last executing test programs: 16.750184701s ago: executing program 2: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mbind(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x1, 0x0, 0x0, 0x0) unshare(0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 14.461461246s ago: executing program 2: syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000e80)='./file0\x00', 0x10082, &(0x7f0000000640)=ANY=[@ANYBLOB="756e695f786c6174653d312c726f6469722c756e695f786c6174653d302c73686f72746e616d653d77696e6e742c757466383d302c73686f72746e616d653d6d697865642c726f6469722c696f636861727365743d63703433372c756e695f786c6174653d302c6572726f72733d72656d6f756e742d726f2c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f77657865632c756e695f786c6174653d312c73686f72746e616d653d77696e39352c71756965742c004812981d"], 0x2, 0x2ad, &(0x7f0000000280)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') fcntl$setstatus(r0, 0x4, 0x6000) io_setup(0x202, &(0x7f0000000200)=0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x14113e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) ftruncate(r2, 0xa419) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x4000}]) 14.055067181s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="880000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006000128009000100766c616e00000000500002800600010000000000040003800c00020004000000000000000c000200540a000018000000280004000000010005000000000000000c00010000000000000000000c0001007fae00000100000008000500", @ANYRES32=r2], 0x88}, 0x1, 0xba01}, 0x0) 13.804647487s ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2810000, &(0x7f0000000380)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@delalloc}, {@user_xattr}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") creat(&(0x7f0000000180)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}}) 12.993094418s ago: executing program 0: syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000009840)='./file0\x00', 0x0, &(0x7f0000000040)={[{@gquota}, {@uquota}, {}, {@nouuid}, {@qnoenforce}]}, 0x1, 0x98a0, &(0x7f0000009880)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000340)=ANY=[], 0x700, 0x0) lremovexattr(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)=@known='trusted.overlay.upper\x00') 12.323458115s ago: executing program 2: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) 11.16506582s ago: executing program 0: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2810000, &(0x7f0000000380)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@delalloc}, {@user_xattr}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") creat(&(0x7f0000000180)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}}) 11.009443653s ago: executing program 2: socket$inet_mptcp(0x2, 0x1, 0x106) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) io_uring_setup(0x30d3, &(0x7f0000000000)) r1 = syz_io_uring_setup(0x94c, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x1}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 10.424333222s ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) write$binfmt_script(r1, 0x0, 0xfffffe5d) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r2, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond_slave_0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 10.083455122s ago: executing program 0: syz_open_dev$dri(0x0, 0xfffffffffffffffc, 0x20800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) openat$capi20(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) r5 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000500)="58000000140091d427323b4725458db45602117fffefff81000e224e227f1800017b00090080007f000001e809000000ff0000f03ac7100003fffeffffffff00000001100003000000deff0000", 0x4d}], 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r5]) 9.105392118s ago: executing program 0: r0 = syz_io_uring_setup(0x9f7, &(0x7f0000000000), &(0x7f0000000080), &(0x7f00000000c0)) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="000000000000eb"]}, 0x7f) io_uring_register$IORING_REGISTER_FILES(r0, 0x1b, &(0x7f0000000100)=[0xffffffffffffffff], 0x1) 8.616672747s ago: executing program 0: r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x123201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)=0x12) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="d0", 0x1}], 0x1) 7.164448779s ago: executing program 1: syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000080)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@acl}, {@nodiscard}]}, 0xfb, 0x50f9, &(0x7f0000005140)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0) r1 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffb) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0) r3 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f000000a240)={0x2020}, 0xfffffd8f) sendfile(r2, r3, 0x0, 0x1000200201005) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) 7.022607116s ago: executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write(0xffffffffffffffff, &(0x7f0000000400)="6f88b2a60614ef91a3f8ef9e1220b2675bce0f59b2336b1e3eb222ffa77b91bd642da8472b07a5059831e5c03734ccff6480db993a9be5198f428be1838bef5847f8452dab06605676dc879a87d9c28bf128eb784296078f4a28e8a2595743bd65e4e6a9e5ced66e5524edc432ceaab8552a2c2f179d91122a961061343c8695c39084b2370dae938e8d43b6d6fbd905eff6c6360e26d2ef525c6a46357a0f26061ba8da82c8c39b6ec93cea456c8ed747b85fa822136714ad8bdb0d36d7c9c75354e5d73d216e45cb24fc975e092c08bd1bfb1102952f580acce4909b84036801c1f0b88c7508aa2bf5999b5f8b0da1b6d5a83203cf784ce1e8a562c75310eea1c28d9f650073742c8e9311718b35acee6a272bd76b7e547c06b9b9c461163e18f48033a79c7f3a6574c234d84fa9c569100e6c088070010175611c6643b7cd4eb643ab300fa1e46fb4027fe48882975fcfd5a5295ead29b97cb0e86af8a0b4beb400d3b54774eafac72f7d222a4248662afdd0072963aef817701d5fc445f61d563c3ed0992670002289a555f7bebfcc91b5c75e9222b17ed54aff16a3d6a0cfab24f8bffcaef7c61f2be13411eb800853f37dd2d0efc25abc246e833d350206539d5160991f02e4b0201f14ed8fdc814c4034ed7e438934b250352ece17f1145ba3ea72c698adfeeb89e4e1338fd7598d83f70137a83ef5", 0x1f9) close(r0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000540)='./file1\x00') execve(&(0x7f0000000300)='./file1\x00', &(0x7f0000000400), &(0x7f0000000600)=[&(0x7f0000000580)='/proc/stat\x00']) 6.866155352s ago: executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x970026, &(0x7f0000000380)=ANY=[@ANYBLOB='mode=00000000000000000000000,uid=', @ANYRESHEX=0x0]) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) r2 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x468, 0x308, 0x0, 0x308, 0x308, 0x220, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x308}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x98, 0xc8, 0x0, {}, [@common=@unspec=@state={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @multicast2}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c8) r3 = getuid() r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r5 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) syz_io_uring_setup(0x6f3, &(0x7f0000000180)={0x0, 0x26da, 0x100, 0x0, 0x10c, 0x0, r4}, &(0x7f00000000c0), &(0x7f0000000200)) ioctl$VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f0000000040)={0x2001, 0xb, 0x0, "4fe858777ded413ebd5eebd3d94d31104d1dc6a34eb44b276203989a4411b984"}) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x200012, &(0x7f00000002c0)=ANY=[@ANYRES8=r3, @ANYRESDEC=r3, @ANYRES16=r1, @ANYRES16], 0x1, 0x522, &(0x7f0000000a80)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000020240), 0x10010) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r8 = dup(r7) sendmsg$netlink(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000002540)=ANY=[], 0x1f88}], 0x1}, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000540)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r8, 0x894b, &(0x7f0000000240)) bind$alg(r0, &(0x7f0000000700)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc-twofish-avx)\x00'}, 0x58) 4.845940884s ago: executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x0, 0xffff0000}, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[@ANYBLOB="03010000b5"], 0xc8) write(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.735896471s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001580)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x38}}, 0x0) 3.93521905s ago: executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2810000, &(0x7f0000000380)={[{@user_xattr}, {@noquota}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x8}}, {@delalloc}, {@user_xattr}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") creat(&(0x7f0000000180)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc1}}) 3.678131418s ago: executing program 1: r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000240), 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b01, 0x0) 2.183508984s ago: executing program 4: syz_open_dev$evdev(0x0, 0xc0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) ioctl$EXT4_IOC_CHECKPOINT(0xffffffffffffffff, 0x4004662b, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$nl_route(0x10, 0x3, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x4000, 0x0) 1.251776221s ago: executing program 4: r0 = openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000002ec0)='/sys/fs/smackfs/direct\x00', 0x2, 0x0) write$binfmt_elf64(r0, 0x0, 0x0) 1.242021418s ago: executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="150100007d00000005f6"], 0x115) 1.116695604s ago: executing program 3: close(0xffffffffffffffff) io_setup(0x3, 0x0) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000007) r0 = socket$inet6(0xa, 0x80801, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x8901, 0x20000010) futex(&(0x7f0000004580)=0x6, 0xd, 0x42, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) rt_sigreturn() poll(0x0, 0x0, 0x8) r1 = memfd_create(0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x10, r1, 0x0) r2 = memfd_create(&(0x7f00000004c0)='\xc0\x87:*\x18\xc1k\xa7\x87[\xa0o8\xaaK\xa5\xd3\v\x86\xca<\x7f\xfd6\x8d}\xd8\xf2G\xb8\xeae)\x90\x86\xe3\x96\b\xe0\xfa\xb1\xd8N\xb2W\xcb\x8d}3lm8\xa57\xc9\x00HOA\xc8\x80kR\xfc\xcb%u3\xec\xde\x04\x00\x00\x00\xebD\x82S\x17?\xd6As\xc2\xb1\x9aF\xe2\xba[\xc7%\x88 \xdem\xbe\x7f2\x11)W\x9c\x82\x91\x17\xd8\xda@4\x9f\xc5*T\x1e^\xf7o\xff\xff\xff\xffwI\x02\xf3\xe3\x8d.\xd1=\xcf\xbf\x81\xb5\x8d%K\x1d\xe7_\xde\x87\xdd\xc1\xf0\x91\x1a!\x9c\xd3\v\xc9\x95d\xe3*\xa9\xfa\x99\x9d\xb8\x89>\xc9\xf2/\x13{\x1a\x7f\x00\x00\x00\x00+$\xedX\xb7KV\x90\xc3D\x82\xc6\xce\x83\xab\x05\x19-\xf3\x8c\x9a\x15\x9c\xf5\xb4O\x17@d\x81+\xf6\xe6+\xed\r\xd2\xb3\xaa\x9b\x7fC\'\xa2\xf6\x12\xa1\x15Punfo\x7f\x92G\x0e.\xce\xd8h\xb9p2\xccC\xbaH\xc4\xdc\xe2\xa1%)\x85\xc7O]\'9\x92\xad\xfbJ\x02\x1d\x91-\xc99\t&\xbdq\x06`T\xc8\x92\xaf\xad\x06\xdd\xaf\x84\xf4\"\x13\xbc\xe5\x93D\xad~F\xe5\x19\xaa\xaa\xb2\xb1\x03m\x82+\x06\x1bF^\xd3n\xc4F\xc1\xc08\x94\xe6\xe5\x1f\xa7\xf6\xcaA\x90T\xf1\x1b\xe6\xb9\xe7\xff\xc5H\x04\x8d\xca\xad\x17UlY\x9a}\r4\xac\x93\xac\v2\xc6\xf9\xbe\xfeI\x8b\xd4/`\xab\x1e\xff\xe9\x7f\xa4.\xaa!\xd6\x02\xe4\xcf\x7f\b\x94 2.{\xc1\xbe\x9bth~\xcb\xb9E\x10W\xed\xed51[\xc5\xeb\xb1ux\x94\x00\x00\x00\x00\x00\x00\x00\x00\x00gO\x8b3\x97\xbd', 0x0) mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x1, 0x12, r2, 0xffffc000) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x5450, 0x0) fallocate(r2, 0x0, 0x0, 0x8000047) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x5452, &(0x7f0000000080)={'wlan0\x00', {0x2, 0x0, @remote}}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TUNSETVNETBE(r5, 0x5450, 0x0) fcntl$setlease(r4, 0x400, 0x2) lsetxattr(0x0, &(0x7f0000004200)=@random={'system.', 'cgroup.controllers\x00'}, 0x0, 0x0, 0x0) getxattr(&(0x7f0000004040)='./file0\x00', 0x0, &(0x7f0000004240)=""/214, 0xd6) rt_sigreturn() 1.084615839s ago: executing program 4: syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file2\x00', 0x2200886, &(0x7f0000006340)=ANY=[@ANYBLOB='iocharset=cp936,iocharset=cp1255,grpquota,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c696e746567726974792c646973636172643d3078303030303030303030303030303030382c6469736361726400756d61736b3d3078303030303030303030303030303030302c726573697a652c646973636172642c726573697a653d3078303030303030303030303030303030392c6572726f72733d72656d6f756e746861727365743d63703836312c00a963a7e1f5df03dc012c"], 0x5, 0x61ad, &(0x7f0000006580)="$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") 877.984883ms ago: executing program 1: ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev, 0x659}, {@empty}, {@multicast1}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev}, {@remote}, {@multicast2}, {@private}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002140)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ed10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000889049938edebcd600", 0x2000, 0x0) 849.717458ms ago: executing program 3: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8915, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @loopback}}) 646.591238ms ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001580)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x38}}, 0x0) 326.66777ms ago: executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'ip6gre0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05", 0x5ac, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 44.719953ms ago: executing program 3: syz_emit_ethernet(0x6e, &(0x7f00000008c0)={@link_local, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x60, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x0, [0x0, 0x0]}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x969c]}}}}}}, 0x0) 0s ago: executing program 3: r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg$unix(r2, &(0x7f00000082c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}}], 0x1, 0x18ca0282, 0x0) kernel console output (not intermixed with test programs): s... done [ 151.026955][ T6448] bcachefs (loop2): going read-write [ 151.055650][ T6459] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=xxhash,str_hash=crc32c,nojournal_transaction_names,nocow [ 151.063166][ T6455] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 151.071970][ T6459] bcachefs (loop0): recovering from clean shutdown, journal seq 7 [ 151.091456][ T6448] bcachefs (loop2): done starting filesystem [ 151.170766][ T6459] bcachefs (loop0): alloc_read... done [ 151.185458][ T5109] bcachefs (loop2): shutting down [ 151.188670][ T6459] bcachefs (loop0): stripes_read... done [ 151.196405][ T6459] bcachefs (loop0): snapshots_read... done [ 151.202762][ T5109] bcachefs (loop2): going read-only [ 151.205994][ T6459] bcachefs (loop0): journal_replay... done [ 151.214437][ T6459] bcachefs (loop0): resume_logged_ops... done [ 151.221183][ T6459] bcachefs (loop0): going read-write [ 151.224589][ T5109] bcachefs (loop2): finished waiting for writes to stop [ 151.237916][ T6455] XFS (loop4): Ending clean mount [ 151.248466][ T5109] bcachefs (loop2): flushing journal and stopping allocators, journal seq 10 [ 151.250166][ T6459] bcachefs (loop0): done starting filesystem [ 151.280083][ T5109] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 11 [ 151.299720][ T5109] bcachefs (loop2): shutdown complete, journal seq 12 [ 151.307518][ T5109] bcachefs (loop2): marking filesystem clean [ 151.314821][ T6455] XFS (loop4): Quotacheck needed: Please wait. [ 151.321984][ T6489] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 151.446899][ T5109] bcachefs (loop2): shutdown complete [ 151.568551][ T6455] XFS (loop4): Quotacheck: Done. [ 151.794081][ T6459] syz-executor.0 (6459) used greatest stack depth: 14456 bytes left [ 151.835031][ T5101] bcachefs (loop0): shutting down [ 151.858951][ T5101] bcachefs (loop0): going read-only [ 151.864315][ T5101] bcachefs (loop0): finished waiting for writes to stop [ 151.923658][ T5101] bcachefs (loop0): flushing journal and stopping allocators, journal seq 9 [ 151.982654][ T5104] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 152.036145][ T5101] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 11 [ 152.057862][ T5101] bcachefs (loop0): shutdown complete, journal seq 12 [ 152.066260][ T5101] bcachefs (loop0): marking filesystem clean [ 152.126932][ T5101] bcachefs (loop0): shutdown complete [ 152.256356][ T6498] loop2: detected capacity change from 0 to 128 [ 152.327936][ T6498] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 152.343521][ T6493] loop3: detected capacity change from 0 to 32768 [ 152.368380][ T6498] ext4 filesystem being mounted at /root/syzkaller-testdir454981572/syzkaller.ue5n2j/90/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 152.574058][ T6493] read_mapping_page failed! [ 152.594641][ T6493] bread failed! [ 152.602713][ T6495] loop1: detected capacity change from 0 to 32768 [ 152.608281][ T6493] jfs_create: dtInsert returned -EIO [ 152.621701][ T5109] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 152.635100][ T6495] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (6495) [ 152.639376][ T6493] ERROR: (device loop3): jfs_create: [ 152.639376][ T6493] [ 152.662796][ T6493] ERROR: (device loop3): remounting filesystem as read-only [ 152.693707][ T6495] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 152.707517][ T6501] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 0 [ 152.707517][ T6501] [ 152.730323][ T6495] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 152.756180][ T6495] BTRFS info (device loop1): using free-space-tree [ 152.756207][ T6501] ERROR: (device loop3): __get_metapage: using a discarded metapage [ 152.756207][ T6501] [ 152.846360][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 152.869112][ T6510] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 152.968333][ T5160] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 153.067313][ T6522] IPVS: rr: SCTP 127.0.0.1:0 - no destination available [ 153.105645][ T5114] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 153.163526][ T5160] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 153.194133][ T5160] usb 5-1: language id specifier not provided by device, defaulting to English [ 153.209574][ T5160] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 153.239202][ T5160] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.247308][ T5160] usb 5-1: Product: syz [ 153.254094][ T5160] usb 5-1: Manufacturer: syz [ 153.259941][ T5160] usb 5-1: SerialNumber: syz [ 153.281198][ T5160] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 153.321496][ T6526] bridge0: port 3(veth1_vlan) entered blocking state [ 153.339215][ T6526] bridge0: port 3(veth1_vlan) entered disabled state [ 153.346188][ T6526] veth1_vlan: entered allmulticast mode [ 153.382014][ T6526] veth1_vlan: left allmulticast mode [ 153.546918][ T6503] loop4: detected capacity change from 0 to 512 [ 153.556468][ T6535] loop1: detected capacity change from 0 to 256 [ 153.625571][ T6540] loop0: detected capacity change from 0 to 256 [ 153.627413][ T6503] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.662392][ T6503] ext4 filesystem being mounted at /root/syzkaller-testdir1111112894/syzkaller.Sj5Wuv/66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.124048][ T6544] loop2: detected capacity change from 0 to 32768 [ 155.169091][ T6544] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 155.234874][ T6544] XFS (loop2): Ending clean mount [ 155.251936][ T6544] XFS (loop2): Quotacheck needed: Please wait. [ 155.316009][ T6544] XFS (loop2): Quotacheck: Done. [ 155.446048][ T6556] loop0: detected capacity change from 0 to 32768 [ 155.490479][ T5109] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 155.564537][ T6556] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 155.580683][ T6556] bcachefs (loop0): recovering from clean shutdown, journal seq 8 [ 155.654278][ T6556] bcachefs (loop0): alloc_read... done [ 155.661010][ T6556] bcachefs (loop0): stripes_read... done [ 155.666983][ T6556] bcachefs (loop0): snapshots_read... done [ 155.678453][ T6556] bcachefs (loop0): journal_replay... done [ 155.684622][ T6556] bcachefs (loop0): resume_logged_ops... done [ 155.693323][ T6556] bcachefs (loop0): going read-write [ 155.706281][ T6556] bcachefs (loop0): done starting filesystem [ 155.763047][ T5101] bcachefs (loop0): shutting down [ 155.768703][ T5101] bcachefs (loop0): going read-only [ 155.774093][ T5101] bcachefs (loop0): finished waiting for writes to stop [ 155.782379][ T5101] bcachefs (loop0): flushing journal and stopping allocators, journal seq 8 [ 155.792406][ T5101] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 8 [ 155.813090][ T5101] bcachefs (loop0): shutdown complete, journal seq 9 [ 155.821498][ T5101] bcachefs (loop0): marking filesystem clean [ 156.018671][ T5101] bcachefs (loop0): shutdown complete [ 156.032692][ T25] usb 5-1: USB disconnect, device number 5 [ 156.044927][ T5104] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.244288][ T6586] bridge0: port 3(veth1_vlan) entered blocking state [ 156.252547][ T6586] bridge0: port 3(veth1_vlan) entered disabled state [ 156.272770][ T6586] veth1_vlan: entered allmulticast mode [ 156.284665][ T6586] veth1_vlan: left allmulticast mode [ 156.472140][ T6588] loop4: detected capacity change from 0 to 256 [ 157.225751][ T6605] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.552846][ T6616] loop4: detected capacity change from 0 to 256 [ 159.390652][ T6641] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 159.581878][ T6646] loop1: detected capacity change from 0 to 1024 [ 159.635524][ T6646] hfsplus: unable to parse mount options [ 159.768679][ T6641] loop1: detected capacity change from 0 to 1024 [ 159.830032][ T6656] process 'syz-executor.0' launched './file0' with NULL argv: empty string added [ 160.168394][ T11] hfsplus: b-tree write err: -5, ino 4 [ 160.197211][ T6665] veth0_to_hsr: entered promiscuous mode [ 160.207683][ T29] audit: type=1326 audit(1718661205.247:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6663 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb127cf29 code=0x7ffc0000 [ 160.208990][ T6664] veth0_to_hsr: left promiscuous mode [ 160.242720][ T29] audit: type=1326 audit(1718661205.277:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6663 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb127cf29 code=0x7ffc0000 [ 160.264667][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.300353][ T29] audit: type=1326 audit(1718661205.327:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6663 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcb127cf29 code=0x7ffc0000 [ 160.362511][ T29] audit: type=1326 audit(1718661205.327:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6663 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb127cf29 code=0x7ffc0000 [ 160.384438][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.403015][ T29] audit: type=1326 audit(1718661205.327:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6663 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb127cf29 code=0x7ffc0000 [ 160.427107][ T29] audit: type=1326 audit(1718661205.327:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6663 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcb127cf29 code=0x7ffc0000 [ 160.449144][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.457792][ T29] audit: type=1326 audit(1718661205.327:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6663 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb127cf29 code=0x7ffc0000 [ 160.484695][ T6672] loop0: detected capacity change from 0 to 164 [ 160.501326][ T29] audit: type=1326 audit(1718661205.327:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6663 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efcb127a6a7 code=0x7ffc0000 [ 160.528918][ T29] audit: type=1326 audit(1718661205.327:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6663 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efcb1240379 code=0x7ffc0000 [ 160.550754][ C1] vkms_vblank_simulate: vblank timer overrun [ 160.565239][ T6672] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 160.604534][ T29] audit: type=1326 audit(1718661205.327:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6663 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7efcb127cf29 code=0x7ffc0000 [ 160.670051][ T6672] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 160.683142][ T6675] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 160.735298][ T6672] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 160.766082][ T6672] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 161.653737][ T6691] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 161.861887][ T6700] loop4: detected capacity change from 0 to 64 [ 161.896487][ T6700] MINIX-fs: bad superblock or unable to read bitmaps [ 163.040984][ T6710] loop2: detected capacity change from 0 to 4096 [ 163.063245][ T6710] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 163.105118][ T6710] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 163.518411][ T6713] mmap: syz-executor.1 (6713) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 163.651115][ T69] ntfs3: loop2: ino=5, ntfs3_write_inode failed, -22. [ 163.718561][ T6713] loop0: detected capacity change from 0 to 7 [ 163.764323][ T6702] loop4: detected capacity change from 0 to 32768 [ 163.792608][ T6702] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 163.811194][ T6713] Dev loop0: unable to read RDB block 7 [ 163.828305][ T6702] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 163.836858][ T6713] loop0: unable to read partition table [ 163.873011][ T6713] loop0: partition table beyond EOD, truncated [ 163.892866][ T6713] loop_reread_partitions: partition scan of loop0 (þ被xüŸÑø éÚ¬§½dƤ´à–ƒÝ¡¯¨â·û [ 163.892866][ T6713] ) failed (rc=-5) [ 163.904014][ T6702] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms [ 163.924417][ T6711] loop0: detected capacity change from 0 to 32768 [ 163.927239][ T5159] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 163.947868][ T5159] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 163.948496][ T6711] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6711) [ 163.983042][ T6711] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 164.014087][ T6711] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 164.040861][ T6711] BTRFS info (device loop0): using free-space-tree [ 164.085126][ T5159] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 137ms [ 164.093651][ T5159] gfs2: fsid=syz:syz.0: jid=0: Done [ 164.099853][ T6702] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 164.158393][ T25] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 164.338547][ T6711] loop0: detected capacity change from 32768 to 0 [ 164.355181][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 164.359728][ T6740] syz-executor.0: attempt to access beyond end of device [ 164.359728][ T6740] loop0: rw=2049, sector=10456, nr_sectors = 128 limit=0 [ 164.390239][ T25] usb 3-1: language id specifier not provided by device, defaulting to English [ 164.392337][ T6740] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 164.402198][ T25] usb 3-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.40 [ 164.421004][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.430480][ T25] usb 3-1: Product: syz [ 164.434872][ T25] usb 3-1: Manufacturer: syz [ 164.439652][ T25] usb 3-1: SerialNumber: syz [ 164.457079][ T25] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 164.524831][ T6740] syz-executor.0: attempt to access beyond end of device [ 164.524831][ T6740] loop0: rw=2049, sector=10480, nr_sectors = 2560 limit=0 [ 164.542093][ T6740] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 164.571706][ T6711] syz-executor.0: attempt to access beyond end of device [ 164.571706][ T6711] loop0: rw=524288, sector=10344, nr_sectors = 24 limit=0 [ 164.597348][ T6711] syz-executor.0: attempt to access beyond end of device [ 164.597348][ T6711] loop0: rw=0, sector=10344, nr_sectors = 8 limit=0 [ 164.618853][ T6711] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 2, rd 1, flush 0, corrupt 0, gen 0 [ 164.690684][ T6719] loop2: detected capacity change from 0 to 512 [ 164.696795][ T6742] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 164.749503][ T6719] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.789202][ T6719] ext4 filesystem being mounted at /root/syzkaller-testdir454981572/syzkaller.ue5n2j/110/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 164.942536][ T51] kworker/u8:3: attempt to access beyond end of device [ 164.942536][ T51] loop0: rw=67112961, sector=2064, nr_sectors = 8 limit=0 [ 165.008632][ T51] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 3, rd 1, flush 0, corrupt 0, gen 0 [ 165.100723][ T51] kworker/u8:3: attempt to access beyond end of device [ 165.100723][ T51] loop0: rw=67112961, sector=10440, nr_sectors = 8 limit=0 [ 165.117899][ T51] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 4, rd 1, flush 0, corrupt 0, gen 0 [ 165.406711][ T51] kworker/u8:3: attempt to access beyond end of device [ 165.406711][ T51] loop0: rw=67112961, sector=10456, nr_sectors = 8 limit=0 [ 165.407916][ T51] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 5, rd 1, flush 0, corrupt 0, gen 0 [ 165.412820][ T51] kworker/u8:3: attempt to access beyond end of device [ 165.412820][ T51] loop0: rw=67112961, sector=10464, nr_sectors = 8 limit=0 [ 165.413327][ T51] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 6, rd 1, flush 0, corrupt 0, gen 0 [ 165.416373][ T51] kworker/u8:3: attempt to access beyond end of device [ 165.416373][ T51] loop0: rw=67112961, sector=10472, nr_sectors = 8 limit=0 [ 165.416660][ T51] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 7, rd 1, flush 0, corrupt 0, gen 0 [ 165.596161][ T5101] BTRFS error (device loop0 state A): Transaction aborted (error -5) [ 165.597983][ T5101] BTRFS: error (device loop0 state A) in __btrfs_free_extent:3222: errno=-5 IO failure [ 165.600433][ T5101] BTRFS info (device loop0 state EA): forced readonly [ 165.602475][ T5101] BTRFS error (device loop0 state EA): failed to run delayed ref for logical 1052672 num_bytes 4096 type 176 action 2 ref_mod 1: -5 [ 165.606394][ T5101] BTRFS: error (device loop0 state EA) in btrfs_run_delayed_refs:2211: errno=-5 IO failure [ 165.613339][ T5101] BTRFS info (device loop0 state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 166.351366][ T25] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 168.714433][ T5108] usb 3-1: USB disconnect, device number 2 [ 168.842744][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.865443][ T5109] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.879791][ T25] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 168.932881][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 168.946104][ T6772] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 168.988440][ T25] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 168.997734][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.042208][ T6760] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 169.051062][ T25] hub 5-1:1.0: bad descriptor, ignoring hub [ 169.066916][ T25] hub 5-1:1.0: probe with driver hub failed with error -5 [ 169.089792][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 169.097920][ T25] cdc_wdm 5-1:1.0: skipping garbage [ 169.117577][ T25] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 169.123724][ T25] cdc_wdm 5-1:1.0: Unknown control protocol [ 169.125702][ T6777] loop1: detected capacity change from 0 to 256 [ 169.166073][ T6777] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 169.169727][ T25] usb 5-1: USB disconnect, device number 6 [ 171.036279][ T6808] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 171.063176][ T6805] loop2: detected capacity change from 0 to 4096 [ 171.078505][ T6808] netlink: 9384 bytes leftover after parsing attributes in process `syz-executor.1'. [ 171.121989][ T6805] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 171.669993][ T6805] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 172.159156][ T2912] ntfs3: loop2: ino=5, ntfs3_write_inode failed, -22. [ 172.652895][ T6826] syz-executor.2[6826] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.653185][ T6826] syz-executor.2[6826] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.940287][ T6840] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 172.988699][ T6840] netlink: 9384 bytes leftover after parsing attributes in process `syz-executor.4'. [ 173.361517][ T6833] loop0: detected capacity change from 0 to 32768 [ 173.388505][ T6833] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6833) [ 173.434612][ T6833] BTRFS info (device loop0): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 173.441831][ T6851] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.449069][ T6833] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 175.679907][ T6833] BTRFS info (device loop0): using free-space-tree [ 175.764419][ T6836] loop1: detected capacity change from 0 to 32768 [ 175.913466][ T6833] BTRFS error (device loop0): open_ctree failed [ 176.671046][ T6885] syz-executor.1[6885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.671323][ T6885] syz-executor.1[6885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.030233][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 178.030257][ T29] audit: type=1800 audit(1718661222.827:64): pid=6888 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="sda1" ino=1965 res=0 errno=0 [ 178.492381][ T6891] loop2: detected capacity change from 0 to 4096 [ 178.501376][ T6891] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 178.528841][ T6891] ntfs3: loop2: Failed to initialize $Extend/$Reparse. [ 187.083669][ T6894] loop2: detected capacity change from 0 to 256 [ 187.267189][ T6904] loop1: detected capacity change from 0 to 512 [ 187.345227][ T6898] loop4: detected capacity change from 0 to 4096 [ 187.388320][ T6898] ntfs3: loop4: Different NTFS sector size (2048) and media sector size (512). [ 187.424280][ T6904] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 187.460761][ T6904] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e018, mo2=0006] [ 187.487962][ T6904] System zones: 0-2, 18-18, 34-35 [ 187.499586][ T6904] EXT4-fs (loop1): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 187.514000][ T6898] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 187.722249][ T6910] loop0: detected capacity change from 0 to 2048 [ 187.825798][ T6910] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 187.853912][ T6910] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 188.352903][ T6911] loop2: detected capacity change from 0 to 256 [ 188.363678][ T5114] EXT4-fs (loop1): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 188.553209][ T6911] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 188.639708][ T5117] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 188.652672][ T5117] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 188.665675][ T5117] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 188.675582][ T5117] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 188.707470][ T5117] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 188.732397][ T5117] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 189.913922][ T29] audit: type=1800 audit(1718661234.587:65): pid=6931 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=1960 res=0 errno=0 [ 190.275193][ T6912] chnl_net:caif_netlink_parms(): no params data found [ 190.828435][ T5107] Bluetooth: hci5: command tx timeout [ 190.941687][ T6912] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.994097][ T6912] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.011902][ T6912] bridge_slave_0: entered allmulticast mode [ 191.033034][ T6912] bridge_slave_0: entered promiscuous mode [ 191.095760][ T6920] loop4: detected capacity change from 0 to 32768 [ 191.136135][ T6944] loop1: detected capacity change from 0 to 256 [ 191.145260][ T6944] exfat: Deprecated parameter 'utf8' [ 191.150954][ T6912] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.159274][ T6912] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.168279][ T6912] bridge_slave_1: entered allmulticast mode [ 191.195463][ T6912] bridge_slave_1: entered promiscuous mode [ 191.231249][ T6920] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 191.233106][ T6944] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 191.521929][ T6912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.568305][ T6920] XFS (loop4): Ending clean mount [ 191.595276][ T6912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.595313][ T6920] XFS (loop4): Quotacheck needed: Please wait. [ 191.745657][ T6920] XFS (loop4): Quotacheck: Done. [ 191.837796][ T6912] team0: Port device team_slave_0 added [ 191.865811][ T6912] team0: Port device team_slave_1 added [ 191.919796][ T6938] loop0: detected capacity change from 0 to 32768 [ 191.966463][ T6912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.974231][ T6912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.017185][ T6912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.040090][ T6938] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 192.082086][ T6912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.089320][ T6912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.094679][ T6938] XFS (loop0): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent. [ 192.116579][ T6912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.265798][ T6938] XFS (loop0): Quotacheck needed: Please wait. [ 192.354577][ T5104] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 192.374880][ T6912] hsr_slave_0: entered promiscuous mode [ 192.393770][ T6938] XFS (loop0): Quotacheck: Done. [ 192.415459][ T6912] hsr_slave_1: entered promiscuous mode [ 192.435974][ T6912] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.445663][ T6912] Cannot create hsr debugfs directory [ 192.451834][ T5101] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 192.902095][ T5107] Bluetooth: hci5: command tx timeout [ 193.039784][ T6912] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.204292][ T6912] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.253835][ T29] audit: type=1326 audit(1718661238.297:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6993 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f7627cf29 code=0x0 [ 193.403327][ T6912] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.507127][ T7002] loop1: detected capacity change from 0 to 256 [ 193.572950][ T6912] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.589298][ T7002] exfat: Deprecated parameter 'utf8' [ 193.624152][ T7011] loop2: detected capacity change from 0 to 128 [ 193.692488][ T7002] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 193.721562][ T7011] qnx6: unable to read the first superblock [ 193.956987][ T6912] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 193.982788][ T6912] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 194.014790][ T6912] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 194.074848][ T6912] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 194.316742][ T7013] loop4: detected capacity change from 0 to 4096 [ 194.374273][ T7019] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 194.475583][ T6912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.576315][ T6912] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.600747][ T5194] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.608036][ T5194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.634958][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.642611][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.667154][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.674390][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.784635][ T6912] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.797451][ T7024] loop2: detected capacity change from 0 to 4096 [ 194.838351][ T7024] ntfs3: loop2: Different NTFS sector size (2048) and media sector size (512). [ 194.847471][ T7030] loop4: detected capacity change from 0 to 1024 [ 194.887681][ T7030] hfsplus: xattr exists yet [ 194.953423][ T7024] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 194.970009][ T69] hfsplus: b-tree write err: -5, ino 4 [ 194.978892][ T5107] Bluetooth: hci5: command tx timeout [ 195.026467][ T7037] loop0: detected capacity change from 0 to 2048 [ 195.060599][ T7037] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 195.117174][ T7037] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 195.179144][ T7037] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry where CRC length (63772) does not match entry length (28) [ 195.235784][ T6912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.255744][ T29] audit: type=1326 audit(1718661240.297:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7040 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f7627cf29 code=0x0 [ 195.364481][ T6912] veth0_vlan: entered promiscuous mode [ 195.423901][ T6912] veth1_vlan: entered promiscuous mode [ 195.494777][ T6912] veth0_macvtap: entered promiscuous mode [ 195.543767][ T6912] veth1_macvtap: entered promiscuous mode [ 195.581609][ T7056] loop0: detected capacity change from 0 to 128 [ 195.612566][ T7056] qnx6: unable to read the first superblock [ 195.623880][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.685613][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.704023][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.721303][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.734108][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.752130][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.766422][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.788178][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.804327][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.838892][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.894604][ T6912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.930601][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.961007][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.986462][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.185989][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.198403][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.218341][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.238298][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.534309][ T7063] loop2: detected capacity change from 0 to 2048 [ 196.766866][ T7063] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 196.807906][ T7063] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 197.116965][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.125153][ T5107] Bluetooth: hci5: command tx timeout [ 197.136208][ T6912] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.150483][ T6912] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.163082][ T6912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.205533][ T6912] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.234604][ T6912] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.245390][ T6912] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.254777][ T6912] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.547165][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.569722][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.579414][ T7071] loop0: detected capacity change from 0 to 256 [ 197.662894][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.690224][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.030213][ T7094] loop4: detected capacity change from 0 to 8 [ 198.043867][ T7088] loop1: detected capacity change from 0 to 1764 [ 198.231807][ T29] audit: type=1400 audit(1718661243.267:68): lsm=SMACK fn=smack_inode_permission action=denied subject="_" object="&!*-:" requested=x pid=7087 comm="syz-executor.1" name="/" dev="loop1" ino=1920 [ 198.386734][ T7104] loop2: detected capacity change from 0 to 256 [ 200.880131][ T7128] loop0: detected capacity change from 0 to 4096 [ 201.147912][ T7146] loop2: detected capacity change from 0 to 512 [ 201.188375][ T7146] EXT4-fs (loop2): bad s_min_extra_isize: 65535 [ 201.273827][ T29] audit: type=1804 audit(1718661246.307:69): pid=7128 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3048305694/syzkaller.mqNjwX/134/file1/file1" dev="loop0" ino=34 res=1 errno=0 [ 202.149315][ T5119] Bluetooth: hci4: command 0x0406 tx timeout [ 202.209820][ T5117] Bluetooth: hci2: command 0x0406 tx timeout [ 202.216103][ T5113] Bluetooth: hci3: command 0x0406 tx timeout [ 202.229185][ T5116] Bluetooth: hci0: command 0x0406 tx timeout [ 203.099566][ T7166] loop1: detected capacity change from 0 to 8192 [ 203.213792][ T5162] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 203.247138][ T5162] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 203.279835][ T7178] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 204.881744][ T7200] loop4: detected capacity change from 0 to 64 [ 205.074877][ T7204] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 205.447931][ T7213] x_tables: duplicate entry at hook 1 [ 205.854557][ T7222] loop1: detected capacity change from 0 to 256 [ 205.924940][ T7224] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 206.921368][ T7241] loop4: detected capacity change from 0 to 1024 [ 206.989577][ T7241] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.006471][ T7248] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 207.057585][ T7227] loop2: detected capacity change from 0 to 32768 [ 207.126708][ T7250] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 207.136520][ T7250] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 207.158298][ T7227] ERROR: (device loop2): diNewExt: no free extents [ 207.158298][ T7227] [ 207.190763][ T7227] ERROR: (device loop2): remounting filesystem as read-only [ 207.200268][ T7227] ialloc: diAlloc returned -5! [ 207.209491][ T7248] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 207.230454][ T7248] bond1 (unregistering): Released all slaves [ 207.322746][ T7253] x_tables: duplicate entry at hook 1 [ 207.359667][ T5104] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.620997][ T7265] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 207.648503][ T7265] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.4'. [ 208.836958][ T7275] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 209.148274][ T5108] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 209.247832][ T7289] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 209.348445][ T5108] usb 3-1: Using ep0 maxpacket: 16 [ 209.358348][ T5108] usb 3-1: too many endpoints for config 1 interface 1 altsetting 83: 35, using maximum allowed: 30 [ 209.394205][ T7266] loop1: detected capacity change from 0 to 32768 [ 209.414376][ T5108] usb 3-1: config 1 interface 1 altsetting 83 has 0 endpoint descriptors, different from the interface descriptor's value: 35 [ 209.475686][ T7266] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7266) [ 209.488235][ T7291] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 209.490274][ T5108] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 209.529924][ T7291] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 209.547907][ T5108] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 209.571325][ T5108] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 209.596016][ T7266] BTRFS info (device loop1): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 209.612527][ T5108] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 209.613524][ T7292] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 209.625414][ T7266] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 209.648222][ T5108] usb 3-1: config 1 interface 1 has no altsetting 0 [ 209.663044][ T7266] BTRFS info (device loop1): using free-space-tree [ 209.671218][ T5108] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 209.685050][ T5108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.693545][ T5108] usb 3-1: Product: syz [ 209.696192][ T7292] bond1 (unregistering): Released all slaves [ 209.697828][ T5108] usb 3-1: Manufacturer: syz [ 209.710035][ T5108] usb 3-1: SerialNumber: syz [ 209.834468][ T7278] loop0: detected capacity change from 0 to 32768 [ 209.923631][ T7278] ERROR: (device loop0): diNewExt: no free extents [ 209.923631][ T7278] [ 209.952117][ T7278] ERROR: (device loop0): remounting filesystem as read-only [ 209.969990][ T7278] ialloc: diAlloc returned -5! [ 210.052925][ T5114] BTRFS info (device loop1): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 210.093704][ T5108] usb 3-1: USB disconnect, device number 3 [ 210.428022][ T7320] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 210.838421][ T7334] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 210.848593][ T7328] loop1: detected capacity change from 0 to 2048 [ 211.102961][ T7337] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 211.189381][ T7337] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 211.258000][ T7339] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 211.309125][ T7339] bond1 (unregistering): Released all slaves [ 211.544609][ T7330] loop0: detected capacity change from 0 to 32768 [ 211.605785][ T7330] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 211.683215][ T7330] XFS (loop0): Ending clean mount [ 211.786898][ T7363] dlm: non-version read from control device 0 [ 211.865568][ T5101] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 211.947069][ T7365] loop2: detected capacity change from 0 to 256 [ 212.049908][ T7365] exfat: Deprecated parameter 'namecase' [ 212.103386][ T7369] loop4: detected capacity change from 0 to 2048 [ 212.145205][ T7365] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 212.699434][ T7381] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 212.713011][ T7356] loop1: detected capacity change from 0 to 32768 [ 212.829109][ T7356] ERROR: (device loop1): diNewExt: no free extents [ 212.829109][ T7356] [ 212.868459][ T7356] ERROR: (device loop1): remounting filesystem as read-only [ 212.875868][ T7356] ialloc: diAlloc returned -5! [ 212.919739][ T7381] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 212.951191][ T7381] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 212.977465][ T7385] bond1 (unregistering): (slave batadv2): Releasing backup interface [ 213.013584][ T7385] bond1 (unregistering): Released all slaves [ 213.321196][ T7392] loop2: detected capacity change from 0 to 64 [ 213.473015][ T7396] loop4: detected capacity change from 0 to 256 [ 213.496407][ T7396] exfat: Deprecated parameter 'namecase' [ 213.534272][ T7396] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 213.606465][ T7398] loop1: detected capacity change from 0 to 512 [ 213.626982][ T7373] loop0: detected capacity change from 0 to 32768 [ 213.639398][ T7398] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 213.722045][ T7373] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 213.953315][ T7412] loop2: detected capacity change from 0 to 128 [ 213.989187][ T7373] XFS (loop0): Ending clean mount [ 214.129465][ T7416] loop1: detected capacity change from 0 to 128 [ 214.206713][ T7416] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 214.221536][ T7416] FAT-fs (loop1): FAT read failed (blocknr 255) [ 214.316886][ T7416] loop1: detected capacity change from 0 to 512 [ 214.352858][ T7416] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 214.380509][ T7373] XFS (loop0): Quotacheck needed: Please wait. [ 214.397059][ T7415] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 214.554639][ T7416] EXT4-fs (loop1): 1 orphan inode deleted [ 214.560601][ T7416] EXT4-fs (loop1): 1 truncate cleaned up [ 214.574498][ T7416] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 214.712922][ T7373] XFS (loop0): Quotacheck: Done. [ 214.874924][ T5114] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.909576][ T7420] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 214.989403][ T5101] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 215.025994][ T7422] loop2: detected capacity change from 0 to 1764 [ 215.313320][ T7431] loop4: detected capacity change from 0 to 256 [ 215.343441][ T7431] exfat: Deprecated parameter 'namecase' [ 215.372471][ T7431] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d) [ 215.557228][ T7437] loop0: detected capacity change from 0 to 1024 [ 215.584682][ T7437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.617750][ T5163] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 215.654501][ T7442] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 215.690058][ T7443] syz-executor.4[7443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.690439][ T7443] syz-executor.4[7443] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.756063][ T5101] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.865482][ T5163] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 215.878018][ T5163] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.918424][ T5163] usb 3-1: config 0 descriptor?? [ 216.019464][ T7427] loop1: detected capacity change from 0 to 32768 [ 216.207795][ T7427] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 216.229959][ T7463] deleting an unspecified loop device is not supported. [ 216.248848][ T7427] bcachefs (loop1): recovering from clean shutdown, journal seq 7 [ 216.296767][ T7427] bcachefs (loop1): alloc_read... done [ 216.312773][ T7427] bcachefs (loop1): stripes_read... done [ 216.325107][ T7427] bcachefs (loop1): snapshots_read... done [ 216.353116][ T7427] bcachefs (loop1): journal_replay... done [ 216.374471][ T7427] bcachefs (loop1): resume_logged_ops... done [ 216.382313][ T7427] bcachefs (loop1): going read-write [ 216.401375][ T7427] bcachefs (loop1): done starting filesystem [ 216.623222][ T5114] bcachefs (loop1): shutting down [ 216.638610][ T5114] bcachefs (loop1): going read-only [ 216.648297][ T5114] bcachefs (loop1): finished waiting for writes to stop [ 216.666834][ T5114] bcachefs (loop1): flushing journal and stopping allocators, journal seq 7 [ 216.699006][ T5114] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 7 [ 216.727774][ T5114] bcachefs (loop1): shutdown complete, journal seq 8 [ 216.736127][ T5114] bcachefs (loop1): marking filesystem clean [ 216.754733][ T7450] loop0: detected capacity change from 0 to 32768 [ 216.794957][ T5114] bcachefs (loop1): shutdown complete [ 216.819512][ T7450] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 216.926849][ T7450] XFS (loop0): Ending clean mount [ 216.943718][ T7450] XFS (loop0): Quotacheck needed: Please wait. [ 217.037886][ T7450] XFS (loop0): Quotacheck: Done. [ 217.190480][ T5101] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 217.349902][ T7468] loop4: detected capacity change from 0 to 32768 [ 217.498674][ T7468] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 217.580565][ T7486] loop0: detected capacity change from 0 to 64 [ 217.668855][ T7468] XFS (loop4): Ending clean mount [ 217.881322][ T5104] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 218.673309][ T5163] [drm:udl_init] *ERROR* Selecting channel failed [ 218.732590][ T5163] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 218.753075][ T5163] [drm] Initialized udl on minor 2 [ 218.778582][ T5163] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 218.850906][ T5163] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 218.919620][ T5163] usb 3-1: USB disconnect, device number 4 [ 218.927352][ T5108] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 218.951223][ T5108] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 220.134890][ T7528] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.682367][ T7564] loop1: detected capacity change from 0 to 256 [ 223.306401][ T7547] loop0: detected capacity change from 0 to 32768 [ 223.319584][ T7547] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (7547) [ 224.061968][ T7547] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 224.098915][ T7547] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 224.107654][ T7547] BTRFS info (device loop0): disk space caching is enabled [ 224.215938][ T7547] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 224.228549][ T7547] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 224.266411][ T7547] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 224.309244][ T7547] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 224.321179][ T7547] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 224.334424][ T7547] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 224.348303][ T7547] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 224.398374][ T7597] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.1'. [ 224.465726][ T7547] BTRFS error (device loop0): open_ctree failed [ 224.829135][ T7611] loop1: detected capacity change from 0 to 256 [ 224.922610][ T7611] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x72685a33, utbl_chksum : 0xe619d30d) [ 225.129613][ T7615] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 225.207316][ T7598] loop4: detected capacity change from 0 to 32768 [ 225.396002][ T7628] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 225.452031][ T7598] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 225.500364][ T7598] bcachefs (loop4): recovering from clean shutdown, journal seq 7 [ 225.620806][ T7598] bcachefs (loop4): alloc_read... done [ 225.626403][ T7598] bcachefs (loop4): stripes_read... done [ 225.647606][ T7598] bcachefs (loop4): snapshots_read... done [ 225.689280][ T7598] bcachefs (loop4): journal_replay... done [ 225.705697][ T7598] bcachefs (loop4): resume_logged_ops... done [ 225.728409][ T7598] bcachefs (loop4): going read-write [ 225.763846][ T7638] cifs: Bad value for 'source' [ 225.770718][ T7598] bcachefs (loop4): done starting filesystem [ 225.806813][ T7643] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.3'. [ 225.936081][ T7649] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.088381][ T5104] bcachefs (loop4): shutting down [ 226.128372][ T5104] bcachefs (loop4): going read-only [ 226.133661][ T5104] bcachefs (loop4): finished waiting for writes to stop [ 226.160280][ T5104] bcachefs (loop4): flushing journal and stopping allocators, journal seq 7 [ 226.180863][ T5104] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 7 [ 226.221545][ T5104] bcachefs (loop4): shutdown complete, journal seq 8 [ 226.235411][ T5104] bcachefs (loop4): marking filesystem clean [ 226.270397][ T5104] bcachefs (loop4): shutdown complete [ 226.422322][ T7629] loop0: detected capacity change from 0 to 32768 [ 226.613982][ T7670] loop1: detected capacity change from 0 to 512 [ 226.650231][ T7668] cifs: Bad value for 'source' [ 226.946478][ T5194] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 227.168999][ T5194] usb 4-1: Using ep0 maxpacket: 16 [ 227.223464][ T5194] usb 4-1: unable to get BOS descriptor or descriptor too short [ 227.842304][ T5194] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.864739][ T5194] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.882763][ T5194] usb 4-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice= 0.40 [ 227.908173][ T5194] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.916243][ T5194] usb 4-1: Product: syz [ 227.920764][ T5194] usb 4-1: Manufacturer: syz [ 227.928475][ T5194] usb 4-1: SerialNumber: syz [ 227.946999][ T5194] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input6 [ 227.989324][ T7686] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.160714][ T4518] bcm5974 4-1:1.0: could not read from device [ 228.205833][ T5194] usb 4-1: USB disconnect, device number 4 [ 228.528525][ T7707] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 228.792289][ T7714] loop4: detected capacity change from 0 to 512 [ 230.185252][ T7731] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 230.255823][ T7699] loop2: detected capacity change from 0 to 32768 [ 230.518744][ T7730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.533772][ T29] audit: type=1800 audit(1718661276.827:70): pid=7743 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1967 res=0 errno=0 [ 234.658479][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 234.673582][ T7792] loop0: detected capacity change from 0 to 2048 [ 234.751327][ T7792] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 234.982683][ T7789] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.100285][ T7812] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.681253][ T7840] loop1: detected capacity change from 0 to 256 [ 236.709644][ T7840] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 237.008515][ T5116] Bluetooth: hci5: link tx timeout [ 237.016045][ T5116] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 237.048202][ T5117] Bluetooth: hci5: link tx timeout [ 237.053435][ T5117] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 237.094503][ T5117] Bluetooth: hci5: link tx timeout [ 237.098333][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 237.099889][ T5117] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 237.117467][ T5117] Bluetooth: hci5: link tx timeout [ 237.123216][ T5117] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 237.131037][ T5117] Bluetooth: hci5: link tx timeout [ 237.138740][ T5117] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 237.146732][ T5117] Bluetooth: hci5: link tx timeout [ 237.155456][ T5117] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 237.165012][ T5117] Bluetooth: hci5: link tx timeout [ 237.170244][ T5117] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 237.179058][ T5117] Bluetooth: hci5: link tx timeout [ 237.187664][ T5117] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 237.195614][ T5117] Bluetooth: hci5: link tx timeout [ 237.200906][ T5117] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 237.208907][ T5117] Bluetooth: hci5: link tx timeout [ 237.214066][ T5117] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 237.223627][ T5117] Bluetooth: hci5: link tx timeout [ 237.228988][ T5117] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 237.236928][ T5117] Bluetooth: hci5: link tx timeout [ 237.242412][ T5117] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 237.250248][ T5117] Bluetooth: hci5: link tx timeout [ 237.256586][ T5117] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 237.271599][ T5117] Bluetooth: hci5: link tx timeout [ 237.276769][ T5117] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 237.284858][ T5117] Bluetooth: hci5: link tx timeout [ 237.290058][ T5117] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 237.424911][ T7847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.060191][ T5117] Bluetooth: hci5: command 0x0406 tx timeout [ 240.813455][ T7895] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 240.944115][ T7899] loop1: detected capacity change from 0 to 256 [ 240.985601][ T7899] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 241.048184][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 241.174195][ T29] audit: type=1326 audit(1718661286.217:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7902 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb127cf29 code=0x7ffc0000 [ 241.268965][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 241.277547][ T29] audit: type=1326 audit(1718661286.217:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7902 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb127cf29 code=0x7ffc0000 [ 241.303474][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 241.332037][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 241.352920][ T7873] loop4: detected capacity change from 0 to 32768 [ 241.372669][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0 [ 241.385318][ T29] audit: type=1326 audit(1718661286.237:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7902 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7efcb127cf29 code=0x7ffc0000 [ 241.434423][ T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 0 [ 241.463937][ T29] audit: type=1326 audit(1718661286.237:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7902 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb127cf29 code=0x7ffc0000 [ 241.498220][ T29] audit: type=1326 audit(1718661286.237:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7902 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efcb127cf29 code=0x7ffc0000 [ 241.519428][ T25] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b [ 241.532130][ T25] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 241.541712][ T25] usb 4-1: Product: syz [ 241.546737][ T25] usb 4-1: Manufacturer: syz [ 241.551643][ T25] usb 4-1: SerialNumber: syz [ 241.580574][ T29] audit: type=1326 audit(1718661286.237:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7902 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcb127cf29 code=0x7ffc0000 [ 241.603611][ T25] usb 4-1: config 0 descriptor?? [ 241.611400][ T25] usb 4-1: NFC: intf ffff88801fea9000 id ffffffff8ec9b660 [ 241.635818][ T25] nfcmrvl 4-1:0.0: NFC: registered with nci successfully [ 241.663315][ T7903] loop0: detected capacity change from 0 to 4096 [ 241.676338][ T29] audit: type=1326 audit(1718661286.237:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7902 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7efcb127eca7 code=0x7ffc0000 [ 241.712324][ T7903] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 241.718367][ T29] audit: type=1326 audit(1718661286.237:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7902 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7efcb127ec1c code=0x7ffc0000 [ 241.746043][ T7903] ntfs3: loop0: Failed to load $MFT (-22). [ 241.767340][ T29] audit: type=1326 audit(1718661286.237:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7902 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7efcb127eb54 code=0x7ffc0000 [ 241.804968][ T29] audit: type=1326 audit(1718661286.237:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7902 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7efcb127eb54 code=0x7ffc0000 [ 241.857381][ T25] usb 4-1: USB disconnect, device number 5 [ 241.875429][ T25] usb 4-1: NFC: intf ffff88801fea9000 [ 242.114029][ T7921] loop2: detected capacity change from 0 to 4096 [ 242.827559][ T5116] Bluetooth: hci1: command 0x0406 tx timeout [ 243.198471][ T7948] loop2: detected capacity change from 0 to 2048 [ 243.239297][ T7948] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 243.258120][ T7948] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 243.289579][ T7954] fscrypt (sda1, inode 1968): Unsupported encryption modes (contents 7, filenames 4) [ 243.311368][ T7948] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 243.959653][ T7963] loop0: detected capacity change from 0 to 1024 [ 244.179698][ T1110] hfsplus: b-tree write err: -5, ino 4 [ 244.313250][ T7969] loop1: detected capacity change from 0 to 256 [ 244.351575][ T7969] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 246.448190][ T5163] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 246.561992][ T8005] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 246.630237][ T5163] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 246.640981][ T8006] loop2: detected capacity change from 0 to 1024 [ 246.651131][ T5163] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 246.668905][ T5163] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 246.683888][ T5163] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 246.722780][ T5163] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.742963][ T5163] usb 5-1: config 0 descriptor?? [ 246.755124][ T8001] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 246.889825][ T51] hfsplus: b-tree write err: -5, ino 4 [ 246.956942][ T29] kauditd_printk_skb: 80 callbacks suppressed [ 246.956990][ T29] audit: type=1326 audit(1718661291.997:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8015 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310847cf29 code=0x7ffc0000 [ 247.006958][ T29] audit: type=1326 audit(1718661292.047:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8015 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310847cf29 code=0x7ffc0000 [ 247.078183][ T29] audit: type=1326 audit(1718661292.047:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8015 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f310847cf29 code=0x7ffc0000 [ 247.232074][ T5163] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xd [ 247.427351][ T5163] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 247.665193][ T29] audit: type=1326 audit(1718661292.047:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8015 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310847cf29 code=0x7ffc0000 [ 248.045749][ T5163] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 248.061292][ T29] audit: type=1326 audit(1718661292.047:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8015 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310847cf29 code=0x7ffc0000 [ 248.102270][ T5163] usb 5-1: USB disconnect, device number 7 [ 248.159323][ T29] audit: type=1326 audit(1718661292.047:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8015 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7f310847cf29 code=0x7ffc0000 [ 248.242547][ T29] audit: type=1326 audit(1718661292.047:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8015 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f310847cf29 code=0x7ffc0000 [ 248.717066][ T5117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 248.731347][ T5117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 248.757331][ T5117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 248.773546][ T5117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 248.783881][ T5117] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 248.794224][ T5117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 249.013930][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.211156][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.335589][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.368700][ T8037] loop2: detected capacity change from 0 to 32768 [ 249.390683][ T8037] XFS: ikeep mount option is deprecated. [ 249.398578][ T5108] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 249.475272][ T8037] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 249.485833][ T5163] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 249.510427][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.562325][ T8037] XFS (loop2): Ending clean mount [ 249.594075][ T8037] XFS (loop2): Quotacheck needed: Please wait. [ 249.620477][ T5108] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 249.638187][ T5108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.662143][ T5108] usb 5-1: config 0 descriptor?? [ 249.677790][ T5108] cp210x 5-1:0.0: cp210x converter detected [ 249.700976][ T5163] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 249.710887][ T5163] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.734380][ T5163] usb 2-1: config 0 descriptor?? [ 249.753224][ T5163] cp210x 2-1:0.0: cp210x converter detected [ 249.763306][ T8037] XFS (loop2): Quotacheck: Done. [ 249.803267][ T29] audit: type=1800 audit(1718661294.847:168): pid=8037 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 249.827272][ T29] audit: type=1800 audit(1718661294.847:169): pid=8037 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="loop2" ino=6150 res=0 errno=0 [ 249.860344][ T8044] chnl_net:caif_netlink_parms(): no params data found [ 249.906559][ T5109] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 250.093150][ T5108] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 250.129000][ T5108] usb 5-1: cp210x converter now attached to ttyUSB0 [ 250.174218][ T5163] usb 2-1: cp210x converter now attached to ttyUSB1 [ 250.300706][ T51] bridge_slave_1: left allmulticast mode [ 250.306438][ T51] bridge_slave_1: left promiscuous mode [ 250.318602][ T5108] usb 5-1: USB disconnect, device number 8 [ 250.337083][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.378709][ T5108] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 250.400053][ T5154] usb 2-1: USB disconnect, device number 3 [ 250.426591][ T5154] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 250.436200][ T51] bridge_slave_0: left allmulticast mode [ 250.445724][ T51] bridge_slave_0: left promiscuous mode [ 250.455349][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.503555][ T5108] cp210x 5-1:0.0: device disconnected [ 250.512288][ T5154] cp210x 2-1:0.0: device disconnected [ 250.906886][ T5117] Bluetooth: hci0: command tx timeout [ 251.981083][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.015448][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.059466][ T5116] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 252.072152][ T5116] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 252.082692][ T5116] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 252.093014][ T5116] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 252.102073][ T5116] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 252.103226][ T51] bond0 (unregistering): Released all slaves [ 252.115740][ T5116] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 252.139678][ T8108] loop1: detected capacity change from 0 to 32768 [ 252.150054][ T8108] XFS: ikeep mount option is deprecated. [ 252.153483][ T8044] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.165775][ T8044] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.217800][ T8044] bridge_slave_0: entered allmulticast mode [ 252.244113][ T8108] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 252.255169][ T8044] bridge_slave_0: entered promiscuous mode [ 252.306810][ T8113] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 252.348492][ T8108] XFS (loop1): Ending clean mount [ 252.372762][ T8108] XFS (loop1): Quotacheck needed: Please wait. [ 252.492200][ T8108] XFS (loop1): Quotacheck: Done. [ 252.540714][ T29] audit: type=1800 audit(1718661297.587:170): pid=8108 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="loop1" ino=6150 res=0 errno=0 [ 252.940143][ T29] audit: type=1800 audit(1718661297.667:171): pid=8108 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="loop1" ino=6150 res=0 errno=0 [ 253.033734][ T5117] Bluetooth: hci0: command tx timeout [ 253.119596][ T8044] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.245764][ T8044] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.368886][ T8044] bridge_slave_1: entered allmulticast mode [ 253.376714][ T8044] bridge_slave_1: entered promiscuous mode [ 253.383190][ T5114] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 253.396511][ T8129] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 253.651958][ T8044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.797779][ T8044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.024909][ T8044] team0: Port device team_slave_0 added [ 254.072371][ T51] hsr_slave_0: left promiscuous mode [ 254.108677][ T51] hsr_slave_1: left promiscuous mode [ 254.121487][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.133731][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.155189][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.175182][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.237025][ T51] veth1_macvtap: left promiscuous mode [ 254.254117][ T51] veth0_macvtap: left promiscuous mode [ 254.258713][ T5117] Bluetooth: hci5: command tx timeout [ 254.273456][ T51] veth1_vlan: left promiscuous mode [ 254.288377][ T51] veth0_vlan: left promiscuous mode [ 255.068314][ T5117] Bluetooth: hci0: command tx timeout [ 256.101536][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.108171][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.347836][ T5117] Bluetooth: hci5: command tx timeout [ 256.519706][ T51] team0 (unregistering): Port device team_slave_1 removed [ 256.642657][ T51] team0 (unregistering): Port device team_slave_0 removed [ 257.148376][ T5117] Bluetooth: hci0: command tx timeout [ 257.547297][ T8044] team0: Port device team_slave_1 added [ 257.554378][ T8162] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 257.768886][ T8044] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.775971][ T8044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.837031][ T8044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.918624][ T8044] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.925643][ T8044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.974012][ T8044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 258.328974][ T8044] hsr_slave_0: entered promiscuous mode [ 258.363305][ T8044] hsr_slave_1: entered promiscuous mode [ 258.400822][ T8044] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 258.420356][ T5117] Bluetooth: hci5: command tx timeout [ 258.460300][ T8044] Cannot create hsr debugfs directory [ 258.498189][ T5163] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 258.610459][ T8203] loop4: detected capacity change from 0 to 128 [ 258.646343][ T8203] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 258.691228][ T8114] chnl_net:caif_netlink_parms(): no params data found [ 258.701537][ T5163] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 258.708586][ T8203] ext4 filesystem being mounted at /proc/8202/cgroup supports timestamps until 2038-01-19 (0x7fffffff) [ 258.726515][ T5163] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 258.746465][ T5163] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 258.756416][ T5163] usb 3-1: SerialNumber: syz [ 258.784932][ T5163] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 258.795439][ T5163] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 258.802174][ T5163] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 258.824199][ T8203] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 258.907694][ T8200] loop1: detected capacity change from 0 to 32768 [ 258.917383][ T8200] XFS: noikeep mount option is deprecated. [ 258.976980][ T8200] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 259.033521][ T8] usb 3-1: USB disconnect, device number 5 [ 259.107855][ T8200] XFS (loop1): Ending clean mount [ 259.127231][ T8200] XFS (loop1): Quotacheck needed: Please wait. [ 259.222383][ T8200] XFS (loop1): Quotacheck: Done. [ 259.324252][ T5114] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 259.414361][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.505736][ T8114] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.558271][ T8114] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.565621][ T8114] bridge_slave_0: entered allmulticast mode [ 259.618564][ T8114] bridge_slave_0: entered promiscuous mode [ 259.640167][ T8114] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.647351][ T8114] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.699067][ T8114] bridge_slave_1: entered allmulticast mode [ 259.706751][ T8114] bridge_slave_1: entered promiscuous mode [ 259.856726][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.901315][ T8227] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 259.940008][ T8227] bond1: entered promiscuous mode [ 259.992549][ T8229] bond0: (slave bond_slave_0): Releasing backup interface [ 260.014040][ T8229] bond_slave_0: left promiscuous mode [ 260.085936][ T8229] bond1: (slave bond_slave_0): making interface the new active one [ 260.118229][ T8229] bond_slave_0: entered promiscuous mode [ 260.126402][ T8229] bond1: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.136423][ T8223] loop4: detected capacity change from 0 to 40427 [ 260.171539][ T8223] F2FS-fs (loop4): Found nat_bits in checkpoint [ 260.227025][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.239118][ T8223] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 260.311952][ T8114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 260.489940][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.508728][ T5117] Bluetooth: hci5: command tx timeout [ 261.130895][ T8246] evm: overlay not supported [ 261.193421][ T8114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.366839][ T8114] team0: Port device team_slave_0 added [ 261.445126][ T8114] team0: Port device team_slave_1 added [ 261.457706][ T5104] syz-executor.4: attempt to access beyond end of device [ 261.457706][ T5104] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 261.510166][ T5104] syz-executor.4: attempt to access beyond end of device [ 261.510166][ T5104] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 261.631063][ T8114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.659109][ T8114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.718563][ T8114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.750830][ T8114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.757938][ T8114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.818306][ T8114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 261.818344][ T2466] kworker/u8:8: attempt to access beyond end of device [ 261.818344][ T2466] loop4: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 261.885633][ T8241] loop2: detected capacity change from 0 to 32768 [ 261.892324][ T2466] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 261.956349][ T2466] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 261.963688][ T2466] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 261.971120][ T2466] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 261.987491][ T8044] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 262.001100][ T8254] loop1: detected capacity change from 0 to 64 [ 262.026983][ T8044] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 262.114470][ T8241] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nocow [ 262.126575][ T8241] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 262.187098][ T8241] bcachefs (loop2): alloc_read... done [ 262.207091][ T8241] bcachefs (loop2): stripes_read... done [ 262.213089][ T8241] bcachefs (loop2): snapshots_read... done [ 262.223558][ T8241] bcachefs (loop2): journal_replay... done [ 262.229622][ T8241] bcachefs (loop2): resume_logged_ops... done [ 262.245100][ T8241] bcachefs (loop2): going read-write [ 262.263462][ T8241] bcachefs (loop2): done starting filesystem [ 262.280138][ T8044] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 262.323532][ T51] bridge_slave_1: left allmulticast mode [ 262.335383][ T51] bridge_slave_1: left promiscuous mode [ 262.353479][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.383622][ T51] bridge_slave_0: left allmulticast mode [ 262.400116][ T51] bridge_slave_0: left promiscuous mode [ 262.406021][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.586849][ T5109] bcachefs (loop2): shutting down [ 262.600845][ T5109] bcachefs (loop2): going read-only [ 262.632644][ T8265] bcachefs (loop2): bch2_evacuate_bucket(): error flushing btree write buffer erofs_no_writes [ 262.644460][ T5109] bcachefs (loop2): finished waiting for writes to stop [ 262.699852][ T5109] bcachefs (loop2): flushing journal and stopping allocators, journal seq 12 [ 262.745909][ T5109] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 13 [ 262.776376][ T5109] bcachefs (loop2): shutdown complete, journal seq 14 [ 262.793601][ T5109] bcachefs (loop2): marking filesystem clean [ 262.890005][ T5109] bcachefs (loop2): shutdown complete [ 263.243207][ T8264] loop1: detected capacity change from 0 to 32768 [ 263.269473][ T8264] XFS: ikeep mount option is deprecated. [ 263.379946][ T8264] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 263.493246][ T8264] XFS (loop1): Ending clean mount [ 263.505258][ T8264] XFS (loop1): Quotacheck needed: Please wait. [ 263.803959][ T8264] XFS (loop1): Quotacheck: Done. [ 263.888226][ T29] audit: type=1800 audit(1718661308.927:172): pid=8264 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="loop1" ino=6150 res=0 errno=0 [ 263.951015][ T5114] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 263.961960][ T29] audit: type=1800 audit(1718661308.927:173): pid=8264 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="loop1" ino=6150 res=0 errno=0 [ 264.013705][ T5117] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 264.040245][ T5117] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 264.051451][ T5117] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 264.118360][ T5117] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 264.137710][ T5117] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 264.145400][ T5117] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 264.216936][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.300890][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.360489][ T51] bond0 (unregistering): Released all slaves [ 264.449172][ T8114] hsr_slave_0: entered promiscuous mode [ 264.463815][ T8114] hsr_slave_1: entered promiscuous mode [ 264.480893][ T8114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.512495][ T8114] Cannot create hsr debugfs directory [ 264.585984][ T8293] loop2: detected capacity change from 0 to 64 [ 264.593991][ T8044] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 264.606057][ T8291] loop1: detected capacity change from 0 to 1024 [ 265.129000][ T51] hsr_slave_0: left promiscuous mode [ 265.143085][ T51] hsr_slave_1: left promiscuous mode [ 265.157546][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.166533][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.175235][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.183227][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.219134][ T51] veth1_macvtap: left promiscuous mode [ 265.224760][ T51] veth0_macvtap: left promiscuous mode [ 265.242170][ T51] veth1_vlan: left promiscuous mode [ 265.247729][ T51] veth0_vlan: left promiscuous mode [ 265.276798][ T8314] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 265.525824][ T8319] loop1: detected capacity change from 0 to 64 [ 266.208470][ T5163] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 266.253511][ T51] team0 (unregistering): Port device team_slave_1 removed [ 266.261345][ T5117] Bluetooth: hci2: command tx timeout [ 266.325889][ T51] team0 (unregistering): Port device team_slave_0 removed [ 266.428304][ T5163] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 266.448171][ T5163] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 266.479034][ T5163] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 266.498199][ T5163] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 266.509269][ T5163] usb 2-1: SerialNumber: syz [ 266.769495][ T8327] syz-executor.1 (pid 8327) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 266.905311][ T8327] loop1: detected capacity change from 0 to 2048 [ 267.061172][ T8327] loop1: detected capacity change from 0 to 2048 [ 267.140733][ T8327] loop1: p3 < > p4 < > [ 267.145021][ T8327] loop1: partition table partially beyond EOD, truncated [ 267.186029][ T8327] loop1: p3 start 4284289 is beyond EOD, truncated [ 267.338516][ T8327] loop1: detected capacity change from 0 to 2048 [ 267.402564][ T8327] Alternate GPT is invalid, using primary GPT. [ 267.411896][ T8327] loop1: p1 p2 p3 [ 267.465066][ T5163] usb 2-1: 0:2 : does not exist [ 267.478489][ T5163] usb 2-1: unit 120 not found! [ 267.486039][ T5163] usb 2-1: unit 102 not found! [ 267.574304][ T5163] usb 2-1: USB disconnect, device number 4 [ 267.742865][ T8329] loop2: detected capacity change from 0 to 256 [ 267.781617][ T8329] No control pipe specified [ 268.208447][ T8277] chnl_net:caif_netlink_parms(): no params data found [ 268.352198][ T5117] Bluetooth: hci2: command tx timeout [ 268.490442][ T8277] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.497672][ T8277] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.515201][ T8277] bridge_slave_0: entered allmulticast mode [ 268.526897][ T8277] bridge_slave_0: entered promiscuous mode [ 268.590975][ T25] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 268.617845][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.669575][ T8277] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.687151][ T8277] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.696423][ T8277] bridge_slave_1: entered allmulticast mode [ 268.705808][ T8277] bridge_slave_1: entered promiscuous mode [ 268.737238][ T8044] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.795542][ T25] usb 2-1: Using ep0 maxpacket: 8 [ 268.825316][ T25] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 268.836022][ T25] usb 2-1: config 179 has no interface number 0 [ 268.842642][ T25] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 268.854280][ T25] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 268.870522][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.881294][ T25] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 268.914374][ T25] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 268.941648][ T25] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 268.951708][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.965653][ T8338] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 269.073982][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.139603][ T8277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.242337][ T8044] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.263501][ T25] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input11 [ 269.352481][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.394127][ T8277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.460354][ T8] usb 2-1: USB disconnect, device number 5 [ 269.460468][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 269.478726][ T8] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 269.504747][ T8114] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 269.602585][ T8277] team0: Port device team_slave_0 added [ 269.614489][ T8114] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 269.635446][ T8114] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 269.670811][ T8277] team0: Port device team_slave_1 added [ 269.686418][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.693723][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.705488][ T8114] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 269.773114][ T8349] loop2: detected capacity change from 0 to 128 [ 269.793332][ T8277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.802353][ T8277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.817317][ T8349] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 269.843537][ T8349] ext4 filesystem being mounted at /proc/8348/cgroup supports timestamps until 2038-01-19 (0x7fffffff) [ 269.844695][ T8277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.860049][ T8349] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 269.883223][ T8277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.890859][ T8277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 269.921516][ T8277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.967435][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.974696][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.179822][ T8277] hsr_slave_0: entered promiscuous mode [ 270.190012][ T8277] hsr_slave_1: entered promiscuous mode [ 270.228400][ T8277] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.236049][ T8277] Cannot create hsr debugfs directory [ 270.337369][ T51] bridge_slave_1: left allmulticast mode [ 270.344330][ T51] bridge_slave_1: left promiscuous mode [ 270.350478][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.361621][ T51] bridge_slave_0: left allmulticast mode [ 270.367396][ T51] bridge_slave_0: left promiscuous mode [ 270.373681][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.418862][ T5117] Bluetooth: hci2: command tx timeout [ 270.618299][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 270.821671][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 270.860672][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 270.881174][ T8] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 270.890634][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 270.911318][ T8] usb 3-1: SerialNumber: syz [ 270.997991][ T8364] loop1: detected capacity change from 0 to 40427 [ 271.022216][ T8364] F2FS-fs (loop1): invalid crc value [ 271.033860][ T8364] F2FS-fs (loop1): Found nat_bits in checkpoint [ 271.107419][ T8364] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 271.162250][ T8364] syz-executor.1: attempt to access beyond end of device [ 271.162250][ T8364] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 271.192791][ T8360] loop2: detected capacity change from 0 to 2048 [ 271.200462][ T8364] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 271.207928][ T8364] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 271.365973][ T8360] loop2: detected capacity change from 0 to 2048 [ 271.438366][ T8360] loop2: p3 < > p4 < > [ 271.442654][ T8360] loop2: partition table partially beyond EOD, truncated [ 271.456714][ T8360] loop2: p3 start 4284289 is beyond EOD, truncated [ 271.474144][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.497805][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.522152][ T51] bond0 (unregistering): Released all slaves [ 271.627723][ T8360] loop2: detected capacity change from 0 to 2048 [ 271.725063][ T8360] Alternate GPT is invalid, using primary GPT. [ 271.743921][ T8360] loop2: p1 p2 p3 [ 271.783356][ T8] usb 3-1: 0:2 : does not exist [ 271.799270][ T8] usb 3-1: unit 120 not found! [ 271.804128][ T8] usb 3-1: unit 102 not found! [ 271.860597][ T8] usb 3-1: USB disconnect, device number 6 [ 272.245777][ T51] hsr_slave_0: left promiscuous mode [ 272.270627][ T51] hsr_slave_1: left promiscuous mode [ 272.290645][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 272.307353][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 272.350070][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 272.357688][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 272.406612][ T51] veth1_macvtap: left promiscuous mode [ 272.412333][ T51] veth0_macvtap: left promiscuous mode [ 272.418309][ T51] veth1_vlan: left promiscuous mode [ 272.423720][ T51] veth0_vlan: left promiscuous mode [ 272.508533][ T5117] Bluetooth: hci2: command tx timeout [ 273.323620][ T51] team0 (unregistering): Port device team_slave_1 removed [ 273.404411][ T51] team0 (unregistering): Port device team_slave_0 removed [ 274.279037][ T8387] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 274.313121][ T8388] 8021q: adding VLAN 0 to HW filter on device team1 [ 274.322308][ T8388] team1: entered promiscuous mode [ 274.327999][ T8388] bond0: (slave team1): Enslaving as an active interface with an up link [ 274.469755][ T8394] loop1: detected capacity change from 0 to 256 [ 274.490135][ T8044] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.541034][ T8394] No control pipe specified [ 274.613953][ T8114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.769292][ T8114] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.829492][ T8044] veth0_vlan: entered promiscuous mode [ 274.846251][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.853534][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.927784][ T8044] veth1_vlan: entered promiscuous mode [ 274.980760][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.988081][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.233236][ T8044] veth0_macvtap: entered promiscuous mode [ 275.287531][ T8044] veth1_macvtap: entered promiscuous mode [ 275.392722][ T8277] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 275.438210][ T8407] loop1: detected capacity change from 0 to 32768 [ 275.473987][ T8277] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 275.512126][ T8277] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 275.562066][ T8044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.576426][ T8044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.607668][ T8044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.628179][ T8044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.647725][ T8044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.659275][ T8044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.692674][ T8044] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.707743][ T8277] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 275.778864][ T8407] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,noshard_inode_numbers,noinodes_use_key_cache,gc_reserve_bytes=512 GiB,nojournal_transaction_names [ 275.799029][ T8407] bcachefs (loop1): recovering from clean shutdown, journal seq 8 [ 275.904218][ T8407] bcachefs (loop1): alloc_read... done [ 275.909962][ T8407] bcachefs (loop1): stripes_read... done [ 275.915731][ T8407] bcachefs (loop1): snapshots_read... done [ 275.924723][ T8407] bcachefs (loop1): journal_replay... done [ 275.930965][ T8407] bcachefs (loop1): resume_logged_ops... done [ 275.937173][ T8407] bcachefs (loop1): going read-write [ 275.956024][ T8044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.969385][ T8407] bcachefs (loop1): done starting filesystem [ 275.994324][ T8407] bcachefs (loop1): going read-only [ 276.035416][ T8044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.076440][ T8044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.117940][ T8044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.144461][ T8044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.165665][ T8044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.181264][ T8044] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.240854][ T8407] bcachefs (loop1): finished waiting for writes to stop [ 276.255301][ T8044] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.277949][ T8044] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.313423][ T8044] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.327004][ T8044] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.358471][ T8407] bcachefs (loop1): flushing journal and stopping allocators, journal seq 8 [ 276.367380][ T8407] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 8 [ 276.456880][ T8407] bcachefs (loop1): shutdown complete, journal seq 9 [ 276.465884][ T8407] bcachefs (loop1): marking filesystem clean [ 276.484412][ T8114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.762576][ T5114] bcachefs (loop1): shutting down [ 276.964580][ T5114] bcachefs (loop1): shutdown complete [ 277.077955][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.122021][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.212539][ T8114] veth0_vlan: entered promiscuous mode [ 277.327562][ T8277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.401463][ T8114] veth1_vlan: entered promiscuous mode [ 277.437576][ T8277] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.446723][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.467702][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.527376][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.534781][ T5108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.565491][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.572762][ T5108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.717997][ T8114] veth0_macvtap: entered promiscuous mode [ 277.787944][ T8114] veth1_macvtap: entered promiscuous mode [ 277.917791][ T8114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.946190][ T8114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.967306][ T8114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.989573][ T8114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.012661][ T8114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.035096][ T8114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.069697][ T8114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.080427][ T8114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.092590][ T8114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.120486][ T8114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.147410][ T8114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.157575][ T8114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.179562][ T8114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.198100][ T8114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.223106][ T8114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.244914][ T8114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.250714][ T8439] loop2: detected capacity change from 0 to 2048 [ 278.255658][ T8114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.304047][ T8439] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 278.310809][ T8114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.367660][ T8114] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.383884][ T8114] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.402078][ T8114] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.411759][ T8114] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.411902][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 278.455319][ T8443] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 278.775835][ T2466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.817397][ T2466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.985549][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.020860][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.322506][ T8454] vivid-004: disconnect [ 279.336661][ T8277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.344168][ T8450] vivid-004: reconnect [ 280.411773][ T8277] veth0_vlan: entered promiscuous mode [ 280.485251][ T8277] veth1_vlan: entered promiscuous mode [ 280.665745][ T8277] veth0_macvtap: entered promiscuous mode [ 280.719388][ T8490] loop0: detected capacity change from 0 to 1024 [ 280.727694][ T8277] veth1_macvtap: entered promiscuous mode [ 280.763572][ T8490] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 280.876124][ T8277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 280.944732][ T8277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.003585][ T8277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.051638][ T8277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.082978][ T8277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.102555][ T8494] vivid-002: disconnect [ 281.130104][ T8491] vivid-002: reconnect [ 281.155332][ T8277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.205478][ T8277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.216125][ T8277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.226037][ T8277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.236787][ T8277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.248858][ T8277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.260330][ T8277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.280204][ T8277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.316149][ T8277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.728437][ T8277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.913790][ T8277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.958170][ T8277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.978182][ T8277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.008188][ T8277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.016722][ T8502] loop2: detected capacity change from 0 to 256 [ 282.048388][ T8277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.075090][ T8277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.104818][ T8277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.120522][ T8502] No control pipe specified [ 282.212517][ T8277] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.242089][ T8277] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.275385][ T8277] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.298634][ T8277] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.401712][ T8511] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 283.497406][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.528837][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.560509][ T8522] loop2: detected capacity change from 0 to 1024 [ 283.604885][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.616733][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.661026][ T8522] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.838441][ T8522] loop2: detected capacity change from 1024 to 64 [ 283.891631][ T8522] syz-executor.2: attempt to access beyond end of device [ 283.891631][ T8522] loop2: rw=2051, sector=224, nr_sectors = 800 limit=64 [ 284.053492][ T5109] EXT4-fs warning (device loop2): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.2: error -12 reading directory block [ 284.106470][ T5109] EXT4-fs warning (device loop2): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.2: error -12 reading directory block [ 284.169015][ T5109] EXT4-fs warning (device loop2): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.2: error -12 reading directory block [ 284.213773][ T5109] EXT4-fs warning (device loop2): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.2: error -12 reading directory block [ 284.241085][ T8518] loop0: detected capacity change from 0 to 32768 [ 284.279067][ T5109] EXT4-fs warning (device loop2): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.2: error -12 reading directory block [ 284.319359][ T5109] EXT4-fs warning (device loop2): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.2: error -12 reading directory block [ 284.337736][ T8548] loop4: detected capacity change from 0 to 1024 [ 284.371993][ T5109] EXT4-fs warning (device loop2): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.2: error -12 reading directory block [ 284.387303][ T8518] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 284.412644][ T5109] EXT4-fs warning (device loop2): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.2: error -12 reading directory block [ 284.469056][ T5109] EXT4-fs warning (device loop2): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.2: error -12 reading directory block [ 284.528782][ T5109] EXT4-fs warning (device loop2): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.2: error -12 reading directory block [ 284.548467][ T8548] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 284.560994][ T8548] System zones: 0-1, 3-12 [ 284.566621][ T8548] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 284.609749][ T8558] hugetlbfs: Bad value 'k' for mount option 'nr_inodes' [ 284.609749][ T8558] [ 284.629289][ T8518] XFS (loop0): Ending clean mount [ 284.660521][ T8518] XFS (loop0): Quotacheck needed: Please wait. [ 284.807348][ T8277] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2856: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 284.843823][ T8518] XFS (loop0): Quotacheck: Done. [ 284.980801][ T8277] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.155190][ T5109] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 285.183636][ T8044] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 285.229272][ T8523] kmmpd-loop2: attempt to access beyond end of device [ 285.229272][ T8523] loop2: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 285.252228][ T8551] loop1: detected capacity change from 0 to 32768 [ 285.259637][ T8523] Buffer I/O error on dev loop2, logical block 64, lost sync page write [ 285.269578][ T8551] XFS: attr2 mount option is deprecated. [ 285.277974][ T8551] XFS: ikeep mount option is deprecated. [ 285.296995][ T8551] XFS: noikeep mount option is deprecated. [ 285.346984][ T8551] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 285.457651][ T1110] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.603145][ T8551] XFS (loop1): Ending clean mount [ 285.665520][ T8551] XFS (loop1): Quotacheck needed: Please wait. [ 285.747182][ T8583] loop0: detected capacity change from 0 to 1024 [ 285.822240][ T8583] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 285.860292][ T8551] XFS (loop1): Quotacheck: Done. [ 285.962849][ T1110] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.996285][ T8583] loop0: detected capacity change from 1024 to 64 [ 286.041412][ T8596] syz-executor.0: attempt to access beyond end of device [ 286.041412][ T8596] loop0: rw=2051, sector=224, nr_sectors = 800 limit=64 [ 286.157131][ T5114] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 286.192757][ T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 286.249873][ T8044] EXT4-fs warning (device loop0): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.0: error -12 reading directory block [ 286.275131][ T1110] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.296094][ T8044] EXT4-fs warning (device loop0): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.0: error -12 reading directory block [ 286.327515][ T8044] EXT4-fs warning (device loop0): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.0: error -12 reading directory block [ 286.357421][ T5117] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 286.376760][ T5117] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 286.377530][ T8044] EXT4-fs warning (device loop0): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.0: error -12 reading directory block [ 286.418278][ T5117] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 286.431395][ T5117] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 286.439274][ T8044] EXT4-fs warning (device loop0): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.0: error -12 reading directory block [ 286.458718][ T5117] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 286.466715][ T5117] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 286.491236][ T8044] EXT4-fs warning (device loop0): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.0: error -12 reading directory block [ 286.498339][ T25] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 286.537536][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.561363][ T8044] EXT4-fs warning (device loop0): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.0: error -12 reading directory block [ 286.576539][ T8044] EXT4-fs warning (device loop0): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.0: error -12 reading directory block [ 286.592616][ T8044] EXT4-fs warning (device loop0): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.0: error -12 reading directory block [ 286.593698][ T1110] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.607116][ T8044] EXT4-fs warning (device loop0): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.0: error -12 reading directory block [ 286.639334][ T25] usb 5-1: Product: syz [ 286.643660][ T25] usb 5-1: Manufacturer: syz [ 286.698319][ T25] usb 5-1: SerialNumber: syz [ 286.722401][ T25] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 286.839258][ T8604] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 286.856474][ T5163] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 287.065085][ T8044] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.095556][ T8587] kmmpd-loop0: attempt to access beyond end of device [ 287.095556][ T8587] loop0: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 287.155717][ T8587] Buffer I/O error on dev loop0, logical block 64, lost sync page write [ 287.213215][ T8608] ALSA: seq fatal error: cannot create timer (-22) [ 287.521388][ T8611] loop1: detected capacity change from 0 to 1024 [ 287.553493][ T5161] usb 5-1: USB disconnect, device number 9 [ 287.650574][ T8611] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040c118, mo2=0002] [ 287.668153][ T8611] System zones: 0-1, 3-12 [ 287.674242][ T8611] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 287.683714][ T1110] bridge_slave_1: left allmulticast mode [ 287.703867][ T1110] bridge_slave_1: left promiscuous mode [ 287.724353][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.781918][ T1110] bridge_slave_0: left allmulticast mode [ 287.797902][ T1110] bridge_slave_0: left promiscuous mode [ 287.808576][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.924916][ T5114] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.950232][ T5163] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 287.957747][ T5163] ath9k_htc: Failed to initialize the device [ 288.022493][ T5161] usb 5-1: ath9k_htc: USB layer deinitialized [ 288.402214][ T5116] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 288.417296][ T5116] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 288.438532][ T5116] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 288.468496][ T5116] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 288.477167][ T5116] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 288.486851][ T5116] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 288.578418][ T5117] Bluetooth: hci3: command tx timeout [ 288.596641][ T29] audit: type=1804 audit(1718661333.637:174): pid=8607 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3188151898/syzkaller.qSilC2/17/file0" dev="sda1" ino=1949 res=1 errno=0 [ 288.640810][ T8623] loop1: detected capacity change from 0 to 4096 [ 288.657695][ T8623] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 288.747106][ T8623] ntfs3: loop1: failed to convert "c46c" to iso8859-5 [ 288.955071][ T8628] loop3: detected capacity change from 32768 to 64 [ 289.043119][ T8633] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 289.094304][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.104205][ T1110] bond_slave_1: left promiscuous mode [ 289.120914][ T1110] bond0 (unregistering): (slave team1): Releasing backup interface [ 289.144621][ T1110] team1: left promiscuous mode [ 289.181433][ T1110] bond0 (unregistering): Released all slaves [ 289.203944][ T1110] bond1 (unregistering): (slave bond_slave_0): Releasing active interface [ 289.213876][ T1110] bond_slave_0: left promiscuous mode [ 289.223665][ T1110] bond1 (unregistering): Released all slaves [ 289.529158][ T8644] xt_TPROXY: Can be used only with -p tcp or -p udp [ 289.637575][ T8598] chnl_net:caif_netlink_parms(): no params data found [ 289.651810][ T8644] loop4: detected capacity change from 0 to 2048 [ 290.054610][ T8637] loop1: detected capacity change from 0 to 32768 [ 290.076535][ T8637] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (8637) [ 290.170352][ T8637] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 290.198498][ T8637] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 290.207291][ T8637] BTRFS info (device loop1): using free-space-tree [ 290.402389][ T8666] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 290.438581][ T8666] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 290.478592][ T8598] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.508316][ T8598] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.515687][ T8598] bridge_slave_0: entered allmulticast mode [ 290.549885][ T8598] bridge_slave_0: entered promiscuous mode [ 290.578619][ T5117] Bluetooth: hci0: command tx timeout [ 290.591564][ T8598] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.628273][ T8598] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.635643][ T8598] bridge_slave_1: entered allmulticast mode [ 290.670335][ T5117] Bluetooth: hci3: command tx timeout [ 290.723189][ T8598] bridge_slave_1: entered promiscuous mode [ 290.749738][ T29] audit: type=1804 audit(1718661335.797:175): pid=8690 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2832455225/syzkaller.K4zlpy/293/file1/bus" dev="loop1" ino=263 res=1 errno=0 [ 290.783616][ T1110] hsr_slave_0: left promiscuous mode [ 290.842556][ T1110] hsr_slave_1: left promiscuous mode [ 290.870936][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.885026][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.939106][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.946625][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.077774][ T1110] veth1_macvtap: left promiscuous mode [ 291.098271][ T1110] veth1_vlan: left promiscuous mode [ 291.103695][ T1110] veth0_vlan: left promiscuous mode [ 291.847700][ T5114] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 292.442506][ T8702] loop1: detected capacity change from 0 to 1024 [ 292.499635][ T8702] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 292.582584][ T8702] loop1: detected capacity change from 1024 to 64 [ 292.594495][ T8702] syz-executor.1: attempt to access beyond end of device [ 292.594495][ T8702] loop1: rw=2051, sector=224, nr_sectors = 800 limit=64 [ 292.641116][ T5114] EXT4-fs warning (device loop1): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.1: error -12 reading directory block [ 292.667357][ T5117] Bluetooth: hci0: command tx timeout [ 292.675796][ T5114] EXT4-fs warning (device loop1): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.1: error -12 reading directory block [ 292.691341][ T5114] EXT4-fs warning (device loop1): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.1: error -12 reading directory block [ 292.706512][ T5114] EXT4-fs warning (device loop1): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.1: error -12 reading directory block [ 292.720930][ T5114] EXT4-fs warning (device loop1): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.1: error -12 reading directory block [ 292.735628][ T5114] EXT4-fs warning (device loop1): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.1: error -12 reading directory block [ 292.749604][ T5117] Bluetooth: hci3: command tx timeout [ 292.757211][ T5114] EXT4-fs warning (device loop1): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.1: error -12 reading directory block [ 292.773055][ T5114] EXT4-fs warning (device loop1): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.1: error -12 reading directory block [ 292.788734][ T5114] EXT4-fs warning (device loop1): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.1: error -12 reading directory block [ 292.803179][ T5114] EXT4-fs warning (device loop1): ext4_empty_dir:3089: inode #11: lblock 0: comm syz-executor.1: error -12 reading directory block [ 293.132510][ T1110] team0 (unregistering): Port device team_slave_1 removed [ 293.205771][ T1110] team0 (unregistering): Port device team_slave_0 removed [ 294.205667][ T8598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 294.310533][ T8598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 294.554466][ T5114] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.757843][ T5117] Bluetooth: hci0: command tx timeout [ 294.823309][ T8703] kmmpd-loop1: attempt to access beyond end of device [ 294.823309][ T8703] loop1: rw=14337, sector=128, nr_sectors = 2 limit=64 [ 294.847964][ T5117] Bluetooth: hci3: command tx timeout [ 295.027498][ T8703] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 295.104384][ T8598] team0: Port device team_slave_0 added [ 295.171958][ T8598] team0: Port device team_slave_1 added [ 295.400827][ T8618] chnl_net:caif_netlink_parms(): no params data found [ 295.454298][ T8598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.475536][ T8598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.536059][ T8598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.557106][ T8598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.565247][ T8598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.599003][ T8598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.800355][ T1110] IPVS: stop unused estimator thread 0... [ 296.019936][ T8598] hsr_slave_0: entered promiscuous mode [ 296.055569][ T8724] loop4: detected capacity change from 0 to 32768 [ 296.062922][ T8598] hsr_slave_1: entered promiscuous mode [ 296.081028][ T8598] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.092206][ T8724] jfs_mount: dbMount failed w/rc = -22 [ 296.101969][ T8724] Mount JFS Failure: -22 [ 296.106276][ T8724] jfs_mount failed w/return code = -22 [ 296.111609][ T8598] Cannot create hsr debugfs directory [ 296.119995][ T5116] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 296.135195][ T5116] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 296.147358][ T5116] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 296.159518][ T5116] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 296.167411][ T5116] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 296.175263][ T5116] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 296.177031][ T8618] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.208507][ T8618] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.215903][ T8618] bridge_slave_0: entered allmulticast mode [ 296.223787][ T8618] bridge_slave_0: entered promiscuous mode [ 296.233083][ T8618] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.241366][ T8618] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.248904][ T8618] bridge_slave_1: entered allmulticast mode [ 296.257111][ T8618] bridge_slave_1: entered promiscuous mode [ 296.394980][ T8618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.419810][ T30] INFO: task syz-executor.3:6501 blocked for more than 143 seconds. [ 296.427876][ T30] Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 2024/06/17 21:55:41 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 296.439624][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 296.496197][ T30] task:syz-executor.3 state:D stack:25176 pid:6501 tgid:6492 ppid:5979 flags:0x00004006 [ 296.506653][ T30] Call Trace: [ 296.511254][ T30] [ 296.514249][ T30] __schedule+0x1796/0x49d0 [ 296.519133][ T30] ? __pfx___schedule+0x10/0x10 [ 296.524097][ T30] ? __pfx_lock_release+0x10/0x10 [ 296.529329][ T30] ? irqentry_exit+0x63/0x90 [ 296.533975][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 296.539303][ T30] ? schedule+0x90/0x320 [ 296.544493][ T30] schedule+0x14b/0x320 [ 296.548770][ T30] io_schedule+0x8d/0x110 [ 296.553160][ T30] folio_wait_bit_common+0x882/0x12b0 [ 296.558676][ T30] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 296.564549][ T30] ? __pfx_wake_page_function+0x10/0x10 [ 296.571238][ T30] ? jfs_error+0x21d/0x2e0 [ 296.575719][ T30] ? __get_metapage+0x555/0x1050 [ 296.586283][ T30] release_metapage+0x8c/0x870 [ 296.591192][ T30] ? __pfx_metapage_read_folio+0x10/0x10 [ 296.596881][ T30] __get_metapage+0xb1d/0x1050 [ 296.619183][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 296.624484][ T30] jfs_readdir+0x2945/0x4660 [ 296.629386][ T30] ? __pfx_jfs_readdir+0x10/0x10 [ 296.634402][ T30] ? __pfx___down_write_common+0x10/0x10 [ 296.640339][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 296.646332][ T30] ? __pfx_jfs_readdir+0x10/0x10 [ 296.651402][ T30] wrap_directory_iterator+0x94/0xe0 [ 296.656767][ T30] iterate_dir+0x65e/0x820 [ 296.661460][ T30] __se_sys_getdents+0x1ef/0x4d0 [ 296.666454][ T30] ? __pfx___se_sys_getdents+0x10/0x10 [ 296.672074][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 296.678136][ T30] ? __pfx_filldir+0x10/0x10 [ 296.682773][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 296.689209][ T30] ? do_syscall_64+0x100/0x230 [ 296.694021][ T30] ? do_syscall_64+0xb6/0x230 [ 296.698820][ T30] do_syscall_64+0xf3/0x230 [ 296.703369][ T30] ? clear_bhb_loop+0x35/0x90 [ 296.708141][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.714096][ T30] RIP: 0033:0x7f991327cf29 [ 296.718633][ T30] RSP: 002b:00007f9913fa20c8 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 296.727095][ T30] RAX: ffffffffffffffda RBX: 00007f99133b4050 RCX: 00007f991327cf29 [ 296.736356][ T30] RDX: 00000000000000b8 RSI: 0000000020001fc0 RDI: 0000000000000007 [ 296.745011][ T30] RBP: 00007f99132ec074 R08: 0000000000000000 R09: 0000000000000000 [ 296.754023][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.769835][ T30] R13: 000000000000006e R14: 00007f99133b4050 R15: 00007fff1b322e38 [ 296.777916][ T30] [ 296.787237][ T30] [ 296.787237][ T30] Showing all locks held in the system: [ 296.826964][ T5116] Bluetooth: hci0: command tx timeout [ 296.837493][ T30] 3 locks held by kworker/1:0/25: [ 296.869336][ T30] #0: ffff888015080948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 296.948188][ T30] #1: ffffc900001f7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 296.988150][ T30] #2: ffffffff8f5d5508 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 296.997273][ T30] 1 lock held by khungtaskd/30: [ 297.030135][ T30] #0: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 297.068153][ T30] 2 locks held by kworker/u8:2/35: [ 297.073352][ T30] 3 locks held by kworker/1:2/58: [ 297.108139][ T30] 3 locks held by kworker/u8:6/1043: [ 297.113489][ T30] #0: ffff88802a1b7948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 297.138389][ T30] #1: ffffc90004687d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 297.170411][ T30] #2: ffffffff8f5d5508 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 297.181339][ T30] 7 locks held by kworker/u8:7/1110: [ 297.186669][ T30] #0: ffff888015ed3148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 297.197827][ T30] #1: ffffc900048b7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 297.208774][ T30] #2: ffffffff8f5c8cd0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 297.226547][ T30] #3: ffff88802d8130e8 (&dev->mutex){....}-{3:3}, at: devlink_pernet_pre_exit+0x13b/0x440 [ 297.236911][ T30] #4: ffff88805b8d0250 (&devlink->lock_key#3){+.+.}-{3:3}, at: devlink_pernet_pre_exit+0x14d/0x440 [ 297.248319][ T30] #5: ffffffff8f5d5508 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 297.257298][ T30] #6: ffffffff8e339378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 297.270121][ T30] 2 locks held by getty/4839: [ 297.274849][ T30] #0: ffff88802b21a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 297.295543][ T30] #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 297.306036][ T30] 3 locks held by syz-fuzzer/5088: [ 297.311604][ T30] 2 locks held by syz-executor.3/6501: [ 297.317096][ T30] #0: ffff88801bee45c8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x24e/0x310 [ 297.338104][ T30] #1: ffff888053b9e200 (&type->i_mutex_dir_key#8){++++}-{3:3}, at: wrap_directory_iterator+0x5d/0xe0 [ 297.349966][ T30] 1 lock held by syz-executor.2/8598: [ 297.355366][ T30] #0: ffffffff8e339378 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 297.368993][ T30] 1 lock held by syz-executor.0/8618: [ 297.374430][ T30] #0: ffffffff8f5d5508 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 297.384072][ T30] 3 locks held by syz-executor.4/8724: [ 297.392012][ T30] #0: ffff88805d094d88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1d3/0x4e0 [ 297.402182][ T30] #1: ffff88805d094078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x494/0xf60 [ 297.412111][ T30] #2: ffffffff8f73fac8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 297.422322][ T30] 1 lock held by syz-executor.1/8736: [ 297.427721][ T30] #0: ffffffff8f5d5508 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x842/0x1180 [ 297.437573][ T30] 3 locks held by syz-executor.3/8742: [ 297.443107][ T30] #0: ffff88807a484d88 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x1d3/0x4e0 [ 297.453383][ T30] #1: ffff88807a484078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x494/0xf60 [ 297.465817][ T30] #2: ffffffff8f73fac8 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 297.520310][ T30] [ 297.522808][ T30] ============================================= [ 297.522808][ T30] [ 297.558166][ T30] NMI backtrace for cpu 1 [ 297.562583][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 297.572543][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 297.582633][ T30] Call Trace: [ 297.585958][ T30] [ 297.588935][ T30] dump_stack_lvl+0x241/0x360 [ 297.593674][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.598928][ T30] ? __pfx__printk+0x10/0x10 [ 297.603570][ T30] ? vprintk_emit+0x631/0x770 [ 297.608293][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 297.613364][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 297.618352][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 297.623874][ T30] ? _printk+0xd5/0x120 [ 297.628067][ T30] ? __pfx__printk+0x10/0x10 [ 297.632690][ T30] ? __wake_up_klogd+0xcc/0x110 [ 297.637582][ T30] ? __pfx__printk+0x10/0x10 [ 297.642219][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 297.647296][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 297.653318][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 297.659372][ T30] watchdog+0xfde/0x1020 [ 297.663659][ T30] ? watchdog+0x1ea/0x1020 [ 297.668121][ T30] ? __pfx_watchdog+0x10/0x10 [ 297.672845][ T30] kthread+0x2f0/0x390 [ 297.676955][ T30] ? __pfx_watchdog+0x10/0x10 [ 297.681673][ T30] ? __pfx_kthread+0x10/0x10 [ 297.686306][ T30] ret_from_fork+0x4b/0x80 [ 297.690759][ T30] ? __pfx_kthread+0x10/0x10 [ 297.695387][ T30] ret_from_fork_asm+0x1a/0x30 [ 297.700210][ T30] [ 297.705196][ T30] Sending NMI from CPU 1 to CPUs 0: [ 297.711523][ C0] NMI backtrace for cpu 0 [ 297.711537][ C0] CPU: 0 PID: 5088 Comm: syz-fuzzer Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 297.711558][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 297.711569][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 [ 297.711595][ C0] Code: 89 fb e8 23 00 00 00 48 8b 3d bc 5c 44 0c 48 89 de 5b e9 13 06 57 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 c0 d4 03 00 65 8b 15 a0 ae [ 297.711610][ C0] RSP: 0018:ffffc9000351f180 EFLAGS: 00000293 [ 297.711627][ C0] RAX: 0000000000000000 RBX: 0000000000000363 RCX: ffff888028c73c00 [ 297.711639][ C0] RDX: ffff888028c73c00 RSI: 0000000000000000 RDI: 0000000000000040 [ 297.711651][ C0] RBP: 0000000000000000 R08: ffffffff81cc8155 R09: 1ffffd40002cc596 [ 297.711664][ C0] R10: dffffc0000000000 R11: fffff940002cc597 R12: ffffc9000351f260 [ 297.711677][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888077b88000 [ 297.711690][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 297.711705][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 297.711717][ C0] CR2: 00007fe42fd98d58 CR3: 000000000e132000 CR4: 00000000003506f0 [ 297.711734][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 297.711744][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 297.711756][ C0] Call Trace: [ 297.711763][ C0] [ 297.711770][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 297.711798][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 297.711819][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 297.711845][ C0] ? nmi_handle+0x2a/0x5a0 [ 297.711881][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 297.711902][ C0] ? nmi_handle+0x14f/0x5a0 [ 297.711929][ C0] ? nmi_handle+0x2a/0x5a0 [ 297.711955][ C0] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 297.711975][ C0] ? default_do_nmi+0x63/0x160 [ 297.712002][ C0] ? exc_nmi+0x123/0x1f0 [ 297.712033][ C0] ? end_repeat_nmi+0xf/0x53 [ 297.712059][ C0] ? xas_reload+0x85/0x470 [ 297.712078][ C0] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 297.712099][ C0] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 297.712120][ C0] ? __pfx___sanitizer_cov_trace_pc+0x10/0x10 [ 297.712140][ C0] [ 297.712145][ C0] [ 297.712151][ C0] xas_reload+0x93/0x470 [ 297.712169][ C0] find_lock_entries+0x3c2/0x1110 [ 297.712189][ C0] ? find_lock_entries+0x1d1/0x1110 [ 297.712212][ C0] ? __pfx_find_lock_entries+0x10/0x10 [ 297.712237][ C0] ? folio_batch_remove_exceptionals+0x18a/0x1f0 [ 297.712262][ C0] shmem_undo_range+0x2d6/0x1df0 [ 297.712296][ C0] ? is_bpf_text_address+0x26/0x2a0 [ 297.712319][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 297.712378][ C0] ? inode_wait_for_writeback+0x224/0x290 [ 297.712398][ C0] ? __pfx_lock_release+0x10/0x10 [ 297.712416][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 297.712447][ C0] shmem_evict_inode+0x29b/0xa60 [ 297.712472][ C0] ? inode_wait_for_writeback+0x224/0x290 [ 297.712490][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 297.712511][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 297.712531][ C0] ? __pfx_wake_bit_function+0x10/0x10 [ 297.712549][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 297.712577][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 297.712598][ C0] evict+0x2a8/0x630 [ 297.712627][ C0] __dentry_kill+0x20d/0x630 [ 297.712650][ C0] ? dput+0x37/0x2b0 [ 297.712670][ C0] dput+0x19f/0x2b0 [ 297.712690][ C0] __fput+0x68c/0x8b0 [ 297.712722][ C0] task_work_run+0x24f/0x310 [ 297.712750][ C0] ? __pfx_task_work_run+0x10/0x10 [ 297.712777][ C0] ? switch_task_namespaces+0xe1/0x110 [ 297.712796][ C0] do_exit+0xa27/0x27e0 [ 297.712824][ C0] ? __pfx_do_exit+0x10/0x10 [ 297.712846][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 297.712874][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 297.712895][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 297.712913][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 297.712939][ C0] do_group_exit+0x207/0x2c0 [ 297.712961][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 297.712983][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 297.713005][ C0] get_signal+0x16a1/0x1740 [ 297.713037][ C0] ? do_wait+0x185/0x560 [ 297.713066][ C0] ? __pfx___se_sys_waitid+0x10/0x10 [ 297.713091][ C0] ? __pfx_get_signal+0x10/0x10 [ 297.713118][ C0] ? __pfx_child_wait_callback+0x10/0x10 [ 297.713148][ C0] arch_do_signal_or_restart+0x96/0x860 [ 297.713173][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 297.713194][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 297.713221][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 297.713245][ C0] syscall_exit_to_user_mode+0xc9/0x370 [ 297.713268][ C0] do_syscall_64+0x100/0x230 [ 297.713291][ C0] ? clear_bhb_loop+0x35/0x90 [ 297.713315][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.713336][ C0] RIP: 0033:0x40720e [ 297.713349][ C0] Code: Unable to access opcode bytes at 0x4071e4. [ 297.713358][ C0] RSP: 002b:000000c00033a508 EFLAGS: 00000202 ORIG_RAX: 00000000000000f7 [ 297.713375][ C0] RAX: fffffffffffffe00 RBX: 0000000000000001 RCX: 000000000040720e [ 297.713388][ C0] RDX: 000000c00033a618 RSI: 00000000000021a7 RDI: 0000000000000001 [ 297.713399][ C0] RBP: 000000c00033a548 R08: 0000000000000000 R09: 0000000000000000 [ 297.713410][ C0] R10: 0000000001000004 R11: 0000000000000202 R12: 000000c00033a660 [ 297.713422][ C0] R13: 000000c0003a391c R14: 000000c000192b60 R15: 0000000000000000 [ 297.713444][ C0] [ 297.727716][ T1110] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.757794][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 297.757819][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-rc3-syzkaller-00044-g2ccbdf43d5e7 #0 [ 297.757846][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 297.757861][ T30] Call Trace: [ 297.757872][ T30] [ 297.757883][ T30] dump_stack_lvl+0x241/0x360 [ 297.757924][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.757954][ T30] ? __pfx__printk+0x10/0x10 [ 297.757980][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 297.758020][ T30] ? vscnprintf+0x5d/0x90 [ 297.758053][ T30] panic+0x349/0x860 [ 297.758084][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 297.758122][ T30] ? __pfx_panic+0x10/0x10 [ 297.758145][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 297.758182][ T30] ? __irq_work_queue_local+0x137/0x410 [ 297.758210][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 297.758236][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 297.758277][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 297.758315][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 297.758354][ T30] watchdog+0x101d/0x1020 [ 297.758384][ T30] ? watchdog+0x1ea/0x1020 [ 297.758418][ T30] ? __pfx_watchdog+0x10/0x10 [ 297.758444][ T30] kthread+0x2f0/0x390 [ 297.758474][ T30] ? __pfx_watchdog+0x10/0x10 [ 297.758499][ T30] ? __pfx_kthread+0x10/0x10 [ 297.758529][ T30] ret_from_fork+0x4b/0x80 [ 297.758560][ T30] ? __pfx_kthread+0x10/0x10 [ 297.758589][ T30] ret_from_fork_asm+0x1a/0x30 [ 297.758638][ T30] [ 297.769578][ T30] Kernel Offset: disabled