last executing test programs: 1m4.453276904s ago: executing program 2: r0 = socket(0x1c, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0x1c, 0x1c, 0x3}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0x1c, 0x1c, 0x3}, 0x1c) 1m3.281368339s ago: executing program 2: r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0) symlinkat(&(0x7f0000000180)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00') r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) close(r1) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=ANY=[], 0x10}], 0x1}, 0x0) socket$unix(0x1, 0x2, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000280)=@file={0x1, './file0/file0\x00'}, 0x6e) rt_sigreturn() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) setuid(0x0) socket$inet_icmp(0x2, 0x2, 0x1) statx(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000004a40)) accept4$inet(r2, 0x0, 0x0, 0x0) 1m2.712951817s ago: executing program 2: close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0xffffffffffffffff}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@cgroup, 0xffffffffffffffff, 0x26, 0x4, 0x0, @prog_id}, 0x20) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)) fcntl$getownex(r0, 0x10, &(0x7f0000000380)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="3b000300010006", 0x7) 58.916690137s ago: executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='mce_record\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) io_setup(0xfb, &(0x7f0000000140)=0x0) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) io_submit(r6, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r7, &(0x7f0000000200)="13", 0x1}]) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r5, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) timer_create(0x3, &(0x7f0000000140)={0x0, 0x11}, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) timer_create(0xfffffffd, 0x0, &(0x7f0000000040)=0x0) timer_settime(r9, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) unshare(0x40000000) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002a00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x90) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000040)=r10, 0x4) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="72b9800007"], 0xd) 56.69533821s ago: executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x0, 0x0, 0x1}, 0x48) socket$inet6(0xa, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r1 = dup2(r0, r0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) write$tun(r1, 0x0, 0x46) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[], 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) chmod(0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r2 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') lstat(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000840)) 52.839335583s ago: executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x10) r2 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x802) write$evdev(r2, &(0x7f0000000000), 0x100000008) timer_create(0x0, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000300)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x541b, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='ext4_ext_show_extent\x00', r0}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43400) 34.768628573s ago: executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000040)) 32.889847227s ago: executing program 3: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000000)={[{@nls={'nls', 0x3d, 'default'}}, {@nobarrier}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@barrier}, {@part={'part', 0x3d, 0x2}}, {@umask={'umask', 0x3d, 0xde5}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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") getdents(0xffffffffffffffff, &(0x7f0000000300)=""/104, 0x68) 31.404545724s ago: executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='ext4_mb_release_inode_pa\x00'}, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000952000000000000000aba030af139f67cdab432d1416d7755a610469a1bc6e21195738bf0f8165dba5073a0232f6282e9a8678477d7dd8e2f528eb528bffd81a54e4068fe147a8582e7006695f4daee6a9b17937adade915c870888e7d967ea243"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='fib6_table_lookup\x00', r0}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f0000000680)=""/144, 0x0}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x1, r3}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000180)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x20000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000048aa005e850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000006", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf"], 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 8.16675102s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x28, r1, 0xaa3, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x6}]}]}, 0x28}}, 0x0) 7.564982865s ago: executing program 0: syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000540)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x25db47b2443f8af, [{{0x9, 0x2, 0x48}}]}}, 0x0) 6.169762873s ago: executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x5b}, 0x9) openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000000000073000040"]) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f00000000c0)=[{0x0}], 0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) listen(0xffffffffffffffff, 0x0) socket$unix(0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0x10c, &(0x7f0000000140), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000440)=0x10) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r7, 0x84, 0x78, &(0x7f0000000040)=r6, 0x4) r8 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_CROPCAP(r8, 0xc02c563a, &(0x7f0000000080)={0x3}) modify_ldt$write2(0x11, &(0x7f0000000040), 0x10) modify_ldt$write2(0x11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, 0x10) 5.527809906s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400001"], 0xb0}}, 0x0) 4.75531599s ago: executing program 4: r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000300)=""/104, 0x68) 4.237491191s ago: executing program 0: mq_open(&(0x7f0000000440)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x03\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a1\xf0\xe4\xe3R\x95\xee\xe4\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\xfd\x04\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1\x856\xe7`83\xb7n#\xe0\xc1_\xec\xba\xdezthU\xe3\a\x8b\xc5\x86woo\xbcnq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8u\xedt\xc1-\x16\x86\x85\xb4\x96\x02\x1bI<\x1e\xbd\x1c\xd0\x19\x96h\xc3\x14\xfb\xf7\x10\xee\x91\x9e\x01G\xbf', 0x0, 0x0, 0x0) io_setup(0x3, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(0x0, 0x0, 0x0) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 4.107345457s ago: executing program 1: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x42, 0x0) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000080)="03320500", 0x4}]) 4.067431161s ago: executing program 4: r0 = epoll_create1(0x0) r1 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000980)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 3.645565471s ago: executing program 0: socket$nl_route(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0], 0x8) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) r2 = gettid() process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$UFFDIO_ZEROPAGE(r4, 0xc018aa06, &(0x7f0000000240)={{&(0x7f00003ea000/0x400000)=nil, 0x400000}}) madvise(&(0x7f00004d2000/0x1000)=nil, 0x1000, 0x8) 3.397201688s ago: executing program 1: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000b00)={0x2020}, 0x2020) 3.075974854s ago: executing program 4: socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={0xffffffffffffffff, &(0x7f0000000680)="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", 0x0}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="0f3800bbf540dceb260f015f009d0f6f140f20d86635080000000f22d867660f38022066b96c0800000f322e2e0f88070066b9800000c00f326635010000000f30", 0x41}], 0x1, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.949038109s ago: executing program 3: mbind(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000240), 0xd1e, 0x4) 2.732536844s ago: executing program 1: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xf11157f54e716d1d, 0x0) 2.147241s ago: executing program 1: mq_open(&(0x7f0000000440)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x03\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a1\xf0\xe4\xe3R\x95\xee\xe4\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\xfd\x04\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1\x856\xe7`83\xb7n#\xe0\xc1_\xec\xba\xdezthU\xe3\a\x8b\xc5\x86woo\xbcnq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8u\xedt\xc1-\x16\x86\x85\xb4\x96\x02\x1bI<\x1e\xbd\x1c\xd0\x19\x96h\xc3\x14\xfb\xf7\x10\xee\x91\x9e\x01G\xbf', 0x6e93ebbbcc0884f2, 0x0, 0x0) io_setup(0x3, &(0x7f0000000180)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x300, 0x0, 0x5, 0x0, r1, 0x0}]) 1.574767073s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="36bcefdd63d71e6bb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newqdisc={0x4c, 0x14, 0x0, 0x0, 0x0, {0x2}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {0xffffffffffffffc4, 0x2, [0x0]}}]}]}, 0x4c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000a00)={[], 0x0, 0x78469555c77fef7b}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.372671958s ago: executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_int(r1, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r1, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) 1.371443388s ago: executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000040)) 1.245395509s ago: executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @loopback={0xfec0ffff00000000}}}) 445.387136ms ago: executing program 2: syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000000)={[{@nls={'nls', 0x3d, 'default'}}, {@nobarrier}, {@creator={'creator', 0x3d, "bd3c66f5"}}, {@barrier}, {@part={'part', 0x3d, 0x2}}, {@umask={'umask', 0x3d, 0xde5}}]}, 0x3, 0x6a4, &(0x7f0000000100)="$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") r0 = open(0x0, 0x0, 0x0) getdents(r0, &(0x7f0000000300)=""/104, 0x68) 285.712673ms ago: executing program 4: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) r0 = syz_io_uring_setup(0x3b, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000600)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x28, 0x0, r3, 0x0, 0x0}) io_uring_enter(r0, 0x5e40, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0: r0 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a40)={0x14}, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000880)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): 48] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 265.151228][ T5348] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 265.213430][ T5345] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 265.328697][ T5348] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 265.332551][ T5505] loop3: detected capacity change from 0 to 64 [ 265.387180][ T5345] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 265.416248][ T5348] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 265.465075][ T5505] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted on loop3 [ 265.540064][ T5345] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 265.648167][ T5505] 9pnet_fd: Insufficient options for proto=fd [ 265.729184][ T5345] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 266.315463][ T5362] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 266.418495][ T5362] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 266.538904][ T5362] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 266.602765][ T5362] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 266.721433][ T5124] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 267.040967][ T5124] usb 4-1: Using ep0 maxpacket: 16 [ 267.253828][ T5124] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.265366][ T5124] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.275648][ T5124] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 267.288931][ T5124] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 267.298372][ T5124] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.382561][ T5515] loop0: detected capacity change from 0 to 32768 [ 267.531941][ T5124] usb 4-1: config 0 descriptor?? [ 267.543926][ T5515] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 267.739457][ T5348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.924123][ T5345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 267.983093][ T5515] XFS (loop0): Ending clean mount [ 267.998331][ T5515] XFS (loop0): Quotacheck needed: Please wait. [ 268.095610][ T5124] microsoft 0003:045E:07DA.0001: ignoring exceeding usage max [ 268.135024][ T5348] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.184579][ T5345] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.229333][ T10] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0xae/0x2f0, xfs_bnobt block 0x8 [ 268.241100][ T10] XFS (loop0): Unmount and run xfs_repair [ 268.247044][ T10] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 268.247417][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.254922][ T10] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 268.262271][ T5126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.270903][ T10] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 268.287601][ T10] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab ..*.w.B.......K. [ 268.296899][ T10] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01 ....[.O......... [ 268.306131][ T10] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00 ...6............ [ 268.315431][ T10] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 268.324650][ T10] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 268.333953][ T10] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 268.348983][ T1082] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x354/0x5c0" at daddr 0x8 len 8 error 74 [ 268.418070][ T5124] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 268.456804][ T5515] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 268.476001][ T5362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.493106][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.500909][ T5126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.516387][ T5126] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.524111][ T5126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.541037][ T5126] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.548701][ T5126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.609577][ T5124] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 268.621603][ T5124] microsoft 0003:045E:07DA.0001: no inputs found [ 268.628176][ T5124] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 268.753955][ T5074] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 268.794801][ T5362] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.005287][ T5120] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.013100][ T5120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.063673][ T5074] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair. [ 269.135306][ T5512] loop3: detected capacity change from 0 to 256 [ 269.149099][ T5348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 269.216232][ T5120] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.224056][ T5120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.269970][ T5513] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 269.271995][ T5528] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 269.279680][ T5513] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 269.310162][ T5528] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 270.093369][ T5511] [U]  [ 270.197632][ T5134] usb 4-1: USB disconnect, device number 7 [ 271.900146][ T5348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.939855][ T5345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.385781][ T5362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 272.475479][ T5557] loop3: detected capacity change from 0 to 512 [ 272.654876][ T5557] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2842c018, mo2=0002] [ 272.675703][ T5348] veth0_vlan: entered promiscuous mode [ 272.771334][ T5557] System zones: 0-2, 18-18, 34-35 [ 272.813437][ T5362] veth0_vlan: entered promiscuous mode [ 272.878923][ T5557] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 272.892849][ T5557] ext4 filesystem being mounted at /root/syzkaller-testdir2967066875/syzkaller.xk4qLE/20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.939244][ T5362] veth1_vlan: entered promiscuous mode [ 273.013606][ T5348] veth1_vlan: entered promiscuous mode [ 273.275595][ T5362] veth0_macvtap: entered promiscuous mode [ 273.349926][ T5362] veth1_macvtap: entered promiscuous mode [ 273.537387][ T5348] veth0_macvtap: entered promiscuous mode [ 273.569925][ T5362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.581564][ T5362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.591818][ T5362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.602656][ T5362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.617669][ T5362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.722394][ T5079] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.740194][ T5348] veth1_macvtap: entered promiscuous mode [ 273.857915][ T5362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.870548][ T5362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.882388][ T5362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.893944][ T5362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.910241][ T5362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.023408][ T5559] loop0: detected capacity change from 0 to 4096 [ 274.069712][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.080739][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.090907][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.101665][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.112466][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.123408][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.139677][ T5348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.149906][ T5559] ntfs3: Unknown parameter 'ÿÿÿÿ0xffffffffffffffff' [ 274.223424][ T5362] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.234259][ T5362] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.245000][ T5362] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.254298][ T5362] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.369478][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.385404][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.395731][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.406669][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.417061][ T5348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.427824][ T5348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.443940][ T5348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.693648][ T5579] loop7: detected capacity change from 0 to 16384 [ 274.702293][ T29] audit: type=1326 audit(1717990317.140:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5573 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb06fa7cf69 code=0x0 [ 274.885594][ T5348] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.894769][ T5348] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.904064][ T5348] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.913228][ T5348] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.349490][ T5345] veth0_vlan: entered promiscuous mode [ 275.497758][ T5345] veth1_vlan: entered promiscuous mode [ 275.921443][ T5345] veth0_macvtap: entered promiscuous mode [ 276.038413][ T5345] veth1_macvtap: entered promiscuous mode [ 276.317694][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.328943][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.339373][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.350225][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.360503][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.371446][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.381572][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.392328][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.407260][ T5345] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.737294][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.748104][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.758388][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.769175][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.779483][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.790358][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.801489][ T5345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.812340][ T5345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.827271][ T5345] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.014648][ T5345] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.024191][ T5345] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.033436][ T5345] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.042619][ T5345] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.474386][ T5613] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 277.484229][ T5613] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 278.534731][ T5619] loop0: detected capacity change from 0 to 32768 [ 279.305949][ T5626] loop3: detected capacity change from 0 to 32768 [ 279.396554][ T5626] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 279.846874][ T5626] XFS (loop3): Ending clean mount [ 279.961331][ T5626] XFS (loop3): Quotacheck needed: Please wait. [ 280.203359][ T5126] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0xae/0x2f0, xfs_bnobt block 0x8 [ 280.215075][ T5126] XFS (loop3): Unmount and run xfs_repair [ 280.222400][ T5126] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 280.230036][ T5126] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 280.240345][ T5126] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 280.249560][ T5126] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab ..*.w.B.......K. [ 280.258808][ T5126] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01 ....[.O......... [ 280.268038][ T5126] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00 ...6............ [ 280.277246][ T5126] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 280.286466][ T5126] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 280.296277][ T5126] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 280.321114][ T3472] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x354/0x5c0" at daddr 0x8 len 8 error 74 [ 280.339952][ T5626] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 280.564038][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.571810][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.649533][ T5079] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 280.721057][ T5079] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair. [ 283.083358][ T5672] loop0: detected capacity change from 0 to 32768 [ 283.115833][ T5672] ERROR: (device loop0): xtSearch: XT_GETPAGE: xtree page corrupt [ 283.115833][ T5672] [ 283.126387][ T5672] xtLookup: xtSearch returned -5 [ 283.133396][ T5672] read_mapping_page failed! [ 283.138141][ T5672] jfs_mount: diMount(ipaimap) failed w/rc = -5 [ 283.144848][ T5672] Mount JFS Failure: -5 [ 283.149184][ T5672] jfs_mount failed w/return code = -5 [ 283.555808][ T5683] netlink: 1052 bytes leftover after parsing attributes in process `syz-executor.3'. [ 283.683876][ T5685] netlink: 1052 bytes leftover after parsing attributes in process `syz-executor.3'. [ 283.751730][ T5683] Zero length message leads to an empty skb [ 284.326270][ T3282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.334496][ T3282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.588649][ T3374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.596887][ T3374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.710138][ T3282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.719731][ T3282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.771313][ T5125] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 284.970986][ T3374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.979078][ T3374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.042376][ T5125] usb 1-1: Using ep0 maxpacket: 32 [ 285.193031][ T5125] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 285.972692][ T5081] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 285.992647][ T5081] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 286.007403][ T5081] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 286.054179][ T5081] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 286.084483][ T5081] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 286.094685][ T5081] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 286.123078][ T5700] loop1: detected capacity change from 0 to 1024 [ 286.147615][ T5697] loop2: detected capacity change from 0 to 32768 [ 286.162525][ T5125] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 286.172045][ T5125] usb 1-1: New USB device strings: Mfr=7, Product=0, SerialNumber=3 [ 286.182035][ T5125] usb 1-1: Manufacturer: syz [ 286.186884][ T5125] usb 1-1: SerialNumber: syz [ 286.335988][ T5125] usb 1-1: config 0 descriptor?? [ 286.344684][ T5697] XFS (loop2): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 286.362971][ T5690] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 286.470080][ T5125] hub 1-1:0.0: bad descriptor, ignoring hub [ 286.476433][ T5125] hub 1-1:0.0: probe with driver hub failed with error -5 [ 286.497567][ T5125] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 286.798565][ T3430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.806844][ T3430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.155745][ T3374] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.164218][ T3374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.434482][ T5716] loop0: detected capacity change from 0 to 2048 [ 287.512425][ T5697] XFS (loop2): Ending clean mount [ 287.645529][ T5716] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024) [ 287.645602][ T5697] XFS (loop2): syz-executor.2 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported [ 287.772980][ T5362] XFS (loop2): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 287.832658][ T5723] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 287.844494][ T5716] bio_check_eod: 2 callbacks suppressed [ 287.844561][ T5716] syz-executor.0: attempt to access beyond end of device [ 287.844561][ T5716] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 288.047233][ T29] audit: type=1326 audit(1717990330.590:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5688 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f66b1c7cf69 code=0x0 [ 288.228299][ T5081] Bluetooth: hci5: command tx timeout [ 288.547248][ T3282] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.929436][ T3282] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.014220][ T5702] chnl_net:caif_netlink_parms(): no params data found [ 289.151722][ T3282] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.273424][ T779] usb 1-1: USB disconnect, device number 2 [ 289.280881][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 289.320033][ T3282] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.292284][ T5081] Bluetooth: hci5: command tx timeout [ 290.322926][ T3282] bridge_slave_1: left allmulticast mode [ 290.328821][ T3282] bridge_slave_1: left promiscuous mode [ 290.336175][ T3282] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.478882][ T3282] bridge_slave_0: left allmulticast mode [ 290.487235][ T3282] bridge_slave_0: left promiscuous mode [ 290.494557][ T3282] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.411137][ T5124] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 291.635223][ T3282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.801459][ T5124] usb 3-1: config 0 has an invalid interface number: 232 but max is 0 [ 291.811708][ T5124] usb 3-1: config 0 has no interface number 0 [ 291.818052][ T5124] usb 3-1: too many endpoints for config 0 interface 232 altsetting 38: 94, using maximum allowed: 30 [ 291.830280][ T5124] usb 3-1: config 0 interface 232 altsetting 38 has 0 endpoint descriptors, different from the interface descriptor's value: 94 [ 291.844755][ T5124] usb 3-1: config 0 interface 232 has no altsetting 0 [ 291.852019][ T5124] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 291.854822][ T5754] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 291.861705][ T5124] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.873161][ T3282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.945888][ T5124] usb 3-1: config 0 descriptor?? [ 292.006953][ T3282] bond0 (unregistering): Released all slaves [ 292.371600][ T5081] Bluetooth: hci5: command tx timeout [ 293.354026][ T5702] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.365674][ T5702] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.373663][ T5702] bridge_slave_0: entered allmulticast mode [ 293.382917][ T5702] bridge_slave_0: entered promiscuous mode [ 293.452754][ T3282] hsr_slave_0: left promiscuous mode [ 293.493233][ T3282] hsr_slave_1: left promiscuous mode [ 293.557657][ T3282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.565765][ T3282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.612395][ T5124] usb 3-1: string descriptor 0 read error: -71 [ 293.626960][ T5124] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 293.651848][ T5068] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 293.672349][ T5068] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 293.674712][ T3282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.688174][ T3282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.715319][ T5068] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 293.738008][ T5068] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 293.755860][ T5068] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 293.766764][ T5068] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 293.795184][ T5124] usb 3-1: USB disconnect, device number 2 [ 293.875009][ T3282] veth1_macvtap: left promiscuous mode [ 293.881001][ T3282] veth0_macvtap: left promiscuous mode [ 293.886910][ T3282] veth1_vlan: left promiscuous mode [ 293.894595][ T3282] veth0_vlan: left promiscuous mode [ 294.456911][ T5081] Bluetooth: hci5: command tx timeout [ 294.885743][ T5781] loop0: detected capacity change from 0 to 40427 [ 294.908787][ T5781] F2FS-fs (loop0): Unrecognized mount option "fnc_mode=strict" or missing value [ 295.720378][ T5781] loop0: detected capacity change from 0 to 512 [ 295.749784][ T3282] team0 (unregistering): Port device team_slave_1 removed [ 295.859138][ T3282] team0 (unregistering): Port device team_slave_0 removed [ 295.912626][ T5081] Bluetooth: hci1: command tx timeout [ 296.121182][ T779] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 296.275507][ T5702] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.283474][ T5702] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.291434][ T5702] bridge_slave_1: entered allmulticast mode [ 296.300423][ T5702] bridge_slave_1: entered promiscuous mode [ 296.451209][ T779] usb 1-1: Using ep0 maxpacket: 16 [ 296.602454][ T779] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 95, changing to 7 [ 296.613953][ T779] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 41273, setting to 1024 [ 296.827968][ T29] audit: type=1326 audit(1717990339.210:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde247cf69 code=0x7ffc0000 [ 296.853114][ T29] audit: type=1326 audit(1717990339.210:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde247cf69 code=0x7ffc0000 [ 296.876563][ T29] audit: type=1326 audit(1717990339.240:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efde247bb60 code=0x7ffc0000 [ 296.900302][ T29] audit: type=1326 audit(1717990339.330:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde247cf69 code=0x7ffc0000 [ 296.923964][ T29] audit: type=1326 audit(1717990339.330:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde247cf69 code=0x7ffc0000 [ 296.947890][ T29] audit: type=1326 audit(1717990339.370:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efde247cf69 code=0x7ffc0000 [ 296.971421][ T29] audit: type=1326 audit(1717990339.370:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde247cf69 code=0x7ffc0000 [ 296.994651][ T29] audit: type=1326 audit(1717990339.430:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efde247cf69 code=0x7ffc0000 [ 297.017831][ T29] audit: type=1326 audit(1717990339.430:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde247cf69 code=0x7ffc0000 [ 297.042267][ T29] audit: type=1326 audit(1717990339.450:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5795 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde247cf69 code=0x7ffc0000 [ 297.153919][ T5702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.267442][ T779] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 297.276996][ T779] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.284487][ T5702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.285397][ T779] usb 1-1: Product: syz [ 297.398416][ T779] usb 1-1: config 0 descriptor?? [ 297.461474][ T779] usb 1-1: can't set config #0, error -71 [ 297.483043][ T779] usb 1-1: USB disconnect, device number 3 [ 297.628366][ T5702] team0: Port device team_slave_0 added [ 297.729787][ T5702] team0: Port device team_slave_1 added [ 297.973546][ T5081] Bluetooth: hci1: command tx timeout [ 298.243821][ T5702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.251075][ T5702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.280238][ T5702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.408518][ T5819] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 298.427020][ T5702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.435290][ T5702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 298.466964][ T5702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.529993][ T5816] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.809730][ T5820] loop4: detected capacity change from 0 to 256 [ 298.897990][ T5820] FAT-fs (loop4): Unrecognized mount option "o}Á18446744073709551615" or missing value [ 299.028674][ T5702] hsr_slave_0: entered promiscuous mode [ 299.052409][ T5829] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 299.087724][ T5702] hsr_slave_1: entered promiscuous mode [ 299.192886][ T5702] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.200902][ T5702] Cannot create hsr debugfs directory [ 299.300850][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 299.652698][ T779] libceph: connect (1)[c::]:6789 error -101 [ 299.659366][ T779] libceph: mon0 (1)[c::]:6789 connect error [ 299.954390][ T779] libceph: connect (1)[c::]:6789 error -101 [ 299.960988][ T779] libceph: mon0 (1)[c::]:6789 connect error [ 300.051024][ T5081] Bluetooth: hci1: command tx timeout [ 300.082360][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 300.210137][ T5835] ceph: No mds server is up or the cluster is laggy [ 300.592450][ T5846] loop4: detected capacity change from 0 to 1024 [ 300.878737][ T5702] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.077912][ T5702] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.173720][ T5851] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 301.280108][ T5702] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.373518][ T3430] hfsplus: b-tree write err: -5, ino 4 [ 301.570356][ T5702] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.001062][ T5854] loop0: detected capacity change from 0 to 32768 [ 302.110931][ T5854] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 302.131616][ T5081] Bluetooth: hci1: command tx timeout [ 302.724840][ T5854] XFS (loop0): Ending clean mount [ 302.742708][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.750425][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.758433][ T5775] bridge_slave_0: entered allmulticast mode [ 302.772054][ T5775] bridge_slave_0: entered promiscuous mode [ 302.959713][ T5869] loop4: detected capacity change from 0 to 32768 [ 302.998543][ T5702] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 303.029487][ T5854] XFS (loop0): Quotacheck needed: Please wait. [ 303.121973][ T5869] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 303.136362][ T5702] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 303.146075][ T25] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0xae/0x2f0, xfs_bnobt block 0x8 [ 303.158552][ T25] XFS (loop0): Unmount and run xfs_repair [ 303.164669][ T25] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 303.175112][ T25] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 303.185338][ T25] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 303.194608][ T25] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab ..*.w.B.......K. [ 303.203884][ T25] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01 ....[.O......... [ 303.213143][ T25] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00 ...6............ [ 303.222332][ T25] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 303.231550][ T25] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 303.240899][ T25] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 303.291078][ T3328] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x354/0x5c0" at daddr 0x8 len 8 error 74 [ 303.338394][ T5702] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 303.371065][ T5854] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 303.392200][ T5702] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 303.431901][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.439606][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.447600][ T5775] bridge_slave_1: entered allmulticast mode [ 303.457257][ T5775] bridge_slave_1: entered promiscuous mode [ 303.620947][ T5074] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 303.713628][ T5074] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair. [ 303.755446][ T5869] XFS (loop4): Ending clean mount [ 303.774481][ T5869] XFS (loop4): Quotacheck needed: Please wait. [ 303.868275][ T5869] XFS (loop4): Quotacheck: Done. [ 303.902570][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 303.902642][ T29] audit: type=1800 audit(1717990346.440:27): pid=5869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=9291 res=0 errno=0 [ 303.958069][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.049093][ T5886] loop2: detected capacity change from 0 to 64 [ 304.151697][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.163854][ T29] audit: type=1804 audit(1717990346.620:28): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3986270137/syzkaller.eRCSSc/6/file0/bus" dev="loop4" ino=9291 res=1 errno=0 [ 304.574940][ T3282] bridge_slave_1: left allmulticast mode [ 304.581005][ T3282] bridge_slave_1: left promiscuous mode [ 304.587570][ T3282] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.671170][ T3282] bridge_slave_0: left allmulticast mode [ 304.677159][ T3282] bridge_slave_0: left promiscuous mode [ 304.683916][ T3282] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.474005][ T29] audit: type=1800 audit(1717990347.960:29): pid=5889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="loop4" ino=9291 res=0 errno=0 [ 305.544701][ T5345] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 305.559163][ T3282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.614071][ T3282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.670112][ T3282] bond0 (unregistering): Released all slaves [ 305.772527][ T5775] team0: Port device team_slave_0 added [ 306.009581][ T5775] team0: Port device team_slave_1 added [ 306.499146][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.506553][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.533103][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.593147][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.600432][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.626993][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.907807][ T3282] hsr_slave_0: left promiscuous mode [ 306.945182][ T3282] hsr_slave_1: left promiscuous mode [ 306.979463][ T3282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.988172][ T3282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 307.028228][ T3282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 307.036080][ T3282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 307.083781][ T3282] veth1_macvtap: left promiscuous mode [ 307.089709][ T3282] veth0_macvtap: left promiscuous mode [ 307.095845][ T3282] veth1_vlan: left promiscuous mode [ 307.101538][ T3282] veth0_vlan: left promiscuous mode [ 308.203856][ T29] audit: type=1800 audit(1717990350.620:30): pid=5914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1951 res=0 errno=0 [ 308.356479][ T3282] team0 (unregistering): Port device team_slave_1 removed [ 308.359940][ T5917] loop0: detected capacity change from 0 to 256 [ 308.421482][ T5917] exfat: Deprecated parameter 'utf8' [ 308.452721][ T3282] team0 (unregistering): Port device team_slave_0 removed [ 308.502597][ T29] audit: type=1326 audit(1717990350.990:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5916 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9e67cf69 code=0x7ffc0000 [ 308.526760][ T29] audit: type=1326 audit(1717990350.990:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5916 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9e67cf69 code=0x7ffc0000 [ 308.552394][ T29] audit: type=1326 audit(1717990350.990:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5916 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbb9e67bb60 code=0x7ffc0000 [ 308.565099][ T5917] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 308.576399][ T29] audit: type=1326 audit(1717990350.990:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5916 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9e67cf69 code=0x7ffc0000 [ 308.612880][ T29] audit: type=1326 audit(1717990350.990:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5916 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbb9e67cf69 code=0x7ffc0000 [ 308.637004][ T29] audit: type=1326 audit(1717990350.990:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5916 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9e67cf69 code=0x7ffc0000 [ 309.055382][ T5912] bridge0: port 3(syz_tun) entered blocking state [ 309.062670][ T5912] bridge0: port 3(syz_tun) entered disabled state [ 309.069680][ T5912] syz_tun: entered allmulticast mode [ 309.078155][ T5912] syz_tun: entered promiscuous mode [ 309.085976][ T5912] bridge0: port 3(syz_tun) entered blocking state [ 309.093151][ T5912] bridge0: port 3(syz_tun) entered forwarding state [ 309.157610][ T5775] hsr_slave_0: entered promiscuous mode [ 309.194971][ T5775] hsr_slave_1: entered promiscuous mode [ 309.225170][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 309.233838][ T5775] Cannot create hsr debugfs directory [ 309.899692][ T5702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.046212][ T5074] bridge0: port 3(syz_tun) entered disabled state [ 310.118356][ T5074] syz_tun (unregistering): left allmulticast mode [ 310.125341][ T5074] syz_tun (unregistering): left promiscuous mode [ 310.132432][ T5074] bridge0: port 3(syz_tun) entered disabled state [ 310.224773][ T5134] libceph: connect (1)[c::]:6789 error -101 [ 310.231284][ T5134] libceph: mon0 (1)[c::]:6789 connect error [ 310.253222][ T5933] ceph: No mds server is up or the cluster is laggy [ 310.414990][ T5702] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.498391][ T5937] loop4: detected capacity change from 0 to 512 [ 310.656530][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.664372][ T5134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.760123][ T780] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.767941][ T780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.835680][ T5937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.523865][ T5345] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.836433][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 311.968433][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 312.134051][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 312.252981][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 312.671354][ T5126] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 313.502365][ T5126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.516209][ T5126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.528068][ T5126] usb 3-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00 [ 313.538187][ T5126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.586921][ T5126] usb 3-1: config 0 descriptor?? [ 313.872196][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.088998][ T5702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.139993][ T5953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.149852][ T5953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.152907][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.313546][ T5126] smartjoyplus 0003:0925:0005.0002: hidraw0: USB HID v0.00 Device [HID 0925:0005] on usb-dummy_hcd.2-1/input0 [ 314.325746][ T5126] smartjoyplus 0003:0925:0005.0002: no output reports found [ 314.411945][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.419597][ T5134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.440710][ T5134] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.448397][ T5134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.530004][ T5126] usb 3-1: USB disconnect, device number 3 [ 314.767657][ T5068] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 314.784870][ T5068] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 314.797357][ T5068] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 314.820839][ T5068] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 314.842075][ T5068] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 314.861362][ T5068] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 314.987248][ T3282] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.125347][ T5702] veth0_vlan: entered promiscuous mode [ 315.292186][ T3282] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.514228][ T3282] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.594981][ T5702] veth1_vlan: entered promiscuous mode [ 315.718888][ T3282] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.730502][ T5976] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 316.114516][ T5975] loop2: detected capacity change from 0 to 164 [ 316.231836][ T5982] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 316.402296][ T5986] netlink: 37 bytes leftover after parsing attributes in process `syz-executor.4'. [ 316.415096][ T5986] unsupported nlmsg_type 40 [ 316.621630][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 316.621703][ T29] audit: type=1800 audit(1717990359.070:60): pid=5982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1950 res=0 errno=0 [ 316.815968][ T3282] bridge_slave_1: left allmulticast mode [ 316.822189][ T3282] bridge_slave_1: left promiscuous mode [ 316.828708][ T3282] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.888561][ T3282] bridge_slave_0: left allmulticast mode [ 316.899778][ T3282] bridge_slave_0: left promiscuous mode [ 316.906659][ T3282] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.932196][ T5068] Bluetooth: hci2: command tx timeout [ 317.021616][ T29] audit: type=1326 audit(1717990359.540:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9e67cf69 code=0x7ffc0000 [ 317.044977][ T29] audit: type=1326 audit(1717990359.540:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9e67cf69 code=0x7ffc0000 [ 317.068308][ T29] audit: type=1326 audit(1717990359.550:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbb9e67bb60 code=0x7ffc0000 [ 317.093817][ T29] audit: type=1326 audit(1717990359.550:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9e67cf69 code=0x7ffc0000 [ 317.117320][ T29] audit: type=1326 audit(1717990359.550:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbb9e67cf69 code=0x7ffc0000 [ 317.141253][ T29] audit: type=1326 audit(1717990359.550:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9e67cf69 code=0x7ffc0000 [ 317.164923][ T29] audit: type=1326 audit(1717990359.550:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9e67cf69 code=0x7ffc0000 [ 317.188140][ T29] audit: type=1326 audit(1717990359.550:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbb9e67cf69 code=0x7ffc0000 [ 317.212543][ T29] audit: type=1326 audit(1717990359.550:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5990 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9e67cf69 code=0x7ffc0000 [ 317.729558][ T3282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.764329][ T3282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.789182][ T3282] bond0 (unregistering): Released all slaves [ 318.018335][ T5702] veth0_macvtap: entered promiscuous mode [ 318.129581][ T5702] veth1_macvtap: entered promiscuous mode [ 318.247555][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.663777][ T3282] hsr_slave_0: left promiscuous mode [ 318.721040][ T3282] hsr_slave_1: left promiscuous mode [ 318.764216][ T3282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.772330][ T3282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.803028][ T3282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.810830][ T3282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.875941][ T3282] veth1_macvtap: left promiscuous mode [ 318.882034][ T3282] veth0_macvtap: left promiscuous mode [ 318.887951][ T3282] veth1_vlan: left promiscuous mode [ 318.893859][ T3282] veth0_vlan: left promiscuous mode [ 319.041478][ T5068] Bluetooth: hci2: command tx timeout [ 319.394914][ T6015] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 319.451803][ T6016] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 319.532218][ T6016] 9pnet_fd: Insufficient options for proto=fd [ 319.682984][ T6016] loop4: detected capacity change from 0 to 1024 [ 319.915095][ T3282] team0 (unregistering): Port device team_slave_1 removed [ 320.014225][ T3282] team0 (unregistering): Port device team_slave_0 removed [ 320.401909][ T5702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.412874][ T5702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.423049][ T5702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 320.433780][ T5702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.449068][ T5702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 320.505462][ T5966] chnl_net:caif_netlink_parms(): no params data found [ 320.581962][ T6015] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 320.648021][ T5702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.659252][ T5702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.669552][ T5702] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 320.680292][ T5702] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 320.698917][ T5702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 320.850515][ T5702] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.859784][ T5702] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.869125][ T5702] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.878292][ T5702] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.056282][ T3399] hfsplus: b-tree write err: -5, ino 4 [ 321.094025][ T5068] Bluetooth: hci2: command tx timeout [ 321.165148][ T5775] veth0_vlan: entered promiscuous mode [ 321.327228][ T5775] veth1_vlan: entered promiscuous mode [ 321.916277][ T5775] veth0_macvtap: entered promiscuous mode [ 322.009246][ T5775] veth1_macvtap: entered promiscuous mode [ 322.337187][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.348022][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.358477][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.369327][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.379741][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 322.391064][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.406002][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.708117][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.720235][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.731734][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.742818][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.753053][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.763958][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.782195][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.793459][ T5966] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.801260][ T5966] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.808987][ T5966] bridge_slave_0: entered allmulticast mode [ 322.818051][ T5966] bridge_slave_0: entered promiscuous mode [ 322.850047][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.859331][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.868470][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.877565][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.023831][ T5966] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.032847][ T5966] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.042206][ T5966] bridge_slave_1: entered allmulticast mode [ 323.051468][ T5966] bridge_slave_1: entered promiscuous mode [ 323.177973][ T5068] Bluetooth: hci2: command tx timeout [ 323.573895][ T5966] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.664332][ T5966] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.993246][ T5966] team0: Port device team_slave_0 added [ 324.073568][ T5966] team0: Port device team_slave_1 added [ 324.389750][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.397011][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.423476][ T5966] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.468466][ T29] kauditd_printk_skb: 21 callbacks suppressed [ 324.468536][ T29] audit: type=1326 audit(1717990367.010:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde247cf69 code=0x7ffc0000 [ 324.502587][ T29] audit: type=1326 audit(1717990367.010:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde247cf69 code=0x7ffc0000 [ 324.589275][ T29] audit: type=1326 audit(1717990367.080:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efde247cf69 code=0x7ffc0000 [ 324.613720][ T29] audit: type=1326 audit(1717990367.090:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde247cf69 code=0x7ffc0000 [ 324.637151][ T29] audit: type=1326 audit(1717990367.090:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde247cf69 code=0x7ffc0000 [ 324.645070][ T5966] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.660381][ T29] audit: type=1326 audit(1717990367.110:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7efde247cf69 code=0x7ffc0000 [ 324.667188][ T5966] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.667324][ T5966] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.692451][ T29] audit: type=1326 audit(1717990367.110:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde247cf69 code=0x7ffc0000 [ 324.754928][ T29] audit: type=1326 audit(1717990367.110:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7efde247cf69 code=0x7ffc0000 [ 324.781307][ T29] audit: type=1326 audit(1717990367.120:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde247cf69 code=0x7ffc0000 [ 324.804575][ T29] audit: type=1326 audit(1717990367.120:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6063 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7efde247cf69 code=0x7ffc0000 [ 325.363297][ T5966] hsr_slave_0: entered promiscuous mode [ 325.457291][ T5966] hsr_slave_1: entered promiscuous mode [ 325.510780][ T5966] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.518590][ T5966] Cannot create hsr debugfs directory [ 326.349253][ T6085] loop2: detected capacity change from 0 to 164 [ 326.650220][ T6087] loop4: detected capacity change from 0 to 1024 [ 328.176009][ T5966] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 328.238852][ T6099] loop2: detected capacity change from 0 to 1024 [ 328.280486][ T5966] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 328.360121][ T5966] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 328.482280][ T5966] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 328.987414][ T3430] hfsplus: b-tree write err: -5, ino 4 [ 329.112923][ T5120] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 329.551258][ T5120] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.563433][ T5120] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.573783][ T5120] usb 5-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00 [ 329.583212][ T5120] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.651854][ T5120] usb 5-1: config 0 descriptor?? [ 329.785697][ T6119] loop2: detected capacity change from 0 to 2048 [ 329.891687][ T6119] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 329.998078][ T5966] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.232093][ T5966] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.318420][ T5120] hid-multitouch 0003:0EEF:72D0.0003: unbalanced delimiter at end of report description [ 330.341117][ T5120] hid-multitouch 0003:0EEF:72D0.0003: probe with driver hid-multitouch failed with error -22 [ 330.389771][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.397583][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.484565][ T5120] usb 5-1: USB disconnect, device number 2 [ 330.550372][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.558165][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.647402][ T3430] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.655567][ T3430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.015168][ T3472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.024125][ T3472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.212400][ T6130] loop2: detected capacity change from 0 to 1024 [ 331.386774][ T6130] EXT4-fs: Ignoring removed nomblk_io_submit option [ 331.526200][ T6130] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a043c018, mo2=0002] [ 331.631367][ T6130] System zones: 0-1, 3-12 [ 331.812451][ T6130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.022971][ T3374] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.031187][ T3374] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.191729][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 332.227227][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.236044][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.362035][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 332.373020][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 332.383029][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 332.413934][ T5362] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.179243][ T6152] loop2: detected capacity change from 0 to 64 [ 333.315396][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 333.315466][ T29] audit: type=1326 audit(1717990375.860:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9e67cf69 code=0x7ffc0000 [ 333.344970][ T29] audit: type=1326 audit(1717990375.860:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9e67cf69 code=0x7ffc0000 [ 333.368332][ T29] audit: type=1326 audit(1717990375.880:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbb9e67bb60 code=0x7ffc0000 [ 333.395730][ T29] audit: type=1326 audit(1717990375.890:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9e67cf69 code=0x7ffc0000 [ 333.420254][ T29] audit: type=1326 audit(1717990375.890:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbb9e67cf69 code=0x7ffc0000 [ 333.443859][ T29] audit: type=1326 audit(1717990375.890:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9e67cf69 code=0x7ffc0000 [ 333.467212][ T29] audit: type=1326 audit(1717990375.890:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9e67cf69 code=0x7ffc0000 [ 333.494318][ T29] audit: type=1326 audit(1717990375.910:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbb9e67cf69 code=0x7ffc0000 [ 333.518869][ T29] audit: type=1326 audit(1717990375.910:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9e67cf69 code=0x7ffc0000 [ 333.542291][ T29] audit: type=1326 audit(1717990375.920:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6155 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbb9e67cf69 code=0x7ffc0000 [ 333.612220][ T5966] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.274944][ T5966] veth0_vlan: entered promiscuous mode [ 334.368485][ T5966] veth1_vlan: entered promiscuous mode [ 334.697814][ T5966] veth0_macvtap: entered promiscuous mode [ 334.765197][ T5966] veth1_macvtap: entered promiscuous mode [ 335.006852][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.025824][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.037823][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.048639][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.058911][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.069626][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.079729][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 335.090513][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.105616][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.293298][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.304089][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.314229][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.329936][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.342646][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.353463][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.364964][ T5966] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 335.375686][ T5966] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 335.390814][ T5966] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.538086][ T5966] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.547245][ T5966] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.556478][ T5966] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.565739][ T5966] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.643728][ T6164] loop4: detected capacity change from 0 to 164 [ 337.011169][ T6167] loop3: detected capacity change from 0 to 32768 [ 337.125412][ T6167] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 337.462123][ T6167] XFS (loop3): Ending clean mount [ 337.485388][ T6167] XFS (loop3): Quotacheck needed: Please wait. [ 337.598951][ T6167] XFS (loop3): Quotacheck: Done. [ 337.767099][ T5702] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 338.288472][ T779] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 338.731624][ T779] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.743041][ T779] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.753303][ T779] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 338.766575][ T779] usb 3-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00 [ 338.776995][ T779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.835989][ T779] usb 3-1: config 0 descriptor?? [ 339.671854][ T779] usbhid 3-1:0.0: can't add hid device: -71 [ 339.678612][ T779] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 339.850415][ T779] usb 3-1: USB disconnect, device number 4 [ 339.972577][ T6202] loop4: detected capacity change from 0 to 4096 [ 340.115339][ T6202] ntfs3: Unknown parameter 'ÿÿÿÿÿÿÿÿ' [ 340.234824][ T6204] loop1: detected capacity change from 0 to 40427 [ 340.272547][ T6204] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 340.281459][ T6204] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 340.593813][ T6204] F2FS-fs (loop1): Found nat_bits in checkpoint [ 340.634705][ T6202] loop4: detected capacity change from 0 to 256 [ 340.835258][ T6211] loop3: detected capacity change from 0 to 2048 [ 340.916880][ T6211] UDF-fs: warning (device loop3): udf_fill_super: No partition found (2) [ 340.917364][ T6204] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 340.934519][ T6204] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 341.096303][ T6217] loop2: detected capacity change from 0 to 8 [ 341.168915][ T6202] FAT-fs (loop4): Directory bread(block 64) failed [ 341.176026][ T6202] FAT-fs (loop4): Directory bread(block 65) failed [ 341.183158][ T6202] FAT-fs (loop4): Directory bread(block 66) failed [ 341.189929][ T6202] FAT-fs (loop4): Directory bread(block 67) failed [ 341.197068][ T6202] FAT-fs (loop4): Directory bread(block 68) failed [ 341.204099][ T6202] FAT-fs (loop4): Directory bread(block 69) failed [ 341.211110][ T6202] FAT-fs (loop4): Directory bread(block 70) failed [ 341.217874][ T6202] FAT-fs (loop4): Directory bread(block 71) failed [ 341.225272][ T6202] FAT-fs (loop4): Directory bread(block 72) failed [ 341.232173][ T6202] FAT-fs (loop4): Directory bread(block 73) failed [ 341.284851][ T6211] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 342.054195][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.061495][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 [ 342.429785][ T6228] loop3: detected capacity change from 0 to 256 [ 342.843148][ T6228] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 342.972193][ T6228] net_ratelimit: 2 callbacks suppressed [ 342.972267][ T6228] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 343.092776][ T3472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.100954][ T3472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.398688][ T779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.407412][ T779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.631350][ T6238] loop4: detected capacity change from 0 to 4096 [ 344.680196][ T6238] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 344.816826][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 344.816898][ T29] audit: type=1326 audit(1717990387.360:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c0e7cf69 code=0x7ffc0000 [ 344.975417][ T29] audit: type=1326 audit(1717990387.440:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc4c0e7bb60 code=0x7ffc0000 [ 344.999119][ T29] audit: type=1326 audit(1717990387.440:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c0e7cf69 code=0x7ffc0000 [ 345.022717][ T29] audit: type=1326 audit(1717990387.440:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c0e7cf69 code=0x7ffc0000 [ 345.049363][ T29] audit: type=1326 audit(1717990387.490:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc4c0e7cf69 code=0x7ffc0000 [ 345.077218][ T29] audit: type=1326 audit(1717990387.490:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c0e7cf69 code=0x7ffc0000 [ 345.130163][ T29] audit: type=1326 audit(1717990387.670:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc4c0e7cf69 code=0x7ffc0000 [ 345.153611][ T29] audit: type=1326 audit(1717990387.670:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c0e7cf69 code=0x7ffc0000 [ 345.188044][ T29] audit: type=1326 audit(1717990387.670:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4c0e7cf69 code=0x7ffc0000 [ 345.222422][ T6238] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 345.380935][ T29] audit: type=1326 audit(1717990387.810:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6248 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fc4c0e7cf69 code=0x7ffc0000 [ 346.100428][ T6252] loop3: detected capacity change from 0 to 32768 [ 346.404178][ T6252] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 346.809552][ T6252] XFS (loop3): Ending clean mount [ 346.827272][ T6252] XFS (loop3): Quotacheck needed: Please wait. [ 346.884591][ T5120] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0xae/0x2f0, xfs_bnobt block 0x8 [ 346.901730][ T5120] XFS (loop3): Unmount and run xfs_repair [ 346.907682][ T5120] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 346.917104][ T5120] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 346.926274][ T5120] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 346.935487][ T5120] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab ..*.w.B.......K. [ 346.944668][ T5120] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01 ....[.O......... [ 346.953890][ T5120] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00 ...6............ [ 346.963285][ T5120] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 346.972945][ T5120] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 346.982146][ T5120] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 347.038107][ T6270] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 347.043826][ T1082] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x354/0x5c0" at daddr 0x8 len 8 error 74 [ 347.088267][ T6272] loop4: detected capacity change from 0 to 8 [ 347.095885][ T6252] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 347.217255][ T6273] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 347.322705][ T6272] SQUASHFS error: lzo decompression failed, data probably corrupt [ 347.331040][ T6272] SQUASHFS error: Failed to read block 0x144: -5 [ 347.337655][ T6272] SQUASHFS error: Unable to read metadata cache entry [142] [ 347.345328][ T6272] SQUASHFS error: Unable to read directory block [142:26] [ 347.705864][ T5702] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 347.810150][ T6279] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 347.875331][ T5702] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair. [ 347.892779][ T6279] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 347.901299][ T6279] IPv6: NLM_F_CREATE should be specified when creating new route [ 348.360050][ T6291] loop1: detected capacity change from 0 to 256 [ 348.451529][ T779] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 348.505522][ T6291] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 348.541867][ T5120] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 348.568486][ T6291] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 348.891985][ T779] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.903360][ T779] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.913695][ T779] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 348.923138][ T779] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.963033][ T5120] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.974898][ T5120] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.985116][ T5120] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 348.994558][ T5120] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.034200][ T779] usb 3-1: config 0 descriptor?? [ 349.066088][ T5120] usb 5-1: config 0 descriptor?? [ 349.280076][ T6295] loop0: detected capacity change from 0 to 64 [ 349.447012][ T5068] Bluetooth: hci2: unexpected cc 0x2027 length: 2 > 1 [ 349.454511][ T5068] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 349.541675][ T6290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.551644][ T6290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.553390][ T779] lg-g15 0003:046D:C222.0004: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 349.795357][ T6283] tipc: Started in network mode [ 349.800549][ T6283] tipc: Node identity 5, cluster identity 4711 [ 349.809335][ T6283] tipc: Node number set to 5 [ 349.823362][ T6290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.833239][ T6290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 350.114952][ T5120] usbhid 5-1:0.0: can't add hid device: -71 [ 350.121794][ T5120] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 350.139427][ T10] usb 3-1: USB disconnect, device number 5 [ 350.199307][ T5120] usb 5-1: USB disconnect, device number 3 [ 350.687460][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 350.964506][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 350.964578][ T29] audit: type=1326 audit(1717990393.510:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6309 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7366e7cf69 code=0x7ffc0000 [ 350.973025][ T29] audit: type=1326 audit(1717990393.510:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6309 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7366e7cf69 code=0x7ffc0000 [ 350.973241][ T29] audit: type=1326 audit(1717990393.520:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6309 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7366e7cf69 code=0x7ffc0000 [ 350.983120][ T29] audit: type=1326 audit(1717990393.530:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6309 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7366e7cf69 code=0x7ffc0000 [ 351.021778][ T29] audit: type=1326 audit(1717990393.560:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6309 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7366e7cf69 code=0x7ffc0000 [ 351.022012][ T29] audit: type=1326 audit(1717990393.560:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6309 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7366e7cf69 code=0x7ffc0000 [ 351.022226][ T29] audit: type=1326 audit(1717990393.560:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6309 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7366e7cf69 code=0x7ffc0000 [ 351.022439][ T29] audit: type=1326 audit(1717990393.570:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6309 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7366e7cf69 code=0x7ffc0000 [ 351.031550][ T29] audit: type=1326 audit(1717990393.570:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6309 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7366e7cf69 code=0x7ffc0000 [ 351.033157][ T29] audit: type=1326 audit(1717990393.580:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6309 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7366e7cf69 code=0x7ffc0000 [ 351.571884][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 351.611394][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 351.712713][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 351.995461][ T6316] loop4: detected capacity change from 0 to 32768 [ 352.096547][ T6316] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 352.458906][ T6316] XFS (loop4): Ending clean mount [ 352.477970][ T6316] XFS (loop4): Quotacheck needed: Please wait. [ 352.487085][ T779] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0xae/0x2f0, xfs_bnobt block 0x8 [ 352.487347][ T779] XFS (loop4): Unmount and run xfs_repair [ 352.487429][ T779] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 352.487537][ T779] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 352.487635][ T779] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 352.487740][ T779] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab ..*.w.B.......K. [ 352.487837][ T779] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01 ....[.O......... [ 352.487934][ T779] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00 ...6............ [ 352.488032][ T779] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 352.488131][ T779] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 352.488230][ T779] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 352.488414][ T3282] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x354/0x5c0" at daddr 0x8 len 8 error 74 [ 352.492126][ T6316] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 352.819043][ T5345] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 352.878166][ T5345] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair. [ 353.491437][ T5068] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 353.500041][ T5068] Bluetooth: hci2: Injecting HCI hardware error event [ 353.508241][ T5068] Bluetooth: hci2: hardware error 0x00 [ 355.208015][ T6340] loop0: detected capacity change from 0 to 32768 [ 355.226416][ T6340] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6340) [ 355.288791][ T6340] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 355.302874][ T6340] BTRFS info (device loop0): using sha256 (sha256-generic) checksum algorithm [ 355.316290][ T6340] BTRFS info (device loop0): using free-space-tree [ 355.409468][ T6348] 9pnet_fd: p9_fd_create_tcp (6348): problem binding to privport [ 355.554457][ T6356] loop3: detected capacity change from 0 to 256 [ 355.627415][ T6348] loop4: detected capacity change from 0 to 64 [ 355.650994][ T5068] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 355.772416][ T6356] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 356.116814][ T6356] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 356.143071][ T5966] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 356.462635][ T5068] Bluetooth: hci1: command 0x0406 tx timeout [ 356.638084][ T6365] loop2: detected capacity change from 0 to 32768 [ 356.854823][ T6365] jfs_strtoUCS: char2uni returned -22. [ 356.860528][ T6365] charset = euc-jp, char = 0xd4 [ 356.868292][ T6365] jfs_strtoUCS: char2uni returned -22. [ 356.874173][ T6365] charset = euc-jp, char = 0xd4 [ 357.106603][ T779] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 358.144029][ T6374] loop4: detected capacity change from 0 to 32768 [ 358.253733][ T6374] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 358.409395][ T6374] XFS (loop4): Ending clean mount [ 358.417362][ T779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.428739][ T779] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.438981][ T779] usb 2-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 358.448488][ T779] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.532483][ T6374] XFS (loop4): Quotacheck needed: Please wait. [ 358.555377][ T10] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0xae/0x2f0, xfs_bnobt block 0x8 [ 358.567351][ T10] XFS (loop4): Unmount and run xfs_repair [ 358.579267][ T10] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 358.587304][ T779] usb 2-1: config 0 descriptor?? [ 358.594690][ T10] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 358.604095][ T10] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 358.622415][ T10] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab ..*.w.B.......K. [ 358.640546][ T10] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01 ....[.O......... [ 358.649877][ T10] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00 ...6............ [ 358.659089][ T10] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 358.668401][ T10] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 358.682079][ T10] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 358.693269][ T1082] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x354/0x5c0" at daddr 0x8 len 8 error 74 [ 359.597893][ T6374] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 359.734372][ T5345] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 359.758525][ T6387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.768361][ T6387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.784509][ T5345] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair. [ 360.042856][ T779] usbhid 2-1:0.0: can't add hid device: -71 [ 360.049682][ T779] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 360.079644][ T779] usb 2-1: USB disconnect, device number 2 [ 361.010371][ T6389] loop3: detected capacity change from 0 to 32768 [ 361.797302][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 361.797373][ T29] audit: type=1326 audit(1717990404.340:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6391 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4c0e7cf69 code=0x0 [ 363.373786][ T6401] loop3: detected capacity change from 0 to 32768 [ 363.428194][ T6401] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (6401) [ 363.523717][ T6401] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 363.534919][ T6401] BTRFS info (device loop3): using sha256 (sha256-generic) checksum algorithm [ 363.546825][ T6401] BTRFS info (device loop3): using free-space-tree [ 363.763213][ T6404] loop1: detected capacity change from 0 to 1764 [ 364.003710][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 364.192894][ T5702] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 364.422453][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.433824][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 364.447470][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 364.457920][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.514717][ T10] usb 5-1: config 0 descriptor?? [ 364.781470][ T6416] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 364.791209][ T6416] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.4'. [ 365.073191][ T10] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 365.136560][ T10] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 365.213417][ T10] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 365.359643][ T6427] Dead loop on virtual device ip6_vti0, fix it urgently! [ 365.368517][ T6427] Dead loop on virtual device ip6_vti0, fix it urgently! [ 365.377465][ T6427] Dead loop on virtual device ip6_vti0, fix it urgently! [ 365.386259][ T6427] Dead loop on virtual device ip6_vti0, fix it urgently! [ 365.395008][ T6427] Dead loop on virtual device ip6_vti0, fix it urgently! [ 365.403790][ T6427] Dead loop on virtual device ip6_vti0, fix it urgently! [ 365.896350][ T5134] usb 5-1: USB disconnect, device number 4 [ 366.212703][ T6432] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 366.899306][ T6432] loop3: detected capacity change from 0 to 1764 [ 367.218282][ T6434] loop4: detected capacity change from 0 to 32768 [ 367.362978][ T6434] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 367.494940][ T6437] loop1: detected capacity change from 0 to 256 [ 367.722656][ T6434] XFS (loop4): Ending clean mount [ 367.763457][ T6434] XFS (loop4): Quotacheck needed: Please wait. [ 368.014732][ T6437] FAT-fs (loop1): Directory bread(block 64) failed [ 368.021791][ T6437] FAT-fs (loop1): Directory bread(block 65) failed [ 368.028794][ T6437] FAT-fs (loop1): Directory bread(block 66) failed [ 368.035769][ T6437] FAT-fs (loop1): Directory bread(block 67) failed [ 368.042804][ T6437] FAT-fs (loop1): Directory bread(block 68) failed [ 368.049572][ T6437] FAT-fs (loop1): Directory bread(block 69) failed [ 368.056768][ T6437] FAT-fs (loop1): Directory bread(block 70) failed [ 368.063661][ T6437] FAT-fs (loop1): Directory bread(block 71) failed [ 368.070872][ T6437] FAT-fs (loop1): Directory bread(block 72) failed [ 368.077634][ T6437] FAT-fs (loop1): Directory bread(block 73) failed [ 368.127679][ T5126] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0xae/0x2f0, xfs_bnobt block 0x8 [ 368.139379][ T5126] XFS (loop4): Unmount and run xfs_repair [ 368.145421][ T5126] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 368.153129][ T5126] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 368.162275][ T5126] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 368.171716][ T5126] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab ..*.w.B.......K. [ 368.180929][ T5126] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01 ....[.O......... [ 368.190020][ T5126] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00 ...6............ [ 368.202388][ T5126] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 368.212575][ T5126] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 368.221748][ T5126] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 368.252296][ T3374] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x354/0x5c0" at daddr 0x8 len 8 error 74 [ 368.274751][ T6434] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 368.372396][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 368.446455][ T5345] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 368.506818][ T29] audit: type=1326 audit(1717990410.970:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde247cf69 code=0x7ffc0000 [ 368.531674][ T5345] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair. [ 368.540957][ T29] audit: type=1326 audit(1717990411.030:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efde247bb60 code=0x7ffc0000 [ 368.564320][ T29] audit: type=1326 audit(1717990411.030:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde247cf69 code=0x7ffc0000 [ 368.587617][ T29] audit: type=1326 audit(1717990411.030:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde247cf69 code=0x7ffc0000 [ 368.614919][ T29] audit: type=1326 audit(1717990411.050:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efde247cf69 code=0x7ffc0000 [ 368.616042][ T6457] loop3: detected capacity change from 0 to 64 [ 368.646128][ T6437] syz-executor.1: attempt to access beyond end of device [ 368.646128][ T6437] loop1: rw=2049, sector=1224, nr_sectors = 120 limit=256 [ 368.762001][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 368.846308][ T6457] hfs: unable to parse mount options [ 368.850888][ T29] audit: type=1326 audit(1717990411.260:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde247cf69 code=0x7ffc0000 [ 368.877339][ T29] audit: type=1326 audit(1717990411.260:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde247cf69 code=0x7ffc0000 [ 368.900754][ T29] audit: type=1326 audit(1717990411.280:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=260 compat=0 ip=0x7efde247cf69 code=0x7ffc0000 [ 368.926909][ T29] audit: type=1326 audit(1717990411.280:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde247cf69 code=0x7ffc0000 [ 368.951048][ T29] audit: type=1326 audit(1717990411.280:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde247cf69 code=0x7ffc0000 [ 369.041795][ T10] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 369.051562][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.096195][ T10] usb 1-1: config 0 descriptor?? [ 369.209104][ T10] gspca_main: sq930x-2.14.0 probing 041e:403c [ 369.867108][ T6465] loop0: detected capacity change from 0 to 8 [ 370.003959][ T6465] Filesystem uses "unknown" compression. This is not supported [ 370.211165][ T10] gspca_sq930x: reg_w 0305 fd00 failed -110 [ 370.217902][ T10] sq930x 1-1:0.0: probe with driver sq930x failed with error -110 [ 370.340790][ C0] hrtimer: interrupt took 259728 ns [ 370.384139][ T6462] loop1: detected capacity change from 0 to 32768 [ 370.396724][ T6462] btrfs: Unknown parameter 'l' [ 372.169955][ T6474] loop1: detected capacity change from 0 to 32768 [ 372.212838][ T5126] usb 1-1: USB disconnect, device number 4 [ 372.224606][ T6476] loop3: detected capacity change from 0 to 32768 [ 372.307760][ T6474] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (6474) [ 372.393252][ T6474] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 372.408673][ T6474] BTRFS info (device loop1): using sha256 (sha256-generic) checksum algorithm [ 372.423213][ T6474] BTRFS info (device loop1): using free-space-tree [ 372.434292][ T6476] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 372.713059][ T5134] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 372.898745][ T5775] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 373.095208][ T6476] XFS (loop3): Ending clean mount [ 373.121454][ T5134] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 373.146688][ T6476] XFS (loop3): Quotacheck needed: Please wait. [ 373.164360][ T10] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0xae/0x2f0, xfs_bnobt block 0x4 [ 373.176885][ T10] XFS (loop3): Unmount and run xfs_repair [ 373.183013][ T10] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 373.190736][ T10] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 373.199899][ T10] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 373.209215][ T10] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 373.222843][ T10] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 373.234061][ T10] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 373.234169][ T10] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 373.234269][ T10] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 373.234371][ T10] 00000070: 00 00 00 00 ff ff ff 7f 00 00 00 00 00 00 00 00 ................ [ 373.238431][ T3430] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x354/0x5c0" at daddr 0x4 len 4 error 74 [ 373.292621][ T6476] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 373.293754][ T5134] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 373.310336][ T5134] usb 3-1: can't read configurations, error -61 [ 373.475586][ T10] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0xae/0x2f0, xfs_bnobt block 0x4 [ 373.487335][ T10] XFS (loop3): Unmount and run xfs_repair [ 373.493452][ T10] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 373.501281][ T10] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 373.510376][ T10] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 80 ................ [ 373.523998][ T10] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91 ..G...N..b..1... [ 373.534476][ T10] 00000030: 00 00 00 00 ac 5e af fe 00 00 00 0d 00 00 00 13 .....^.......... [ 373.541631][ T5134] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 373.543700][ T10] 00000040: 00 00 12 48 00 00 0d b8 00 00 00 00 00 00 00 00 ...H............ [ 373.560264][ T10] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 373.569522][ T10] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 373.578790][ T10] 00000070: 00 00 00 00 ff ff ff 7f 00 00 00 00 00 00 00 00 ................ [ 373.651303][ T6511] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x354/0x5c0" at daddr 0x4 len 4 error 74 [ 373.656941][ T6498] loop4: detected capacity change from 0 to 4096 [ 373.663704][ T6511] XFS (loop3): page discard on page ffffea0001a6e400, inode 0x244b, pos 0. [ 373.807317][ T6512] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 373.851472][ T5134] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 374.021382][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 374.021458][ T29] audit: type=1800 audit(1717990416.500:201): pid=6498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 374.058429][ T5134] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 374.066465][ T5134] usb 3-1: can't read configurations, error -61 [ 374.140130][ T5134] usb usb3-port1: attempt power cycle [ 374.188275][ T5702] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 374.211356][ T6517] loop0: detected capacity change from 0 to 256 [ 374.294275][ T5702] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair. [ 374.480871][ T6517] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 374.575731][ T6517] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 374.601017][ T5134] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 374.865083][ T5134] usb 3-1: device not accepting address 8, error -71 [ 375.108369][ T6523] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 376.014587][ T29] audit: type=1326 audit(1717990418.470:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde247cf69 code=0x7ffc0000 [ 376.038071][ T29] audit: type=1326 audit(1717990418.500:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efde247bb60 code=0x7ffc0000 [ 376.061588][ T29] audit: type=1326 audit(1717990418.510:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde247cf69 code=0x7ffc0000 [ 376.087692][ T29] audit: type=1326 audit(1717990418.510:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde247cf69 code=0x7ffc0000 [ 376.111668][ T29] audit: type=1326 audit(1717990418.510:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efde247cf69 code=0x7ffc0000 [ 376.136750][ T29] audit: type=1326 audit(1717990418.540:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde247cf69 code=0x7ffc0000 [ 376.160285][ T29] audit: type=1326 audit(1717990418.540:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde247cf69 code=0x7ffc0000 [ 376.186295][ T29] audit: type=1326 audit(1717990418.550:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7efde247cf69 code=0x7ffc0000 [ 376.210488][ T29] audit: type=1326 audit(1717990418.550:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6525 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efde247cf69 code=0x7ffc0000 [ 376.761000][ T5134] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 377.031225][ T5134] usb 5-1: Using ep0 maxpacket: 32 [ 377.251206][ T5134] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.552578][ T5134] usb 5-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=a4.72 [ 377.562530][ T5134] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.570963][ T5134] usb 5-1: Product: syz [ 377.575350][ T5134] usb 5-1: Manufacturer: syz [ 377.580176][ T5134] usb 5-1: SerialNumber: syz [ 377.716960][ T6535] loop0: detected capacity change from 0 to 4096 [ 377.796050][ T5134] usb 5-1: config 0 descriptor?? [ 377.910008][ T6537] loop3: detected capacity change from 0 to 32768 [ 377.995397][ T6535] NILFS (loop0): invalid segment: Checksum error in segment payload [ 378.003922][ T6535] NILFS (loop0): trying rollback from an earlier position [ 378.049254][ T6537] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 378.158713][ T6535] NILFS (loop0): norecovery option specified, skipping roll-forward recovery [ 378.173396][ T5134] usb 5-1: unknown interface protocol 0xf, assuming v1 [ 378.273477][ T5134] usb 5-1: USB disconnect, device number 5 [ 378.442708][ T6537] XFS (loop3): Ending clean mount [ 378.473477][ T6537] XFS (loop3): Quotacheck needed: Please wait. [ 378.533387][ T5249] udevd[5249]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.612288][ T779] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0xae/0x2f0, xfs_bnobt block 0x8 [ 378.624659][ T779] XFS (loop3): Unmount and run xfs_repair [ 378.631714][ T779] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 378.639339][ T779] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 378.651741][ T779] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10 ................ [ 378.661946][ T779] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab ..*.w.B.......K. [ 378.671200][ T779] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01 ....[.O......... [ 378.680292][ T779] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00 ...6............ [ 378.689710][ T779] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 378.699231][ T779] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 378.708493][ T779] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 378.775221][ T3430] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x354/0x5c0" at daddr 0x8 len 8 error 74 [ 378.823669][ T6537] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 378.938676][ T5702] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 379.105974][ T5702] XFS (loop3): Uncorrected metadata errors detected; please run xfs_repair. [ 379.509798][ T6561] fuse: Bad value for 'fd' [ 379.703090][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 379.739217][ T5126] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 379.906173][ T6563] loop4: detected capacity change from 0 to 256 [ 379.992268][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 380.051069][ T5126] usb 2-1: Using ep0 maxpacket: 32 [ 380.112335][ T10] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 380.122091][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.180940][ T10] usb 1-1: config 0 descriptor?? [ 380.212644][ T5126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.224035][ T5126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.234255][ T5126] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 380.243819][ T5126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.248168][ T10] gspca_main: sq930x-2.14.0 probing 041e:403c [ 380.318638][ T5126] usb 2-1: config 0 descriptor?? [ 380.393111][ T5126] hub 2-1:0.0: USB hub found [ 380.594090][ T5126] hub 2-1:0.0: 1 port detected [ 380.936376][ T6572] loop0: detected capacity change from 0 to 8 [ 380.963666][ T6570] macvlan0: entered promiscuous mode [ 381.049087][ T6570] ipvlan0: entered promiscuous mode [ 381.059615][ T6570] ipvlan0: left promiscuous mode [ 381.086418][ T6572] Filesystem uses "unknown" compression. This is not supported [ 381.108905][ T6570] macvlan0: left promiscuous mode [ 381.290966][ T10] gspca_sq930x: reg_w 0305 fd00 failed -110 [ 381.291919][ T5126] hub 2-1:0.0: activate --> -90 [ 381.297447][ T10] sq930x 1-1:0.0: probe with driver sq930x failed with error -110 [ 381.844249][ T6580] loop3: detected capacity change from 0 to 256 [ 381.957522][ T6580] exFAT-fs (loop3): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 382.000388][ T6579] loop4: detected capacity change from 0 to 1024 [ 382.043012][ T6580] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 382.338767][ T3472] hfsplus: b-tree write err: -5, ino 4 [ 382.406461][ T6558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.416459][ T6558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.491293][ T779] usb 2-1-port1: over-current condition [ 382.548742][ T10] usb 1-1: USB disconnect, device number 5 [ 382.785016][ T5120] usb 2-1: USB disconnect, device number 3 [ 382.825983][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 382.826058][ T29] audit: type=1326 audit(1717990425.370:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9e67cf69 code=0x7ffc0000 [ 382.858558][ T29] audit: type=1326 audit(1717990425.370:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9e67cf69 code=0x7ffc0000 [ 382.882699][ T29] audit: type=1326 audit(1717990425.380:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbb9e67bb60 code=0x7ffc0000 [ 382.906109][ T29] audit: type=1326 audit(1717990425.380:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9e67cf69 code=0x7ffc0000 [ 382.929465][ T29] audit: type=1326 audit(1717990425.390:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbb9e67cf69 code=0x7ffc0000 [ 382.957454][ T29] audit: type=1326 audit(1717990425.400:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9e67cf69 code=0x7ffc0000 [ 382.982430][ T29] audit: type=1326 audit(1717990425.420:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbb9e67cf69 code=0x7ffc0000 [ 383.005865][ T29] audit: type=1326 audit(1717990425.420:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9e67cf69 code=0x7ffc0000 [ 383.029206][ T29] audit: type=1326 audit(1717990425.420:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbb9e67cf69 code=0x7ffc0000 [ 383.055594][ T29] audit: type=1326 audit(1717990425.440:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6583 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb9e67cf69 code=0x7ffc0000 [ 384.730314][ T6618] loop3: detected capacity change from 0 to 256 [ 384.836957][ T6613] loop4: detected capacity change from 0 to 1024 [ 384.922711][ T6617] Bluetooth: MGMT ver 1.22 [ 385.137848][ T6613] hfsplus: bad catalog entry type [ 385.562770][ T2448] hfsplus: b-tree write err: -5, ino 4 [ 387.606752][ T6650] loop3: detected capacity change from 0 to 256 [ 387.689691][ T6650] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 388.223474][ T6654] loop4: detected capacity change from 0 to 47 [ 388.414931][ T6656] loop0: detected capacity change from 0 to 1024 [ 388.552890][ T6656] hfsplus: bad catalog entry type [ 388.892955][ T2448] hfsplus: b-tree write err: -5, ino 4 [ 389.543510][ T5261] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 394.562590][ T6690] input: syz0 as /devices/virtual/input/input7 [ 399.303517][ T6707] loop1: detected capacity change from 0 to 1024 [ 399.444330][ T6707] hfsplus: bad catalog entry type [ 399.822160][ T2448] hfsplus: b-tree write err: -5, ino 4 [ 401.242329][ T6727] loop0: detected capacity change from 0 to 512 [ 401.320363][ T6727] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 401.330420][ T6727] EXT4-fs (loop0): blocks per group (3008) and clusters per group (32768) inconsistent [ 403.436178][ T1227] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.443012][ T1227] ieee802154 phy1 wpan1: encryption failed: -22 [ 403.650386][ T6735] No control pipe specified [ 404.452890][ T6737] No control pipe specified [ 405.222848][ T6741] loop1: detected capacity change from 0 to 1024 [ 405.652310][ T1082] hfsplus: b-tree write err: -5, ino 4 [ 405.744285][ T6744] loop4: detected capacity change from 0 to 512 [ 405.802556][ T6744] EXT4-fs: Ignoring removed nobh option [ 405.808478][ T6744] ext4: Bad value for 'max_dir_size_kb' [ 406.961093][ T6751] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 407.158734][ T6751] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 407.323314][ T6751] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 410.618243][ T5068] Bluetooth: hci5: command 0x0406 tx timeout [ 412.456711][ T3282] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.634520][ T3282] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.015967][ T3282] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.196820][ T3282] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.216429][ T6771] loop4: detected capacity change from 0 to 1024 [ 413.281626][ T6771] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 413.499612][ T3282] bridge_slave_1: left allmulticast mode [ 413.506338][ T3282] bridge_slave_1: left promiscuous mode [ 413.513254][ T3282] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.644412][ T3282] bridge_slave_0: left allmulticast mode [ 413.650311][ T3282] bridge_slave_0: left promiscuous mode [ 413.679931][ T3282] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.492150][ T5081] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 414.502820][ T5081] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 414.558766][ T5081] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 414.579849][ T5081] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 414.599465][ T5081] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 414.613979][ T5081] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 414.703020][ T3282] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.842839][ T3282] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.946853][ T3282] bond0 (unregistering): Released all slaves [ 414.983981][ T6780] loop3: detected capacity change from 0 to 1024 [ 415.289076][ T3282] tipc: Left network mode [ 415.590129][ T3399] hfsplus: b-tree write err: -5, ino 4 [ 416.050860][ T3282] hsr_slave_0: left promiscuous mode [ 416.091936][ T3282] hsr_slave_1: left promiscuous mode [ 416.147988][ T3282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 416.157325][ T3282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 416.238284][ T3282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 416.246375][ T3282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 416.360177][ T3282] veth1_macvtap: left promiscuous mode [ 416.366411][ T3282] veth0_macvtap: left promiscuous mode [ 416.372423][ T3282] veth1_vlan: left promiscuous mode [ 416.377832][ T3282] veth0_vlan: left promiscuous mode [ 416.691508][ T5068] Bluetooth: hci3: command tx timeout [ 417.714878][ T3282] team0 (unregistering): Port device team_slave_1 removed [ 417.818648][ T3282] team0 (unregistering): Port device team_slave_0 removed [ 418.755013][ T6803] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 418.772529][ T5068] Bluetooth: hci3: command tx timeout [ 418.845408][ T6803] 8021q: adding VLAN 0 to HW filter on device bond1 [ 419.043298][ T6805] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 419.197410][ T6777] chnl_net:caif_netlink_parms(): no params data found [ 420.852766][ T5068] Bluetooth: hci3: command tx timeout [ 421.732386][ T4481] udevd[4481]: worker [6776] terminated by signal 33 (Unknown signal 33) [ 421.783712][ T4481] udevd[4481]: worker [6776] failed while handling '/devices/virtual/block/loop1' [ 422.578635][ T6777] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.586491][ T6777] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.595923][ T6777] bridge_slave_0: entered allmulticast mode [ 422.604105][ T6777] bridge_slave_0: entered promiscuous mode [ 422.766500][ T6777] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.779819][ T6777] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.787792][ T6777] bridge_slave_1: entered allmulticast mode [ 422.795883][ T6777] bridge_slave_1: entered promiscuous mode [ 422.945178][ T5068] Bluetooth: hci3: command tx timeout [ 423.457791][ T6845] batadv_slave_1: entered promiscuous mode [ 423.532433][ T6843] batadv_slave_1: left promiscuous mode [ 423.558167][ T6777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.657438][ T6846] loop4: detected capacity change from 0 to 1024 [ 423.672350][ T6777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.046601][ T6777] team0: Port device team_slave_0 added [ 424.061934][ T3374] hfsplus: b-tree write err: -5, ino 4 [ 424.133451][ T6777] team0: Port device team_slave_1 added [ 424.365303][ T6777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.372590][ T6777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.399987][ T6777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.652254][ T6777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.659336][ T6777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.685760][ T6777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 425.012795][ T5068] Bluetooth: hci3: command tx timeout [ 425.360806][ T6777] hsr_slave_0: entered promiscuous mode [ 425.452794][ T6777] hsr_slave_1: entered promiscuous mode [ 425.557523][ T6777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 425.565546][ T6777] Cannot create hsr debugfs directory [ 427.546045][ T6777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 427.683284][ T6777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 427.827572][ T6777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 427.929351][ T6777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 429.144499][ T6777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 429.339888][ T6777] 8021q: adding VLAN 0 to HW filter on device team0 [ 429.450347][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.457998][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 429.592342][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.599784][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.041872][ T6880] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 430.185905][ T6880] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 430.837018][ T6886] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 430.845494][ T6886] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 430.854083][ T6886] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 432.494596][ T6777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.121313][ T6777] veth0_vlan: entered promiscuous mode [ 433.269025][ T6777] veth1_vlan: entered promiscuous mode [ 433.738928][ T6777] veth0_macvtap: entered promiscuous mode [ 433.828399][ T6777] veth1_macvtap: entered promiscuous mode [ 434.087915][ T6777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.098898][ T6777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.109570][ T6777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.120346][ T6777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.135150][ T6777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.148947][ T6777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.159650][ T6777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 434.170412][ T6777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.185769][ T6777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.269431][ T6777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.280986][ T6777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.291241][ T6777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.302049][ T6777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.312423][ T6777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.323278][ T6777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.333514][ T6777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 434.344502][ T6777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 434.362704][ T6777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.431277][ T6777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.440356][ T6777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.454535][ T6777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.464454][ T6777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.975621][ T6942] loop1: detected capacity change from 0 to 256 [ 440.099472][ T43] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 440.463478][ T43] usb 1-1: too many configurations: 175, using maximum allowed: 8 [ 441.351296][ T43] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 441.360942][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.369098][ T43] usb 1-1: Product: syz [ 441.373520][ T43] usb 1-1: Manufacturer: syz [ 441.378237][ T43] usb 1-1: SerialNumber: syz [ 441.518117][ T43] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 442.651162][ T5118] usb 1-1: ath9k_htc: Firmware - ath9k_htc/htc_9271-1.4.0.fw download failed [ 442.654448][ T780] usb 1-1: USB disconnect, device number 6 [ 442.815931][ T780] usb 1-1: ath9k_htc: USB layer deinitialized [ 444.292293][ T5118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 444.303796][ T5118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 444.365587][ T3374] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.127610][ T3374] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.228043][ T5118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.228934][ T7041] kernel read not supported for file / (pid: 7041 comm: syz-executor.1) [ 445.236732][ T5118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.248869][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 445.248935][ T29] audit: type=1800 audit(1717990487.800:286): pid=7041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name=0D dev="mqueue" ino=16666 res=0 errno=0 [ 445.312133][ T3374] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.469409][ T3374] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.742961][ T5081] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 445.791076][ T5081] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 445.810186][ T5081] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 445.885930][ T5081] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 445.899171][ T3374] bridge_slave_1: left allmulticast mode [ 445.899572][ T5081] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 445.907367][ T3374] bridge_slave_1: left promiscuous mode [ 445.914379][ T5081] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 445.924228][ T3374] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.063097][ T3374] bridge_slave_0: left allmulticast mode [ 446.069011][ T3374] bridge_slave_0: left promiscuous mode [ 446.075806][ T3374] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.814462][ T3374] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 446.870852][ T3374] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.903344][ T3374] bond0 (unregistering): Released all slaves [ 447.009390][ T7063] loop2: detected capacity change from 0 to 1024 [ 447.077798][ T7065] ===================================================== [ 447.086513][ T7065] BUG: KMSAN: uninit-value in io_req_cqe_overflow+0x193/0x1c0 [ 447.095231][ T7065] io_req_cqe_overflow+0x193/0x1c0 [ 447.101351][ T7065] __io_submit_flush_completions+0x7eb/0x1be0 [ 447.107659][ T7065] io_submit_sqes+0x2b30/0x2f10 [ 447.112805][ T7065] __se_sys_io_uring_enter+0x40f/0x3c80 [ 447.118534][ T7065] __x64_sys_io_uring_enter+0x11f/0x1a0 [ 447.124425][ T7065] x64_sys_call+0x2c0/0x3b50 [ 447.129243][ T7065] do_syscall_64+0xcf/0x1e0 [ 447.134195][ T7065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.140307][ T7065] [ 447.142856][ T7065] Uninit was stored to memory at: [ 447.152035][ T7065] io_recv_finish+0xf10/0x1560 [ 447.157016][ T7065] io_recv+0x12ec/0x1ea0 [ 447.162617][ T7065] io_issue_sqe+0x429/0x22c0 [ 447.167381][ T7065] io_submit_sqes+0x1266/0x2f10 [ 447.172565][ T7065] __se_sys_io_uring_enter+0x40f/0x3c80 [ 447.178293][ T7065] __x64_sys_io_uring_enter+0x11f/0x1a0 [ 447.184179][ T7065] x64_sys_call+0x2c0/0x3b50 [ 447.188969][ T7065] do_syscall_64+0xcf/0x1e0 [ 447.194472][ T7065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.200725][ T7065] [ 447.203135][ T7065] Uninit was created at: [ 447.207591][ T7065] __kmalloc+0x6e4/0x1060 [ 447.212203][ T7065] io_alloc_async_data+0xc0/0x220 [ 447.217453][ T7065] io_recvmsg_prep+0xbe8/0x1a20 [ 447.222732][ T7065] io_submit_sqes+0x1135/0x2f10 [ 447.227753][ T7065] __se_sys_io_uring_enter+0x40f/0x3c80 [ 447.233638][ T7065] __x64_sys_io_uring_enter+0x11f/0x1a0 [ 447.239367][ T7065] x64_sys_call+0x2c0/0x3b50 [ 447.244323][ T7065] do_syscall_64+0xcf/0x1e0 [ 447.253346][ T7065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.259463][ T7065] [ 447.263028][ T7065] CPU: 1 PID: 7065 Comm: syz-executor.4 Not tainted 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 447.273329][ T7065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 447.283854][ T7065] ===================================================== [ 447.290982][ T7065] Disabling lock debugging due to kernel taint [ 447.297254][ T7065] Kernel panic - not syncing: kmsan.panic set ... [ 447.303787][ T7065] CPU: 1 PID: 7065 Comm: syz-executor.4 Tainted: G B 6.9.0-syzkaller-02707-g614da38e2f7a #0 [ 447.315434][ T7065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 447.325633][ T7065] Call Trace: [ 447.329026][ T7065] [ 447.332060][ T7065] dump_stack_lvl+0x216/0x2d0 [ 447.336969][ T7065] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 447.343072][ T7065] dump_stack+0x1e/0x30 [ 447.347443][ T7065] panic+0x4e2/0xcd0 [ 447.351554][ T7065] ? kmsan_get_metadata+0xf1/0x1d0 [ 447.356966][ T7065] kmsan_report+0x2d5/0x2e0 [ 447.361656][ T7065] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 447.367656][ T7065] ? __msan_warning+0x95/0x120 [ 447.372585][ T7065] ? io_req_cqe_overflow+0x193/0x1c0 [ 447.378106][ T7065] ? __io_submit_flush_completions+0x7eb/0x1be0 [ 447.384601][ T7065] ? io_submit_sqes+0x2b30/0x2f10 [ 447.389804][ T7065] ? __se_sys_io_uring_enter+0x40f/0x3c80 [ 447.395717][ T7065] ? __x64_sys_io_uring_enter+0x11f/0x1a0 [ 447.401625][ T7065] ? x64_sys_call+0x2c0/0x3b50 [ 447.406597][ T7065] ? do_syscall_64+0xcf/0x1e0 [ 447.411479][ T7065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.417767][ T7065] ? mod_objcg_state+0x9de/0xf90 [ 447.422916][ T7065] ? __memcg_slab_post_alloc_hook+0xb8/0x8a0 [ 447.429107][ T7065] ? kmsan_get_metadata+0x146/0x1d0 [ 447.434489][ T7065] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 447.440469][ T7065] __msan_warning+0x95/0x120 [ 447.445209][ T7065] io_req_cqe_overflow+0x193/0x1c0 [ 447.450547][ T7065] __io_submit_flush_completions+0x7eb/0x1be0 [ 447.456864][ T7065] io_submit_sqes+0x2b30/0x2f10 [ 447.461922][ T7065] __se_sys_io_uring_enter+0x40f/0x3c80 [ 447.467645][ T7065] ? kmsan_get_metadata+0x146/0x1d0 [ 447.473009][ T7065] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 447.479013][ T7065] __x64_sys_io_uring_enter+0x11f/0x1a0 [ 447.484738][ T7065] x64_sys_call+0x2c0/0x3b50 [ 447.489515][ T7065] do_syscall_64+0xcf/0x1e0 [ 447.494209][ T7065] ? clear_bhb_loop+0x25/0x80 [ 447.499083][ T7065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.505187][ T7065] RIP: 0033:0x7fbb9e67cf69 [ 447.509728][ T7065] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 447.529518][ T7065] RSP: 002b:00007fbb9f3f10c8 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 447.538102][ T7065] RAX: ffffffffffffffda RBX: 00007fbb9e7b3f80 RCX: 00007fbb9e67cf69 [ 447.546215][ T7065] RDX: 0000000000000000 RSI: 0000000000005e40 RDI: 0000000000000003 [ 447.554308][ T7065] RBP: 00007fbb9e6da6fe R08: 0000000000000000 R09: 0000000000000000 [ 447.562409][ T7065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.570504][ T7065] R13: 000000000000000b R14: 00007fbb9e7b3f80 R15: 00007ffc9bac18c8 [ 447.578628][ T7065] [ 447.581965][ T7065] Kernel Offset: disabled [ 447.586346][ T7065] Rebooting in 86400 seconds..