot:6823: comm kworker/u4:8: Failed to release dquot type 1 [ 243.031701][ T4240] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 243.186071][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 243.289080][ T4240] usb 2-1: Using ep0 maxpacket: 8 [ 243.406293][ T4240] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 243.424954][ T4240] usb 2-1: config 179 has no interface number 0 [ 243.431854][ T4240] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 243.453370][ T4240] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 243.464887][ T8453] loop0: detected capacity change from 0 to 32768 [ 243.475763][ T4240] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 243.490908][ T4240] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 243.503437][ T4240] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 243.517634][ T4240] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 243.527076][ T4240] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.546247][ T8458] loop2: detected capacity change from 0 to 32768 [ 243.554484][ T8458] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1722 (8458) [ 243.556741][ T8449] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 243.603541][ T8458] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 243.616378][ T8458] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 243.633039][ T8458] BTRFS info (device loop2): setting nodatacow, compression disabled [ 243.641581][ T8458] BTRFS info (device loop2): enabling auto defrag [ 243.657734][ T8458] BTRFS info (device loop2): doing ref verification [ 243.664647][ T8458] BTRFS info (device loop2): using free space tree [ 243.862304][ T8380] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input19 [ 243.920507][ T4707] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 244.228016][ C1] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 244.473659][ T8467] loop3: detected capacity change from 0 to 32768 [ 244.488077][ T8467] XFS: noikeep mount option is deprecated. [ 244.493987][ T8467] XFS: attr2 mount option is deprecated. [ 244.523030][ T8467] XFS (loop3): Mounting V5 Filesystem [ 244.596971][ T8467] XFS (loop3): Ending clean mount [ 244.605395][ T8467] XFS (loop3): Quotacheck needed: Please wait. [ 244.606818][ T4236] usb 2-1: USB disconnect, device number 18 [ 244.625926][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 244.634304][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 244.643509][ C1] vkms_vblank_simulate: vblank timer overrun [ 244.658833][ T8486] loop0: detected capacity change from 0 to 40427 [ 244.666607][ T4236] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 244.666804][ T8467] XFS (loop3): Quotacheck: Done. [ 244.694222][ T8486] F2FS-fs (loop0): invalid crc value [ 244.713155][ T8486] F2FS-fs (loop0): Found nat_bits in checkpoint [ 244.801390][ T8486] F2FS-fs (loop0): Start checkpoint disabled! [ 244.822145][ T8486] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 244.822206][ T7402] XFS (loop3): Unmounting Filesystem [ 244.927116][ T8486] syz.0.1727: attempt to access beyond end of device [ 244.927116][ T8486] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 244.937632][ T8503] loop1: detected capacity change from 0 to 512 [ 245.030252][ T8506] ================================================================== [ 245.038443][ T8506] BUG: KASAN: use-after-free in dev_map_generic_redirect+0xa0/0x650 [ 245.046498][ T8506] Read of size 8 at addr ffff88807386d400 by task syz.2.1734/8506 [ 245.054337][ T8506] [ 245.056712][ T8506] CPU: 1 PID: 8506 Comm: syz.2.1734 Not tainted 6.1.110-syzkaller #0 [ 245.061754][ T6842] kworker/u4:8: attempt to access beyond end of device [ 245.061754][ T6842] loop0: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 245.064790][ T8506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 245.088905][ T8506] Call Trace: [ 245.092202][ T8506] [ 245.095145][ T8506] dump_stack_lvl+0x1e3/0x2cb [ 245.099873][ T8506] ? nf_tcp_handle_invalid+0x642/0x642 [ 245.105402][ T8506] ? panic+0x764/0x764 [ 245.109625][ T8506] ? _printk+0xd1/0x111 [ 245.113809][ T8506] ? __virt_addr_valid+0x17f/0x530 [ 245.118962][ T8506] ? __virt_addr_valid+0x17f/0x530 [ 245.124106][ T8506] print_report+0x15f/0x4f0 [ 245.128809][ T8506] ? __virt_addr_valid+0x17f/0x530 [ 245.133996][ T8506] ? __virt_addr_valid+0x17f/0x530 [ 245.139132][ T8506] ? __virt_addr_valid+0x45b/0x530 [ 245.144259][ T8506] ? __phys_addr+0xb6/0x170 [ 245.148776][ T8506] ? dev_map_generic_redirect+0xa0/0x650 [ 245.154501][ T8506] kasan_report+0x136/0x160 [ 245.159095][ T8506] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 245.165031][ T8506] ? dev_map_generic_redirect+0xa0/0x650 [ 245.170781][ T8506] dev_map_generic_redirect+0xa0/0x650 [ 245.176277][ T8506] ? __cant_sleep+0x270/0x270 [ 245.180964][ T8506] ? bq_enqueue+0x3b0/0x3b0 [ 245.185494][ T8506] ? bpf_prog_run_generic_xdp+0x9e0/0x1160 [ 245.191533][ T8506] xdp_do_generic_redirect+0x4bf/0x850 [ 245.197128][ T8506] do_xdp_generic+0x50b/0x6d0 [ 245.201835][ T8506] ? trace_xdp_exception+0x280/0x280 [ 245.207162][ T8506] ? tun_get_user+0x24ee/0x42d0 [ 245.212098][ T8506] ? tun_get_user+0x24ee/0x42d0 [ 245.216981][ T8506] tun_get_user+0x261e/0x42d0 [ 245.221694][ T8506] ? rcu_read_unlock+0xa0/0xa0 [ 245.226474][ T8506] ? tun_get+0x1e/0x2f0 [ 245.230639][ T8506] ? __lock_acquire+0x1f80/0x1f80 [ 245.235682][ T8506] ? tun_get+0x1e/0x2f0 [ 245.239854][ T8506] ? tun_get+0x27d/0x2f0 [ 245.244110][ T8506] tun_chr_write_iter+0x10c/0x1f0 [ 245.249155][ T8506] vfs_write+0x857/0xbc0 [ 245.253406][ T8506] ? file_end_write+0x250/0x250 [ 245.258282][ T8506] ? __fget_files+0x28/0x4a0 [ 245.262875][ T8506] ? __fget_files+0x435/0x4a0 [ 245.267564][ T8506] ? __fdget_pos+0x1db/0x360 [ 245.272164][ T8506] ? ksys_write+0x77/0x2c0 [ 245.276583][ T8506] ksys_write+0x19c/0x2c0 [ 245.280944][ T8506] ? print_irqtrace_events+0x210/0x210 [ 245.286433][ T8506] ? __ia32_sys_read+0x80/0x80 [ 245.291207][ T8506] ? syscall_enter_from_user_mode+0x2e/0x230 [ 245.297226][ T8506] ? lockdep_hardirqs_on+0x94/0x130 [ 245.302450][ T8506] ? syscall_enter_from_user_mode+0x2e/0x230 [ 245.308454][ T8506] do_syscall_64+0x3b/0xb0 [ 245.312884][ T8506] ? clear_bhb_loop+0x45/0xa0 [ 245.317572][ T8506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 245.323483][ T8506] RIP: 0033:0x7f2b2c77c9df [ 245.327915][ T8506] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 245.347553][ T8506] RSP: 002b:00007f2b2d574000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 245.356015][ T8506] RAX: ffffffffffffffda RBX: 00007f2b2c935f80 RCX: 00007f2b2c77c9df [ 245.364039][ T8506] RDX: 000000000000fdef RSI: 00000000200000c0 RDI: 00000000000000c8 [ 245.372025][ T8506] RBP: 00007f2b2c7f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 245.380023][ T8506] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 245.388033][ T8506] R13: 0000000000000000 R14: 00007f2b2c935f80 R15: 00007fffbd5e61f8 [ 245.396116][ T8506] [ 245.399266][ T8506] [ 245.401784][ T8506] Allocated by task 8348: [ 245.406198][ T8506] kasan_set_track+0x4b/0x70 [ 245.410976][ T8506] __kasan_kmalloc+0x97/0xb0 [ 245.415567][ T8506] __kmalloc_node+0xb3/0x230 [ 245.420182][ T8506] alloc_bulk+0x685/0x8d0 [ 245.424516][ T8506] irq_work_single+0xd5/0x230 [ 245.429197][ T8506] irq_work_run+0x187/0x350 [ 245.433697][ T8506] __sysvec_irq_work+0xbb/0x360 [ 245.438549][ T8506] sysvec_irq_work+0x89/0xb0 [ 245.443146][ T8506] asm_sysvec_irq_work+0x16/0x20 [ 245.448122][ T8506] [ 245.450707][ T8506] Freed by task 1069: [ 245.454698][ T8506] kasan_set_track+0x4b/0x70 [ 245.459387][ T8506] kasan_save_free_info+0x27/0x40 [ 245.464414][ T8506] ____kasan_slab_free+0xd6/0x120 [ 245.469440][ T8506] __kmem_cache_free+0x25c/0x3c0 [ 245.474384][ T8506] drain_mem_cache+0x285/0x3c0 [ 245.479153][ T8506] bpf_mem_alloc_destroy+0x151/0x8d0 [ 245.484459][ T8506] htab_map_free+0x6b7/0x900 [ 245.489086][ T8506] process_one_work+0x8a9/0x11d0 [ 245.494040][ T8506] worker_thread+0xa47/0x1200 [ 245.498731][ T8506] kthread+0x28d/0x320 [ 245.502800][ T8506] ret_from_fork+0x1f/0x30 [ 245.507238][ T8506] [ 245.509619][ T8506] The buggy address belongs to the object at ffff88807386d400 [ 245.509619][ T8506] which belongs to the cache kmalloc-cg-96 of size 96 [ 245.523788][ T8506] The buggy address is located 0 bytes inside of [ 245.523788][ T8506] 96-byte region [ffff88807386d400, ffff88807386d460) [ 245.536844][ T8506] [ 245.539176][ T8506] The buggy address belongs to the physical page: [ 245.545622][ T8506] page:ffffea0001ce1b40 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7386d [ 245.555786][ T8506] memcg:ffff88807e016c01 [ 245.560039][ T8506] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 245.567670][ T8506] raw: 00fff00000000200 0000000000000000 dead000000000001 ffff888017c428c0 [ 245.576387][ T8506] raw: 0000000000000000 0000000000200020 00000001ffffffff ffff88807e016c01 [ 245.585065][ T8506] page dumped because: kasan: bad access detected [ 245.591489][ T8506] page_owner tracks the page as allocated [ 245.597202][ T8506] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 3638, tgid 3638 (syz-executor), ts 79763143686, free_ts 79629028929 [ 245.615448][ T8506] post_alloc_hook+0x18d/0x1b0 [ 245.620219][ T8506] get_page_from_freelist+0x322e/0x33b0 [ 245.625941][ T8506] __alloc_pages+0x28d/0x770 [ 245.630531][ T8506] alloc_slab_page+0x6a/0x150 [ 245.635244][ T8506] new_slab+0x84/0x2d0 [ 245.639319][ T8506] ___slab_alloc+0xc20/0x1270 [ 245.644062][ T8506] __kmem_cache_alloc_node+0x19f/0x260 [ 245.649551][ T8506] __kmalloc_node+0xa2/0x230 [ 245.654239][ T8506] kvmalloc_node+0x6e/0x180 [ 245.658750][ T8506] alloc_fdtable+0x154/0x280 [ 245.663367][ T8506] dup_fd+0x89b/0xcb0 [ 245.667372][ T8506] copy_files+0xe6/0x200 [ 245.671656][ T8506] copy_process+0x1873/0x4060 [ 245.676360][ T8506] kernel_clone+0x222/0x920 [ 245.680870][ T8506] __x64_sys_clone+0x231/0x280 [ 245.685641][ T8506] do_syscall_64+0x3b/0xb0 [ 245.690076][ T8506] page last free stack trace: [ 245.694742][ T8506] free_unref_page_prepare+0xf63/0x1120 [ 245.700293][ T8506] free_unref_page+0x33/0x3e0 [ 245.705005][ T8506] __vunmap+0x834/0x9a0 [ 245.709171][ T8506] free_work+0x57/0x80 [ 245.713345][ T8506] process_one_work+0x8a9/0x11d0 [ 245.718312][ T8506] worker_thread+0xa47/0x1200 [ 245.723014][ T8506] kthread+0x28d/0x320 [ 245.727088][ T8506] ret_from_fork+0x1f/0x30 [ 245.731515][ T8506] [ 245.733839][ T8506] Memory state around the buggy address: [ 245.739464][ T8506] ffff88807386d300: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 245.747525][ T8506] ffff88807386d380: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 245.755610][ T8506] >ffff88807386d400: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 245.763754][ T8506] ^ [ 245.767817][ T8506] ffff88807386d480: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 245.775878][ T8506] ffff88807386d500: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 245.783935][ T8506] ================================================================== [ 245.792157][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.798293][ T8506] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 245.805522][ T8506] CPU: 1 PID: 8506 Comm: syz.2.1734 Not tainted 6.1.110-syzkaller #0 [ 245.813621][ T8506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 245.823710][ T8506] Call Trace: [ 245.827006][ T8506] [ 245.829998][ T8506] dump_stack_lvl+0x1e3/0x2cb [ 245.834717][ T8506] ? nf_tcp_handle_invalid+0x642/0x642 [ 245.840220][ T8506] ? panic+0x764/0x764 [ 245.844401][ T8506] ? rcu_is_watching+0x11/0xb0 [ 245.849185][ T8506] ? vscnprintf+0x59/0x80 [ 245.853537][ T8506] panic+0x318/0x764 [ 245.857464][ T8506] ? check_panic_on_warn+0x1d/0xa0 [ 245.862602][ T8506] ? memcpy_page_flushcache+0xfc/0xfc [ 245.868012][ T8506] ? _raw_spin_unlock_irqrestore+0xd4/0x130 [ 245.873935][ T8506] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 245.879842][ T8506] ? _raw_spin_unlock+0x40/0x40 [ 245.884699][ T8506] ? print_report+0x4a3/0x4f0 [ 245.889390][ T8506] check_panic_on_warn+0x7e/0xa0 [ 245.894333][ T8506] ? dev_map_generic_redirect+0xa0/0x650 [ 245.899972][ T8506] end_report+0x66/0x110 [ 245.904218][ T8506] kasan_report+0x143/0x160 [ 245.908728][ T8506] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 245.914638][ T8506] ? dev_map_generic_redirect+0xa0/0x650 [ 245.920281][ T8506] dev_map_generic_redirect+0xa0/0x650 [ 245.925744][ T8506] ? __cant_sleep+0x270/0x270 [ 245.930428][ T8506] ? bq_enqueue+0x3b0/0x3b0 [ 245.935040][ T8506] ? bpf_prog_run_generic_xdp+0x9e0/0x1160 [ 245.940950][ T8506] xdp_do_generic_redirect+0x4bf/0x850 [ 245.946419][ T8506] do_xdp_generic+0x50b/0x6d0 [ 245.951104][ T8506] ? trace_xdp_exception+0x280/0x280 [ 245.956479][ T8506] ? tun_get_user+0x24ee/0x42d0 [ 245.961375][ T8506] ? tun_get_user+0x24ee/0x42d0 [ 245.966260][ T8506] tun_get_user+0x261e/0x42d0 [ 245.970977][ T8506] ? rcu_read_unlock+0xa0/0xa0 [ 245.975764][ T8506] ? tun_get+0x1e/0x2f0 [ 245.979952][ T8506] ? __lock_acquire+0x1f80/0x1f80 [ 245.984994][ T8506] ? tun_get+0x1e/0x2f0 [ 245.989158][ T8506] ? tun_get+0x27d/0x2f0 [ 245.993416][ T8506] tun_chr_write_iter+0x10c/0x1f0 [ 245.998452][ T8506] vfs_write+0x857/0xbc0 [ 246.002710][ T8506] ? file_end_write+0x250/0x250 [ 246.007567][ T8506] ? __fget_files+0x28/0x4a0 [ 246.012169][ T8506] ? __fget_files+0x435/0x4a0 [ 246.016857][ T8506] ? __fdget_pos+0x1db/0x360 [ 246.021541][ T8506] ? ksys_write+0x77/0x2c0 [ 246.025964][ T8506] ksys_write+0x19c/0x2c0 [ 246.030297][ T8506] ? print_irqtrace_events+0x210/0x210 [ 246.035790][ T8506] ? __ia32_sys_read+0x80/0x80 [ 246.040929][ T8506] ? syscall_enter_from_user_mode+0x2e/0x230 [ 246.047003][ T8506] ? lockdep_hardirqs_on+0x94/0x130 [ 246.052225][ T8506] ? syscall_enter_from_user_mode+0x2e/0x230 [ 246.058213][ T8506] do_syscall_64+0x3b/0xb0 [ 246.062641][ T8506] ? clear_bhb_loop+0x45/0xa0 [ 246.067330][ T8506] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 246.073233][ T8506] RIP: 0033:0x7f2b2c77c9df [ 246.077651][ T8506] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 246.097261][ T8506] RSP: 002b:00007f2b2d574000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 246.105700][ T8506] RAX: ffffffffffffffda RBX: 00007f2b2c935f80 RCX: 00007f2b2c77c9df [ 246.113694][ T8506] RDX: 000000000000fdef RSI: 00000000200000c0 RDI: 00000000000000c8 [ 246.121684][ T8506] RBP: 00007f2b2c7f0b76 R08: 0000000000000000 R09: 0000000000000000 [ 246.129682][ T8506] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000000 [ 246.137669][ T8506] R13: 0000000000000000 R14: 00007f2b2c935f80 R15: 00007fffbd5e61f8 [ 246.145657][ T8506] [ 246.149031][ T8506] Kernel Offset: disabled [ 246.153399][ T8506] Rebooting in 86400 seconds..