last executing test programs: 22.076917536s ago: executing program 0 (id=1815): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) keyctl$revoke(0x3, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) ptrace$peeksig(0x4209, r0, &(0x7f0000000180)={0x1, 0x0, 0x5}, &(0x7f0000000540)=[{}, {}, {}, {}, {}]) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x6, 0x12) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000280)={0x1, 0x0, 0x80000}, 0x20) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xdc) 20.834393563s ago: executing program 0 (id=1821): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x14, 0x4, 0x4, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r0, &(0x7f0000000000), 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000020850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 20.586873213s ago: executing program 0 (id=1825): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x2, {0x10, 0x0, @private}}, 0x24) 20.354865042s ago: executing program 0 (id=1827): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80008c, &(0x7f0000000900)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d63703433372c73657373696f6e3d3078666666666666666666666666666637662c63726561746f723d5bbf89c22c63726561746f723dddf2bd6c2c6e6f6465636f6d706f73652c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d85f194712c626172726965722c63726561746f723d65fe04c22c6e6f6465636f6d706f73652c6465636f6d706f73652c666f7263652c7569643d", @ANYRESHEX=0x0, @ANYBLOB="2c63726561746f723da9076de42c626172726965722c6e6f626172726965722c6e6f6465636f6d706f73652c6d61736b3d5e4d41595f5245414463723d30303030303030303030303030303030303030302c636f6e746578743d756e636f6e66696e65645f752c7375626a5f757365723d626164566965722c61707072616973655f747970653d696d617369672c666f776e65723d0000", @ANYRESDEC=0x0, @ANYRESOCT], 0x1, 0x6da, &(0x7f0000004980)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='./file0/../file0/file0\x00', 0x0, 0x2809c11, 0x0) mount$bind(&(0x7f00000006c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xadc51, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00', 0x0, 0x2885013, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f000000c1c0)={0x2020}, 0x2020) 19.36602924s ago: executing program 0 (id=1829): syz_mount_image$hfsplus(&(0x7f00000009c0), &(0x7f0000000980)='./file0\x00', 0x400, &(0x7f00000004c0)=ANY=[@ANYBLOB="626172726965722c63726561746f723dbd3c66f52c6e6c733d6b6f69382d72752c706172743d3078303030303030303030303030663231332c63726561746f723de34d9a552c00"], 0x3, 0x6a4, &(0x7f0000000b40)="$eJzs3U9sHFcdB/DvbDbrbJBS918aEFKtRqqgEYmdVUmQkBoQQjlEKIJLr1biNFY2aeW4KK0Q2QAFiRMn1AOHIhQOPSGEkMoJUc5ISFw4+R6JG4ccAKOZnV2v7Y1jJ7HXbT8faTzv7Zv33m9+nT+7s402wGfW+ddzsJci509cuFXWV+52uit3O9cH5SRTSRpJs79K0U6Kj5Nz6S/5fPliPVzxoHlevfdR0Xz/w06/1qyXavvGVv02GbtlLzk0rBxIMtMv/mfbw24ar1qqcS6tjfeIimHcZcKODxIHk7a6SW+tsfHQ7ts/b4F963b/vrnJdHI4/btr+T4g9dXh4VeGydvy2tTbuzgAAABgt4z9LD/qqfu5n1s5sjfhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKdD0f/NwKJeGoPyTIrB7/+3Rn5TvzXhcB/Te1eq1XefmnQgAAAAAAAAAPBYXryf+7mVI4P6alF95/9SVXmu+vu5vJ2bWchSTuZW5rOc5SxlLsn0yECtW/PLy0tzm3v+MmXP1dXV23XP02N7nl4fV29joOP+T4NNGwEAAAAAAADAZ9aPcn7t+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgPiuRAf1Utzw3K02k0kxxK0ipmhpu3JhrsE/DnSQcAAAAAu69dr48U/+sXVovqM//R6nP/obydG1nOYpbTzUIuV88C+p/6G3/vdbordzvXy2XzwN/4147iqEZM/9nD+Jlnqy2eH/Y4n2/nezmRmVzMUhbz/cxnOQuZybeq0nyKTNdPL6ZX7rYziHVzvOfW1S5ujO3FkXIZ37EqknauZLGK7WQutQahN+rtjo3M9sdWsmHGO2V2itdq28zR5Xpd7tEv6vX+MF3t+cFhRmbr3JfZeHo075tzv8PjZONMc2kMn0E9tzZLWd040yPl/HC9LnP9093N+Q4fpa3PRO/nZW1w9B3dOufJl//xl4tXGzeuXb1y88T+OYwe0cZjojOSiRe2lYlumYneY2Ti0OPE/+S06mz0r6I7u1q+VPU9ksV8J2/mchZyJrOZy9nM5ms5nU5Oj+T1+a3zWp1rjZ2da8e/VBfKe9LPRu5Ne2bqQQ1lXp8eyevolW66aht9ZS1Lz2wjS0Ur47P0z7GhNL9QF8o5fjxyx5m8jZmYG8nEs1tn4tf/XU1ys3vj2tLV+be2Od/L9bo8bd9bf23+zRPZoZ2rd7c8Xp4p/2Olf9sYPTrKtmcHbRvy1aq/cWnWg61ra6U6n/ttDztTy5GO3hk3Ur/thbGzdKq2YyNt697l5M10h+9CANjHDr9yuNW+1/5b+4P2T9pX2xcOfXPq7NQXWzn41+afDvyu8dvG14tX8kF+mCOTjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Nbr7z7rX5bndhaR8W0njCA94Z2zRIRf+V1v7Y909qYWqrI+r3Sbbo3ppEzO0k+yJ1ae7BXFMZ03Rh+Eo7aQzjSXJtn/zAHbAbTi1ff+vUzXfe/cri9fk3Ft5YuHH67JnXznS+Onf71JXF7sJs/++kowR2w9rbgElHAgAAAAAAAAAAAGzXXvzzhjHTFr0J7CsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwyXT+9Rzspcjc7MnZsr5yt9Mtl0F5bctmkkaS4gdJ8XFyLv0l0yPDFQ+a59V7H/3q5fc/7KyN1Rxs39jQ7w//Xl3d4V706iUzSQ7U64eb2tZ4l0bG6+0wsL5iuIdlwo4PEgeT9v8AAAD//x5LB84=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f00000015c0)=""/4114, 0x1012) 17.820034468s ago: executing program 0 (id=1837): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x2, {0x10, 0x0, @private}}, 0x24) 11.23114029s ago: executing program 1 (id=1858): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/34, 0x22}}, 0x120) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000180)={0xb}, 0xc) 10.220127639s ago: executing program 1 (id=1859): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="66643dc1f2a9de96f4efcfa417e4422acbc95cd3096c5e3cd83d764be8fc68b29597c84b67102dfe158b", @ANYRESHEX=r3, @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r5, 0x400454d4, 0x207) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) accept4(r4, &(0x7f0000001040)=@tipc, &(0x7f00000010c0)=0x80, 0x80800) socket(0x1, 0x1, 0x8000) socket$igmp(0x2, 0x3, 0x2) sendmmsg$unix(r1, &(0x7f00000011c0), 0x0, 0x8871) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 8.124159539s ago: executing program 3 (id=1864): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000001300)=0x15) ioctl$TCFLSH(r0, 0x540b, 0x0) 7.967547285s ago: executing program 3 (id=1866): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001040), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, &(0x7f0000000180)={0x12, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, r3}}, 0x18) 7.446235325s ago: executing program 2 (id=1869): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x0, "a8407a73"}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480d, &(0x7f00000000c0)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc000905850200"], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f00000000c0)={0x3, 0x0, 0xc09}) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000000)=0x1) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0}) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000400)={0x1}) 6.515035051s ago: executing program 3 (id=1870): socket$inet(0x2, 0xa, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0c000000000042d9de0be4ab13ef5b156955d7dca18b489120d414661e6a06257c9c"], 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x0, 0x8000, 0x4, 0xcd}, 0x48) fchmodat(0xffffffffffffffff, &(0x7f0000000440)='./file3\x00', 0x0) clock_gettime(0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x2, 0x17d, &(0x7f00000004c0)="$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") execve(&(0x7f0000000040)='./file2\x00', 0x0, 0x0) 5.720760141s ago: executing program 1 (id=1871): ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000100)={0x0, 0x0, @start={0x0, 0x0, "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", "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"}}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x4, 0xfe4, &(0x7f0000000200)=""/4068, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x7}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x0, 0x42}, 0x20) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x12, &(0x7f0000000040)={[{@rescan_uuid_tree}, {@enospc_debug}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@datasum}]}, 0x1, 0x510c, &(0x7f0000005180)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) fsopen(&(0x7f0000000000)='pvfs2\x00', 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0) 4.984509909s ago: executing program 4 (id=1874): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) r1 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000580)='./bus\x00', 0x0) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r4, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x15, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x1a00001a}]) fcntl$setstatus(r2, 0x4, 0x4400) dup3(r2, r1, 0x0) io_setup(0x6, &(0x7f0000000240)=0x0) fallocate(r3, 0x0, 0x0, 0x9) io_submit(r5, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}]) write$binfmt_script(r0, &(0x7f0000000200), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0) 4.200573629s ago: executing program 4 (id=1875): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000001300)=0x15) ioctl$TCFLSH(r0, 0x540b, 0x0) 3.814157844s ago: executing program 4 (id=1876): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) pipe2$watch_queue(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) keyctl$revoke(0x3, r1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) ptrace$peeksig(0x4209, r0, &(0x7f0000000180)={0x1, 0x0, 0x5}, &(0x7f0000000540)=[{}, {}, {}, {}, {}]) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x6, 0x12) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)='rpc_pipefs\x00', 0x0, 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000280)={0x1, 0x0, 0x80000}, 0x20) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xdc) 3.65744847s ago: executing program 1 (id=1877): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)={0x18, 0x26, 0x1, 0x0, 0x0, "", [@typed={0x3, 0x0, 0x0, 0x0, @u32}]}, 0x18}], 0x1}, 0x0) 2.60784389s ago: executing program 4 (id=1878): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000002a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000000c0)=""/34, 0x22}}, 0x120) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000180)={0xb}, 0xc) 2.498734644s ago: executing program 3 (id=1879): prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xca03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) setns(0xffffffffffffffff, 0x10000000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0x40084146, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) 2.276722653s ago: executing program 2 (id=1880): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$getflags(r0, 0x401) 2.07978495s ago: executing program 2 (id=1881): unshare(0x20000400) mq_getsetattr(0xffffffffffffffff, 0x0, 0x0) 1.903005527s ago: executing program 1 (id=1882): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.898803917s ago: executing program 2 (id=1883): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e00000fd04000004000000001800000000000000100100000d"], 0x38}, 0x0) 1.741389563s ago: executing program 1 (id=1884): r0 = socket(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000400)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) memfd_create(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f041}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000), 0x4) sendmsg$IPSET_CMD_HEADER(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0xc, 0x6, 0x301}, 0x14}}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) 1.266256401s ago: executing program 2 (id=1885): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000280)={[{0x2d, 'cpu'}, {0x4a9e3e0ca749b20, 'rdma'}]}, 0xb) 1.249478462s ago: executing program 4 (id=1886): setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) set_mempolicy(0x4005, &(0x7f0000000000)=0x81, 0x8) syz_clone3(&(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 967.747883ms ago: executing program 2 (id=1887): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x0, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = gettid() syz_mount_image$iso9660(&(0x7f0000000780), &(0x7f0000000000)='./file0\x00', 0x21488b, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYBLOB="0000b18eb0ea96e8437d91edf772ce16e8f4545927e1e38533740c5b1da10b839e273fa468d364205a63adda5262cda8e690c1049c88d615fd8362cd464a35e122ae29c203d5ce83fd7888eb1f09a8a7f55959926a7fd5ac27fd519b1ddcfd9072f503656169e720fdc2da8c998a8706232e5263a0", @ANYRES16=0x0], 0x1, 0x672, &(0x7f0000000e40)="$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") r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000cc0)=ANY=[], 0x80}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000001c40), 0x0, 0x0) read$hiddev(r3, &(0x7f0000000000)=""/59, 0x3b) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) io_setup(0x1, &(0x7f0000000740)) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000e80)=0x4, 0x12) bpf$OBJ_GET_MAP(0x7, 0x0, 0xf859bb1f38cb9205) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0x0, 0x0, 0x0, 0x3, 0x84, &(0x7f0000000640)=""/132, 0xd92b0edc62062486, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000700)}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000000002c7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x8, 0x133}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x0, 0x0, 0x1000}, 0x48) 252.8732ms ago: executing program 3 (id=1888): process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {0x0}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) r0 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f0000000340)='dns_resolver\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)="fb9c", 0xfffff, r0) 236.797321ms ago: executing program 4 (id=1889): socket$inet(0x2, 0xa, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0c000000000042d9de0be4ab13ef5b156955d7dca18b489120d414661e6a06257c9c"], 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x0, 0x8000, 0x4, 0xcd}, 0x48) fchmodat(0xffffffffffffffff, &(0x7f0000000440)='./file3\x00', 0x0) clock_gettime(0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x2, 0x17d, &(0x7f00000004c0)="$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") execve(&(0x7f0000000040)='./file2\x00', 0x0, 0x0) 0s ago: executing program 3 (id=1890): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x0, "a8407a73"}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0xb, "7488dffc"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480d, &(0x7f00000000c0)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc000905850200"], 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$HIDIOCGREPORT(0xffffffffffffffff, 0x400c4807, &(0x7f00000000c0)={0x3, 0x0, 0xc09}) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="e2", 0x2250) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000000)=0x1) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x4020940d, &(0x7f00000003c0)={0x4, 0x0, 0x0}) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000400)={0x1}) kernel console output (not intermixed with test programs): sing value [ 242.076130][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 242.116515][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 242.153204][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 242.842048][ T7457] loop1: detected capacity change from 0 to 64 [ 242.856661][ T7461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1170'. [ 242.917757][ T3596] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 243.071285][ T7464] loop3: detected capacity change from 0 to 512 [ 243.177730][ T3596] usb 5-1: Using ep0 maxpacket: 32 [ 243.200396][ T7464] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 243.308191][ T3596] usb 5-1: config 0 has no interfaces? [ 243.324341][ T7468] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #15: comm syz.3.1171: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 243.369179][ T7464] Quota error (device loop3): v2_read_file_info: Free block number too big (58381 >= 6). [ 243.389012][ T7464] EXT4-fs warning (device loop3): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 243.495051][ T7481] loop1: detected capacity change from 0 to 64 [ 243.508018][ T3596] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 243.517310][ T3596] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.536634][ T3596] usb 5-1: Product: syz [ 243.554344][ T3596] usb 5-1: Manufacturer: syz [ 243.562717][ T3596] usb 5-1: SerialNumber: syz [ 243.587302][ T7481] MINIX-fs: bad superblock or unable to read bitmaps [ 243.587987][ T3596] usb 5-1: config 0 descriptor?? [ 243.625929][ T5657] EXT4-fs (loop3): unmounting filesystem. [ 243.878412][ T7451] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 243.962846][ T6966] usb 5-1: USB disconnect, device number 10 [ 244.323283][ T7500] loop0: detected capacity change from 0 to 64 [ 244.387694][ T7477] loop2: detected capacity change from 0 to 32768 [ 244.477137][ T7477] XFS (loop2): Mounting V5 Filesystem [ 244.651764][ T7477] XFS (loop2): Ending clean mount [ 244.904553][ T3557] XFS (loop2): Unmounting Filesystem [ 245.391233][ T5309] kernel write not supported for file [eventfd] (pid: 5309 comm: kworker/0:10) [ 245.492643][ T7535] loop3: detected capacity change from 0 to 64 [ 245.944832][ T7539] cgroup2: Unknown parameter 'measure' [ 246.831183][ T7567] loop0: detected capacity change from 0 to 64 [ 247.024559][ T7570] loop1: detected capacity change from 0 to 2048 [ 247.068264][ T7570] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 247.164590][ T7570] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 247.280244][ T7570] EXT4-fs error (device loop1): empty_inline_dir:1858: inode #12: block 9: comm syz.1.1212: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=13, rec_len=21, size=60 fake=0 [ 247.371191][ T7570] EXT4-fs (loop1): Remounting filesystem read-only [ 247.395128][ T7570] EXT4-fs warning (device loop1): empty_inline_dir:1865: bad inline directory (dir #12) - inode 13, rec_len 21, name_len 5inline size 60 [ 247.477938][ T7239] EXT4-fs (loop1): unmounting filesystem. [ 247.498591][ T7552] loop2: detected capacity change from 0 to 32768 [ 247.655607][ T7552] XFS (loop2): Mounting V5 Filesystem [ 247.675600][ T7597] loop0: detected capacity change from 0 to 64 [ 247.723304][ T7591] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1220'. [ 247.794074][ T7597] MINIX-fs: bad superblock or unable to read bitmaps [ 247.878257][ T7552] XFS (loop2): Ending clean mount [ 247.919010][ T7552] XFS (loop2): Quotacheck needed: Please wait. [ 248.008074][ T7552] XFS (loop2): Quotacheck: Done. [ 248.274753][ T3557] XFS (loop2): Unmounting Filesystem [ 248.353467][ T7580] loop3: detected capacity change from 0 to 32768 [ 248.526129][ T7580] XFS (loop3): Mounting V5 Filesystem [ 248.731702][ T7580] XFS (loop3): Ending clean mount [ 248.760739][ T7580] XFS (loop3): Quotacheck needed: Please wait. [ 248.839217][ T7580] XFS (loop3): Quotacheck: Done. [ 248.982575][ T7630] loop1: detected capacity change from 0 to 512 [ 249.027888][ T7630] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.1230: bad orphan inode 15 [ 249.073339][ T5657] XFS (loop3): Unmounting Filesystem [ 249.111650][ T7630] EXT4-fs (loop1): Remounting filesystem read-only [ 249.191446][ T7630] ext4_test_bit(bit=14, block=5) = 0 [ 249.207442][ T7630] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 249.302732][ T7630] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 249.329552][ T7638] fuse: Bad value for 'fd' [ 249.395467][ T7630] EXT4-fs (loop1): Remounting filesystem read-only [ 249.656108][ T7642] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1235'. [ 250.019651][ T7239] EXT4-fs (loop1): unmounting filesystem. [ 250.210170][ T7658] ALSA: mixer_oss: invalid OSS volume 'ÒrpA&7ߵюeÁ]|ÈIÇÜï*Æ ÏE¢aì' [ 250.303211][ T26] audit: type=1326 audit(1719918567.236:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7649 comm="syz.2.1238" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efe39775f19 code=0x0 [ 250.443181][ T7650] kvm: emulating exchange as write [ 251.182211][ T7648] loop4: detected capacity change from 0 to 32768 [ 251.269722][ T7677] loop2: detected capacity change from 0 to 512 [ 251.291818][ T7660] loop3: detected capacity change from 0 to 32768 [ 251.499353][ T7677] EXT4-fs error (device loop2): ext4_orphan_get:1422: comm syz.2.1249: bad orphan inode 15 [ 251.632549][ T7677] EXT4-fs (loop2): Remounting filesystem read-only [ 251.775698][ T7648] XFS (loop4): Mounting V5 Filesystem [ 251.832465][ T7677] ext4_test_bit(bit=14, block=5) = 0 [ 252.107738][ T7677] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 252.151363][ T1156] block nbd1: Possible stuck request ffff88801f828000: control (read@0,4096B). Runtime 30 seconds [ 252.189919][ T7648] XFS (loop4): Ending clean mount [ 252.218750][ T7677] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 252.253125][ T7648] XFS (loop4): Quotacheck needed: Please wait. [ 252.260588][ T7697] loop1: detected capacity change from 0 to 64 [ 252.330784][ T7697] MINIX-fs: bad superblock or unable to read bitmaps [ 252.344418][ T7648] XFS (loop4): Quotacheck: Done. [ 252.351540][ T7677] EXT4-fs (loop2): Remounting filesystem read-only [ 252.379025][ T7700] fuse: Bad value for 'fd' [ 252.431724][ T7030] XFS (loop4): Unmounting Filesystem [ 252.459816][ T7702] ALSA: mixer_oss: invalid OSS volume 'ÒrpA&7ߵюeÁ]|ÈIÇÜï*Æ ÏE¢aì' [ 252.982476][ T3557] EXT4-fs (loop2): unmounting filesystem. [ 253.373430][ T7727] loop4: detected capacity change from 0 to 64 [ 253.602833][ T7727] hfs: bad catalog folder thread [ 254.807759][ T7743] ALSA: mixer_oss: invalid OSS volume 'ÒrpA&7ߵюeÁ]|ÈIÇÜï*Æ ÏE¢aì' [ 255.436933][ T7763] loop3: detected capacity change from 0 to 64 [ 255.689519][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.708429][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.449830][ T7763] hfs: unable to open extent tree [ 258.717835][ T7763] hfs: can't find a HFS filesystem on dev loop3 [ 258.992756][ T7776] ALSA: mixer_oss: invalid OSS volume 'ÒrpA&7ߵюeÁ]|ÈIÇÜï*Æ ÏE¢aì' [ 259.082650][ T7779] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 259.089568][ T7779] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 259.108945][ T7779] vhci_hcd vhci_hcd.0: Device attached [ 259.215216][ T7781] vhci_hcd: cannot find a urb of seqnum 61814 max seqnum 0 [ 259.237192][ T4261] vhci_hcd: stop threads [ 259.251951][ T4261] vhci_hcd: release socket [ 259.285617][ T4261] vhci_hcd: disconnect device [ 260.457190][ T7807] loop3: detected capacity change from 0 to 512 [ 260.630436][ T7814] loop2: detected capacity change from 0 to 64 [ 260.710932][ T7814] hfs: bad catalog folder thread [ 260.729257][ T7807] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.1291: bad orphan inode 15 [ 260.751452][ T7807] EXT4-fs (loop3): Remounting filesystem read-only [ 260.770633][ T7807] ext4_test_bit(bit=14, block=5) = 0 [ 260.776367][ T7807] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 261.611483][ T7807] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 261.658024][ T7807] EXT4-fs (loop3): Remounting filesystem read-only [ 261.753900][ T7807] fuse: Unknown parameter 'hash' [ 261.931042][ T7827] device sit0 entered promiscuous mode [ 262.038162][ T7835] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 262.044743][ T7835] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 262.086165][ T7835] vhci_hcd vhci_hcd.0: Device attached [ 262.132480][ T7832] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.139875][ T7832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.148606][ T7832] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.155848][ T7832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.163948][ T7836] vhci_hcd: cannot find a urb of seqnum 61814 max seqnum 0 [ 262.191020][ T3897] vhci_hcd: stop threads [ 262.191188][ T7832] device bridge0 entered promiscuous mode [ 262.195294][ T3897] vhci_hcd: release socket [ 262.195350][ T3897] vhci_hcd: disconnect device [ 262.253254][ T7840] loop4: detected capacity change from 0 to 4096 [ 262.262525][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 262.313316][ T7840] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 262.341015][ T7840] ntfs3: loop4: Failed to load $MFT. [ 262.379811][ T5657] EXT4-fs (loop3): unmounting filesystem. [ 262.495454][ T7851] loop2: detected capacity change from 0 to 64 [ 262.615930][ T7851] MINIX-fs: bad superblock or unable to read bitmaps [ 262.656381][ T7855] loop4: detected capacity change from 0 to 512 [ 262.732486][ T7855] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 262.771757][ T7855] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 263.224865][ T7870] loop3: detected capacity change from 0 to 256 [ 263.234869][ T7870] FAT-fs (loop3): Unrecognized mount option "ÿÿÿÿÿÿÿÿ0xffffffffffffffffÿÿÿÿÿÿÿÿ01777777777777777777777" or missing value [ 264.066703][ T7874] loop1: detected capacity change from 0 to 2048 [ 264.407136][ T7874] UDF-fs: iocharset cSyÙßóªäQgYú55 not found [ 264.446582][ T7888] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1316'. [ 265.464593][ T26] audit: type=1326 audit(1719918582.346:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.0.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a6575f19 code=0x7ffc0000 [ 265.527918][ T26] audit: type=1326 audit(1719918582.356:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.0.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7ff4a6575f19 code=0x7ffc0000 [ 265.648218][ T7910] loop4: detected capacity change from 0 to 256 [ 265.658454][ T7910] FAT-fs (loop4): Unrecognized mount option "ÿÿÿÿÿÿÿÿ0xffffffffffffffffÿÿÿÿÿÿÿÿ01777777777777777777777" or missing value [ 266.277493][ T7881] loop3: detected capacity change from 0 to 32768 [ 266.486416][ T26] audit: type=1326 audit(1719918582.356:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.0.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a6575f19 code=0x7ffc0000 [ 266.569115][ T7914] loop0: detected capacity change from 0 to 4096 [ 266.648728][ T26] audit: type=1326 audit(1719918582.356:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.0.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a6575f19 code=0x7ffc0000 [ 266.677774][ T7914] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 266.703144][ T7914] ntfs3: loop0: Failed to load $MFT. [ 266.756044][ T26] audit: type=1326 audit(1719918582.356:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.0.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7ff4a6575f19 code=0x7ffc0000 [ 266.937245][ T26] audit: type=1326 audit(1719918582.356:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.0.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a6575f19 code=0x7ffc0000 [ 267.080150][ T26] audit: type=1326 audit(1719918582.366:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.0.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a6575f19 code=0x7ffc0000 [ 267.120693][ T26] audit: type=1326 audit(1719918582.366:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.0.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=140 compat=0 ip=0x7ff4a6575f19 code=0x7ffc0000 [ 267.150087][ T26] audit: type=1326 audit(1719918582.366:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.0.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a6575f19 code=0x7ffc0000 [ 267.215124][ T26] audit: type=1326 audit(1719918582.376:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7907 comm="syz.0.1325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a6575f19 code=0x7ffc0000 [ 267.309792][ T3593] kernel write not supported for file [eventfd] (pid: 3593 comm: kworker/0:5) [ 267.326595][ T7934] loop3: detected capacity change from 0 to 512 [ 267.451583][ T7936] loop4: detected capacity change from 0 to 2048 [ 267.475514][ T7934] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 267.595566][ T7936] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 267.615565][ T7937] cgroup2: Unknown parameter 'measure' [ 268.359651][ T7941] loop1: detected capacity change from 0 to 131072 [ 268.381975][ T7941] F2FS-fs (loop1): Unrecognized mount option "inline_da" or missing value [ 268.432017][ T7934] EXT4-fs (loop3): 1 truncate cleaned up [ 268.469794][ T7934] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 268.739823][ T5657] EXT4-fs (loop3): unmounting filesystem. [ 268.866189][ T7947] loop2: detected capacity change from 0 to 512 [ 268.913515][ T7947] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 268.983171][ T7947] EXT4-fs (loop2): 1 truncate cleaned up [ 269.059518][ T7947] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 269.136654][ T7947] EXT4-fs error (device loop2): ext4_map_blocks:607: inode #2: block 4: comm syz.2.1338: lblock 0 mapped to illegal pblock 4 (length 1) [ 269.149961][ T7955] loop1: detected capacity change from 0 to 256 [ 269.276302][ T3557] EXT4-fs (loop2): unmounting filesystem. [ 269.532652][ T7952] loop3: detected capacity change from 0 to 32768 [ 269.575017][ T7957] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.819112][ T7969] loop2: detected capacity change from 0 to 64 [ 270.204187][ T7969] MINIX-fs: bad superblock or unable to read bitmaps [ 270.690517][ T7957] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.863512][ T7957] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.121005][ T6966] kernel write not supported for file [eventfd] (pid: 6966 comm: kworker/1:15) [ 272.128735][ T7993] loop4: detected capacity change from 0 to 512 [ 272.226526][ T7957] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.259038][ T7993] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 272.282737][ T7993] EXT4-fs (loop4): 1 truncate cleaned up [ 272.289572][ T7993] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 272.313601][ T7993] EXT4-fs error (device loop4): ext4_map_blocks:607: inode #2: block 4: comm syz.4.1355: lblock 0 mapped to illegal pblock 4 (length 1) [ 272.382866][ T7030] EXT4-fs (loop4): unmounting filesystem. [ 272.615314][ T7957] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.692067][ T7957] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.781473][ T7957] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.853894][ T7957] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.921028][ T8002] cgroup2: Unknown parameter 'measure' [ 273.399886][ T8014] loop0: detected capacity change from 0 to 4096 [ 273.431726][ T8014] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512) [ 273.488095][ T5309] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 273.591298][ T8014] ntfs3: loop0: failed to convert "c46c" to macceltic [ 275.218827][ T5309] usb 5-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 275.248656][ T5309] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 275.304037][ T5309] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.370927][ T5309] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 275.762528][ T8039] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.960206][ T8039] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.181061][ T8039] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.733404][ T8039] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.382802][ T8064] loop1: detected capacity change from 0 to 2048 [ 278.462308][ T5505] usb 5-1: USB disconnect, device number 11 [ 278.491188][ T8064] UDF-fs: bad mount option "gid=00000000000000060929" or missing value [ 278.790674][ T8039] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.852461][ T8088] loop1: detected capacity change from 0 to 64 [ 278.876362][ T8039] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.952947][ T8088] MINIX-fs: bad superblock or unable to read bitmaps [ 279.009723][ T4261] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.059686][ T8039] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.160840][ T8039] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.369614][ T4261] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.549592][ T4261] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.729337][ T4261] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.975927][ T3562] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 279.994057][ T3562] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 280.013136][ T3596] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 280.014421][ T3564] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 280.030287][ T3564] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 280.037893][ T3564] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 280.045142][ T3564] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 280.467910][ T3596] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 280.485051][ T3596] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 280.497050][ T3596] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.519448][ T8099] loop0: detected capacity change from 0 to 32768 [ 280.581083][ T3596] aiptek 3-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 280.910396][ T8113] chnl_net:caif_netlink_parms(): no params data found [ 281.176378][ T8137] loop3: detected capacity change from 0 to 64 [ 281.493203][ T8113] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.572007][ T8113] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.631577][ T8113] device bridge_slave_0 entered promiscuous mode [ 281.704387][ T8113] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.802006][ T8113] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.863447][ T8113] device bridge_slave_1 entered promiscuous mode [ 281.885217][ T8145] loop3: detected capacity change from 0 to 512 [ 281.936333][ T8145] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 281.982463][ T8145] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1403: invalid indirect mapped block 1 (level 1) [ 282.006967][ T8145] EXT4-fs (loop3): 1 truncate cleaned up [ 282.013086][ T8145] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 282.097773][ T3564] Bluetooth: hci4: command tx timeout [ 282.436537][ T8113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.521825][ T1156] block nbd1: Possible stuck request ffff88801f828000: control (read@0,4096B). Runtime 60 seconds [ 282.541125][ T8113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.576883][ T8159] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1406'. [ 282.662138][ T5657] EXT4-fs (loop3): unmounting filesystem. [ 282.690959][ T4261] device hsr_slave_0 left promiscuous mode [ 282.747919][ T4261] device hsr_slave_1 left promiscuous mode [ 282.772118][ T4261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.795586][ T4261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.852300][ T4261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.881316][ T4261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.972432][ T1804] usb 3-1: USB disconnect, device number 15 [ 282.995877][ T4261] device bridge_slave_1 left promiscuous mode [ 283.005024][ T4261] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.018812][ T4261] device bridge_slave_0 left promiscuous mode [ 283.025330][ T4261] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.108932][ T8165] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1409'. [ 283.243405][ T4261] device veth1_macvtap left promiscuous mode [ 283.289534][ T26] kauditd_printk_skb: 31 callbacks suppressed [ 283.289552][ T26] audit: type=1326 audit(1719918600.226:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8164 comm="syz.1.1409" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ab0975f19 code=0x0 [ 283.318038][ T3564] Bluetooth: hci1: command 0x0406 tx timeout [ 283.318598][ T4261] device veth0_macvtap left promiscuous mode [ 283.340215][ T4261] device veth1_vlan left promiscuous mode [ 283.361659][ T4261] device veth0_vlan left promiscuous mode [ 283.648955][ T8190] loop0: detected capacity change from 0 to 512 [ 283.878770][ T8190] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 283.908085][ T8190] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1418: invalid indirect mapped block 1 (level 1) [ 283.923760][ T8190] EXT4-fs (loop0): 1 truncate cleaned up [ 283.930378][ T8190] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 284.179669][ T3562] Bluetooth: hci4: command tx timeout [ 284.264971][ T3843] EXT4-fs (loop0): unmounting filesystem. [ 284.604370][ T8202] loop0: detected capacity change from 0 to 64 [ 284.700872][ T26] audit: type=1800 audit(1719918601.636:142): pid=8202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1423" name="bus" dev="loop0" ino=1 res=0 errno=0 [ 284.821051][ T4261] team0 (unregistering): Port device team_slave_1 removed [ 284.881841][ T4261] team0 (unregistering): Port device team_slave_0 removed [ 284.967464][ T4261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.013817][ T4261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 286.343047][ T3562] Bluetooth: hci4: command tx timeout [ 286.513115][ T4261] bond0 (unregistering): Released all slaves [ 286.919802][ T8113] team0: Port device team_slave_0 added [ 287.001186][ T8113] team0: Port device team_slave_1 added [ 287.220839][ T8113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.248445][ T8113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.338331][ T8113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.380453][ T8113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.387445][ T8113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.407412][ T8222] loop0: detected capacity change from 0 to 4096 [ 287.501261][ T8113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.537819][ T8222] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 287.793345][ T8113] device hsr_slave_0 entered promiscuous mode [ 288.251803][ T8113] device hsr_slave_1 entered promiscuous mode [ 288.497460][ T3562] Bluetooth: hci4: command tx timeout [ 288.779499][ T3553] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 288.795996][ T3553] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 288.804621][ T3553] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 288.814205][ T3553] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 288.823922][ T3553] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 288.831675][ T3553] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 289.112715][ T8247] netlink: 766 bytes leftover after parsing attributes in process `syz.1.1438'. [ 289.146203][ T8249] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1437'. [ 289.473510][ T8263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1440'. [ 289.502656][ T8261] Bluetooth: MGMT ver 1.22 [ 289.639019][ T26] audit: type=1326 audit(1719918606.576:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8256 comm="syz.3.1440" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11db575f19 code=0x0 [ 290.047918][ T8235] chnl_net:caif_netlink_parms(): no params data found [ 290.257492][ T8273] loop1: detected capacity change from 0 to 2048 [ 290.485962][ T8277] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 290.510330][ T8235] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.531112][ T8235] bridge0: port 1(bridge_slave_0) entered disabled state [ 290.599264][ T8235] device bridge_slave_0 entered promiscuous mode [ 290.643627][ T8235] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.658237][ T8235] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.691082][ T8235] device bridge_slave_1 entered promiscuous mode [ 290.716373][ T26] audit: type=1800 audit(1719918607.646:144): pid=8273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1443" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 290.774674][ T8113] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 290.813677][ T8235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 290.866940][ T8113] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 290.890022][ T8113] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 290.908069][ T3553] Bluetooth: hci2: command tx timeout [ 290.965593][ T8235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.988301][ T8113] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 291.129572][ T8235] team0: Port device team_slave_0 added [ 291.208644][ T8235] team0: Port device team_slave_1 added [ 291.373712][ T8235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.391079][ T8235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.537460][ T8235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.569871][ T8296] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1448'. [ 291.596414][ T8235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.618767][ T8235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.731410][ T8235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.897035][ T8302] loop3: detected capacity change from 0 to 4096 [ 291.918882][ T8235] device hsr_slave_0 entered promiscuous mode [ 291.939925][ T8235] device hsr_slave_1 entered promiscuous mode [ 291.987894][ T8235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.995931][ T8302] NILFS (loop3): invalid segment: Checksum error in segment payload [ 292.017762][ T8235] Cannot create hsr debugfs directory [ 292.024564][ T8302] NILFS (loop3): trying rollback from an earlier position [ 292.116587][ T8302] NILFS (loop3): recovery complete [ 292.175517][ T8315] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 292.278568][ T8113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.307873][ T26] audit: type=1326 audit(1719918609.246:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8318 comm="syz.0.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a6575f19 code=0x7ffc0000 [ 292.352982][ T26] audit: type=1326 audit(1719918609.246:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8318 comm="syz.0.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a6575f19 code=0x7ffc0000 [ 292.396572][ T26] audit: type=1326 audit(1719918609.266:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8318 comm="syz.0.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7ff4a6575f19 code=0x7ffc0000 [ 292.427843][ T1804] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 292.472977][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 292.490177][ T26] audit: type=1326 audit(1719918609.266:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8318 comm="syz.0.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a6575f19 code=0x7ffc0000 [ 292.499888][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 292.578170][ T26] audit: type=1326 audit(1719918609.266:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8318 comm="syz.0.1454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a6575f19 code=0x7ffc0000 [ 292.605534][ T8322] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 292.621941][ T8113] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.667654][ T1804] usb 2-1: Using ep0 maxpacket: 8 [ 292.721441][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 292.747959][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 292.772769][ T5309] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.780020][ T5309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.814746][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 292.817950][ T1804] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 292.847022][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 292.852283][ T1804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.866486][ T5309] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.873713][ T5309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.893166][ T1804] usb 2-1: config 0 descriptor?? [ 292.930919][ T8324] device sit0 entered promiscuous mode [ 292.955608][ T1804] hso 2-1:0.0: Can't find BULK IN endpoint [ 292.977916][ T3553] Bluetooth: hci2: command tx timeout [ 293.029654][ T8328] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.036798][ T8328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.044262][ T8328] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.051436][ T8328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.063866][ T8328] device bridge0 entered promiscuous mode [ 293.149909][ T8235] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.176414][ T3824] usb 2-1: USB disconnect, device number 11 [ 293.228895][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 293.237102][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 293.274673][ T8334] loop3: detected capacity change from 0 to 512 [ 293.352013][ T6180] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 293.403391][ T8235] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.436641][ T8338] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1459'. [ 293.437940][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 293.455964][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 293.503765][ T8235] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.535798][ T1804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 293.552879][ T1804] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 293.565705][ T1804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 293.589801][ T1804] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 293.641532][ T8235] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.663838][ T5505] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 293.684242][ T5505] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 293.714430][ T5505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.756804][ T5505] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 293.788566][ T5505] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 293.821073][ T8113] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 293.983644][ T26] audit: type=1326 audit(1719918610.916:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8353 comm="syz.1.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab0975f19 code=0x7ffc0000 [ 294.077379][ T26] audit: type=1326 audit(1719918610.926:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8353 comm="syz.1.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f0ab0975f19 code=0x7ffc0000 [ 294.164224][ T26] audit: type=1326 audit(1719918610.926:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8353 comm="syz.1.1464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab0975f19 code=0x7ffc0000 [ 295.105134][ T3553] Bluetooth: hci2: command tx timeout [ 295.195374][ T8235] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 295.195748][ T8368] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1468'. [ 295.259522][ T8235] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 295.496401][ T8235] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 295.644125][ T8235] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 295.688886][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 295.704334][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 295.781273][ T8366] loop0: detected capacity change from 0 to 32768 [ 295.807865][ T5317] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 295.880784][ T8113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.077737][ T5317] usb 2-1: Using ep0 maxpacket: 8 [ 296.145086][ T8392] loop3: detected capacity change from 0 to 16 [ 296.198925][ T5317] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 296.221050][ T8235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.229388][ T8392] erofs: (device loop3): mounted with root inode @ nid 36. [ 296.244580][ T5317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.277555][ T5317] usb 2-1: config 0 descriptor?? [ 296.314529][ T8392] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 296.333798][ T8392] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 296.343956][ T8392] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 296.349669][ T5317] hso 2-1:0.0: Can't find BULK IN endpoint [ 296.364049][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 296.374742][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 296.410831][ T8235] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.587249][ T3824] usb 2-1: USB disconnect, device number 12 [ 296.624211][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 296.638505][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 296.678708][ T3593] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.685847][ T3593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.721948][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 296.732714][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 296.741894][ T3593] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.749081][ T3593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.848352][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 296.865723][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 296.888507][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 296.908304][ T8406] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1479'. [ 296.909015][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 296.928740][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 297.017748][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 297.029627][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 297.039481][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 297.050311][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 297.061889][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 297.121807][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 297.136877][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 297.145110][ T3553] Bluetooth: hci2: command tx timeout [ 297.155976][ T8235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 297.175698][ T8235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 297.189834][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 297.198773][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 297.313798][ T8415] loop0: detected capacity change from 0 to 1024 [ 297.349429][ T8415] hfsplus: failed to load catalog file [ 297.353834][ T8409] loop3: detected capacity change from 0 to 2048 [ 297.394027][ T8409] UDF-fs: bad mount option "gid=00000000000000060929" or missing value [ 297.435340][ T6180] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 297.572103][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 297.594326][ T6966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 297.650626][ T8113] device veth0_vlan entered promiscuous mode [ 297.726199][ T4261] device hsr_slave_0 left promiscuous mode [ 297.735409][ T8421] loop1: detected capacity change from 0 to 16 [ 297.764665][ T4261] device hsr_slave_1 left promiscuous mode [ 297.773967][ T4261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.787246][ T8421] erofs: (device loop1): mounted with root inode @ nid 36. [ 297.806664][ T4261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.834750][ T4261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.843173][ T8421] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 297.868015][ T4261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.887342][ T8421] erofs: (device loop1): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 297.910919][ T4261] device bridge_slave_1 left promiscuous mode [ 297.928191][ T8421] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 297.937019][ T4261] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.959356][ T4261] device bridge_slave_0 left promiscuous mode [ 297.985571][ T4261] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.156665][ T4261] device veth1_macvtap left promiscuous mode [ 298.176574][ T4261] device veth0_macvtap left promiscuous mode [ 298.193750][ T4261] device veth0_vlan left promiscuous mode [ 298.525612][ T8437] loop1: detected capacity change from 0 to 1024 [ 299.137071][ T8436] Process accounting resumed [ 299.194207][ T8444] binder: 8443:8444 ioctl c0306201 200002c0 returned -14 [ 299.375655][ T8449] loop0: detected capacity change from 0 to 16 [ 299.403917][ T8449] erofs: (device loop0): mounted with root inode @ nid 36. [ 299.467045][ T8449] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 299.487311][ T8449] erofs: (device loop0): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 299.507121][ T8449] erofs: (device loop0): z_erofs_read_folio: failed to read, err [-117] [ 299.912096][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 299.912113][ T26] audit: type=1326 audit(1719918616.846:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8458 comm="syz.0.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a6575f19 code=0x7ffc0000 [ 299.985366][ T26] audit: type=1326 audit(1719918616.876:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8458 comm="syz.0.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a6575f19 code=0x7ffc0000 [ 300.016821][ T26] audit: type=1326 audit(1719918616.886:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8458 comm="syz.0.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7ff4a6575f19 code=0x7ffc0000 [ 300.066384][ T26] audit: type=1326 audit(1719918616.886:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8458 comm="syz.0.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a6575f19 code=0x7ffc0000 [ 300.096327][ T4261] team0 (unregistering): Port device team_slave_1 removed [ 300.100641][ T26] audit: type=1326 audit(1719918616.886:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8458 comm="syz.0.1502" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff4a6575f19 code=0x7ffc0000 [ 300.192891][ T8470] loop3: detected capacity change from 0 to 16 [ 300.228131][ T8470] erofs: (device loop3): mounted with root inode @ nid 36. [ 300.269354][ T8470] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 300.308010][ T8470] erofs: (device loop3): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 300.326447][ T8470] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117] [ 300.344526][ T4261] team0 (unregistering): Port device team_slave_0 removed [ 300.508808][ T4261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.754900][ T8484] loop1: detected capacity change from 0 to 4096 [ 300.774493][ T8484] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 301.134759][ T8480] loop3: detected capacity change from 0 to 32768 [ 301.225440][ T8480] XFS (loop3): Mounting V5 Filesystem [ 301.351644][ T8480] XFS (loop3): Ending clean mount [ 301.370436][ T8480] XFS (loop3): Quotacheck needed: Please wait. [ 301.444123][ T8480] XFS (loop3): Quotacheck: Done. [ 301.569114][ T5657] XFS (loop3): Unmounting Filesystem [ 301.770270][ T4261] bond0 (unregistering): Released all slaves [ 301.977534][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 301.985859][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 302.017484][ T8113] device veth1_vlan entered promiscuous mode [ 302.169580][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 302.179667][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 302.229299][ T8113] device veth0_macvtap entered promiscuous mode [ 302.273274][ T8113] device veth1_macvtap entered promiscuous mode [ 302.324880][ T8113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.392591][ T8510] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1518'. [ 302.472947][ T8113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.549181][ T8113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.561647][ T8113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.571694][ T8113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.583249][ T8113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.598576][ T8113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 302.611143][ T8113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.634645][ T8113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 302.721446][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 302.766481][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 302.871025][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 302.963868][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 303.023953][ T8113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.089926][ T8113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.276376][ T8113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.295455][ T8113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.305936][ T8113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.325403][ T8113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.337130][ T8113] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 303.356180][ T8113] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 303.377887][ T8113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.420967][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 303.457535][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 303.507289][ T8113] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.522418][ T8113] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.539252][ T8113] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.557683][ T8113] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.567232][ T8521] ALSA: mixer_oss: invalid OSS volume '(õzf(ʦܠ¹Ç‚°Ð…"Ÿ6Ô%,„óÿ' [ 303.587834][ T8521] ALSA: mixer_oss: invalid OSS volume '' [ 303.595585][ T8235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.629051][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 303.636892][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 303.825871][ T8525] binder: 8524:8525 ioctl c0306201 200002c0 returned -14 [ 303.834261][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 303.850204][ T3824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 303.905644][ T8235] device veth0_vlan entered promiscuous mode [ 303.966810][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 303.977307][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 303.999100][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 304.007001][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 304.067996][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.070440][ T8235] device veth1_vlan entered promiscuous mode [ 304.091263][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.165052][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 304.181060][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 304.202151][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 304.219767][ T8533] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1527'. [ 304.264541][ T8235] device veth0_macvtap entered promiscuous mode [ 304.271828][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.283651][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.317388][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 304.338827][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 304.378607][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 304.386593][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 304.390101][ T8535] loop1: detected capacity change from 0 to 8 [ 304.419183][ T8535] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 304.439325][ T8235] device veth1_macvtap entered promiscuous mode [ 304.467612][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 304.502258][ T8235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.532580][ T8235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.555061][ T8535] cramfs: Error -5 while decompressing! [ 304.607833][ T8235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.619053][ T8535] cramfs: ffffffff91e21568(26)->ffff88805acc2000(4096) [ 304.644286][ T8535] cramfs: Error -3 while decompressing! [ 304.650328][ T8235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.677734][ T8535] cramfs: ffffffff91e21582(26)->ffff88805acc3000(4096) [ 304.697616][ T8235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.705816][ T8535] cramfs: Error -3 while decompressing! [ 304.708470][ T8235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.713840][ T8535] cramfs: ffffffff91e2159c(16)->ffff8880586b0000(4096) [ 304.724054][ T8235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.748009][ T8235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.759665][ T8235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.770557][ T8235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.773938][ T8519] loop3: detected capacity change from 0 to 32768 [ 304.785440][ T8235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.795105][ T8535] cramfs: Error -5 while decompressing! [ 304.798781][ T8235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.812426][ T8235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.824511][ T8235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.836483][ T8235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.847082][ T8235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.858438][ T8235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.868719][ T8235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.877912][ T5312] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 304.879793][ T8235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.898422][ T8235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.900533][ T8535] cramfs: ffffffff91e21568(26)->ffff88805acc2000(4096) [ 304.919047][ T8235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.982702][ T8519] XFS (loop3): Mounting V5 Filesystem [ 304.988637][ T8235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.006249][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 305.015791][ T26] audit: type=1800 audit(1719918621.946:159): pid=8535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1528" name="file2" dev="loop1" ino=348 res=0 errno=0 [ 305.021022][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 305.045437][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 305.054856][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 305.073059][ T8235] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.082039][ T8235] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.092330][ T8235] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.101330][ T8235] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.147742][ T5312] usb 5-1: Using ep0 maxpacket: 8 [ 305.277930][ T5312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 305.320412][ T5312] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 305.336811][ T5312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 305.360108][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.376622][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.409648][ T8519] XFS (loop3): Ending clean mount [ 305.420020][ T8519] XFS (loop3): Quotacheck needed: Please wait. [ 305.435485][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 305.479669][ T3626] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.488312][ T26] audit: type=1800 audit(1719918622.416:160): pid=8561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1533" name="/" dev="fuse" ino=1 res=0 errno=0 [ 305.551363][ T5312] usb 5-1: New USB device found, idVendor=08e3, idProduct=0301, bcdDevice=63.67 [ 305.565843][ T3626] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.570179][ T5312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.592184][ T5312] usb 5-1: Product: syz [ 305.597040][ T5312] usb 5-1: Manufacturer: syz [ 305.603341][ T5312] usb 5-1: SerialNumber: syz [ 305.625810][ T1804] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 305.648311][ T5312] usb 5-1: config 0 descriptor?? [ 305.658468][ T8519] XFS (loop3): Quotacheck: Done. [ 305.692663][ T5312] HFC-S_USB: probe of 5-1:0.0 failed with error -5 [ 305.866009][ T5657] XFS (loop3): Unmounting Filesystem [ 305.912056][ T8568] loop1: detected capacity change from 0 to 1024 [ 305.951598][ T8568] hfsplus: failed to load catalog file [ 306.032190][ T3593] usb 5-1: USB disconnect, device number 12 [ 306.182345][ T8572] loop1: detected capacity change from 0 to 22 [ 306.221591][ T8572] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 306.300139][ T8572] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 306.563474][ T8579] loop2: detected capacity change from 0 to 8 [ 306.588345][ T8579] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 306.659380][ T8579] cramfs: Error -5 while decompressing! [ 306.688685][ T8579] cramfs: ffffffff91e25568(26)->ffff888055f7e000(4096) [ 306.697922][ T8579] cramfs: Error -3 while decompressing! [ 306.716062][ T8579] cramfs: ffffffff91e25582(26)->ffff888055f7f000(4096) [ 306.726238][ T8579] cramfs: Error -3 while decompressing! [ 306.736381][ T8579] cramfs: ffffffff91e2559c(16)->ffff888056750000(4096) [ 306.749099][ T8580] loop1: detected capacity change from 0 to 4096 [ 306.755702][ T8579] cramfs: Error -5 while decompressing! [ 306.772810][ T8580] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 306.782152][ T8579] cramfs: ffffffff91e25568(26)->ffff888055f7e000(4096) [ 306.782707][ T8582] loop3: detected capacity change from 0 to 2048 [ 306.794719][ T26] audit: type=1800 audit(1719918623.726:161): pid=8579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1542" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 306.822599][ T8582] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 306.894432][ T8583] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 306.894715][ T8582] syz.3.1537: attempt to access beyond end of device [ 306.894715][ T8582] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 307.457501][ T8597] loop2: detected capacity change from 0 to 1024 [ 307.660583][ T8603] loop3: detected capacity change from 0 to 22 [ 307.689459][ T8597] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 307.733959][ T8603] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 307.803938][ T8603] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 307.972892][ T8235] EXT4-fs (loop2): unmounting filesystem. [ 308.276809][ T8614] loop4: detected capacity change from 0 to 2048 [ 308.336500][ T8614] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 308.390570][ T8614] syz.4.1556: attempt to access beyond end of device [ 308.390570][ T8614] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 308.405055][ T8618] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 309.759557][ T8641] loop2: detected capacity change from 0 to 22 [ 309.823186][ T8641] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 309.906536][ T8641] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 309.923493][ T8647] loop3: detected capacity change from 0 to 512 [ 309.937537][ T8647] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 309.985763][ T8647] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 310.037517][ T8647] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e11c, mo2=0002] [ 310.053557][ T8647] EXT4-fs (loop3): orphan cleanup on readonly fs [ 310.223324][ T8647] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1570: bg 0: block 361: padding at end of block bitmap is not set [ 310.349723][ T8647] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 310.575410][ T8647] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.1570: attempt to clear invalid blocks 33619980 len 1 [ 310.737796][ T26] audit: type=1800 audit(1719918627.646:162): pid=8656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1571" name="/" dev="fuse" ino=1 res=0 errno=0 [ 311.016018][ T8647] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1570: invalid indirect mapped block 1811939328 (level 0) [ 311.088217][ T8647] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1570: invalid indirect mapped block 2185560079 (level 1) [ 311.129196][ T8647] EXT4-fs (loop3): 1 truncate cleaned up [ 311.135052][ T8647] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 311.193515][ T8647] EXT4-fs warning (device loop3): dx_probe:892: inode #2: comm syz.3.1570: dx entry: limit 0 != root limit 125 [ 311.293396][ T8647] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz.3.1570: Corrupt directory, running e2fsck is recommended [ 311.431659][ T8647] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 5: comm syz.3.1570: path /194/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 312.263474][ T8672] sch_tbf: burst 34 is lower than device lo mtu (65550) ! [ 312.477132][ T5657] EXT4-fs (loop3): unmounting filesystem. [ 312.588687][ T1156] block nbd1: Possible stuck request ffff88801f828000: control (read@0,4096B). Runtime 90 seconds [ 312.611721][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1582'. [ 312.801494][ T8687] loop3: detected capacity change from 0 to 22 [ 312.818762][ T8687] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 312.836681][ T8687] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 313.031851][ T8671] loop4: detected capacity change from 0 to 32768 [ 313.304801][ T8671] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1577 (8671) [ 314.288449][ T8671] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 314.308531][ T8671] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 314.337990][ T8671] BTRFS info (device loop4): using free space tree [ 314.466709][ T8671] BTRFS error (device loop4): open_ctree failed [ 314.529716][ T8731] loop0: detected capacity change from 0 to 22 [ 314.551021][ T5312] usb 2-1: new low-speed USB device number 13 using dummy_hcd [ 314.558399][ T8731] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 314.608262][ T8731] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 314.865092][ T8735] loop0: detected capacity change from 0 to 512 [ 314.917925][ T5312] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 314.958772][ T5312] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 314.988176][ T5312] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 315.014729][ T5312] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.045982][ T8735] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 315.084839][ T8737] loop4: detected capacity change from 0 to 4096 [ 315.098035][ T8735] ext4 filesystem being mounted at /320/file0 supports timestamps until 2038 (0x7fffffff) [ 315.136453][ T8737] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 315.225193][ T8735] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.1599: bg 0: block 18: invalid block bitmap [ 315.282256][ T5312] usb 2-1: string descriptor 0 read error: -22 [ 315.282576][ T8707] loop3: detected capacity change from 0 to 32768 [ 315.295794][ T8735] Quota error (device loop0): write_blk: dquota write failed [ 315.295917][ T5312] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 315.305958][ T8735] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 315.358083][ T8735] EXT4-fs error (device loop0): ext4_acquire_dquot:6777: comm syz.0.1599: Failed to acquire dquot type 1 [ 315.376595][ T5312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.436376][ T8707] XFS (loop3): Mounting V5 Filesystem [ 315.450249][ T8702] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 315.469564][ T5312] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 315.557122][ T3843] EXT4-fs (loop0): unmounting filesystem. [ 315.606904][ T8707] XFS (loop3): Ending clean mount [ 315.746951][ T5312] usb 2-1: USB disconnect, device number 13 [ 316.603579][ T5657] XFS (loop3): Unmounting Filesystem [ 316.670586][ T8775] loop1: detected capacity change from 0 to 2048 [ 317.059444][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.076089][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.428117][ T8775] loop1: p1 < > p4 [ 317.496360][ T8775] loop1: p4 size 8388608 extends beyond EOD, truncated [ 317.594989][ T8782] loop2: detected capacity change from 0 to 2048 [ 317.610469][ T8782] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 317.635912][ T3003] loop1: p1 < > p4 [ 317.643970][ T3003] loop1: p4 size 8388608 extends beyond EOD, truncated [ 317.657528][ T8785] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 317.697116][ T8782] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 317.721888][ T8782] Remounting filesystem read-only [ 317.731981][ T8782] ax25_connect(): syz.2.1612 uses autobind, please contact jreuter@yaina.de [ 317.843626][ T3540] udevd[3540]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 317.856719][ T6180] udevd[6180]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 318.120179][ T6180] udevd[6180]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 318.146819][ T3540] udevd[3540]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 318.198716][ T8782] NILFS (loop2): mounting fs with errors [ 318.254075][ T8782] NILFS error (device loop2): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 318.270007][ T8782] Remounting filesystem read-only [ 318.317955][ T3824] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 318.707898][ T3824] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 318.726056][ T3824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.753446][ T3824] usb 2-1: config 0 descriptor?? [ 318.841832][ T8811] loop3: detected capacity change from 0 to 512 [ 318.866387][ T8811] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 318.917707][ T5312] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 318.925912][ T8811] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 318.944388][ T8811] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e11c, mo2=0002] [ 318.953733][ T8811] EXT4-fs (loop3): orphan cleanup on readonly fs [ 318.967984][ T8811] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1608: bg 0: block 361: padding at end of block bitmap is not set [ 318.986193][ T8811] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6173: Corrupt filesystem [ 319.016129][ T8811] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.1608: attempt to clear invalid blocks 33619980 len 1 [ 319.038888][ T8811] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1608: invalid indirect mapped block 1811939328 (level 0) [ 319.081486][ T8811] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1608: invalid indirect mapped block 2185560079 (level 1) [ 319.084924][ T8801] loop4: detected capacity change from 0 to 32768 [ 319.117066][ T8811] EXT4-fs (loop3): 1 truncate cleaned up [ 319.132651][ T8811] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 319.157809][ T5312] usb 1-1: Using ep0 maxpacket: 32 [ 319.173970][ T8801] XFS (loop4): Mounting V5 Filesystem [ 319.208898][ T8811] EXT4-fs warning (device loop3): dx_probe:892: inode #2: comm syz.3.1608: dx entry: limit 0 != root limit 125 [ 319.221497][ T8811] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz.3.1608: Corrupt directory, running e2fsck is recommended [ 319.230394][ T8805] loop2: detected capacity change from 0 to 32768 [ 319.235395][ T8811] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 5: comm syz.3.1608: path /200/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 319.264724][ T8821] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 5: comm syz.3.1608: path /200/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 319.283729][ T8801] XFS (loop4): Ending clean mount [ 319.290056][ T3824] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 319.297999][ T5312] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 319.312523][ T5312] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 319.322036][ T5312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.339845][ T5312] usb 1-1: config 0 descriptor?? [ 319.380027][ T5312] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 319.407248][ T8805] XFS (loop2): Mounting V5 Filesystem [ 319.411246][ T8811] sch_tbf: burst 34 is lower than device lo mtu (65550) ! [ 319.429829][ T8113] XFS (loop4): Unmounting Filesystem [ 319.474508][ T5657] EXT4-fs (loop3): unmounting filesystem. [ 319.576399][ T8805] XFS (loop2): Ending clean mount [ 319.789582][ T8835] loop3: detected capacity change from 0 to 2048 [ 319.879783][ T8835] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 319.931366][ T3824] usb 2-1: USB disconnect, device number 14 [ 320.354802][ T8852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1625'. [ 320.848371][ T5657] EXT4-fs (loop3): unmounting filesystem. [ 320.899767][ T8858] loop4: detected capacity change from 0 to 2048 [ 320.912311][ T8858] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 320.932649][ T8861] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 320.954204][ T8858] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 320.988220][ T8858] Remounting filesystem read-only [ 320.996129][ T8858] ax25_connect(): syz.4.1630 uses autobind, please contact jreuter@yaina.de [ 321.137650][ T8866] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.211008][ T8866] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.218607][ T8866] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.264093][ T8235] XFS (loop2): Unmounting Filesystem [ 321.386697][ T8870] loop3: detected capacity change from 0 to 512 [ 321.429652][ T8870] EXT4-fs: Ignoring removed i_version option [ 321.461138][ T8858] NILFS (loop4): mounting fs with errors [ 321.471044][ T8858] NILFS error (device loop4): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 321.486378][ T8858] Remounting filesystem read-only [ 321.521293][ T8870] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 321.630368][ T8870] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 321.660757][ T8870] EXT4-fs (loop3): 1 truncate cleaned up [ 321.667871][ T8870] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 321.876794][ T8888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.918011][ T8888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.963991][ T5657] EXT4-fs (loop3): unmounting filesystem. [ 322.358728][ T8876] loop4: detected capacity change from 0 to 32768 [ 322.506615][ T8876] XFS (loop4): Mounting V5 Filesystem [ 322.722383][ T8876] XFS (loop4): Ending clean mount [ 322.854367][ T8113] XFS (loop4): Unmounting Filesystem [ 322.910699][ T6205] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 323.208238][ T8920] loop3: detected capacity change from 0 to 8192 [ 323.287922][ T6205] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 323.303344][ T6205] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.340201][ T6205] usb 2-1: config 0 descriptor?? [ 323.367774][ T33] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 324.088463][ T33] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 324.155977][ T33] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.303211][ T33] usb 3-1: Product: syz [ 324.366728][ T33] usb 3-1: Manufacturer: syz [ 324.623879][ T33] usb 3-1: SerialNumber: syz [ 324.653928][ T6205] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 324.678102][ T8942] loop3: detected capacity change from 0 to 128 [ 324.681286][ T33] usb 3-1: config 0 descriptor?? [ 324.799079][ T6732] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 324.910940][ T8946] loop4: detected capacity change from 0 to 512 [ 324.997377][ T8946] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 325.007260][ T8946] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038 (0x7fffffff) [ 325.067527][ T33] usb 3-1: USB disconnect, device number 16 [ 325.070824][ T6205] usb 2-1: USB disconnect, device number 15 [ 325.093286][ T8946] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1650: bg 0: block 18: invalid block bitmap [ 325.152210][ T8956] loop3: detected capacity change from 0 to 2048 [ 325.160188][ T8956] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 325.177851][ T8946] Quota error (device loop4): write_blk: dquota write failed [ 325.197999][ T8946] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 325.213046][ T8959] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 325.258638][ T8946] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz.4.1650: Failed to acquire dquot type 1 [ 325.271119][ T8956] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 325.287853][ T8956] Remounting filesystem read-only [ 325.295588][ T8956] ax25_connect(): syz.3.1653 uses autobind, please contact jreuter@yaina.de [ 325.420879][ T8113] EXT4-fs (loop4): unmounting filesystem. [ 325.748737][ T8956] NILFS (loop3): mounting fs with errors [ 325.769124][ T8956] NILFS error (device loop3): nilfs_check_page: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 325.786006][ T8956] Remounting filesystem read-only [ 327.100198][ T8996] loop0: detected capacity change from 0 to 128 [ 327.137144][ T8996] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978) [ 327.191733][ T8999] program syz.2.1665 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 327.204536][ T8996] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 327.244585][ T9003] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 327.373424][ T8996] EXT4-fs (loop0): ext4_remount: Checksum for group 0 failed (39871!=39978) [ 327.398233][ C1] sd 0:0:1:0: [sda] tag#6062 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 327.408725][ C1] sd 0:0:1:0: [sda] tag#6062 CDB: Read(6) 08 00 00 00 00 00 [ 327.439460][ T9006] loop4: detected capacity change from 0 to 64 [ 328.193286][ T9017] loop2: detected capacity change from 0 to 2048 [ 328.272768][ T9017] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 328.309325][ T3843] EXT4-fs (loop0): unmounting filesystem. [ 328.313439][ T9006] MINIX-fs: bad superblock or unable to read bitmaps [ 328.421911][ T9024] loop3: detected capacity change from 0 to 256 [ 328.571757][ T9024] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xba7df490, utbl_chksum : 0xe619d30d) [ 329.169775][ T9031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1669'. [ 329.422661][ T8235] EXT4-fs (loop2): unmounting filesystem. [ 329.597261][ T9050] loop2: detected capacity change from 0 to 128 [ 329.750393][ T6180] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 330.005234][ T41] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.143335][ T41] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.201902][ T9068] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1682'. [ 330.232480][ T9068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1682'. [ 330.259357][ T3824] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 330.269205][ T41] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.311868][ T9068] netlink: 164 bytes leftover after parsing attributes in process `syz.0.1682'. [ 330.346814][ T41] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.527832][ T3824] usb 2-1: Using ep0 maxpacket: 32 [ 330.647832][ T3824] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 330.698165][ T3824] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 330.749251][ T3824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.827744][ T3824] usb 2-1: config 0 descriptor?? [ 330.880054][ T3824] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 330.905315][ T9075] loop2: detected capacity change from 0 to 4096 [ 330.954216][ T9080] loop0: detected capacity change from 0 to 2048 [ 330.997967][ T6180] I/O error, dev loop2, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 331.128509][ T9080] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 331.595465][ T9092] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1686'. [ 331.949961][ T3562] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 331.967821][ T3562] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 331.976692][ T3564] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 331.985010][ T3562] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 331.996124][ T3564] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 332.003529][ T3562] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 332.219425][ T3843] EXT4-fs (loop0): unmounting filesystem. [ 332.533550][ T33] usb 2-1: USB disconnect, device number 16 [ 332.953869][ T9075] loop2: detected capacity change from 0 to 32768 [ 332.984535][ T9075] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.1684 (9075) [ 333.040774][ T9075] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 333.069044][ T9075] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 333.078056][ T9075] BTRFS info (device loop2): using free space tree [ 333.436263][ T9091] chnl_net:caif_netlink_parms(): no params data found [ 333.542625][ T9075] BTRFS info (device loop2): enabling ssd optimizations [ 333.651598][ T9138] loop4: detected capacity change from 0 to 128 [ 333.679641][ T8235] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 333.734185][ T9138] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 333.784291][ T9138] ext4 filesystem being mounted at /27/mnt supports timestamps until 2038 (0x7fffffff) [ 334.024787][ T3553] Bluetooth: hci1: command tx timeout [ 334.927034][ T8113] EXT4-fs (loop4): unmounting filesystem. [ 335.153248][ T9168] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 335.207088][ T9172] tmpfs: Bad value for 'mpol' [ 335.225231][ T9091] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.249064][ T9091] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.291022][ T9091] device bridge_slave_0 entered promiscuous mode [ 335.299784][ T26] audit: type=1800 audit(1719918652.236:163): pid=9175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1697" name="/" dev="fuse" ino=1 res=0 errno=0 [ 335.333915][ T9091] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.365161][ T9091] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.391233][ T9179] loop1: detected capacity change from 0 to 64 [ 335.422051][ T9091] device bridge_slave_1 entered promiscuous mode [ 335.455994][ T9179] MINIX-fs: bad superblock or unable to read bitmaps [ 335.554219][ T9091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.569799][ T9180] loop2: detected capacity change from 0 to 4096 [ 335.604089][ T9180] NILFS (loop2): mounting unchecked fs [ 335.666661][ T9185] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1703'. [ 335.676749][ T9180] NILFS (loop2): recovery required for readonly filesystem [ 335.712004][ T9180] NILFS (loop2): write access will be enabled during recovery [ 335.719254][ T9185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1703'. [ 335.725098][ T9180] NILFS (loop2): invalid segment: Checksum error in segment payload [ 335.757801][ T9180] NILFS (loop2): trying rollback from an earlier position [ 335.823197][ T9091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.845702][ T9180] NILFS (loop2): recovery complete [ 335.854062][ T9182] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1703'. [ 335.966606][ T41] device hsr_slave_0 left promiscuous mode [ 335.987113][ T41] device hsr_slave_1 left promiscuous mode [ 336.004661][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.020476][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.031320][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.055071][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.096621][ T41] device bridge_slave_1 left promiscuous mode [ 336.100433][ T3553] Bluetooth: hci1: command tx timeout [ 336.124620][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.141659][ T41] device bridge_slave_0 left promiscuous mode [ 336.153612][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.244439][ T41] device veth1_macvtap left promiscuous mode [ 336.261432][ T41] device veth0_macvtap left promiscuous mode [ 336.279476][ T41] device veth1_vlan left promiscuous mode [ 336.295546][ T41] device veth0_vlan left promiscuous mode [ 336.899740][ T9202] loop2: detected capacity change from 0 to 16 [ 337.517920][ T9202] erofs: (device loop2): mounted with root inode @ nid 36. [ 337.544963][ T9201] process 'syz.2.1705' launched './file2' with NULL argv: empty string added [ 337.562929][ T3553] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 337.591736][ T9201] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 337.618122][ T26] audit: type=1800 audit(1719918654.546:164): pid=9201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1705" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 338.180031][ T3553] Bluetooth: hci1: command tx timeout [ 338.639000][ T9217] loop0: detected capacity change from 0 to 128 [ 338.699660][ T9217] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 338.716398][ T9217] ext4 filesystem being mounted at /355/mnt supports timestamps until 2038 (0x7fffffff) [ 338.826532][ T3843] EXT4-fs (loop0): unmounting filesystem. [ 338.918623][ T41] team0 (unregistering): Port device team_slave_1 removed [ 339.053965][ T41] team0 (unregistering): Port device team_slave_0 removed [ 339.184174][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.224033][ T9233] loop0: detected capacity change from 0 to 2048 [ 339.287215][ T9233] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 339.297714][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.263240][ T3553] Bluetooth: hci1: command tx timeout [ 340.346667][ T3843] EXT4-fs (loop0): unmounting filesystem. [ 340.943079][ T9268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.952126][ T9268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.232265][ T41] bond0 (unregistering): Released all slaves [ 341.515876][ T9274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1727'. [ 341.540265][ T9091] team0: Port device team_slave_0 added [ 341.601560][ T9091] team0: Port device team_slave_1 added [ 341.749715][ T9091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.779021][ T9091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.881257][ T9091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.923403][ T9091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.982202][ T9091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.334998][ T9091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.963268][ T1156] block nbd1: Possible stuck request ffff88801f828000: control (read@0,4096B). Runtime 120 seconds [ 343.071541][ T9091] device hsr_slave_0 entered promiscuous mode [ 343.110494][ T9091] device hsr_slave_1 entered promiscuous mode [ 343.150990][ T9091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.180598][ T9091] Cannot create hsr debugfs directory [ 343.312428][ T9299] loop1: detected capacity change from 0 to 2048 [ 343.438382][ T9299] UDF-fs: bad mount option "gid=00000000000000060929" or missing value [ 343.654219][ T9323] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1741'. [ 345.414149][ T9331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.764912][ T9343] loop2: detected capacity change from 0 to 2048 [ 345.922099][ T9343] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 346.152293][ T9331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.454483][ T9356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1746'. [ 348.165095][ T8235] EXT4-fs (loop2): unmounting filesystem. [ 348.378715][ T3697] Bluetooth: (null): Invalid header checksum [ 348.396997][ T3697] Bluetooth: (null): Invalid header checksum [ 348.585558][ T9091] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 348.648694][ T9091] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 348.692460][ T9091] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 348.696327][ T9372] loop2: detected capacity change from 0 to 4096 [ 348.730043][ T9091] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 348.777703][ T9372] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 348.833974][ T9372] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 349.076823][ T8235] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 349.241269][ T9091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.299600][ T1804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 349.308498][ T1804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 349.320878][ T9091] 8021q: adding VLAN 0 to HW filter on device team0 [ 349.347486][ T9379] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1754'. [ 349.371892][ T1804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 349.388408][ T1804] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 349.396948][ T9379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1754'. [ 349.438285][ T1804] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.445464][ T1804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.497329][ T9379] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1754'. [ 349.522486][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 349.529492][ T9385] loop2: detected capacity change from 0 to 4096 [ 349.538814][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 349.575073][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 349.584351][ T9385] NILFS (loop2): mounting unchecked fs [ 349.598478][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.605641][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.612760][ T9385] NILFS (loop2): recovery required for readonly filesystem [ 349.657703][ T9385] NILFS (loop2): write access will be enabled during recovery [ 349.664382][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 349.700950][ T9385] NILFS (loop2): invalid segment: Checksum error in segment payload [ 349.726654][ T9385] NILFS (loop2): trying rollback from an earlier position [ 349.754824][ T9385] NILFS (loop2): recovery complete [ 349.761884][ T1804] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 349.782267][ T1804] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 349.824721][ T1804] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 349.868019][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 349.876066][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 349.876850][ T9400] netlink: 'syz.1.1761': attribute type 1 has an invalid length. [ 349.904204][ T9400] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1761'. [ 349.938655][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 349.969336][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 350.019259][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 350.036130][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 350.078626][ T9406] loop4: detected capacity change from 0 to 764 [ 350.079305][ T5508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 350.135531][ T9091] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 350.194914][ T9406] Symlink component flag not implemented [ 350.248354][ T9406] Symlink component flag not implemented (101) [ 350.301510][ T9404] loop0: detected capacity change from 0 to 4096 [ 350.377145][ T9404] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 350.480945][ T9404] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 350.776740][ T3843] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 351.027353][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1769'. [ 351.101918][ T9438] netlink: 'syz.4.1773': attribute type 1 has an invalid length. [ 351.150583][ T9438] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1773'. [ 351.242609][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 351.288565][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 351.385742][ T9447] fuse: Bad value for 'fd' [ 352.186829][ T9457] loop4: detected capacity change from 0 to 764 [ 352.205282][ T9091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.289492][ T9457] Symlink component flag not implemented [ 352.322706][ T9457] Symlink component flag not implemented (101) [ 352.508133][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 352.548197][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 352.622249][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 352.641349][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 352.674690][ T9091] device veth0_vlan entered promiscuous mode [ 352.693382][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 352.706890][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 352.737530][ T9091] device veth1_vlan entered promiscuous mode [ 352.778856][ T9459] loop1: detected capacity change from 0 to 4096 [ 352.828136][ T9459] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 352.852934][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 352.868690][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 352.897524][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 352.921667][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 352.943929][ T9091] device veth0_macvtap entered promiscuous mode [ 352.978739][ T9091] device veth1_macvtap entered promiscuous mode [ 353.132905][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.179177][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.224000][ T9459] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 353.326798][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.482653][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.671472][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.754294][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.777846][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.804781][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.843652][ T7239] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 353.878452][ T9091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.898060][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 353.906436][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 353.953289][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 354.012239][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 354.021029][ T9486] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1785'. [ 354.054741][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.095880][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.125621][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.172630][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.205281][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.225262][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.248803][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.270233][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.286402][ T9091] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 354.331097][ T9091] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.366562][ T9091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.457966][ T5318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 354.487078][ T5318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 354.563321][ T9500] fuse: Bad value for 'fd' [ 355.054449][ T3562] Bluetooth: hci3: command 0x0406 tx timeout [ 355.262236][ T9091] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.275188][ T9091] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.284101][ T9091] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.336619][ T9091] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.435366][ T9509] loop1: detected capacity change from 0 to 2048 [ 355.678211][ T9509] loop1: p1 < > p4 [ 355.704130][ T9509] loop1: p4 size 8388608 extends beyond EOD, truncated [ 355.759140][ T3697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.778634][ T3697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.838783][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 355.915382][ T9521] loop4: detected capacity change from 0 to 2048 [ 355.953601][ T9521] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024) [ 355.994459][ T4127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.081535][ T4127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.093578][ T9526] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 356.105431][ T9521] syz.4.1792: attempt to access beyond end of device [ 356.105431][ T9521] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 356.126664][ T9525] loop1: detected capacity change from 0 to 256 [ 356.190261][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 356.687893][ T5317] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 356.986482][ T9539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1796'. [ 356.997714][ T5317] usb 2-1: Using ep0 maxpacket: 32 [ 357.043191][ T9540] ebt_among: dst integrity fail: 102 [ 357.161023][ T5317] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 357.234968][ T5317] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 357.254402][ T9543] loop4: detected capacity change from 0 to 1024 [ 357.269134][ T9543] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 357.281554][ T5317] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.380373][ T5317] usb 2-1: config 0 descriptor?? [ 357.420152][ T5317] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 357.451498][ T9543] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 358.053237][ T9545] orangefs_mount: mount request failed with -4 [ 358.404607][ T8113] EXT4-fs (loop4): unmounting filesystem. [ 358.443978][ T9565] loop3: detected capacity change from 0 to 256 [ 358.724151][ T9573] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1805'. [ 358.767634][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1805'. [ 358.819577][ T9573] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1805'. [ 358.927290][ T9577] loop3: detected capacity change from 0 to 4096 [ 358.957143][ T9577] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 359.099008][ T9577] ntfs: volume version 3.1. [ 359.270710][ T9590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1809'. [ 359.293271][ T9589] ebt_among: dst integrity fail: 102 [ 359.496091][ T9599] __vm_enough_memory: pid: 9599, comm: syz.4.1813, no enough memory for the allocation [ 359.771672][ T9610] loop4: detected capacity change from 0 to 256 [ 359.831654][ T9610] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 360.433634][ T9604] orangefs_mount: mount request failed with -4 [ 361.111848][ T9627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1822'. [ 361.535397][ T9651] loop0: detected capacity change from 0 to 1024 [ 362.299216][ T3843] hfsplus: bad catalog entry type [ 362.333284][ T3843] hfsplus: bad catalog entry type [ 362.525735][ T3697] hfsplus: b-tree write err: -5, ino 4 [ 362.824614][ T9665] loop2: detected capacity change from 0 to 1024 [ 363.069323][ T9673] loop3: detected capacity change from 0 to 16 [ 363.124946][ T9673] erofs: (device loop3): mounted with root inode @ nid 36. [ 363.206817][ T3562] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 363.278246][ T9673] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 363.358337][ T26] audit: type=1800 audit(1719918680.266:165): pid=9673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1832" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 363.783453][ T3597] usb 1-1: USB disconnect, device number 14 [ 364.095437][ T3626] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.251687][ T3626] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.322194][ T3626] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.404151][ T3626] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.061656][ T3553] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 365.072123][ T3553] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 365.082333][ T3553] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 365.092198][ T3553] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 365.101430][ T3553] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 365.123757][ T3553] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 366.262993][ T9707] fuse: Unknown parameter 'gid' [ 366.507943][ T9717] loop3: detected capacity change from 0 to 1024 [ 366.606083][ T9717] hfsplus: bad catalog entry type [ 366.695925][ T11] hfsplus: b-tree write err: -5, ino 4 [ 367.174084][ T9692] chnl_net:caif_netlink_parms(): no params data found [ 367.357437][ T3597] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 367.468201][ T3562] Bluetooth: hci0: command tx timeout [ 367.490705][ T9736] sd 0:0:1:0: PR command failed: 1026 [ 367.505865][ T9736] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 367.986203][ T9736] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 368.547834][ T3597] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.590991][ T3597] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.636008][ T3597] usb 4-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 368.831575][ T3597] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.842635][ T3597] usb 4-1: config 0 descriptor?? [ 368.894733][ T3626] device hsr_slave_0 left promiscuous mode [ 368.958971][ T3626] device hsr_slave_1 left promiscuous mode [ 369.030148][ T9753] loop2: detected capacity change from 0 to 16 [ 369.057290][ T9753] erofs: (device loop2): mounted with root inode @ nid 36. [ 369.100864][ T3562] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 369.160827][ T9753] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 369.268402][ T26] audit: type=1800 audit(1719918686.146:166): pid=9753 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1853" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 369.550883][ T3562] Bluetooth: hci0: command tx timeout [ 369.618298][ T3597] logitech 0003:046D:CA03.0010: unknown main item tag 0x0 [ 369.679386][ T3597] logitech 0003:046D:CA03.0010: unknown main item tag 0x0 [ 369.686573][ T3597] logitech 0003:046D:CA03.0010: unknown main item tag 0x0 [ 369.744959][ T3597] logitech 0003:046D:CA03.0010: unknown main item tag 0x0 [ 369.779256][ T3597] logitech 0003:046D:CA03.0010: unknown main item tag 0x0 [ 369.829569][ T3597] logitech 0003:046D:CA03.0010: hidraw0: USB HID v0.00 Device [HID 046d:ca03] on usb-dummy_hcd.3-1/input0 [ 369.861452][ T3597] logitech 0003:046D:CA03.0010: no inputs found [ 369.908938][ T3597] usb 4-1: USB disconnect, device number 13 [ 369.961921][ T3626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.974542][ T3626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.015764][ T3626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.034177][ T3626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.057507][ T3626] device bridge_slave_1 left promiscuous mode [ 370.076841][ T3626] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.104767][ T3626] device bridge_slave_0 left promiscuous mode [ 370.133788][ T3626] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.258589][ T3626] device veth1_macvtap left promiscuous mode [ 370.274984][ T3626] device veth0_macvtap left promiscuous mode [ 370.286718][ T3626] device veth1_vlan left promiscuous mode [ 370.307383][ T3626] device veth0_vlan left promiscuous mode [ 370.316343][ T9768] fuse: Unknown parameter 'gid' [ 370.561326][ T3596] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 370.591152][ T3596] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 370.616382][ T3596] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 370.644275][ T3596] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 370.673571][ T3596] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 370.694800][ T3626] bond1 (unregistering): Released all slaves [ 370.697026][ T3596] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 370.734875][ T3596] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 370.760575][ T3596] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 370.780556][ T3596] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 370.810037][ T3596] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 370.835323][ T3596] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 370.859162][ T3596] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 370.882689][ T3596] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 370.907230][ T3596] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 370.933006][ T3596] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 370.969298][ T3596] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 370.984673][ T3596] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 370.993853][ T3596] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 371.011124][ T3596] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 371.025065][ T3596] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 371.047423][ T3596] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 371.069835][ T3596] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 371.085823][ T3596] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 371.100811][ T3596] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 371.117831][ T3596] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 371.133753][ T3596] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 371.149783][ T3596] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 371.165694][ T3596] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 371.200306][ T3596] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 371.222308][ T3596] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 371.237298][ T3596] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 371.252387][ T3596] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 371.260843][ T9772] loop3: detected capacity change from 0 to 32768 [ 371.274736][ T3596] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 371.285311][ T9772] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1857 (9772) [ 371.317360][ T3596] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0 [ 371.365944][ T3596] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [syz0] on syz0 [ 371.405952][ T9772] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 371.434827][ T9772] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 371.475292][ T9772] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 371.515955][ T9772] BTRFS info (device loop3): use zstd compression, level 3 [ 371.542782][ T9772] BTRFS info (device loop3): using free space tree [ 371.629996][ T3562] Bluetooth: hci0: command tx timeout [ 371.891697][ T9791] fuse: Bad value for 'fd' [ 372.772729][ T9772] BTRFS info (device loop3): enabling ssd optimizations [ 372.788805][ T9772] BTRFS info (device loop3): checking UUID tree [ 373.038897][ T9091] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 373.391489][ T1156] block nbd1: Possible stuck request ffff88801f828000: control (read@0,4096B). Runtime 150 seconds [ 373.416336][ T9819] sd 0:0:1:0: PR command failed: 1026 [ 373.446205][ T9819] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 373.462173][ T9819] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 373.475041][ T3626] team0 (unregistering): Port device team_slave_1 removed [ 373.600388][ T3626] team0 (unregistering): Port device team_slave_0 removed [ 373.697719][ T3553] Bluetooth: hci0: command tx timeout [ 373.717473][ T9828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1865'. [ 373.776097][ T9830] fuse: Unknown parameter 'gid' [ 373.798765][ T3626] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.866627][ T3595] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 373.875245][ T3595] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 373.883773][ T3595] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 373.891720][ T3595] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 373.899503][ T3595] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 373.907078][ T3595] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 373.914910][ T3595] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 373.922822][ T3595] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 373.930580][ T3595] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 373.938410][ T3595] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 373.945905][ T3595] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 373.953803][ T3595] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 373.961682][ T3595] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 373.969594][ T3595] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 373.977067][ T3595] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 373.985904][ T3595] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 373.993633][ T3595] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 374.001447][ T3595] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 374.009193][ T3595] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 374.016756][ T3595] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 374.024599][ T3595] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 374.032425][ T3595] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 374.040189][ T3595] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 374.047975][ T3595] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 374.055455][ T3595] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 374.063381][ T3595] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 374.071453][ T3595] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 374.083986][ T3595] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 374.094287][ T3595] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 374.107111][ T3595] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 374.122945][ T3595] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 374.134206][ T3595] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 374.147354][ T3595] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 374.157037][ T3595] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 374.176193][ T3595] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz0] on syz0 [ 374.190884][ T3626] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.527650][ T3595] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 374.887842][ T3595] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 374.910953][ T3595] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 374.929812][ T3595] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 374.951204][ T3595] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 374.964115][ T3595] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.004186][ T3595] usb 3-1: config 0 descriptor?? [ 375.085802][ T3626] bond0 (unregistering): Released all slaves [ 375.217817][ T9692] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.225086][ T9692] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.241723][ T9692] device bridge_slave_0 entered promiscuous mode [ 375.256109][ T9692] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.267111][ T9692] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.284064][ T9692] device bridge_slave_1 entered promiscuous mode [ 375.346685][ T9692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.399286][ T9692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.564516][ T9842] loop3: detected capacity change from 0 to 16 [ 375.592035][ T9842] erofs: (device loop3): mounted with root inode @ nid 36. [ 375.766390][ T3553] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 375.831976][ T9842] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 375.900609][ T26] audit: type=1800 audit(1719918692.816:167): pid=9842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1870" name="file2" dev="loop3" ino=89 res=0 errno=0 [ 376.138870][ T9692] team0: Port device team_slave_0 added [ 376.184546][ T9837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.208713][ T3595] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 376.216784][ T3595] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving [ 376.235519][ T9692] team0: Port device team_slave_1 added [ 376.247943][ T9837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.258010][ T3595] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 376.366816][ T9692] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.386288][ T9692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.547805][ T9692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 376.576130][ T9692] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 376.613998][ T9692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 376.702243][ T9692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.847092][ T9692] device hsr_slave_0 entered promiscuous mode [ 376.889985][ T9692] device hsr_slave_1 entered promiscuous mode [ 376.905349][ T9692] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.940840][ T9692] Cannot create hsr debugfs directory [ 377.255924][ T9837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.268204][ T9846] loop1: detected capacity change from 0 to 32768 [ 377.269663][ T9837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.296150][ T9846] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1871 (9846) [ 377.369208][ T9846] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 377.397763][ T9846] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 377.424532][ T9846] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 377.467217][ T9846] BTRFS info (device loop1): use zstd compression, level 3 [ 377.490586][ T9846] BTRFS info (device loop1): using free space tree [ 377.665524][ T9846] BTRFS info (device loop1): enabling ssd optimizations [ 377.683144][ T9846] BTRFS info (device loop1): checking UUID tree [ 377.918129][ T9837] usb 3-1: string descriptor 0 read error: -2 [ 378.094070][ T7239] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 378.521563][ T1254] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.532745][ T1254] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.243973][ T3597] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 379.297788][ T3597] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 379.336282][ T3597] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 379.354753][ T9692] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 379.369144][ T3597] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 379.395107][ T9692] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 379.402793][ T3597] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 379.422931][ T3597] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 379.443538][ T9692] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 379.452558][ T3597] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 379.477823][ T4050] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 379.482684][ T3597] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 379.486488][ T9692] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 379.501901][ T1804] usb 3-1: USB disconnect, device number 17 [ 379.548042][ T3597] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 379.575823][ T3597] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 379.607647][ T3597] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 379.627315][ T3597] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 379.654267][ T3597] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 379.666063][ T9908] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1877'. [ 379.682599][ T3597] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 379.695308][ T3597] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 379.738273][ T3597] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 379.768449][ T9692] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.773334][ T3597] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 379.813847][ T3597] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 379.818463][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 379.837821][ T4050] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.845851][ T3597] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 379.858619][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 379.868120][ T3597] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 379.870568][ T9692] 8021q: adding VLAN 0 to HW filter on device team0 [ 379.875790][ T3597] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 379.885054][ T4050] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.908925][ T3597] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 379.927833][ T3597] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 379.945490][ T3597] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 379.957629][ T4050] usb 4-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00 [ 379.963905][ T3597] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 379.966713][ T4050] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.007836][ T3597] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 380.039337][ T4050] usb 4-1: config 0 descriptor?? [ 380.048490][ T9692] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 380.067652][ T3597] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 380.105828][ T3597] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 380.107922][ T9692] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 380.121029][ T3597] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 380.165433][ T3597] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 380.189925][ T3597] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 380.214386][ T3597] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 380.237044][ T3597] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 380.255040][ T3597] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 380.275711][ T3597] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz0 [ 380.314700][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 380.368633][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 380.377371][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.384592][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.475474][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 380.529692][ T4050] logitech 0003:046D:CA03.0015: unknown main item tag 0x0 [ 380.555783][ T4050] logitech 0003:046D:CA03.0015: unknown main item tag 0x0 [ 380.624792][ T4050] logitech 0003:046D:CA03.0015: unknown main item tag 0x0 [ 380.675382][ T4050] logitech 0003:046D:CA03.0015: unknown main item tag 0x0 [ 380.702983][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 380.712235][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.719411][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 380.727433][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 380.737268][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 380.737764][ T4050] logitech 0003:046D:CA03.0015: unknown main item tag 0x0 [ 380.758736][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 380.799700][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 380.819366][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 380.822618][ T4050] logitech 0003:046D:CA03.0015: hidraw0: USB HID v0.00 Device [HID 046d:ca03] on usb-dummy_hcd.3-1/input0 [ 380.848412][ T9937] loop2: detected capacity change from 0 to 164 [ 380.877203][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 380.905601][ T4050] logitech 0003:046D:CA03.0015: no inputs found [ 380.933066][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 380.961954][ T4050] usb 4-1: USB disconnect, device number 14 [ 381.010189][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 381.059765][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 381.088889][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 381.120467][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 381.160746][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 381.185607][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 381.926646][ T9956] loop4: detected capacity change from 0 to 16 [ 381.967450][ T9956] erofs: (device loop4): mounted with root inode @ nid 36. [ 382.082974][ T3553] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[9000] [ 382.143751][ T9956] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 382.227767][ T26] audit: type=1800 audit(1719918699.126:168): pid=9956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1889" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 382.562026][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 382.586842][ T27] INFO: task syz.1.1067:7021 blocked for more than 143 seconds. [ 382.596511][ T27] Not tainted 6.1.96-syzkaller #0 [ 382.607985][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 382.617109][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 382.641949][ T9692] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.692577][ T27] task:syz.1.1067 state:D stack:24480 pid:7021 ppid:3556 flags:0x00004002 [ 382.737643][ T4050] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 382.757632][ T27] Call Trace: [ 382.797114][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 382.800728][ T27] [ 382.815752][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 382.831819][ T27] __schedule+0x142d/0x4550 [ 382.850141][ T27] ? __sched_text_start+0x8/0x8 [ 382.872820][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 382.901176][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 382.902669][ T27] ? print_irqtrace_events+0x210/0x210 [ 382.917014][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 382.952187][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 382.963441][ T9692] device veth0_vlan entered promiscuous mode [ 382.980842][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 382.994628][ T27] schedule+0xbf/0x180 [ 383.013129][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 383.020718][ T27] io_schedule+0x88/0x100 [ 383.039994][ T27] folio_wait_bit_common+0x878/0x1290 [ 383.065497][ T27] ? folio_wait_bit+0x20/0x20 [ 383.066298][ T9692] device veth1_vlan entered promiscuous mode [ 383.080625][ T27] ? migration_entry_wait_on_locked+0x1160/0x1160 [ 383.103161][ T27] __filemap_get_folio+0x47c/0xe80 [ 383.107934][ T4050] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.121230][ T27] ? __filemap_get_folio+0x150/0xe80 [ 383.127468][ T4050] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.142388][ T27] ? page_cache_prev_miss+0x500/0x500 [ 383.156551][ T4050] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 383.167160][ T27] ? smp_call_function_many+0x30/0x30 [ 383.192819][ T9692] device veth0_macvtap entered promiscuous mode [ 383.201273][ T27] truncate_inode_pages_range+0x598/0x1340 [ 383.203350][ T4050] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 383.228039][ T27] ? mapping_evict_folio+0x5b0/0x5b0 [ 383.234177][ T9692] device veth1_macvtap entered promiscuous mode [ 383.244775][ T27] ? xas_next_entry+0x3d0/0x3d0 [ 383.254974][ T4050] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.260947][ T27] ? filemap_write_and_wait_range+0x217/0x290 [ 383.285513][ T27] ? invalidate_bh_lrus+0x30/0x30 [ 383.293099][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 383.303357][ T27] ? __bread_gfp+0x370/0x370 [ 383.310109][ T4050] usb 4-1: config 0 descriptor?? [ 383.316525][ T27] ? invalidate_bh_lrus+0x30/0x30 [ 383.326358][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 383.332425][ T27] blkdev_flush_mapping+0x154/0x2b0 [ 383.352191][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 383.360513][ T27] blkdev_put+0x4c0/0x750 [ 383.374994][ T27] ? task_work_run+0x1fc/0x300 [ 383.386989][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 383.390320][ T27] blkdev_close+0x56/0x80 [ 383.419957][ T27] ? blkdev_open+0x2e0/0x2e0 [ 383.423619][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 383.435920][ T27] __fput+0x3b7/0x890 [ 383.449711][ T27] task_work_run+0x246/0x300 [ 383.459521][ T9692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.465266][ T27] ? task_work_cancel+0x2b0/0x2b0 [ 383.486653][ T27] ? exit_task_namespaces+0xdd/0xf0 [ 383.499547][ T9692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.503648][ T27] do_exit+0xa73/0x26a0 [ 383.531017][ T27] ? put_task_struct+0x80/0x80 [ 383.535495][ T9692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.547093][ T27] ? get_signal+0x137e/0x17d0 [ 383.565304][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 383.566639][ T9692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.583895][ T27] ? print_irqtrace_events+0x210/0x210 [ 383.601878][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 383.616901][ T9692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.622272][ T27] do_group_exit+0x202/0x2b0 [ 383.666949][ T27] ? _raw_spin_unlock_irq+0x1f/0x40 [ 383.682605][ T9692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.688182][ T27] ? lockdep_hardirqs_on+0x94/0x130 [ 383.722704][ T9692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.723364][ T27] get_signal+0x16f7/0x17d0 [ 383.756512][ T9692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.759269][ T27] ? ptrace_notify+0x370/0x370 [ 383.792967][ T9692] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.794379][ T27] ? print_irqtrace_events+0x210/0x210 [ 383.811668][ T4050] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 383.823222][ T4050] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 383.827089][ T27] arch_do_signal_or_restart+0xb0/0x1a10 [ 383.833559][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 383.851652][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 383.868488][ T27] ? kmem_cache_free+0x292/0x510 [ 383.873982][ T27] ? do_sys_openat2+0x42b/0x500 [ 383.875652][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 383.885387][ T27] ? do_sys_openat2+0x42b/0x500 [ 383.887947][ T4050] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 383.896259][ T27] ? get_sigframe_size+0x10/0x10 [ 383.921870][ T9692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.941493][ T27] ? xfd_validate_state+0x6a/0x140 [ 383.952086][ T9692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.973710][ T27] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 383.994956][ T27] ? __x64_sys_openat+0x243/0x290 [ 384.004585][ T9692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.021204][ T27] ? exit_to_user_mode_loop+0x39/0x100 [ 384.037641][ T27] exit_to_user_mode_loop+0x6a/0x100 [ 384.050102][ T27] exit_to_user_mode_prepare+0xb1/0x140 [ 384.062451][ T27] syscall_exit_to_user_mode+0x60/0x270 [ 384.067715][ T9692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.074882][ T27] do_syscall_64+0x47/0xb0 [ 384.092167][ T27] ? clear_bhb_loop+0x45/0xa0 [ 384.102610][ T27] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 384.111565][ T9692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.119018][ T27] RIP: 0033:0x7f0efb574950 [ 384.126912][ T27] RSP: 002b:00007f0efc3ddb80 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 384.135945][ T27] RAX: 0000000000000006 RBX: 0000000000000000 RCX: 00007f0efb574950 [ 384.144370][ T9692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.162426][ T27] RDX: 0000000000000000 RSI: 00007f0efc3ddc20 RDI: 00000000ffffff9c [ 384.178474][ T9692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.190216][ T27] RBP: 00007f0efc3ddc20 R08: 0000000000000000 R09: 002364626e2f7665 [ 384.202819][ T27] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 384.211319][ T9692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.226340][ T27] R13: 000000000000006e R14: 00007f0efb704038 R15: 00007ffe37a4d7e8 [ 384.235097][ T9692] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 384.246084][ T27] [ 384.249553][ T27] [ 384.249553][ T27] Showing all locks held in the system: [ 384.260528][ T9967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.278602][ T9692] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 384.296382][ T27] 2 locks held by kworker/0:0/7: [ 384.312528][ T9967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.335238][ T9692] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.337374][ T27] 1 lock held by rcu_tasks_kthre/12: [ 384.375503][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 384.377658][ T27] #0: ffffffff8d12ae90 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 384.401695][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 384.404772][ T27] 1 lock held by rcu_tasks_trace/13: [ 384.421768][ T27] #0: ffffffff8d12b690 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30 [ 384.432314][ T9692] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.437039][ T27] 1 lock held by khungtaskd/27: [ 384.446642][ T27] #0: ffffffff8d12acc0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290 [ 384.457117][ T27] 2 locks held by kworker/u4:2/41: [ 384.464602][ T27] #0: ffff888012479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 384.476118][ T9692] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.485120][ T9692] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.494584][ T27] #1: ffffffff8d12acc0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x16a/0x470 [ 384.549504][ T9692] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.564641][ T27] 2 locks held by getty/3307: [ 384.574718][ T27] #0: ffff888028bd1098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 384.626213][ T27] #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0 [ 384.666785][ T27] 3 locks held by kworker/1:5/3597: [ 384.672459][ T27] #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 384.724187][ T27] #1: ffffc9000430fd20 (fqdir_free_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 384.757764][ T27] #2: ffffffff8d130180 (rcu_state.barrier_mutex){+.+.}-{3:3}, at: rcu_barrier+0x48/0x5f0 [ 384.787595][ T27] 4 locks held by kworker/u4:5/3626: [ 384.792980][ T27] #0: ffff888012616938 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 384.824565][ T27] #1: ffffc9000435fd20 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 384.864361][ T27] #2: ffffffff8e28da10 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0xf1/0xb60 [ 384.907720][ T27] #3: ffffffff8d1302b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930 [ 384.924633][ T27] 3 locks held by kworker/0:9/4050: [ 384.954748][ T27] #0: ffff88802805f538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 385.004312][ T27] #1: ffffc9000a33fd20 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 385.017127][ T27] #2: ffffffff8e299d68 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xcc/0x16b0 [ 385.054658][ T27] 2 locks held by kworker/0:10/5309: [ 385.074338][ T27] #0: ffff888012472138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 385.095172][ T27] #1: ffffc90014347d20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 385.134227][ T27] 3 locks held by kworker/0:13/5313: [ 385.154111][ T27] 6 locks held by kworker/1:14/5508: [ 385.174419][ T27] #0: ffff888012470938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 385.197832][ T27] #1: ffffc900031efd20 ((work_completion)(&intf->reset_ws)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0 [ 385.234092][ T27] #2: ffff888019bfb190 (&dev->mutex){....}-{3:3}, at: usb_lock_device_for_reset+0x124/0x320 [ 385.260637][ T27] #3: ffff8881453374f8 (&port_dev->status_lock){+.+.}-{3:3}, at: usb_reset_device+0x542/0xaf0 [ 385.267728][ T5508] usb 4-1: reset high-speed USB device number 15 using dummy_hcd [ 385.277750][ T27] #4: ffff888021d61568 (hcd->address0_mutex){+.+.}-{3:3}, at: usb_reset_and_verify_device+0x352/0x1470 [ 385.291194][ T9952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.299144][ T27] #5: ffff8880b993aa18 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140 [ 385.316011][ T9952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.326582][ T27] 1 lock held by syz.1.1067/7021: [ 385.338878][ T27] #0: ffff88801f7164c8 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0x100/0x750 [ 385.354989][ T27] 2 locks held by syz-executor/9692: [ 385.361985][ T27] #0: ffffffff8e299d68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x7c1/0xff0 [ 385.376561][ T27] #1: ffff88814535d3e8 (&wg->device_update_lock){+.+.}-{3:3}, at: wg_open+0x224/0x410 [ 385.393549][ T27] 2 locks held by syz.4.1889/9956: [ 385.400457][ T27] #0: ffff888073577a10 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x98/0x230 [ 385.417963][ T27] #1: ffffffff8d1302b8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x360/0x930 [ 385.435333][ T27] 2 locks held by sed/9990: [ 385.464457][ T27] [ 385.469830][ T27] ============================================= [ 385.469830][ T27] [ 385.484459][ T27] NMI backtrace for cpu 0 [ 385.488822][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.96-syzkaller #0 [ 385.496674][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 385.506770][ T27] Call Trace: [ 385.510145][ T27] [ 385.513084][ T27] dump_stack_lvl+0x1e3/0x2cb [ 385.517793][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 385.523269][ T27] ? panic+0x764/0x764 [ 385.527346][ T27] ? vprintk_emit+0x622/0x740 [ 385.532040][ T27] ? printk_sprint+0x490/0x490 [ 385.536821][ T27] ? nmi_cpu_backtrace+0x252/0x560 [ 385.541963][ T27] nmi_cpu_backtrace+0x4e1/0x560 [ 385.546926][ T27] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 385.553097][ T27] ? _printk+0xd1/0x111 [ 385.557266][ T27] ? panic+0x764/0x764 [ 385.561356][ T27] ? __wake_up_klogd+0xcc/0x100 [ 385.566217][ T27] ? panic+0x764/0x764 [ 385.570299][ T27] ? nmi_trigger_cpumask_backtrace+0xe2/0x3f0 [ 385.576389][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 385.582483][ T27] nmi_trigger_cpumask_backtrace+0x1b0/0x3f0 [ 385.588490][ T27] watchdog+0xf88/0xfd0 [ 385.592744][ T27] ? watchdog+0x1f8/0xfd0 [ 385.597114][ T27] kthread+0x28d/0x320 [ 385.601194][ T27] ? hungtask_pm_notify+0x50/0x50 [ 385.606231][ T27] ? kthread_blkcg+0xd0/0xd0 [ 385.610827][ T27] ret_from_fork+0x1f/0x30 [ 385.615351][ T27] [ 385.619247][ T27] Sending NMI from CPU 0 to CPUs 1: [ 385.619289][ T5508] usb 4-1: device descriptor read/64, error -32 [ 385.624471][ C1] NMI backtrace for cpu 1 [ 385.624482][ C1] CPU: 1 PID: 5508 Comm: kworker/1:14 Not tainted 6.1.96-syzkaller #0 [ 385.624501][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 385.624512][ C1] Workqueue: events __usb_queue_reset_device [ 385.624542][ C1] RIP: 0010:format_decode+0x0/0x1f10 [ 385.624567][ C1] Code: 89 f1 80 e1 07 38 c1 0f 8c 67 ff ff ff 4c 89 f7 e8 e5 a0 5c f7 e9 5a ff ff ff e8 5b a5 05 00 66 2e 0f 1f 84 00 00 00 00 00 90 <55> 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 e4 e0 48 81 ec c0 00 [ 385.624583][ C1] RSP: 0018:ffffc900031eeeb8 EFLAGS: 00000293 [ 385.624597][ C1] RAX: ffffffff8a856a9d RBX: ffffffff8aecc5e5 RCX: ffff8880265e5940 [ 385.624612][ C1] RDX: 0000000000000000 RSI: ffffc900031eef40 RDI: ffffffff8aecc5e5 [ 385.624625][ C1] RBP: ffffc900031eefb0 R08: ffffffff8a85b09e R09: ffffc900031eee20 [ 385.624639][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc900031ef241 [ 385.624652][ C1] R13: dffffc0000000000 R14: ffffc900031eef40 R15: ffffffff8aecc5e5 [ 385.624666][ C1] FS: 0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 385.624681][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 385.624694][ C1] CR2: 00007fffa1e69f2c CR3: 0000000062764000 CR4: 00000000003506e0 [ 385.624710][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 385.624721][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 385.624732][ C1] Call Trace: [ 385.624738][ C1] [ 385.624744][ C1] ? nmi_cpu_backtrace+0x3de/0x560 [ 385.624772][ C1] ? read_lock_is_recursive+0x10/0x10 [ 385.624814][ C1] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 385.624843][ C1] ? nmi_handle+0x25/0x440 [ 385.624878][ C1] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 385.624906][ C1] ? nmi_handle+0x12e/0x440 [ 385.624933][ C1] ? nmi_handle+0x25/0x440 [ 385.624960][ C1] ? vsnprintf+0x1c70/0x1c70 [ 385.624980][ C1] ? default_do_nmi+0x62/0x150 [ 385.624998][ C1] ? exc_nmi+0xa8/0x100 [ 385.625015][ C1] ? end_repeat_nmi+0x16/0x31 [ 385.625044][ C1] ? number+0xaae/0xf80 [ 385.625063][ C1] ? vsnprintf+0x12dd/0x1c70 [ 385.625084][ C1] ? vsnprintf+0x1c70/0x1c70 [ 385.625105][ C1] ? vsnprintf+0x1c70/0x1c70 [ 385.625127][ C1] ? vsnprintf+0x1c70/0x1c70 [ 385.625148][ C1] [ 385.625153][ C1] [ 385.625159][ C1] vsnprintf+0x14d/0x1c70 [ 385.625189][ C1] ? ptr_to_hashval+0x70/0x70 [ 385.625210][ C1] ? prb_read_valid+0xf0/0xf0 [ 385.625228][ C1] ? reacquire_held_locks+0x660/0x660 [ 385.625258][ C1] sprintf+0xd6/0x120 [ 385.625282][ C1] ? vsprintf+0x30/0x30 [ 385.625303][ C1] ? pointer+0x888/0x1000 [ 385.625328][ C1] info_print_prefix+0x167/0x300 [ 385.625348][ C1] ? msg_add_dict_text+0x3c0/0x3c0 [ 385.625366][ C1] ? reacquire_held_locks+0x660/0x660 [ 385.625392][ C1] ? __lock_acquire+0x125b/0x1f80 [ 385.625417][ C1] ? reacquire_held_locks+0x660/0x660 [ 385.625447][ C1] console_emit_next_record+0x74f/0x1000 [ 385.625475][ C1] ? info_print_prefix+0x300/0x300 [ 385.625496][ C1] ? mark_lock+0x9a/0x340 [ 385.625524][ C1] ? __lock_acquire+0x125b/0x1f80 [ 385.625565][ C1] console_unlock+0x278/0x7c0 [ 385.625595][ C1] ? vprintk_emit+0x740/0x740 [ 385.625621][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 385.625642][ C1] ? vprintk_emit+0x340/0x740 [ 385.625667][ C1] vprintk_emit+0x523/0x740 [ 385.625695][ C1] ? printk_sprint+0x490/0x490 [ 385.625721][ C1] ? vscnprintf+0x80/0x80 [ 385.625745][ C1] ? read_word_at_a_time+0xe/0x20 [ 385.625764][ C1] ? strscpy+0x89/0x220 [ 385.625784][ C1] dev_vprintk_emit+0x2aa/0x323 [ 385.625811][ C1] ? _dev_info+0x165/0x165 [ 385.625839][ C1] ? __lock_acquire+0x1f80/0x1f80 [ 385.625868][ C1] dev_printk_emit+0xd9/0x118 [ 385.625898][ C1] ? dev_vprintk_emit+0x323/0x323 [ 385.625923][ C1] ? hub_port_reset+0x1a23/0x1f00 [ 385.625947][ C1] ? __dev_printk+0x137/0x1a0 [ 385.625971][ C1] _dev_err+0x11e/0x165 [ 385.625997][ C1] ? hub_port_init+0x102a/0x2940 [ 385.626017][ C1] ? _dev_crit+0x165/0x165 [ 385.626040][ C1] ? usb_control_msg+0x356/0x4c0 [ 385.626073][ C1] hub_port_init+0x2029/0x2940 [ 385.626094][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 385.626114][ C1] ? _raw_spin_unlock_irq+0x2a/0x40 [ 385.626144][ C1] usb_reset_and_verify_device+0x3a3/0x1470 [ 385.626173][ C1] ? usb_reset_device+0x542/0xaf0 [ 385.626195][ C1] ? usb_reset_device+0xaf0/0xaf0 [ 385.626214][ C1] ? find_usage_backwards+0x590/0x8a0 [ 385.626242][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 385.626264][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 385.626287][ C1] usb_reset_device+0x54b/0xaf0 [ 385.626312][ C1] __usb_queue_reset_device+0x6f/0x90 [ 385.626338][ C1] ? process_one_work+0x7a9/0x11d0 [ 385.626359][ C1] process_one_work+0x8a9/0x11d0 [ 385.626388][ C1] ? worker_detach_from_pool+0x260/0x260 [ 385.626412][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 385.626433][ C1] ? kthread_data+0x4e/0xc0 [ 385.626461][ C1] ? wq_worker_running+0x97/0x190 [ 385.626491][ C1] worker_thread+0xa47/0x1200 [ 385.626517][ C1] ? _raw_spin_unlock+0x40/0x40 [ 385.626544][ C1] kthread+0x28d/0x320 [ 385.626559][ C1] ? worker_clr_flags+0x190/0x190 [ 385.626578][ C1] ? kthread_blkcg+0xd0/0xd0 [ 385.626595][ C1] ret_from_fork+0x1f/0x30 [ 385.626627][ C1] [ 386.041064][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 386.041086][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 6.1.96-syzkaller #0 [ 386.041111][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 386.041123][ T27] Call Trace: [ 386.041132][ T27] [ 386.041141][ T27] dump_stack_lvl+0x1e3/0x2cb [ 386.041185][ T27] ? nf_tcp_handle_invalid+0x642/0x642 [ 386.041221][ T27] ? panic+0x764/0x764 [ 386.041246][ T27] ? llist_add_batch+0x160/0x1d0 [ 386.041282][ T27] ? vscnprintf+0x59/0x80 [ 386.041313][ T27] panic+0x318/0x764 [ 386.041340][ T27] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 386.041377][ T27] ? memcpy_page_flushcache+0xfc/0xfc [ 386.041409][ T27] ? nmi_trigger_cpumask_backtrace+0x2c1/0x3f0 [ 386.041445][ T27] ? nmi_trigger_cpumask_backtrace+0x33a/0x3f0 [ 386.041485][ T27] ? nmi_trigger_cpumask_backtrace+0x33f/0x3f0 [ 386.041525][ T27] watchdog+0xfc7/0xfd0 [ 386.041562][ T27] ? watchdog+0x1f8/0xfd0 [ 386.041596][ T27] kthread+0x28d/0x320 [ 386.041617][ T27] ? hungtask_pm_notify+0x50/0x50 [ 386.041644][ T27] ? kthread_blkcg+0xd0/0xd0 [ 386.041668][ T27] ret_from_fork+0x1f/0x30 [ 386.041713][ T27] [ 386.044009][ T27] Kernel Offset: disabled [ 386.274662][ T27] Rebooting in 86400 seconds..