last executing test programs: 3m40.260206521s ago: executing program 3 (id=13): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x19, 0x2d, "0003"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB='\x00\n\b'], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x1c880) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 3m36.585671473s ago: executing program 3 (id=20): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES8, @ANYRESHEX], 0xfc, 0x2b6, &(0x7f0000000480)="$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") creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x122) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x50) 3m36.202528575s ago: executing program 3 (id=22): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000380)='./file0\x00', 0x800, &(0x7f0000000940)=ANY=[], 0x1, 0x2fa, &(0x7f0000000080)="$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") r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001780)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$KVM_SET_PIT2(0xffffffffffffffff, 0x4070aea0, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000001580)=0xfffffffc) 3m35.123874082s ago: executing program 3 (id=25): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) write(r0, &(0x7f0000000180), 0x0) getresgid(0x0, 0x0, 0x0) r1 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000240)='./file1\x00', 0x2001084c, &(0x7f0000000300)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r3, @ANYRES64=r2, @ANYRES8=r4, @ANYRES16=r2, @ANYRES64=r2, @ANYRES64], 0x81, 0x14fc, &(0x7f0000002a80)="$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") stat(0x0, 0x0) mount$bpf(0x0, &(0x7f00000007c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f0000000c40)={[{@uid={'uid', 0x3d, r3}}]}) 3m34.291114817s ago: executing program 3 (id=30): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000051}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 3m34.063425258s ago: executing program 3 (id=31): syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000140)='./file0\x00', 0x204440, &(0x7f0000000500)=ANY=[], 0x2, 0x1cc, &(0x7f0000000540)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x26e1, 0x0) 3m33.325214223s ago: executing program 32 (id=31): syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000140)='./file0\x00', 0x204440, &(0x7f0000000500)=ANY=[], 0x2, 0x1cc, &(0x7f0000000540)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x26e1, 0x0) 5.697250125s ago: executing program 1 (id=468): socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/power/pm_trace_dev_match', 0x20800, 0x2) read$msr(r3, &(0x7f00000002c0)=""/4096, 0x1000) 5.262300788s ago: executing program 0 (id=472): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000019080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000019240)='net/netstat\x00') pread64(r1, &(0x7f00000192c0)=""/102363, 0xfffffee8, 0xe377) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f00000001c0)={0x0, 'team0\x00', {0x3}, 0x6f}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$fuse(0x0, &(0x7f0000019140)='./file0/../file0\x00', &(0x7f00000190c0), 0x0, &(0x7f0000019280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRESDEC=r4, @ANYRES8=r0, @ANYRESDEC=r0]) openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020, 0x0, 0x0}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) write$FUSE_IOCTL(0xffffffffffffffff, &(0x7f0000000100)={0x20, 0x0, r5, {0x800, 0x0, 0x4, 0x3}}, 0x20) r6 = semget(0x1, 0x2, 0x8d30a0a8790dd845) semctl$GETPID(r6, 0x0, 0xb, &(0x7f00000000c0)=""/40) r7 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(r7, &(0x7f0000002240)=""/237, 0xed, 0x4eb) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000003000000010000000000000e0300000000000000010000000000001200000000000000000000000202000000002e008e8cdcef8d257d3918e7ef1647336b495abca12e4f87d628edf55d1d99cc9e0b633fc6bf9aa1dd33df6256a27e97769a0d79f56178cc9c8dce6b7871701d5a9590c8a9a106dd940c1fc0a376df45cb2791536539476d2498ac321b7ac503db4cf51e3c570036adcecd5ba6c3872fd4a3330645f542abd5daa5c1dbed2e3a8cb862b850fa9bec0226434ec82dd25fa033f2869edc94d8b5439e1fa454106e78cc8e432aea8ce163342366b47750592a2a89f0d26ec54759d6fdc0138ecacba66d1c7ed6a43a3602b9dd756d2e3c2825b138d25498c87cf2b760877a297011beae4f575e85afaf0cab4d05db06"], 0x0, 0x43, 0x0, 0x1}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$evdev(&(0x7f0000000000), 0x7fffffff, 0xad6b1583e509be0a) 4.537848383s ago: executing program 1 (id=473): add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) io_uring_setup(0x2cee, &(0x7f0000000200)={0x0, 0x93b0, 0x4, 0x1, 0x163}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x102, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000040)=""/96) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000500)='/sys/kernel/notes', 0x0, 0x90) fsetxattr$security_capability(r2, &(0x7f0000000200), 0x0, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/43, 0x2b}], 0x1, 0x42, 0x116d) listen(0xffffffffffffffff, 0x3) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) r4 = fanotify_init(0xf00, 0x2) fanotify_mark(r4, 0x105, 0x8971, 0xffffffffffffffff, 0x0) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000200), 0x3c}], 0x4c) rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='./bus\x00') 4.360831543s ago: executing program 2 (id=474): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x4, 0x4f2, &(0x7f0000000c80)="$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") syz_clone3(0x0, 0x0) quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)={0x7ff, 0xfffffffffffffffc, 0x2000000000000010, 0x0, 0x1, 0x200000006, 0x2, 0x7fff, 0x20}) 3.825461667s ago: executing program 2 (id=475): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000780)={0x44, 0x0, &(0x7f00000006c0)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0xfcff, &(0x7f0000000a00)="93"}) 3.747925187s ago: executing program 0 (id=476): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x9}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c10000000000000000000", 0x58}], 0x1) 3.503055069s ago: executing program 2 (id=477): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x4, 0xfffff034}, {0x6, 0x0, 0x40, 0x1}]}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd60182325001f2c01fe9a750000000000d34449fe04319a40cbc8f40000bbfe80000000000000000000798600000000aa"], 0x0) 3.358452629s ago: executing program 0 (id=478): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x0) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000040)={0xe6c, 0x2, 0xffff1980, 0xa, 0x6, "d8ad0e98c775e49ce1c41b6500a138b8ccdb17"}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0xaaaaaaaaaaaaca7, 0x25, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.24145482s ago: executing program 4 (id=479): setreuid(0x0, 0xee00) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)=')\x80', 0x0) 3.22453569s ago: executing program 2 (id=480): socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000480)='.\x00', 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/191, 0x0, 0xffff1000}) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) 2.991693692s ago: executing program 1 (id=481): socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/power/pm_trace_dev_match', 0x20800, 0x2) read$msr(r3, &(0x7f00000002c0)=""/4096, 0x1000) 2.937368462s ago: executing program 4 (id=482): sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x0, 0x701, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x20048004) 2.887631752s ago: executing program 4 (id=483): r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x12, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x11, 0x0, 0x0}) 2.816091263s ago: executing program 4 (id=484): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0xe}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) 2.740875824s ago: executing program 0 (id=485): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x104}}, 0x2404c840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@ipv6_deladdrlabel={0x38, 0x48, 0x101, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_LABEL={0x8}]}, 0x38}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000180)=0x5, 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r0, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}}], 0xffb9, 0x4004044) 2.621287854s ago: executing program 4 (id=486): close(0x3) syz_open_dev$sndpcmc(&(0x7f0000000080), 0xb, 0x2) r0 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r0, 0x40044160, 0x3) 2.563437894s ago: executing program 4 (id=487): socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$setperm(0x5, 0x0, 0x4000410) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/mcfilter\x00') read$msr(r3, &(0x7f0000000200)=""/57, 0x39) 1.918337788s ago: executing program 2 (id=488): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f0000001340)) 1.807668939s ago: executing program 1 (id=489): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00042dbd7000fd"], 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000001200)='syzkaller\x00'}, 0x80) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r2, r4, 0x1, 0x0, @void}, 0x10) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x1, 0xbdb], 0xdddd0000, 0x1c4213}) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.721309089s ago: executing program 2 (id=490): add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) io_uring_setup(0x2cee, &(0x7f0000000200)={0x0, 0x93b0, 0x4, 0x1, 0x163}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x102, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f0000000040)=""/96) r2 = openat$sysfs(0xffffff9c, &(0x7f0000000500)='/sys/kernel/notes', 0x0, 0x90) fsetxattr$security_capability(r2, &(0x7f0000000200), 0x0, 0x0, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) openat$cuse(0xffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/mdstat\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/43, 0x2b}], 0x1, 0x42, 0x116d) listen(0xffffffffffffffff, 0x3) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) r4 = fanotify_init(0xf00, 0x2) fanotify_mark(r4, 0x105, 0x8971, 0xffffffffffffffff, 0x0) readv(r4, &(0x7f0000000280)=[{&(0x7f0000000200), 0x3c}], 0x4c) rename(&(0x7f0000000100)='./bus\x00', &(0x7f0000000140)='./bus\x00') 1.63254818s ago: executing program 0 (id=491): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x67, 0x0, 0x0) connect$inet6(r3, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002100)={0x18, {"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", 0x1000}}, 0x1006) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) listen(0xffffffffffffffff, 0x6) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002ec0)=@deltfilter={0x24, 0x2d, 0x1, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xa, 0x1}}}, 0x24}}, 0x0) 1.249407372s ago: executing program 1 (id=492): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES8, @ANYRESHEX], 0xfc, 0x2b6, &(0x7f0000000480)="$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") creat(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x122) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 297.360308ms ago: executing program 0 (id=493): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000100)={[{@discard}, {@block_validity}]}, 0x1, 0x580, &(0x7f0000000780)="$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") setxattr$incfs_metadata(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)="30573472b621739991c336124406e8a5c812ca847e3bf9b837c91d46ab", 0x1d, 0x1) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f0000000000)=ANY=[], 0x361, 0x1) setxattr$trusted_overlay_upper(&(0x7f0000000340)='./file1\x00', &(0x7f0000000400), 0x0, 0x0, 0x2) lsetxattr$trusted_overlay_upper(&(0x7f0000000700)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000740)=ANY=[@ANYRESHEX=r0, @ANYRESHEX], 0xfe37, 0x0) 0s ago: executing program 1 (id=494): sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x4810) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.43' (ED25519) to the list of known hosts. [ 87.841415][ T5776] cgroup: Unknown subsys name 'net' [ 87.983202][ T5776] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.818309][ T5776] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.117351][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 92.133511][ T5798] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 92.142490][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 92.151859][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 92.160398][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 92.169324][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 92.177937][ T5798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 92.186280][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 92.196510][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 92.224726][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 92.233342][ T5798] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 92.235080][ T5801] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.241648][ T5798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 92.249953][ T5802] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 92.265137][ T5801] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.275693][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 92.290778][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.299023][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 92.301547][ T5802] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.308616][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 92.324192][ T5801] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 92.326623][ T5802] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 92.332935][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 92.341429][ T5802] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.814558][ T5788] chnl_net:caif_netlink_parms(): no params data found [ 93.006181][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 93.217821][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.226434][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.235214][ T5788] bridge_slave_0: entered allmulticast mode [ 93.243936][ T5788] bridge_slave_0: entered promiscuous mode [ 93.258852][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 93.278249][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 93.296469][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.304330][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.311573][ T5788] bridge_slave_1: entered allmulticast mode [ 93.319018][ T5788] bridge_slave_1: entered promiscuous mode [ 93.405214][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.446114][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.490744][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.500214][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.509788][ T5787] bridge_slave_0: entered allmulticast mode [ 93.519194][ T5787] bridge_slave_0: entered promiscuous mode [ 93.548377][ T5788] team0: Port device team_slave_0 added [ 93.574389][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.581882][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.590454][ T5787] bridge_slave_1: entered allmulticast mode [ 93.598552][ T5787] bridge_slave_1: entered promiscuous mode [ 93.624048][ T5788] team0: Port device team_slave_1 added [ 93.719701][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.735421][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.760912][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.769846][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.779724][ T5785] bridge_slave_0: entered allmulticast mode [ 93.789554][ T5785] bridge_slave_0: entered promiscuous mode [ 93.801012][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.809252][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.818410][ T5785] bridge_slave_1: entered allmulticast mode [ 93.827114][ T5785] bridge_slave_1: entered promiscuous mode [ 93.835892][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.843698][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.875226][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.938090][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.945624][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.978031][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.004156][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.012365][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.023213][ T5786] bridge_slave_0: entered allmulticast mode [ 94.031655][ T5786] bridge_slave_0: entered promiscuous mode [ 94.059419][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.079428][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.105526][ T5787] team0: Port device team_slave_0 added [ 94.116534][ T5787] team0: Port device team_slave_1 added [ 94.123945][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.131314][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.140734][ T5786] bridge_slave_1: entered allmulticast mode [ 94.151228][ T5786] bridge_slave_1: entered promiscuous mode [ 94.265206][ T5785] team0: Port device team_slave_0 added [ 94.273320][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.281379][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.312077][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.325080][ T5801] Bluetooth: hci2: command tx timeout [ 94.328150][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.339154][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.369012][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.372939][ T5801] Bluetooth: hci1: command tx timeout [ 94.392467][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.407223][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.426912][ T5788] hsr_slave_0: entered promiscuous mode [ 94.433831][ T5788] hsr_slave_1: entered promiscuous mode [ 94.442857][ T5801] Bluetooth: hci0: command tx timeout [ 94.443553][ T5802] Bluetooth: hci3: command tx timeout [ 94.450275][ T5785] team0: Port device team_slave_1 added [ 94.523565][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.530783][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.559494][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.590538][ T5786] team0: Port device team_slave_0 added [ 94.600890][ T5786] team0: Port device team_slave_1 added [ 94.609667][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.618433][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.648020][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.752014][ T5787] hsr_slave_0: entered promiscuous mode [ 94.759586][ T5787] hsr_slave_1: entered promiscuous mode [ 94.767326][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 94.776894][ T5787] Cannot create hsr debugfs directory [ 94.808917][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.817948][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.845558][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.859784][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.867872][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.900609][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.004906][ T5785] hsr_slave_0: entered promiscuous mode [ 95.018793][ T5785] hsr_slave_1: entered promiscuous mode [ 95.026485][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.036371][ T5785] Cannot create hsr debugfs directory [ 95.150510][ T5786] hsr_slave_0: entered promiscuous mode [ 95.158779][ T5786] hsr_slave_1: entered promiscuous mode [ 95.166087][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.175753][ T5786] Cannot create hsr debugfs directory [ 95.473320][ T5788] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 95.496934][ T5788] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 95.510365][ T5788] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 95.539796][ T5788] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 95.626201][ T5787] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.639599][ T5787] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.650854][ T5787] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.665551][ T5787] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.789877][ T5785] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.807441][ T5785] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.819448][ T5785] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.850070][ T5785] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.964652][ T5786] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.986257][ T5786] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 96.002268][ T5786] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 96.025556][ T5786] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.094247][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.109387][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.171881][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.218009][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.227831][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.247069][ T5788] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.261064][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.268573][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.317973][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.325577][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.341349][ T1083] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.349132][ T1083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.363291][ T5802] Bluetooth: hci2: command tx timeout [ 96.440127][ T5787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.452166][ T5802] Bluetooth: hci1: command tx timeout [ 96.509076][ T5788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.529857][ T5802] Bluetooth: hci0: command tx timeout [ 96.537940][ T5802] Bluetooth: hci3: command tx timeout [ 96.558606][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.593100][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.700211][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.725971][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.751279][ T1083] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.760314][ T1083] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.802278][ T454] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.812327][ T454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.855844][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.863646][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.906992][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.915168][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.059118][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.127293][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.280825][ T5788] veth0_vlan: entered promiscuous mode [ 97.351967][ T5788] veth1_vlan: entered promiscuous mode [ 97.388924][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.426778][ T5787] veth0_vlan: entered promiscuous mode [ 97.473666][ T5787] veth1_vlan: entered promiscuous mode [ 97.512205][ T5788] veth0_macvtap: entered promiscuous mode [ 97.544987][ T5788] veth1_macvtap: entered promiscuous mode [ 97.590458][ T5785] veth0_vlan: entered promiscuous mode [ 97.601818][ T5787] veth0_macvtap: entered promiscuous mode [ 97.629908][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.658623][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.668349][ T5787] veth1_macvtap: entered promiscuous mode [ 97.691299][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.703375][ T5785] veth1_vlan: entered promiscuous mode [ 97.716564][ T5788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.726129][ T5788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.740160][ T968] cfg80211: failed to load regulatory.db [ 97.745969][ T5788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.756660][ T5788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.809798][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.821113][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.837064][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.868726][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.880206][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.894406][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.956925][ T5787] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.969268][ T5787] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.978485][ T5787] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.988254][ T5787] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.030211][ T5785] veth0_macvtap: entered promiscuous mode [ 98.052189][ T5785] veth1_macvtap: entered promiscuous mode [ 98.086448][ T5786] veth0_vlan: entered promiscuous mode [ 98.097476][ T2930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.108833][ T2930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.161314][ T5786] veth1_vlan: entered promiscuous mode [ 98.186604][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.199041][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.211556][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.224498][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.236436][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.263972][ T2930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.272143][ T2930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.284687][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.297614][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.307698][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.318568][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.330402][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.363492][ T2942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.364486][ T5785] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.386760][ T5785] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.396351][ T2942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.400794][ T5785] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.417296][ T5785] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.445306][ T5802] Bluetooth: hci2: command tx timeout [ 98.493731][ T454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.505832][ T5786] veth0_macvtap: entered promiscuous mode [ 98.513434][ T454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.522958][ T5802] Bluetooth: hci1: command tx timeout [ 98.603100][ T5802] Bluetooth: hci3: command tx timeout [ 98.605867][ T5801] Bluetooth: hci0: command tx timeout [ 98.634308][ T5786] veth1_macvtap: entered promiscuous mode [ 98.659121][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.670211][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.683995][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.695848][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.707116][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.720152][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.735397][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.783964][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.795077][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.820602][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.841479][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.850093][ T5880] syz.2.5[5880]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 98.854162][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.873142][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.885992][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.898378][ T5880] loop2: detected capacity change from 0 to 1024 [ 98.899788][ T5786] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.918956][ T5880] EXT4-fs: Ignoring removed nomblk_io_submit option [ 98.948762][ T5786] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.963436][ T5786] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.972379][ T5786] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.987853][ T5880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.131961][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.181960][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.220883][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.234937][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.285709][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.438839][ T454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.458693][ T5887] loop2: detected capacity change from 0 to 256 [ 99.474250][ T454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.505723][ T5887] ======================================================= [ 99.505723][ T5887] WARNING: The mand mount option has been deprecated and [ 99.505723][ T5887] and is ignored by this kernel. Remove the mand [ 99.505723][ T5887] option from the mount to silence this warning. [ 99.505723][ T5887] ======================================================= [ 99.646132][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.667548][ T5887] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 99.685109][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.742247][ T5892] loop0: detected capacity change from 0 to 512 [ 99.897234][ T5892] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.979160][ T5892] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.262012][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.360243][ T5900] process 'syz.2.9' launched './file1' with NULL argv: empty string added [ 100.455762][ T5905] loop0: detected capacity change from 0 to 136 [ 100.525017][ T5801] Bluetooth: hci2: command tx timeout [ 100.603896][ T5801] Bluetooth: hci1: command tx timeout [ 100.693187][ T5801] Bluetooth: hci0: command tx timeout [ 100.698779][ T5801] Bluetooth: hci3: command tx timeout [ 100.776447][ T5912] syz.2.14: attempt to access beyond end of device [ 100.776447][ T5912] loop5: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 100.791098][ T5912] EXT4-fs (loop5): unable to read superblock [ 101.043100][ T787] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 101.251847][ T5905] Zero length message leads to an empty skb [ 101.883288][ T787] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 101.957704][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.074072][ T787] usb 4-1: config 0 descriptor?? [ 102.180440][ T5921] loop1: detected capacity change from 0 to 256 [ 102.344505][ T787] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 102.622608][ C1] sched: RT throttling activated [ 102.763932][ T5801] Bluetooth: hci3: command tx timeout [ 103.360039][ T787] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 103.397641][ T787] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 103.421062][ T787] asix: probe of 4-1:0.0 failed with error -71 [ 103.452036][ T787] usb 4-1: USB disconnect, device number 2 [ 103.630719][ T5793] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 104.372308][ T5927] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 104.401367][ T5930] loop3: detected capacity change from 0 to 256 [ 104.685178][ T5934] loop2: detected capacity change from 0 to 512 [ 104.775835][ T5925] loop0: detected capacity change from 0 to 512 [ 104.812415][ T5937] loop3: detected capacity change from 0 to 128 [ 104.837781][ T5937] FAT-fs (loop3): bogus number of FAT sectors [ 104.851227][ T5937] FAT-fs (loop3): Can't find a valid FAT filesystem [ 104.887391][ T5925] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 104.932993][ T5925] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 104.957850][ T5934] EXT4-fs (loop2): Test dummy encryption mode enabled [ 104.961581][ T5925] EXT4-fs error (device loop0): ext4_do_update_inode:5244: inode #2: comm syz.0.17: corrupted inode contents [ 104.981668][ T5934] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 104.998582][ T5934] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 105.028321][ T5925] EXT4-fs error (device loop0): ext4_dirty_inode:6120: inode #2: comm syz.0.17: mark_inode_dirty error [ 105.055180][ T5925] EXT4-fs error (device loop0): ext4_do_update_inode:5244: inode #2: comm syz.0.17: corrupted inode contents [ 105.091869][ T5934] EXT4-fs error (device loop2): ext4_orphan_get:1425: comm syz.2.21: bad orphan inode 131083 [ 105.120013][ T5945] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.131988][ T5934] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.498466][ T5785] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.502292][ T5934] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 105.613121][ T5790] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.748714][ T5934] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 105.814943][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.820631][ T5961] loop3: detected capacity change from 0 to 256 [ 105.862903][ T5790] usb 2-1: Using ep0 maxpacket: 16 [ 105.884572][ T5790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 105.890731][ T5961] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d) [ 105.930322][ T5790] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 105.962456][ T5790] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 105.999655][ T5790] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 106.025540][ T5963] loop2: detected capacity change from 0 to 1024 [ 106.043334][ T5790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.062302][ T5963] EXT4-fs: Ignoring removed nomblk_io_submit option [ 106.079462][ T5790] usb 2-1: config 0 descriptor?? [ 106.144725][ T5963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.338195][ T2942] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.486436][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.557930][ T2942] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.565270][ T5790] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 106.596664][ T5790] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 106.617620][ T5790] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 106.642784][ T5790] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 106.651316][ T5790] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 106.659925][ T5790] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 106.671423][ T5790] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 106.679309][ T5790] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 106.687693][ T5790] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 106.698689][ T5790] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 106.768909][ T2942] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.804159][ T5790] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0001/input/input5 [ 106.932175][ T2942] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.012703][ T5790] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 107.083832][ T5790] usb 2-1: USB disconnect, device number 2 [ 107.277794][ T5970] fido_id[5970]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 107.584576][ T5802] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.606202][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.616199][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.626895][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.637395][ T5792] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 107.647931][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.853456][ T787] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 107.917732][ T5984] loop1: detected capacity change from 0 to 1024 [ 108.089358][ T787] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 108.120322][ T787] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 108.172796][ T787] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 108.230000][ T787] usb 3-1: config 220 has no interface number 2 [ 108.272778][ T787] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 108.367365][ T787] usb 3-1: config 220 interface 0 has no altsetting 0 [ 108.452754][ T787] usb 3-1: config 220 interface 76 has no altsetting 0 [ 108.460479][ T787] usb 3-1: config 220 interface 1 has no altsetting 0 [ 109.380162][ T787] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 109.412681][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.421926][ T787] usb 3-1: Product: syz [ 109.430106][ T787] usb 3-1: Manufacturer: syz [ 109.435745][ T787] usb 3-1: SerialNumber: syz [ 109.639311][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 109.662993][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 109.685250][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 109.698482][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 109.723282][ T5802] Bluetooth: hci0: command tx timeout [ 109.730629][ T5792] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 109.753192][ T5792] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 109.826814][ T787] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 109.834831][ T787] usb 3-1: No valid video chain found. [ 109.842129][ T787] usb 3-1: selecting invalid altsetting 0 [ 109.890611][ T787] usb 3-1: selecting invalid altsetting 0 [ 109.904559][ T787] usbtest: probe of 3-1:220.1 failed with error -22 [ 109.925219][ T787] usb 3-1: USB disconnect, device number 2 [ 110.174451][ T5972] chnl_net:caif_netlink_parms(): no params data found [ 110.701272][ T5972] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.722273][ T5972] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.735911][ T5972] bridge_slave_0: entered allmulticast mode [ 110.748392][ T5972] bridge_slave_0: entered promiscuous mode [ 110.773694][ T5972] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.793363][ T5972] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.810672][ T5972] bridge_slave_1: entered allmulticast mode [ 110.829207][ T5972] bridge_slave_1: entered promiscuous mode [ 110.883189][ T2942] hsr_slave_0: left promiscuous mode [ 110.897388][ T2942] hsr_slave_1: left promiscuous mode [ 110.915674][ T2942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.938891][ T2942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.957415][ T2942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.977457][ T2942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 110.987876][ T2942] bridge_slave_1: left allmulticast mode [ 111.000742][ T2942] bridge_slave_1: left promiscuous mode [ 111.007772][ T2942] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.028103][ T2942] bridge_slave_0: left allmulticast mode [ 111.035098][ T2942] bridge_slave_0: left promiscuous mode [ 111.042062][ T2942] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.108202][ T2942] veth1_macvtap: left promiscuous mode [ 111.115423][ T2942] veth0_macvtap: left promiscuous mode [ 111.121461][ T2942] veth1_vlan: left promiscuous mode [ 111.129084][ T2942] veth0_vlan: left promiscuous mode [ 111.954359][ T5792] Bluetooth: hci0: command tx timeout [ 111.954388][ T5801] Bluetooth: hci1: command tx timeout [ 112.092076][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 112.203361][ T6035] loop1: detected capacity change from 0 to 128 [ 112.255421][ T6035] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 112.289933][ T6035] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 112.366478][ T6035] EXT4-fs warning (device loop1): ext4_group_add:1742: No reserved GDT blocks, can't resize [ 112.463399][ T5786] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.581442][ T6039] loop1: detected capacity change from 0 to 1024 [ 112.591629][ T6039] EXT4-fs: inline encryption not supported [ 112.600652][ T6039] EXT4-fs: Ignoring removed nobh option [ 112.622106][ T6039] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 112.659536][ T6039] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 112.696437][ T6039] EXT4-fs (loop1): orphan cleanup on readonly fs [ 112.749832][ T6039] EXT4-fs error (device loop1): ext4_free_blocks:6676: comm syz.1.41: Freeing blocks not in datazone - block = 0, count = 4096 [ 112.772557][ T6039] EXT4-fs (loop1): Remounting filesystem read-only [ 112.789177][ T6039] EXT4-fs (loop1): 1 orphan inode deleted [ 112.803767][ T6039] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 112.860001][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.016156][ T2942] team0 (unregistering): Port device team_slave_1 removed [ 113.067617][ T2942] team0 (unregistering): Port device team_slave_0 removed [ 113.121060][ T2942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.170907][ T2942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.688814][ T2942] bond0 (unregistering): Released all slaves [ 113.904304][ T5972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.042765][ T5801] Bluetooth: hci0: command tx timeout [ 114.064521][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.085630][ T5972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.212840][ T5801] Bluetooth: hci1: command tx timeout [ 115.205490][ T6053] loop1: detected capacity change from 0 to 512 [ 115.299058][ T6053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.383192][ T5972] team0: Port device team_slave_0 added [ 115.391661][ T6053] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.421910][ T5972] team0: Port device team_slave_1 added [ 115.696863][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.731977][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.794603][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.939112][ T5972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.993382][ T5999] chnl_net:caif_netlink_parms(): no params data found [ 116.028163][ T5972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 116.075674][ T5972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.122206][ T5972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.123138][ T5801] Bluetooth: hci0: command tx timeout [ 116.239086][ T5972] hsr_slave_0: entered promiscuous mode [ 116.248514][ T5972] hsr_slave_1: entered promiscuous mode [ 116.264635][ T5972] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.274826][ T5972] Cannot create hsr debugfs directory [ 116.282869][ T5801] Bluetooth: hci1: command tx timeout [ 116.534321][ T6071] loop1: detected capacity change from 0 to 1024 [ 116.547397][ T6071] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 116.571005][ T6071] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 116.605110][ T6071] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.686135][ T5999] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.700327][ T6071] EXT4-fs error (device loop1): ext4_xattr_inode_iget:444: inode #11: comm syz.1.47: missing EA_INODE flag [ 116.708514][ T5999] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.734483][ T6071] EXT4-fs (loop1): Remounting filesystem read-only [ 116.738173][ T5999] bridge_slave_0: entered allmulticast mode [ 116.744043][ T6071] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2872: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 116.765138][ T5999] bridge_slave_0: entered promiscuous mode [ 116.839722][ T5999] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.868052][ T5999] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.888159][ T5999] bridge_slave_1: entered allmulticast mode [ 116.903939][ T5999] bridge_slave_1: entered promiscuous mode [ 116.980111][ T2942] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.055916][ T5999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.073468][ T5999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 117.148738][ T2942] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.239343][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.352824][ T6084] loop1: detected capacity change from 0 to 1024 [ 117.361340][ T6084] EXT4-fs: Invalid commit interval 100663296, must be smaller than 21474836 [ 117.392225][ T2942] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.469907][ T5999] team0: Port device team_slave_0 added [ 117.507535][ T5999] team0: Port device team_slave_1 added [ 117.870122][ T2942] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.894654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.904681][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.917345][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 117.993340][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.070828][ T5999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.079616][ T5999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.107577][ T5999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.154368][ T5999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.161577][ T5999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.200690][ T5999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.360421][ T5999] hsr_slave_0: entered promiscuous mode [ 118.367460][ T5801] Bluetooth: hci1: command tx timeout [ 118.383848][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 118.403159][ T5999] hsr_slave_1: entered promiscuous mode [ 118.424814][ T5999] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.432448][ T5999] Cannot create hsr debugfs directory [ 118.969154][ T5972] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 119.298336][ T5972] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 119.645070][ T5972] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 119.680608][ T5972] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 119.723585][ T787] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.912771][ T787] usb 3-1: Using ep0 maxpacket: 16 [ 119.936726][ T787] usb 3-1: config 1 interface 0 has no altsetting 0 [ 119.959179][ T787] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 119.970640][ T5999] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 120.002704][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.030416][ T787] usb 3-1: Product: 㠁 [ 120.040064][ T6112] loop1: detected capacity change from 0 to 512 [ 120.043552][ T787] usb 3-1: Manufacturer: ㈮ⓜ鯁ば똒贙䯆心悶朗㧊梓ʬ酄黕䐃湸焕쁥ϸ枵╁镟ꎮ䰭䪝⤱㌀⧻첶솷⠉ᦠ熾엘씲蕖蝩ꅟ韍鍣矅V뤢캰䃁顯咐ﾎൎ㣢 [ 120.079046][ T6112] EXT4-fs (loop1): Test dummy encryption mode enabled [ 120.103822][ T787] usb 3-1: SerialNumber: syz [ 120.111014][ T5999] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 120.159685][ T6112] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.175107][ T5999] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 120.253164][ T5999] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 120.399404][ T6092] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 120.436933][ T6112] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.53: Directory hole found for htree leaf block 0 [ 120.498885][ T6112] EXT4-fs (loop1): Remounting filesystem read-only [ 120.820500][ T5786] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 120.838261][ T787] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 120.876266][ T787] usb 3-1: USB disconnect, device number 3 [ 121.202444][ T5999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.236730][ T5972] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.336529][ T2942] hsr_slave_0: left promiscuous mode [ 121.344512][ T2942] hsr_slave_1: left promiscuous mode [ 121.399373][ T2942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.422221][ T2942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.453907][ T2942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.474335][ T2942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.508359][ T2942] bridge_slave_1: left allmulticast mode [ 121.545295][ T2942] bridge_slave_1: left promiscuous mode [ 121.553137][ T2942] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.694194][ T2942] bridge_slave_0: left allmulticast mode [ 121.702250][ T2942] bridge_slave_0: left promiscuous mode [ 121.740541][ T2942] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.817913][ T2942] veth1_macvtap: left promiscuous mode [ 121.843489][ T2942] veth0_macvtap: left promiscuous mode [ 121.850409][ T2942] veth1_vlan: left promiscuous mode [ 121.889853][ T2942] veth0_vlan: left promiscuous mode [ 122.981426][ T6164] fuse: Bad value for 'fd' [ 123.066810][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.702990][ T2942] team0 (unregistering): Port device team_slave_1 removed [ 123.843149][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.853750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.887402][ T2942] team0 (unregistering): Port device team_slave_0 removed [ 123.941761][ T2942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.997597][ T2942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.456392][ T2942] bond0 (unregistering): Released all slaves [ 124.570223][ T5972] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.659588][ T5999] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.699853][ T2953] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.707135][ T2953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.838204][ T2953] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.847238][ T2953] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.964169][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.971396][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.009874][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.018101][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.107235][ T6173] loop1: detected capacity change from 0 to 1024 [ 125.357693][ T2930] hfsplus: b-tree write err: -5, ino 4 [ 125.402419][ T6175] syzkaller0: entered promiscuous mode [ 125.432780][ T6175] syzkaller0: entered allmulticast mode [ 125.536084][ T6184] loop1: detected capacity change from 0 to 512 [ 125.612697][ T6184] EXT4-fs (loop1): Test dummy encryption mode enabled [ 125.674451][ T6184] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.894179][ T6184] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.62: Directory hole found for htree leaf block 0 [ 125.910104][ T6184] EXT4-fs (loop1): Remounting filesystem read-only [ 126.094612][ T5786] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 126.195943][ T6195] loop1: detected capacity change from 0 to 512 [ 126.216415][ T6195] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 126.291812][ T6195] EXT4-fs (loop1): 1 truncate cleaned up [ 126.307655][ T6195] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.400365][ T28] audit: type=1804 audit(1762485917.132:2): pid=6195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.63" name="/newroot/28/file1/bus" dev="loop1" ino=18 res=1 errno=0 [ 127.115702][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.872883][ T5972] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.035034][ T6221] support for the xor transformation has been removed. [ 129.080852][ T6223] loop1: detected capacity change from 0 to 128 [ 129.090694][ T5972] veth0_vlan: entered promiscuous mode [ 129.129212][ T5972] veth1_vlan: entered promiscuous mode [ 129.159286][ T5999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.175201][ T6223] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 129.287483][ T6223] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 129.384885][ T5972] veth0_macvtap: entered promiscuous mode [ 129.425445][ T5972] veth1_macvtap: entered promiscuous mode [ 129.486125][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.547658][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.585218][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.612318][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.653821][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.785344][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.844430][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.858631][ T5972] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.885471][ T5972] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.904862][ T5972] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.939223][ T5972] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.957947][ T5786] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 129.982679][ T5972] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.992425][ T5972] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.056938][ T5972] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.093434][ T2953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.130812][ T2953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.217592][ T2942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.248262][ T2942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.348773][ T5999] veth0_vlan: entered promiscuous mode [ 131.395053][ T5999] veth1_vlan: entered promiscuous mode [ 131.549473][ T5999] veth0_macvtap: entered promiscuous mode [ 131.584590][ T5999] veth1_macvtap: entered promiscuous mode [ 131.651827][ T5999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.713930][ T5999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.807332][ T5999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.933789][ T5999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.058295][ T5999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.193149][ T5999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.336479][ T5999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.520376][ T5999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.622810][ T5999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.700552][ T5999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.759497][ T5999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.824162][ T5999] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.938506][ T5999] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.071987][ T5999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.487341][ T5999] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.547860][ T5999] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.643857][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.655287][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.832180][ T5999] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.877327][ T5999] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.467033][ T6281] warning: `syz.0.75' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 134.497700][ T6284] loop1: detected capacity change from 0 to 512 [ 134.614307][ T6284] EXT4-fs (loop1): Test dummy encryption mode enabled [ 134.708322][ T6284] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.761737][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.780078][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.053594][ T6284] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.76: Directory hole found for htree leaf block 0 [ 135.062667][ T2930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.105717][ T6284] EXT4-fs (loop1): Remounting filesystem read-only [ 135.106999][ T2930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.261195][ T6296] loop2: detected capacity change from 0 to 512 [ 135.311996][ T6296] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 135.374970][ T6296] EXT4-fs (loop2): 1 truncate cleaned up [ 135.437947][ T6296] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.868811][ T5786] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 136.275031][ T28] audit: type=1804 audit(1762485926.982:3): pid=6296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.79" name="/newroot/25/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 136.772872][ T5858] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 137.542225][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.583174][ T5858] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.622395][ T5858] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 137.660782][ T5858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 137.700810][ T5858] usb 1-1: Product: syz [ 137.716492][ T5858] usb 1-1: Manufacturer: syz [ 137.732776][ T5858] usb 1-1: SerialNumber: syz [ 138.014033][ T5858] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 138.643012][ T5858] usb 1-1: USB disconnect, device number 2 [ 138.656768][ T5858] usblp0: removed [ 140.050345][ T6359] loop4: detected capacity change from 0 to 512 [ 140.081449][ T6359] EXT4-fs (loop4): Test dummy encryption mode enabled [ 141.053018][ T6359] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.249899][ T6372] loop2: detected capacity change from 0 to 512 [ 141.323060][ T6372] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 141.350491][ T6359] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.89: Directory hole found for htree leaf block 0 [ 141.430849][ T6359] EXT4-fs (loop4): Remounting filesystem read-only [ 141.435422][ T6372] EXT4-fs (loop2): 1 truncate cleaned up [ 141.579173][ T6372] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.264091][ T28] audit: type=1804 audit(1762485933.012:4): pid=6372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.92" name="/newroot/27/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 142.371242][ T5999] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 142.712140][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.708995][ T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 144.151337][ T27] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.214409][ T27] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 144.262065][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 144.312155][ T27] usb 3-1: Product: syz [ 144.335732][ T27] usb 3-1: Manufacturer: syz [ 144.365138][ T27] usb 3-1: SerialNumber: syz [ 144.992729][ T27] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 145.217515][ T27] usb 3-1: USB disconnect, device number 4 [ 145.240657][ T27] usblp0: removed [ 146.477496][ T6433] loop2: detected capacity change from 0 to 512 [ 146.497290][ T6433] EXT4-fs (loop2): Test dummy encryption mode enabled [ 146.524642][ T6433] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 146.532192][ T6434] loop0: detected capacity change from 0 to 512 [ 146.572275][ T6434] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 146.694997][ T6434] EXT4-fs (loop0): 1 truncate cleaned up [ 146.752213][ T6434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.767367][ T6433] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.105: Directory hole found for htree leaf block 0 [ 147.314412][ T6433] EXT4-fs (loop2): Remounting filesystem read-only [ 149.410790][ T5972] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.659447][ T5788] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 151.545349][ T968] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 153.480027][ T968] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.543660][ T968] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 153.562748][ T968] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 153.618053][ T968] usb 2-1: Product: syz [ 153.622545][ T968] usb 2-1: Manufacturer: syz [ 153.631389][ T968] usb 2-1: SerialNumber: syz [ 153.897167][ T968] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 154.396568][ T6511] loop4: detected capacity change from 0 to 512 [ 154.425201][ T6511] EXT4-fs (loop4): Test dummy encryption mode enabled [ 154.474777][ T6511] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.844394][ T6511] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.120: Directory hole found for htree leaf block 0 [ 154.906512][ T6511] EXT4-fs (loop4): Remounting filesystem read-only [ 155.365707][ T968] usb 2-1: USB disconnect, device number 3 [ 155.374284][ T5999] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 155.422964][ T968] usblp0: removed [ 159.502021][ T6556] syzkaller0: entered promiscuous mode [ 159.510066][ T6556] syzkaller0: entered allmulticast mode [ 160.892487][ T6573] loop4: detected capacity change from 0 to 512 [ 160.966243][ T6573] EXT4-fs (loop4): Test dummy encryption mode enabled [ 161.027229][ T6573] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.233028][ T23] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 161.280082][ T6573] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.132: Directory hole found for htree leaf block 0 [ 161.308276][ T6573] EXT4-fs (loop4): Remounting filesystem read-only [ 161.452187][ T23] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.477241][ T5999] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 161.478877][ T23] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 161.519809][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 161.583933][ T23] usb 1-1: Product: syz [ 161.588182][ T23] usb 1-1: Manufacturer: syz [ 161.602031][ T23] usb 1-1: SerialNumber: syz [ 162.662136][ T23] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 162.676523][ T23] usb 1-1: USB disconnect, device number 3 [ 162.689717][ T23] usblp0: removed [ 167.552848][ T6639] loop0: detected capacity change from 0 to 512 [ 167.572744][ T6639] EXT4-fs (loop0): Test dummy encryption mode enabled [ 167.733052][ T968] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 167.775868][ T6639] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.619931][ T6639] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.145: Directory hole found for htree leaf block 0 [ 168.674205][ T968] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.704746][ T968] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 168.714628][ T968] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 168.732656][ T968] usb 3-1: Product: syz [ 168.737475][ T968] usb 3-1: Manufacturer: syz [ 168.742332][ T968] usb 3-1: SerialNumber: syz [ 168.767621][ T6639] EXT4-fs (loop0): Remounting filesystem read-only [ 169.011162][ T968] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 169.062090][ T5972] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 169.701044][ T6674] syzkaller0: entered promiscuous mode [ 169.715643][ T6674] syzkaller0: entered allmulticast mode [ 170.751927][ T968] usb 3-1: USB disconnect, device number 5 [ 170.887789][ T968] usblp0: removed [ 175.567781][ T6716] loop0: detected capacity change from 0 to 512 [ 175.587850][ T6716] EXT4-fs (loop0): Test dummy encryption mode enabled [ 175.694418][ T6716] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.947351][ T6716] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.161: Directory hole found for htree leaf block 0 [ 175.984918][ T6716] EXT4-fs (loop0): Remounting filesystem read-only [ 176.958304][ T5923] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 177.176157][ T5923] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 177.215714][ T5923] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 177.233868][ T5923] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 177.269518][ T5923] usb 2-1: Product: syz [ 177.300495][ T5923] usb 2-1: Manufacturer: syz [ 177.371966][ T5923] usb 2-1: SerialNumber: syz [ 177.385549][ T5972] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 178.348887][ T5923] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 178.995623][ T6747] syzkaller0: entered promiscuous mode [ 179.017740][ T6747] syzkaller0: entered allmulticast mode [ 180.156184][ T9] usb 2-1: USB disconnect, device number 4 [ 180.213572][ T9] usblp0: removed [ 183.960730][ T6789] loop1: detected capacity change from 0 to 512 [ 183.983363][ T6789] EXT4-fs (loop1): Test dummy encryption mode enabled [ 184.020165][ T6789] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 184.223420][ T6789] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.177: Directory hole found for htree leaf block 0 [ 184.324059][ T6789] EXT4-fs (loop1): Remounting filesystem read-only [ 185.517994][ T5786] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 186.695094][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 186.871977][ T6836] syzkaller0: entered promiscuous mode [ 186.891165][ T6836] syzkaller0: entered allmulticast mode [ 186.899369][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 186.926007][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 186.943798][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 186.966053][ T9] usb 3-1: Product: syz [ 187.000133][ T9] usb 3-1: Manufacturer: syz [ 187.022686][ T9] usb 3-1: SerialNumber: syz [ 187.274529][ T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 188.611816][ T5858] usb 3-1: USB disconnect, device number 6 [ 188.636294][ T5858] usblp0: removed [ 190.529411][ T6856] loop4: detected capacity change from 0 to 512 [ 190.554686][ T6856] EXT4-fs (loop4): Test dummy encryption mode enabled [ 190.582808][ T6856] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.694878][ T6856] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.191: Directory hole found for htree leaf block 0 [ 190.708662][ T6856] EXT4-fs (loop4): Remounting filesystem read-only [ 190.845664][ T5999] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 193.178554][ T6876] loop0: detected capacity change from 0 to 1024 [ 193.552753][ T6883] loop4: detected capacity change from 0 to 2048 [ 194.094492][ T6883] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.413164][ T6883] EXT4-fs error (device loop4): __ext4_get_inode_loc:4489: comm syz.4.197: Invalid inode table block 8137801 in block_group 0 [ 194.462673][ T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 194.498891][ T6883] EXT4-fs error (device loop4): __ext4_get_inode_loc:4489: comm syz.4.197: Invalid inode table block 8137801 in block_group 0 [ 194.558356][ T6883] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 194.589287][ T6883] EXT4-fs error (device loop4): ext4_dirty_inode:6120: inode #15: comm syz.4.197: mark_inode_dirty error [ 194.704783][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.729017][ T12] EXT4-fs error (device loop4): __ext4_get_inode_loc:4489: comm kworker/u4:1: Invalid inode table block 8137801 in block_group 0 [ 194.796831][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 194.798415][ T5999] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.833585][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 194.867032][ T9] usb 3-1: Product: syz [ 194.871284][ T9] usb 3-1: Manufacturer: syz [ 194.899720][ T9] usb 3-1: SerialNumber: syz [ 195.019947][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.026521][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.190735][ T9] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 196.351240][ T6921] loop4: detected capacity change from 0 to 512 [ 196.387117][ T6921] EXT4-fs (loop4): Test dummy encryption mode enabled [ 196.434416][ T6921] EXT4-fs (loop4): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.693126][ T5843] usb 3-1: USB disconnect, device number 7 [ 196.723872][ T6921] EXT4-fs error (device loop4): ext4_add_entry:2486: inode #2: comm syz.4.202: Directory hole found for htree leaf block 0 [ 196.750917][ T5843] usblp0: removed [ 196.787243][ T6921] EXT4-fs (loop4): Remounting filesystem read-only [ 197.004274][ T5999] EXT4-fs (loop4): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 197.092248][ T6931] syzkaller0: entered promiscuous mode [ 197.158962][ T6931] syzkaller0: entered allmulticast mode [ 202.634812][ T6964] loop0: detected capacity change from 0 to 2048 [ 202.650458][ T6970] loop2: detected capacity change from 0 to 512 [ 202.694164][ T6970] EXT4-fs (loop2): Test dummy encryption mode enabled [ 202.724431][ T6964] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.768655][ T6970] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.862647][ T5843] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 202.913059][ T6964] EXT4-fs error (device loop0): __ext4_get_inode_loc:4489: comm syz.0.211: Invalid inode table block 8137801 in block_group 0 [ 202.927448][ T5799] udevd[5799]: incorrect ext4 checksum on /dev/loop0 [ 202.937240][ T6970] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.213: Directory hole found for htree leaf block 0 [ 202.970088][ T6970] EXT4-fs (loop2): Remounting filesystem read-only [ 202.985046][ T6964] EXT4-fs error (device loop0): __ext4_get_inode_loc:4489: comm syz.0.211: Invalid inode table block 8137801 in block_group 0 [ 203.026846][ T6964] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5916: Corrupt filesystem [ 203.050986][ T6964] EXT4-fs error (device loop0): ext4_dirty_inode:6120: inode #15: comm syz.0.211: mark_inode_dirty error [ 203.068082][ T5843] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 203.106798][ T5843] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 203.118032][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 203.128285][ T6964] EXT4-fs error (device loop0): __ext4_get_inode_loc:4489: comm syz.0.211: Invalid inode table block 8137801 in block_group 0 [ 203.157482][ T5843] usb 5-1: Product: syz [ 203.167377][ T5788] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 203.176841][ T5843] usb 5-1: Manufacturer: syz [ 203.203447][ T5843] usb 5-1: SerialNumber: syz [ 203.357056][ T60] EXT4-fs error (device loop0): __ext4_get_inode_loc:4489: comm kworker/u4:4: Invalid inode table block 8137801 in block_group 0 [ 203.413746][ T5972] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.468363][ T5843] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 207.685348][ T7032] syzkaller0: entered promiscuous mode [ 207.701362][ T7032] syzkaller0: entered allmulticast mode [ 209.434222][ T7044] loop0: detected capacity change from 0 to 512 [ 209.469514][ T7044] EXT4-fs (loop0): Test dummy encryption mode enabled [ 209.520480][ T7044] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.738488][ T7044] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.224: Directory hole found for htree leaf block 0 [ 209.753548][ T7044] EXT4-fs (loop0): Remounting filesystem read-only [ 209.868072][ T5972] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 210.400790][ T968] usb 5-1: USB disconnect, device number 2 [ 210.429859][ T968] usblp0: removed [ 213.708703][ T7081] loop1: detected capacity change from 0 to 512 [ 213.749752][ T7081] EXT4-fs (loop1): Test dummy encryption mode enabled [ 213.802166][ T7081] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.135848][ T7081] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.234: Directory hole found for htree leaf block 0 [ 214.192348][ T7081] EXT4-fs (loop1): Remounting filesystem read-only [ 214.498533][ T5786] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 214.557140][ T5843] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 214.755042][ T5843] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 214.813305][ T5843] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 214.852745][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 214.901867][ T5843] usb 3-1: Product: syz [ 214.934902][ T5843] usb 3-1: Manufacturer: syz [ 214.945086][ T5843] usb 3-1: SerialNumber: syz [ 215.533175][ T5843] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 215.732920][ T5858] usb 3-1: USB disconnect, device number 8 [ 215.768493][ T5858] usblp0: removed [ 217.409628][ T7121] syzkaller0: entered promiscuous mode [ 217.439990][ T7121] syzkaller0: entered allmulticast mode [ 217.581304][ T5802] Bluetooth: hci3: command 0x0406 tx timeout [ 217.587601][ T5802] Bluetooth: hci2: command 0x0406 tx timeout [ 218.926721][ T7149] loop0: detected capacity change from 0 to 512 [ 218.989877][ T7149] EXT4-fs (loop0): Test dummy encryption mode enabled [ 219.373344][ T7149] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.585575][ T7149] EXT4-fs error (device loop0): ext4_add_entry:2486: inode #2: comm syz.0.246: Directory hole found for htree leaf block 0 [ 219.600522][ T7149] EXT4-fs (loop0): Remounting filesystem read-only [ 219.740327][ T5972] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 221.304403][ T5816] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 221.496290][ T5816] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.513450][ T5816] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 221.523014][ T5816] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 221.531164][ T5816] usb 1-1: Product: syz [ 221.535546][ T5816] usb 1-1: Manufacturer: syz [ 221.542818][ T5816] usb 1-1: SerialNumber: syz [ 221.770266][ T5816] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 224.499644][ T7185] loop2: detected capacity change from 0 to 512 [ 224.533645][ T7185] EXT4-fs (loop2): Test dummy encryption mode enabled [ 224.572516][ T7185] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.799135][ T7185] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.256: Directory hole found for htree leaf block 0 [ 224.863290][ T7185] EXT4-fs (loop2): Remounting filesystem read-only [ 225.082198][ T5788] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 226.175401][ T7200] syzkaller0: entered promiscuous mode [ 226.182428][ T7200] syzkaller0: entered allmulticast mode [ 228.640735][ T27] usb 1-1: USB disconnect, device number 4 [ 228.663089][ T27] usblp0: removed [ 230.916532][ T7218] loop0: detected capacity change from 0 to 512 [ 230.940576][ T7218] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 230.979558][ T7218] EXT4-fs (loop0): 1 truncate cleaned up [ 231.044609][ T7218] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.554015][ T7227] loop1: detected capacity change from 0 to 512 [ 231.651447][ T7227] EXT4-fs (loop1): Test dummy encryption mode enabled [ 231.843995][ T7227] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.883969][ T28] audit: type=1804 audit(1762486022.622:5): pid=7218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.266" name="/newroot/55/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 232.251080][ T5972] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.790207][ T7227] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.267: Directory hole found for htree leaf block 0 [ 232.994887][ T5792] Bluetooth: hci0: command 0x0406 tx timeout [ 233.105419][ T7243] syzkaller0: entered promiscuous mode [ 233.112658][ T7227] EXT4-fs (loop1): Remounting filesystem read-only [ 233.146096][ T7243] syzkaller0: entered allmulticast mode [ 234.024244][ T5786] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 238.276318][ T7282] loop1: detected capacity change from 0 to 512 [ 238.308791][ T7282] EXT4-fs (loop1): Test dummy encryption mode enabled [ 238.335992][ T7282] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.482199][ T7282] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.282: Directory hole found for htree leaf block 0 [ 238.505507][ T7282] EXT4-fs (loop1): Remounting filesystem read-only [ 238.705096][ T5786] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 242.574855][ T7322] loop2: detected capacity change from 0 to 512 [ 242.603736][ T7322] EXT4-fs (loop2): Test dummy encryption mode enabled [ 242.720674][ T7322] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 243.301895][ T7322] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.292: Directory hole found for htree leaf block 0 [ 244.158344][ T7322] EXT4-fs (loop2): Remounting filesystem read-only [ 244.344667][ T5788] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 244.478232][ T7337] syzkaller0: entered promiscuous mode [ 244.487301][ T7337] syzkaller0: entered allmulticast mode [ 248.283482][ T5792] Bluetooth: hci1: command 0x0406 tx timeout [ 250.036265][ T7376] loop2: detected capacity change from 0 to 1024 [ 250.085399][ T7376] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.220818][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.351077][ T7383] loop2: detected capacity change from 0 to 512 [ 250.370146][ T7383] EXT4-fs (loop2): Test dummy encryption mode enabled [ 250.427375][ T7383] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.592799][ T7383] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.307: Directory hole found for htree leaf block 0 [ 250.611877][ T7383] EXT4-fs (loop2): Remounting filesystem read-only [ 250.720475][ T5788] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 255.009332][ T5792] Bluetooth: hci1: command 0x0406 tx timeout [ 255.253202][ T7412] fuse: Bad value for 'fd' [ 256.461967][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.468480][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.772809][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 257.742883][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 257.870863][ T9] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 257.917576][ T9] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.944849][ T7432] loop2: detected capacity change from 0 to 512 [ 257.960338][ T7432] EXT4-fs (loop2): Test dummy encryption mode enabled [ 257.960657][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 258.012859][ T9] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 258.021688][ T9] usb 1-1: Product: syz [ 258.022450][ T7432] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.026006][ T9] usb 1-1: Manufacturer: syz [ 258.058971][ T9] hub 1-1:4.0: USB hub found [ 258.378000][ T7432] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.321: Directory hole found for htree leaf block 0 [ 258.462105][ T7432] EXT4-fs (loop2): Remounting filesystem read-only [ 258.490397][ T9] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 258.563118][ T7439] syzkaller0: entered promiscuous mode [ 258.565887][ T9] usb 1-1: USB disconnect, device number 5 [ 258.593769][ T7439] syzkaller0: entered allmulticast mode [ 258.746894][ T5788] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 264.331535][ T7478] fuse: Bad value for 'fd' [ 269.656633][ T7513] syzkaller0: entered promiscuous mode [ 269.668415][ T7513] syzkaller0: entered allmulticast mode [ 269.779416][ T7524] fuse: Bad value for 'fd' [ 271.778024][ T7530] loop0: detected capacity change from 0 to 136 [ 274.174053][ T7546] loop1: detected capacity change from 0 to 512 [ 274.194080][ T7546] EXT4-fs: inline encryption not supported [ 274.199981][ T7546] EXT4-fs: Ignoring removed i_version option [ 274.246815][ T7546] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.350: inode has both inline data and extents flags [ 274.283261][ T7546] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.350: couldn't read orphan inode 15 (err -117) [ 274.299565][ T7546] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.116256][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.988020][ T7581] loop0: detected capacity change from 0 to 8192 [ 279.610012][ T7602] loop0: detected capacity change from 0 to 512 [ 279.647279][ T7604] loop4: detected capacity change from 0 to 764 [ 279.689579][ T7604] rock: directory entry would overflow storage [ 279.714509][ T7602] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 279.730071][ T7604] rock: sig=0x4654, size=5, remaining=4 [ 279.753596][ T7604] isofs: isofs_export_get_parent(): child directory not normalized! [ 279.793166][ T7602] EXT4-fs (loop0): 1 truncate cleaned up [ 279.801309][ T7602] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 280.789446][ T7613] loop4: detected capacity change from 0 to 128 [ 280.852496][ T7615] loop1: detected capacity change from 0 to 512 [ 280.893722][ T5972] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.907319][ T5799] udevd[5799]: incorrect ext4 checksum on /dev/loop4 [ 280.920069][ T7615] EXT4-fs (loop1): Test dummy encryption mode enabled [ 280.994585][ T7615] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.590957][ T7615] EXT4-fs error (device loop1): ext4_add_entry:2486: inode #2: comm syz.1.369: Directory hole found for htree leaf block 0 [ 281.610646][ T7615] EXT4-fs (loop1): Remounting filesystem read-only [ 282.358147][ T7630] fuse: Bad value for 'fd' [ 282.527982][ T5786] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 283.076916][ T7640] loop1: detected capacity change from 0 to 128 [ 283.689187][ T7640] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 285.542695][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 285.762758][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 285.777119][ T9] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.802068][ T9] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.829232][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 285.853024][ T7677] mmap: syz.0.383 (7677) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 285.859296][ T9] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 285.899227][ T9] usb 2-1: Product: syz [ 285.903935][ T9] usb 2-1: Manufacturer: syz [ 285.926161][ T9] hub 2-1:4.0: USB hub found [ 286.342124][ T9] hub 2-1:4.0: config failed, can't read hub descriptor (err -22) [ 286.406343][ T9] usb 2-1: USB disconnect, device number 5 [ 287.509143][ T7693] loop4: detected capacity change from 0 to 136 [ 290.391092][ T5789] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 290.594605][ T5789] usb 1-1: Using ep0 maxpacket: 32 [ 290.613393][ T5789] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 290.642376][ T5789] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.668575][ T5789] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 290.686680][ T5789] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 290.699952][ T5789] usb 1-1: Product: syz [ 290.739175][ T5789] usb 1-1: Manufacturer: syz [ 290.834472][ T5789] hub 1-1:4.0: USB hub found [ 291.191704][ T7724] loop2: detected capacity change from 0 to 256 [ 291.251975][ T7724] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 291.313592][ T5789] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 291.583658][ T5789] usb 1-1: USB disconnect, device number 6 [ 294.040513][ T7758] loop1: detected capacity change from 0 to 136 [ 295.462705][ T27] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 295.674991][ T27] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 295.692664][ T968] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 295.700735][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 295.732079][ T27] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 295.752623][ T27] usb 3-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 295.772045][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.793581][ T27] usb 3-1: config 0 descriptor?? [ 295.799947][ T7763] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 295.912681][ T968] usb 1-1: Using ep0 maxpacket: 16 [ 295.920496][ T968] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.939681][ T968] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.959878][ T968] usb 1-1: config 0 interface 0 has no altsetting 0 [ 295.980203][ T968] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 295.996837][ T968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.074896][ T968] usb 1-1: config 0 descriptor?? [ 296.240462][ T27] wacom 0003:056A:00B3.0002: Unknown device_type for 'HID 056a:00b3'. Assuming pen. [ 296.282725][ T27] wacom 0003:056A:00B3.0002: hidraw0: USB HID v0.00 Device [HID 056a:00b3] on usb-dummy_hcd.2-1/input0 [ 296.843914][ T27] input: Wacom Intuos3 12x12 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00B3.0002/input/input6 [ 297.055428][ T27] usb 3-1: USB disconnect, device number 9 [ 297.096052][ T968] hid (null): nested delimiters [ 297.210709][ T7780] loop4: detected capacity change from 0 to 512 [ 297.254028][ T7780] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.319891][ T968] usb 1-1: USB disconnect, device number 7 [ 297.330151][ T7780] ext4 filesystem being mounted at /80/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 297.390106][ T7780] EXT4-fs (loop4): shut down requested (1) [ 297.498217][ T7781] loop2: detected capacity change from 0 to 2048 [ 297.532019][ T7788] fuse: Bad value for 'fd' [ 297.558886][ T5999] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.559819][ T7781] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 297.758864][ T7791] loop4: detected capacity change from 0 to 2048 [ 297.829946][ T7791] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 298.362896][ T968] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 298.573928][ T968] usb 5-1: Using ep0 maxpacket: 16 [ 298.586157][ T968] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 298.622900][ T968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.656276][ T968] usb 5-1: config 0 descriptor?? [ 298.680434][ T968] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 299.102893][ T968] usb 5-1: Detected FT232B [ 299.188861][ T7805] loop1: detected capacity change from 0 to 136 [ 299.323510][ T968] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 299.332340][ T968] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 299.546716][ T968] usb 5-1: USB disconnect, device number 3 [ 299.565217][ T968] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 299.595508][ T968] ftdi_sio 5-1:0.0: device disconnected [ 299.722663][ T5792] Bluetooth: hci1: command 0x0406 tx timeout [ 301.433850][ T7827] loop2: detected capacity change from 0 to 1024 [ 301.468861][ T7827] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 301.525107][ T7834] fuse: Bad value for 'fd' [ 301.533267][ T7827] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 301.570381][ T7827] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 301.604262][ T7827] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #3: comm syz.2.428: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 301.655491][ T7827] EXT4-fs (loop2): no journal found [ 301.664339][ T7827] EXT4-fs (loop2): can't get journal size [ 301.683924][ T7827] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 302.041883][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.100172][ T7846] loop0: detected capacity change from 0 to 512 [ 303.194693][ T7846] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 303.270678][ T7846] EXT4-fs (loop0): 1 truncate cleaned up [ 303.282008][ T7846] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.496342][ T5972] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.611730][ T7844] syz.4.431 (7844) used greatest stack depth: 17960 bytes left [ 304.771640][ T7860] loop2: detected capacity change from 0 to 136 [ 304.838655][ T7861] netlink: 32 bytes leftover after parsing attributes in process `syz.0.436'. [ 304.921155][ T7863] loop1: detected capacity change from 0 to 2048 [ 304.968164][ T7863] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 305.028400][ T7863] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 305.316026][ T7867] netlink: 48 bytes leftover after parsing attributes in process `syz.1.440'. [ 305.333181][ T7867] netlink: 14 bytes leftover after parsing attributes in process `syz.1.440'. [ 305.362618][ T7867] netlink: 20 bytes leftover after parsing attributes in process `syz.1.440'. [ 305.556237][ T7870] loop1: detected capacity change from 0 to 16 [ 305.614276][ T7870] erofs: (device loop1): mounted with root inode @ nid 36. [ 305.699886][ T7870] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 305.747379][ T7870] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -32 in[46, 4050] out[1851] [ 305.780963][ T7870] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 307.350107][ T7894] fuse: Bad value for 'fd' [ 310.406385][ T7909] loop0: detected capacity change from 0 to 136 [ 311.597788][ T7933] loop1: detected capacity change from 0 to 128 [ 312.299434][ T7933] loop1: detected capacity change from 0 to 512 [ 312.343717][ T7933] EXT4-fs: quotafile must be on filesystem root [ 312.815036][ T968] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 312.925909][ T7944] fuse: Bad value for 'fd' [ 313.017064][ T968] usb 1-1: Using ep0 maxpacket: 32 [ 313.032942][ T968] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 313.041534][ T968] usb 1-1: config 4 has no interface number 0 [ 313.056379][ T968] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.069422][ T968] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.080115][ T968] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 313.090791][ T968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.111095][ T968] hub 1-1:4.128: USB hub found [ 313.323655][ T968] hub 1-1:4.128: 2 ports detected [ 313.340333][ T968] hub 1-1:4.128: Using single TT (err -22) [ 313.534854][ T968] hub 1-1:4.128: hub_hub_status failed (err = -71) [ 313.544991][ T968] hub 1-1:4.128: config failed, can't get hub status (err -71) [ 313.606149][ T968] usb 1-1: USB disconnect, device number 8 [ 313.963599][ T7953] loop1: detected capacity change from 0 to 136 [ 314.187564][ T7955] netlink: 'syz.2.465': attribute type 1 has an invalid length. [ 314.411288][ T7957] loop2: detected capacity change from 0 to 8192 [ 314.497414][ T7957] loop2: p1 < > p3 p4 < > [ 314.533683][ T7957] loop2: p3 size 33554432 extends beyond EOD, truncated [ 316.199294][ T7983] loop2: detected capacity change from 0 to 1024 [ 316.308477][ T7986] fuse: Bad value for 'fd' [ 316.441568][ T2953] hfsplus: b-tree write err: -5, ino 8 [ 316.595219][ T7990] loop2: detected capacity change from 0 to 512 [ 316.665301][ T7990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.723957][ T7990] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 316.929368][ T5788] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.890682][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.897261][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.262743][ T5792] Bluetooth: hci1: command 0x0406 tx timeout [ 320.448107][ T8047] loop1: detected capacity change from 0 to 256 [ 320.638228][ T8050] loop0: detected capacity change from 0 to 1024 [ 320.798631][ T8050] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.063745][ T8050] ================================================================== [ 321.071981][ T8050] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x94b/0x1e90 [ 321.079771][ T8050] Read of size 18446744073709551588 at addr ffff88801f6fc040 by task syz.0.493/8050 [ 321.089179][ T8050] [ 321.091557][ T8050] CPU: 0 PID: 8050 Comm: syz.0.493 Not tainted syzkaller #0 [ 321.099065][ T8050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 321.109179][ T8050] Call Trace: [ 321.112504][ T8050] [ 321.115476][ T8050] dump_stack_lvl+0x16c/0x230 [ 321.120337][ T8050] ? read_lock_is_recursive+0x20/0x20 [ 321.125775][ T8050] ? show_regs_print_info+0x20/0x20 [ 321.131294][ T8050] ? load_image+0x3b0/0x3b0 [ 321.135936][ T8050] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 321.141370][ T8050] ? __virt_addr_valid+0x18c/0x540 [ 321.146540][ T8050] ? __virt_addr_valid+0x469/0x540 [ 321.151673][ T8050] print_report+0xac/0x220 [ 321.156150][ T8050] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 321.161637][ T8050] kasan_report+0x117/0x150 [ 321.166157][ T8050] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 321.171817][ T8050] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 321.177366][ T8050] kasan_check_range+0x288/0x290 [ 321.182367][ T8050] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 321.187873][ T8050] __asan_memmove+0x29/0x70 [ 321.193048][ T8050] ext4_xattr_set_entry+0x94b/0x1e90 [ 321.198634][ T8050] ext4_xattr_block_set+0xae3/0x32a0 [ 321.204340][ T8050] ? ext4_destroy_inode+0x200/0x200 [ 321.209579][ T8050] ? proc_nr_inodes+0x230/0x230 [ 321.215358][ T8050] ? do_raw_spin_unlock+0x121/0x230 [ 321.220705][ T8050] ? _raw_spin_unlock+0x28/0x40 [ 321.225591][ T8050] ? ext4_xattr_block_find+0x350/0x350 [ 321.231167][ T8050] ? ext4_xattr_ibody_set+0x50d/0x6a0 [ 321.236664][ T8050] ext4_xattr_set_handle+0x10a1/0x1290 [ 321.242161][ T8050] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 321.248220][ T8050] ? __ext4_journal_start_sb+0x259/0x570 [ 321.254058][ T8050] ext4_xattr_set+0x22d/0x320 [ 321.259048][ T8050] ? end_current_label_crit_section+0x170/0x170 [ 321.265341][ T8050] ? ext4_xattr_set_credits+0x2f0/0x2f0 [ 321.270918][ T8050] ? posix_xattr_acl+0x93/0xb0 [ 321.275710][ T8050] ? evm_protect_xattr+0x36d/0x7a0 [ 321.280844][ T8050] ? ext4_xattr_trusted_get+0x40/0x40 [ 321.286241][ T8050] __vfs_setxattr+0x431/0x470 [ 321.290954][ T8050] __vfs_setxattr_noperm+0x12d/0x5e0 [ 321.296275][ T8050] vfs_setxattr+0x16c/0x2f0 [ 321.300812][ T8050] ? xattr_permission+0x470/0x470 [ 321.306299][ T8050] ? __mnt_want_write+0x223/0x2a0 [ 321.311353][ T8050] ? path_setxattr+0x314/0x550 [ 321.316137][ T8050] path_setxattr+0x362/0x550 [ 321.320844][ T8050] ? simple_xattrs_free+0x150/0x150 [ 321.326078][ T8050] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 321.332078][ T8050] ? lock_chain_count+0x20/0x20 [ 321.336948][ T8050] __x64_sys_lsetxattr+0xb8/0xd0 [ 321.341927][ T8050] do_syscall_64+0x55/0xb0 [ 321.346548][ T8050] ? clear_bhb_loop+0x40/0x90 [ 321.351375][ T8050] ? clear_bhb_loop+0x40/0x90 [ 321.356073][ T8050] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.362151][ T8050] RIP: 0033:0x7fd44398f6c9 [ 321.366603][ T8050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.386452][ T8050] RSP: 002b:00007fd44486a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 321.394885][ T8050] RAX: ffffffffffffffda RBX: 00007fd443be5fa0 RCX: 00007fd44398f6c9 [ 321.402907][ T8050] RDX: 0000200000000000 RSI: 0000200000000180 RDI: 00002000000001c0 [ 321.410899][ T8050] RBP: 00007fd443a11f91 R08: 0000000000000001 R09: 0000000000000000 [ 321.419061][ T8050] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000 [ 321.427053][ T8050] R13: 00007fd443be6038 R14: 00007fd443be5fa0 R15: 00007ffc18965408 [ 321.435097][ T8050] [ 321.438129][ T8050] [ 321.440496][ T8050] Allocated by task 8050: [ 321.444845][ T8050] kasan_set_track+0x4e/0x70 [ 321.449566][ T8050] __kasan_kmalloc+0x8f/0xa0 [ 321.454265][ T8050] __kmalloc_node_track_caller+0xb2/0x230 [ 321.460044][ T8050] kmemdup+0x2b/0x70 [ 321.463960][ T8050] ext4_xattr_block_set+0x9e5/0x32a0 [ 321.469289][ T8050] ext4_xattr_set_handle+0x10a1/0x1290 [ 321.474773][ T8050] ext4_xattr_set+0x22d/0x320 [ 321.479613][ T8050] __vfs_setxattr+0x431/0x470 [ 321.484318][ T8050] __vfs_setxattr_noperm+0x12d/0x5e0 [ 321.489623][ T8050] vfs_setxattr+0x16c/0x2f0 [ 321.494150][ T8050] path_setxattr+0x362/0x550 [ 321.498764][ T8050] __x64_sys_lsetxattr+0xb8/0xd0 [ 321.503733][ T8050] do_syscall_64+0x55/0xb0 [ 321.508189][ T8050] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.514114][ T8050] [ 321.516485][ T8050] The buggy address belongs to the object at ffff88801f6fc000 [ 321.516485][ T8050] which belongs to the cache kmalloc-1k of size 1024 [ 321.530668][ T8050] The buggy address is located 64 bytes inside of [ 321.530668][ T8050] 1024-byte region [ffff88801f6fc000, ffff88801f6fc400) [ 321.543982][ T8050] [ 321.546327][ T8050] The buggy address belongs to the physical page: [ 321.552951][ T8050] page:ffffea00007dbe00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1f6f8 [ 321.563225][ T8050] head:ffffea00007dbe00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 321.572357][ T8050] ksm flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 321.580839][ T8050] page_type: 0xffffffff() [ 321.585272][ T8050] raw: 00fff00000000840 ffff888017841dc0 ffffea0001e24400 dead000000000003 [ 321.593892][ T8050] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 321.603934][ T8050] page dumped because: kasan: bad access detected [ 321.610553][ T8050] page_owner tracks the page as allocated [ 321.616307][ T8050] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 43, tgid 43 (kworker/u4:3), ts 100721847466, free_ts 100669077174 [ 321.638390][ T8050] post_alloc_hook+0x1cd/0x210 [ 321.643276][ T8050] get_page_from_freelist+0x195c/0x19f0 [ 321.648846][ T8050] __alloc_pages+0x1e3/0x460 [ 321.653458][ T8050] alloc_slab_page+0x5d/0x170 [ 321.658165][ T8050] new_slab+0x87/0x2e0 [ 321.662260][ T8050] ___slab_alloc+0xc6d/0x1300 [ 321.667050][ T8050] __kmem_cache_alloc_node+0x1a2/0x260 [ 321.672543][ T8050] __kmalloc_node_track_caller+0xa2/0x230 [ 321.678390][ T8050] kmalloc_reserve+0x117/0x260 [ 321.683192][ T8050] __alloc_skb+0x138/0x2c0 [ 321.687659][ T8050] inet6_rt_notify+0xb4/0x240 [ 321.692502][ T8050] fib6_add+0x1d9a/0x3d20 [ 321.697111][ T8050] ip6_ins_rt+0xc9/0x120 [ 321.701463][ T8050] __ipv6_ifa_notify+0x62f/0xaa0 [ 321.706457][ T8050] addrconf_dad_completed+0x181/0xd40 [ 321.712139][ T8050] addrconf_dad_work+0xc4e/0x14e0 [ 321.717378][ T8050] page last free stack trace: [ 321.722067][ T8050] free_unref_page_prepare+0x7ce/0x8e0 [ 321.727646][ T8050] free_unref_page+0x32/0x2e0 [ 321.732359][ T8050] __unfreeze_partials+0x1cf/0x210 [ 321.737502][ T8050] put_cpu_partial+0x17c/0x250 [ 321.742385][ T8050] __slab_free+0x31d/0x410 [ 321.746934][ T8050] qlist_free_all+0x75/0xe0 [ 321.751468][ T8050] kasan_quarantine_reduce+0x143/0x160 [ 321.757000][ T8050] __kasan_slab_alloc+0x22/0x80 [ 321.761890][ T8050] slab_post_alloc_hook+0x6e/0x4d0 [ 321.767048][ T8050] kmem_cache_alloc+0x11e/0x2e0 [ 321.771935][ T8050] getname_flags+0xbb/0x500 [ 321.776468][ T8050] do_sys_openat2+0xcb/0x1c0 [ 321.781082][ T8050] __x64_sys_openat+0x139/0x160 [ 321.785968][ T8050] do_syscall_64+0x55/0xb0 [ 321.790405][ T8050] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 321.796492][ T8050] [ 321.798920][ T8050] Memory state around the buggy address: [ 321.804574][ T8050] ffff88801f6fbf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 321.812667][ T8050] ffff88801f6fbf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 321.820743][ T8050] >ffff88801f6fc000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 321.828816][ T8050] ^ [ 321.835016][ T8050] ffff88801f6fc080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 321.843093][ T8050] ffff88801f6fc100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 321.851251][ T8050] ================================================================== [ 321.883689][ T8050] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 321.890944][ T8050] CPU: 1 PID: 8050 Comm: syz.0.493 Not tainted syzkaller #0 [ 321.898243][ T8050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 321.908397][ T8050] Call Trace: [ 321.911698][ T8050] [ 321.914640][ T8050] dump_stack_lvl+0x16c/0x230 [ 321.919345][ T8050] ? show_regs_print_info+0x20/0x20 [ 321.924560][ T8050] ? load_image+0x3b0/0x3b0 [ 321.929075][ T8050] panic+0x2c0/0x710 [ 321.933017][ T8050] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 321.939180][ T8050] ? bpf_jit_dump+0xd0/0xd0 [ 321.943721][ T8050] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 321.949738][ T8050] ? _raw_spin_unlock+0x40/0x40 [ 321.954604][ T8050] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 321.960075][ T8050] check_panic_on_warn+0x84/0xa0 [ 321.965024][ T8050] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 321.970675][ T8050] end_report+0x6f/0x140 [ 321.975018][ T8050] kasan_report+0x128/0x150 [ 321.979616][ T8050] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 321.985177][ T8050] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 321.990662][ T8050] kasan_check_range+0x288/0x290 [ 321.995635][ T8050] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 322.001308][ T8050] __asan_memmove+0x29/0x70 [ 322.005850][ T8050] ext4_xattr_set_entry+0x94b/0x1e90 [ 322.011423][ T8050] ext4_xattr_block_set+0xae3/0x32a0 [ 322.016750][ T8050] ? ext4_destroy_inode+0x200/0x200 [ 322.022225][ T8050] ? proc_nr_inodes+0x230/0x230 [ 322.027521][ T8050] ? do_raw_spin_unlock+0x121/0x230 [ 322.032737][ T8050] ? _raw_spin_unlock+0x28/0x40 [ 322.037686][ T8050] ? ext4_xattr_block_find+0x350/0x350 [ 322.043168][ T8050] ? ext4_xattr_ibody_set+0x50d/0x6a0 [ 322.048554][ T8050] ext4_xattr_set_handle+0x10a1/0x1290 [ 322.054043][ T8050] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 322.060066][ T8050] ? __ext4_journal_start_sb+0x259/0x570 [ 322.065752][ T8050] ext4_xattr_set+0x22d/0x320 [ 322.070451][ T8050] ? end_current_label_crit_section+0x170/0x170 [ 322.077074][ T8050] ? ext4_xattr_set_credits+0x2f0/0x2f0 [ 322.082647][ T8050] ? posix_xattr_acl+0x93/0xb0 [ 322.087440][ T8050] ? evm_protect_xattr+0x36d/0x7a0 [ 322.092853][ T8050] ? ext4_xattr_trusted_get+0x40/0x40 [ 322.098250][ T8050] __vfs_setxattr+0x431/0x470 [ 322.103318][ T8050] __vfs_setxattr_noperm+0x12d/0x5e0 [ 322.108686][ T8050] vfs_setxattr+0x16c/0x2f0 [ 322.113316][ T8050] ? xattr_permission+0x470/0x470 [ 322.118459][ T8050] ? __mnt_want_write+0x223/0x2a0 [ 322.123699][ T8050] ? path_setxattr+0x314/0x550 [ 322.128589][ T8050] path_setxattr+0x362/0x550 [ 322.133306][ T8050] ? simple_xattrs_free+0x150/0x150 [ 322.138636][ T8050] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 322.144651][ T8050] ? lock_chain_count+0x20/0x20 [ 322.149525][ T8050] __x64_sys_lsetxattr+0xb8/0xd0 [ 322.154495][ T8050] do_syscall_64+0x55/0xb0 [ 322.158929][ T8050] ? clear_bhb_loop+0x40/0x90 [ 322.163636][ T8050] ? clear_bhb_loop+0x40/0x90 [ 322.168353][ T8050] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 322.174449][ T8050] RIP: 0033:0x7fd44398f6c9 [ 322.178881][ T8050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.198805][ T8050] RSP: 002b:00007fd44486a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 322.207333][ T8050] RAX: ffffffffffffffda RBX: 00007fd443be5fa0 RCX: 00007fd44398f6c9 [ 322.215418][ T8050] RDX: 0000200000000000 RSI: 0000200000000180 RDI: 00002000000001c0 [ 322.223940][ T8050] RBP: 00007fd443a11f91 R08: 0000000000000001 R09: 0000000000000000 [ 322.232024][ T8050] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000 [ 322.240059][ T8050] R13: 00007fd443be6038 R14: 00007fd443be5fa0 R15: 00007ffc18965408 [ 322.248595][ T8050] [ 322.252060][ T8050] Kernel Offset: disabled [ 322.256444][ T8050] Rebooting in 86400 seconds..