last executing test programs: 1m13.27402077s ago: executing program 3 (id=91): syz_mount_image$xfs(&(0x7f0000009800), &(0x7f0000009840)='./bus\x00', 0x50, &(0x7f0000000180)={[{@pqnoenforce}, {@noquota}, {@attr2}, {@grpquota}, {@ikeep}, {@prjquota}, {@noikeep}]}, 0x1, 0x985b, &(0x7f000001c900)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000580)=""/29, 0x1d) getdents64(r0, 0x0, 0x480a) 1m11.6911154s ago: executing program 3 (id=104): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x800, 0x2, 0x8000, 0x253d, 0x2, 0x16ed9af8, 0xff4c}, 0x1c) 1m11.043636169s ago: executing program 3 (id=113): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1000002, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c646973636172640061727365743d63703835322c757466383d202c6e6f6e756d7461696c3d302c6e6f6e75617461696c3d302c7574663c3d302c696f6368619615f9a9d8bc34fd234143727365743d69736f383835392d322c756e695f786c6174653d312c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c757466383d312c756e695f786c6174653d302c756e695f786c6174653d302c73686f72746e616d653d6d697865642c726f6469722c756e695f786c"], 0x1, 0x368, &(0x7f0000000180)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000100)=""/155, 0x9b) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000006c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 1m10.021845728s ago: executing program 3 (id=120): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f00000001c0)='./file1\x00', 0x818, &(0x7f0000000280)=ANY=[], 0x7e, 0x1cf, &(0x7f0000001080)="$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") mount$bind(&(0x7f00000001c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000180)='./file0\x00') umount2(&(0x7f0000002140)='./file0\x00', 0x0) 1m9.519868841s ago: executing program 3 (id=126): unshare(0x22020400) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x894c, 0x0) 1m8.549738202s ago: executing program 3 (id=135): setreuid(0xee00, 0x0) r0 = getuid() setreuid(0xee00, r0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) 1m8.275603719s ago: executing program 32 (id=135): setreuid(0xee00, 0x0) r0 = getuid() setreuid(0xee00, r0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) 56.897552057s ago: executing program 2 (id=206): syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000005900)='./file0\x00', 0x10000, &(0x7f0000000480)=ANY=[@ANYBLOB='fsck,inline_data,nocow,degraded,str_hash=siphash,norecovery,discard,reconstruct_alloc,erasure_code,acl,no_splitbrain_check,hash,uid=', @ANYRESDEC=0x0, @ANYBLOB="ef3ef0c23683a9582d18944a1e2fcc21bd7f0512bef3e04b71c9d70c26"], 0x1, 0x58b4, &(0x7f0000005980)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105042, 0x1db) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)='\v', 0x1}], 0x1) 54.750790334s ago: executing program 2 (id=221): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0) fstatfs(r0, &(0x7f0000000280)=""/186) 50.511672701s ago: executing program 2 (id=242): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x111}}, 0x20) 50.226063171s ago: executing program 2 (id=246): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x2000048, &(0x7f0000000240)={[{@errors_remount}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@delalloc}]}, 0x1, 0x429, &(0x7f0000000740)="$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") mount$bind(&(0x7f0000000040)='./file2\x00', &(0x7f00000000c0)='./file1\x00', 0x0, 0x813002, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x10000036}) 49.430351639s ago: executing program 2 (id=256): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000140), 0xfc, 0x560, &(0x7f00000008c0)="$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") r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x580000a, 0x13, r0, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000340)='o', 0x1}, {&(0x7f00000011c0)='(', 0x1}], 0x2, 0x1000000, 0x0, 0x0) 48.838118832s ago: executing program 2 (id=261): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @device_b}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6, {0x4, 0x5, 0x19, 0x3}}}}}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x60}}, 0x0) 48.235691642s ago: executing program 33 (id=261): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x60, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @device_b}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6, {0x4, 0x5, 0x19, 0x3}}}}}}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x60}}, 0x0) 4.270090988s ago: executing program 1 (id=677): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) write$uinput_user_dev(r0, &(0x7f0000000700)={'syz1\x00'}, 0x45c) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0x5501, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, 0x0) 3.769355053s ago: executing program 1 (id=681): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800068004000500080000003e"], 0x44}}, 0x0) 3.512294506s ago: executing program 1 (id=685): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000300)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) setregid(0x0, 0x0) flock(0xffffffffffffffff, 0x0) 3.362664389s ago: executing program 6 (id=687): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x10) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4b, 0x2}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) 3.285239548s ago: executing program 1 (id=689): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000200), 0x8) listen(r0, 0x0) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000006c0), 0x4) 3.089703758s ago: executing program 1 (id=691): r0 = syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000003a40), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000001c0)={0x1}) ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x5000940e, &(0x7f0000003a80)={{}, "67007fd20187e707f2c23217151d4c4507c7c085dd422660bda48e086cd2f808d5b6478c8cbea9b2ad3af2c0d89a0bb3693d4bbafc396326520398d1d306eeadbbc30061f8c77ac113c986ac3224717ffd13eb5d9385058a7f43f0bec54d7a9cfa0e9476ad1f5e3929aef800b6e05130321698ce486a9a471cb5f990a6090d5d08dbd76281074ccfcba7c541d1d90c7cda0c00db3fe016f476c4f0d8477d5a2a63b0b5996608f3285284834f76f3abc4fd6eb7bc98d25cf13ea9bf76c926015175d32ddb51f55aeb94cf79c5ae462344cb76d37e3de8268f6775462964f874cb532b06eb9e5530765b8a15c416f2c9f5d623d5d36f4e599dfe1e61ab723a38cfd8df003314b67e2497f1bb0e8ffe1c2ff51245449a41628b7d19ed163d3b8ef7c0e388c519f373534a70b19dcd3dcf73f734adaa0f56c44ba98f11293a837651846e44acda315cdbad251e91e7b45db0d2d7101ecda1b990580e8b80f770cbeefaa053ff8113c0d2c656ef14974ccd03d326d9072d8f6c124270df133679938a39ac6dcdca3fb6a36fda27694d8546d156fd3f99394266c1e5829fb6f4eda46914d2b68d41d3e00cef0dd85ffac1ec37e766cf9585332485e97d76760403dba1f42e6bb11da51fce5e6c82fdded15ae1c92fbe33baa213cae97aa116641bda9c59969d93b8103f1bf383339b9e9e416d42f9b1235acb1d899dcf6088bef22d6dbc724689d26f14e0a8fc335c16bcb28686703314e9e8abb715eb9120dc40e39e56c046cd30e8802cf0035f6edae9a27c205b9e27d0b43659bd004c3a0825e3320aa20a36407f1ca381a6b50a45023028b011c36cc34723e6e394fa695d5110c5b151aa11a5b5a8ab538b38a19e44b5d2b5ba263141a8737e76555e5be78f54a3ba1bb366c6d7411a4c3431b7ae422dfcc785676a072d6609a708acfb703c330194565e3761b403798a6b2ed1da656da27dff2f4a13475e5f50e0cb9eac745ee6457cdd7cb4e46d4e34e27e2c5655340eb88cfdb31cb7ed3b8358fc2907eb2f63bda192403b0672de72aebb73ef7098b4a85a71dc73ce05b5e0e45b7a19f9c9a41df892172c4ef46f0d201ed67b69b62adc742fdf5c2f6052896873fc83180d2759b44b840944d440868fb03f660084af14293e83b65678e8a2372cc3664fb4f5a726463c7d002a92e3d2c4622dd21bba56df7679849a1d1ac1e35128447dd10908b045d722416cbbd79ea389687a8106d8f6954553084025c541a264dc2c3b75b53e803f24b4fcbeef27f22c98b6034cd767c5c3bc8a22eba95e5e6b3b2494b16b0b32419b6308132ec59a94afceed06d8a4742cd91a445c8816ec2642a6546743d1ffb15dd31925b640f462ea7978320d1f840a0c21f6afbe13f6b5a6eadf6dba255ac7f3d25b5d16abc14aae4dbc8561fd3bcb82a1c857611165af6194d9ad865ee7b3b053dbf5c3b943563c0530b00aed8d184b50d3deed849622d9570bab5947254c847bfdbebf0b6551cedefad75618e806261d0ebdba27a5145b409cde45b2bdf794f6726c6bd5d3ca62a8bdf7ee594aa1089b8ac761435b82555b40d72d9d6948e8987ac516f53f68e4f60358793bc42fbfcef881a669be7fc94c18d7c61fc3c62ed434312924af7d4d7fa85bd1546650f35b0eb9be3b62fb527ce90deee19e0642d82da3915f69a36e6c4c44c32e78f589bf49eba8292ff8e5c0949e5783b61ae181c698e7afb88a6bf77909226902405ad152907a149cdbf23e1c324dc1854ae14d3c43e4efcba4f8d3e6a7f3229061f459db0265c2a73286e24e51dcc0349c7f861b52c38fe33f15ce3757acb6a8fbfa0eb32cd58e57f0cb9bec752ce76a42fcb99e08c16cb0ed770d65c33756fb420472b78016bc346d3dfd41b779e858230d99fc806c759b9584f3f54538b78f31c69aac5250c750ecc32b4cdbef817076effc0b98e87f1ad6ec0c851c4b5c7cc55a48eb042d89f1c380f21e5d0cc5bfce73940f7e1156a824804efb2d0105a27a1ca7bcd66855e816cc027550821890e4511eedf28b839e90ce6d373fec645b22a060f3ef86e387ad20407555f508069b36f57a218a4bb3977267c66d94ecc80a2222a78bd9891394b6a66d2f48a2a926f5568f41b86d413492f68bf49a138442d40439e6a2425b06c88c8552b325642bc4fd6d0ac80056560073e827f651ec0db7c4e2a369afb625e669367a28ac6706ce1433696ccaf1416a43cdfa94b1f27664f3685d1bb72157d7577b20e9921def1460cfcd2cd806e3bafa83a3b5b4b4dac5d5f05d92d125fc295ea07ca4206b3f85a18f6f0c941d8df2f3dc57c87d9abcc7c3dbf91d7fa2f42df7b7df6371a901417507ab1093dbc0a17bca7575f4cbe6eb8151c9a6b76b04651c2c41e0bffc37708f1327ac3b204abe8af964a9cdb9997fdce64f36e606f4eb0e4564dc56ad43bb1b250ae4c64b6ba42499ee90ba37c6692f77218a49cb7ce38b3f8c8c58b3f6de5754d1b0890661145f023f83aff39d82030f4d7c1a6893b17b0379d63819c71b02a8ca450be5c97215d148812b1aeeeb0ee91534f7f83c17951140aaad6ccd8f7e5dca522139211d5f7358e32becc1d720a4ae7e08a6e48087761bbb1afbd3c4a0374d4ce65c192abefe6e4279f31249f0623490d30b8dc6094b6063ea503460e028b3ed76113bcb60b64d324d1b654d38cd64fe6384e928de69093f32c0967566cb9c65cd6c190292bbee355fb3ae73f8f5e702be3f414cf0f75b6165f96ff0c2d11de264eefd28e4760b65e9e51a43a9968b74cfce50bdf200712b90c0591b258ca61f5394d68acc5ec281a5b35088aa5a78ad8978336d4bcbdfb940922fd2d09d9a2dbc2699a0d36389b08557149345bb6ff59bd01bab3701e8baf0de315bba270ef22fadccb80609e86ac75185c651e466307360e78f6ba4dd02a62d72b78ff03709375465b6f0c88b8fbcfb8d52e11866615c1bbf3d38da0b7b102e3f5cd0d8fd86d98fa7ed24a6b010b194a7a5b80fb6fb2b35e72a0c01af3042b14ff708f943849162a39bf7a501dbdff99a53ea7981a23a2ef0a5ee2cf6d8fdba31a8248adec3e753862544717db3a480534ec80e42c622f66e29bb124086e8f712a8ddad70449590653e764f98d7068664af7564608ceef80c8a1ad852632e667fd70b6d7184914e7044eaeab7508e026a5a5c9b935130e76f962c472837f69a7f36742cac425440e337d367f82099ff8f66435fb1c2daf847e35e5e5ded5a5211ae1321a2bf2b82d60f9745464c97468c7516d54d18d7f6f9385c2aa2d6fb81894d30805c87babc2c6472f6e36a8efee06995e64408bac05bc6ca50caca126cee2a00e527b4de778453efb3dd855249470778d280c7cce57571603a78f991ddae9690c6f9cb2f222d2441a113efdbef1e1d8786560dd6b39cc5b957185abf0ae65b2b0b1e2f2042d4d42575a3119418b5056dc5c12b0fceafa050026fecf61e746597b9717656f601fbf0c55ea1ead2484708bed524320ba1a109d705e60a53a2cafcae32c48b527cf5b2f9415ba26026164d71380ee95fbb8a467da5a686eeb618cd5591b2b975e888540f7b6b95c4b357b65c2f6a82958dd32f2fc95e1909ef5237604115b0d7202b596ac347d37595ba449e96718d7c3fc90f0970d70df061b201bdf5a0acad80c6961fac488a4b0a33a7a82ee5ffed2a772f51b023fcbdd1b0063014012f53602f2a55d76ece6484a5022e86c5af75989d7b7a48a53f4a19a3007af6f66d2c17b298c81ea3b91c4da6ae0ebe908e623c6a8c8d45e6d5564c5cc873916d7a4ae0800dae31f1b43fd37585dd7a4c9bbab7bbd446001321809dc42c754db49cab3e200dfca0f5a0533aca50414c426787d5a799460bb2e4e0a4a68d447e506cf37bf76b22a9d13f15d4094ba02b3420616f85fffbc4304a27d93c7f260f1bb3a8279fa39a95966363a86c910527a1c4fae7d30423c706cfe47db865b697ed300dbc03000000cdf1ad524da027b62228bffec02ab4c759ffda774bbe4d950f25871c44ac0ebe56a3e30a49238c24150fb7f2eff97637bf8d88415ba133d51355880307455c09ba009b240614f1f9bbd77b9f9ca56ed1faa61d1fa1c1d366d380d67eb12a597b258fab8932b7fdb73b9452c74a4ebd0334dd580ff941447631ad9b464cf2ce346fc08cb743fd87dbed585e3218802f281c0fbff9a5fe2f3355f36f19e4bfd96262af0f8fd08f715752d79759191a249b60f05f6671eec600d29862ad71afc84f1de0c5ba6557cada7610625744ef1110d5016bb027699b3fd438978672a9aa228f68f9368036abef754fda4bd3cf9c88dddb28ae11238747b513e95c78828ab1143445077052d4699a1260c40b887b898f1a596de0ed908f1813de47c99b6fa498bc892aec67966139db8fbe6d17b3b6542da9868b5313de5b7651cda2c61aa2912951cf14d037ed1ab1ebfa9183852519c4717332f676a4fa79cc1c4c49253467195266a9edcb070e7caebc7d9f55d0ab773fcf85f089adbd6ba953f69eafec2e89dda7322041785d75895ecb46158989472f5a1bc7a28909741d0da7b11eaba264b5ff44bea22fae4ce9dc46fc71722b8153c8ac1e361f66116725bc5684b028a5d734bcbe4b8e746379f939cc50b8e15dfd12fbabe657d5158c31c42dc7b422ed3432b0cab81f2f5e9989ba00fc30c19141d3a97635cfe88e0d8eb5ca148b33635550f47af5d4bd06841c455b1f09c64681267b0d7a84cbd9a494b92a0fb6272f92f0f03a133f2d52ec8d94d32766607c54b955ebb8d91c34796b090b7894f36382db5f2856a63df7437d671dd815d0d313ba8f44b0d9e01d714daa4135f19089f2a3688ed2422670f54ab36f4a68626830e260c453b0d4e989f311149ebc755e984d6dd66e79b6cb394965f654cde57990a4274fd08a256c356f0dc05e608513b9b316821851c08356c1182476b085ca9b069f789601d60a8580a9d672b4b8d8b1747959b98e80b5d17501347c3c10aa52cfc7869f96890614778014baa91613767e4223c7f516cfba8b60f882ba233bd2f30b122c682ebf2f29fa1253d3c81bab5cf744d7262e4f00fc55b69caceee1d405184397d699776bdce71fd2306c1d8a70378be27cf07c000d30f8fe484eaea13b9b13ca7b3863d3233884497741ab4f2355dec89302ca459cf251c18b7d50dc0465113d8aeb44679551d0b8ea7595df9c35184b58334dfd5edd3a5a49d0d7528d130c268ecc505d5de015a825f821d648951619815a5a75dc06f070140e42005f670f6798cb86df0a80531005b9df0a14294d6994fb989f2ce6b1bbd82da15f03d94bea32a3272d438c2033f35e41473a5b70240d41a69076095693de5e0ccf50236588436c28e7f2b77992f2c56e7598e5500fe7c5e421dc1a0a1e2ec623bb279cedc62baa1613782d90a7cea40082ce647d3eadbbf76c4e601a78643aeed701e1a86c7dfe620bbe47e42a00b2cbd92635ed41e6a71371a5a938d7b38e6a30861b1ee2b8917cadc53bf7ad203582e051065432fadad2ec8d2435b50a08827ff89a8badb1220f59fb6606ddf5efd3a0d07f5be5fb907061adf171da7e30f6bb5aa9af9d1732d8e2b789edf0827862c742c8264c54e0b9ddf131087c08a24cda2b344ef035b6d3c57ee87f856377901e5f87bdb6a58f0e0347275868e1d9cd999a5800"}) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000000)={0x0, 0x6, 0x5}) 3.089349778s ago: executing program 6 (id=692): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f00000001c0)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f00000001c0)=""/207, &(0x7f0000000000)=0x18) 2.971370365s ago: executing program 6 (id=694): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x8, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.806075132s ago: executing program 6 (id=696): syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000100)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2004400, &(0x7f0000001140)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYBLOB="a85f0dc3446ae0c36ba4848c770920cd9addace5c10dee3a96f810395203ae3bd777155e0b6764a2fd6da6853696460e4dc9849661ef1979cffa16b5bf59dabf336f10c3c559e5e6957f06f8cc8dc9d87dce1e2fe00f1a9e839df7923f50ee737985bd9b461e751d8f2be497d8651d589f890f61b87b83f3c7ad3ba191fa8e9a0ea1b14157305d0891f22ea0bbafcc5044e7177fcb08366d582b977b1847305408f72d19577993c4f746315483175fd218fe2194c2e6c97f561184a4f7c739d2ae93ba3016354f0d2ed26e6b810ebbbd0d1f93e7251bd3b5ed60ea3c840a2bbe7fc0", @ANYRES32], 0x1, 0xa1b, &(0x7f0000001f80)="$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") utimes(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)={{0x0, 0x2710}}) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fsync(r0) 2.719986899s ago: executing program 7 (id=697): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) unshare(0x400) fsync(r0) 2.638759324s ago: executing program 0 (id=698): sched_setscheduler(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x24}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 2.613130636s ago: executing program 4 (id=699): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x9, r0, 0xb75, 0x6) syz_clone(0xa1204100, 0x0, 0x0, 0x0, 0x0, 0x0) 2.403037266s ago: executing program 7 (id=700): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) fdatasync(r0) 2.359183198s ago: executing program 6 (id=701): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c40)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x7c0, 0x1125, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @string={0x4, 0x3, "ddb6"}}, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, 0x0) 2.26133613s ago: executing program 7 (id=702): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000440)={@empty, @broadcast, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0xc4, 0x2f, 0x0, @rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}, 0x0) 2.253018832s ago: executing program 0 (id=703): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) 2.073945744s ago: executing program 7 (id=707): bind$alg(0xffffffffffffffff, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000f40)={[], [], 0x2c}, 0x1, 0xee6, &(0x7f0000002d40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v'], 0x0) 1.991706247s ago: executing program 0 (id=708): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000100)=0x1020060c) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0x6, 0x4, 0xd90, 0x80, 0xd, "6cb2953f4999424e"}) 1.939252908s ago: executing program 5 (id=709): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000040)={0x0, 0x7a120, 0x60}) 1.807157974s ago: executing program 5 (id=710): r0 = io_uring_setup(0x3450, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000002700)=""/4118, 0x1000}], 0x0, 0x34}, 0x20) 1.72072841s ago: executing program 4 (id=711): setreuid(0x0, 0xee00) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@local, 0x800, 0x2, 0x0, 0x0, 0xa4}, 0x20) 1.519244233s ago: executing program 7 (id=712): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x8) 1.479682454s ago: executing program 4 (id=713): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe}]}, 0x3, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") io_setup(0x1, &(0x7f0000000000)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x0) io_submit(r0, 0x1, &(0x7f0000000480)=[&(0x7f00000000c0)={0xffffff7f00000000, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000040)='9', 0x1, 0x400000000000000}]) 1.367666001s ago: executing program 5 (id=714): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file2\x00', 0x4204, &(0x7f0000003240)=ANY=[], 0x2, 0x32f, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, r0, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000500)=ANY=[@ANYBLOB='\v\x00'], 0x119) 1.149370838s ago: executing program 7 (id=715): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x41}, 0x0) 923.998878ms ago: executing program 0 (id=716): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x180000, @empty}, 0x1c) 867.171677ms ago: executing program 5 (id=717): r0 = syz_io_uring_setup(0xec7, &(0x7f00000003c0)={0x0, 0x4bb6}, &(0x7f0000000380)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, &(0x7f0000000280)=[{&(0x7f0000000240)="050a5114f60aaead2d27a17235d752a1d0bfa916a5b510f33c85f832", 0x1c}, {&(0x7f00000006c0)="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", 0xfe5}], 0x2}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) 857.284798ms ago: executing program 0 (id=718): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") symlink(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001200)=""/4096, 0x1000) 846.760079ms ago: executing program 1 (id=719): sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000340)=ANY=[], 0x1a4}, 0x1, 0x0, 0x0, 0x5404c804}, 0x20000050) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 640.810803ms ago: executing program 4 (id=720): r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) io_uring_enter(r0, 0x27e2, 0x0, 0x0, 0x0, 0x0) 498.882233ms ago: executing program 4 (id=721): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r1}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x1, r1, 0x0, 0x2}) 414.692166ms ago: executing program 0 (id=722): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, &(0x7f0000edfff0)={0x77359400}, 0x0, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 333.813664ms ago: executing program 5 (id=723): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f0000000400)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000}) 304.319135ms ago: executing program 5 (id=724): r0 = timerfd_create(0x0, 0x0) readv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/168, 0xa8}], 0x1) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) 591.161µs ago: executing program 6 (id=725): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 0s ago: executing program 4 (id=726): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000700)='./file0\x00', 0x2800818, &(0x7f00000013c0)=ANY=[], 0xf, 0x6a9, &(0x7f0000000e00)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) kernel console output (not intermixed with test programs): pe 2 family 0 port 6081 - 0 [ 77.343493][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.354317][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.365952][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.389182][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.399786][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.411493][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.446285][ T5842] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.455948][ T5847] Bluetooth: hci3: command tx timeout [ 77.461421][ T5842] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.470335][ T5842] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.479872][ T5842] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.532469][ T5847] Bluetooth: hci4: command tx timeout [ 77.537975][ T5847] Bluetooth: hci1: command tx timeout [ 77.538958][ T5836] veth0_vlan: entered promiscuous mode [ 77.562223][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.569805][ T5835] veth0_vlan: entered promiscuous mode [ 77.608947][ T5852] veth0_macvtap: entered promiscuous mode [ 77.612160][ T5855] Bluetooth: hci0: command tx timeout [ 77.615586][ T5851] Bluetooth: hci2: command tx timeout [ 77.620144][ T5847] Bluetooth: hci5: command tx timeout [ 77.633924][ T5835] veth1_vlan: entered promiscuous mode [ 77.669019][ T5852] veth1_macvtap: entered promiscuous mode [ 77.697374][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.707191][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.718360][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.725855][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.755424][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.767119][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.778787][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.789659][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.801679][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.817149][ T5836] veth1_vlan: entered promiscuous mode [ 77.840942][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.858103][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.864594][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.877115][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.887110][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.897835][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.909194][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.946234][ T5852] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.955701][ T5852] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.968235][ T5852] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.977076][ T5852] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.010893][ T5837] veth0_vlan: entered promiscuous mode [ 78.040902][ T5835] veth0_macvtap: entered promiscuous mode [ 78.060491][ T5836] veth0_macvtap: entered promiscuous mode [ 78.065672][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 78.070639][ T5836] veth1_macvtap: entered promiscuous mode [ 78.096309][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.106866][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.116897][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.127410][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.137294][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.147778][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.159640][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.180958][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.191689][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.201680][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.212211][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.222080][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.232650][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.244761][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.257159][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.265136][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.280842][ T5837] veth1_vlan: entered promiscuous mode [ 78.323473][ T5941] sg_write: process 3 (syz.1.2) changed security contexts after opening file descriptor, this is not allowed. [ 78.329412][ T5835] veth1_macvtap: entered promiscuous mode [ 78.348461][ T5941] program syz.1.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 78.361706][ T5836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.382939][ T5836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.394334][ T5836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.412535][ T5836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.471342][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.481970][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.492573][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.503286][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.513484][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.524268][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.534375][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.545011][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.556506][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.568267][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.579261][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.589493][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.600545][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.610435][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.620939][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.630835][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 78.641317][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.653325][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.694747][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.704047][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.713231][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.723283][ T5897] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 78.728891][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.770621][ T5837] veth0_macvtap: entered promiscuous mode [ 78.788656][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.816800][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.840074][ T5837] veth1_macvtap: entered promiscuous mode [ 78.891161][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 78.906640][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 78.917732][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.928486][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.937492][ T5897] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 78.939052][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.966111][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 78.973531][ T5897] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 78.978432][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 78.986789][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.007399][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.016269][ T5897] usb 2-1: Product: syz [ 79.018392][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.025801][ T5897] usb 2-1: Manufacturer: syz [ 79.032382][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.046675][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.048879][ T5897] usb 2-1: SerialNumber: syz [ 79.066409][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.076038][ T5897] usb 2-1: config 0 descriptor?? [ 79.084907][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.096167][ T5897] hub 2-1:0.0: bad descriptor, ignoring hub [ 79.104493][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.115790][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.126841][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.137805][ T5897] hub 2-1:0.0: probe with driver hub failed with error -5 [ 79.144680][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.156832][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.164331][ T5897] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 79.167629][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.187403][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.192382][ T5897] usbtouchscreen 2-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 79.198181][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.217246][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.228171][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.239991][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.255190][ T5897] usbtouchscreen 2-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 79.285706][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.316068][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.407544][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.416653][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.425666][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.434589][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.459319][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.473411][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.534535][ T5847] Bluetooth: hci3: command tx timeout [ 79.572576][ T5901] usb 2-1: USB disconnect, device number 2 [ 79.590100][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.598857][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.612687][ T5847] Bluetooth: hci1: command tx timeout [ 79.612840][ T5851] Bluetooth: hci4: command tx timeout [ 79.692271][ T5851] Bluetooth: hci5: command tx timeout [ 79.698873][ T5847] Bluetooth: hci0: command tx timeout [ 79.699485][ T5851] Bluetooth: hci2: command tx timeout [ 79.716286][ T80] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.748639][ T80] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.876667][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.892334][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.982796][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.991197][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.999610][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.008711][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.745770][ T5976] loop4: detected capacity change from 0 to 4096 [ 80.779786][ T5986] Bluetooth: MGMT ver 1.23 [ 80.834565][ T5976] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512). [ 81.287428][ T5997] loop1: detected capacity change from 0 to 512 [ 81.295417][ T5997] ======================================================= [ 81.295417][ T5997] WARNING: The mand mount option has been deprecated and [ 81.295417][ T5997] and is ignored by this kernel. Remove the mand [ 81.295417][ T5997] option from the mount to silence this warning. [ 81.295417][ T5997] ======================================================= [ 81.499605][ T5998] loop0: detected capacity change from 0 to 2048 [ 81.567917][ T5993] loop5: detected capacity change from 0 to 4096 [ 81.761914][ T5976] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 82.068115][ T5993] overlayfs: upper fs does not support tmpfile. [ 82.135348][ T5993] overlayfs: workdir/#2 already exists [ 82.137358][ T5998] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 82.158176][ T6002] loop1: detected capacity change from 0 to 4096 [ 82.173089][ T6002] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512). [ 82.209432][ T5998] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.229465][ T6002] ntfs3(loop1): Failed to initialize $Extend/$ObjId. [ 82.406793][ T6013] loop4: detected capacity change from 0 to 4096 [ 82.426224][ T6015] 9p: Unknown access argument 18446744073709551615: -34 [ 82.439654][ T6013] ntfs3(loop4): It is recommened to use chkdsk. [ 82.447552][ T6013] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 82.455733][ T6013] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 82.464450][ T6013] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 82.472961][ T6013] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00 [ 82.481163][ T6013] ntfs3(loop4): try to read out of volume at offset 0x3fffffc1c00 [ 82.489118][ T6013] ntfs3(loop4): try to read out of volume at offset 0x3fffffc2c00 [ 82.497224][ T6013] ntfs3(loop4): try to read out of volume at offset 0x3fffffc4c00 [ 82.505161][ T6013] ntfs3(loop4): try to read out of volume at offset 0x3fffffc8c00 [ 82.513129][ T6013] ntfs3(loop4): try to read out of volume at offset 0x3fffffd0c00 [ 82.537501][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.695753][ T6023] loop0: detected capacity change from 0 to 256 [ 82.789451][ T6023] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d) [ 83.128386][ T6020] loop3: detected capacity change from 0 to 40427 [ 83.141319][ T6020] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 83.149434][ T6020] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 83.217353][ T6020] F2FS-fs (loop3): invalid crc value [ 83.226852][ T6033] loop4: detected capacity change from 0 to 164 [ 83.271970][ T6020] F2FS-fs (loop3): Found nat_bits in checkpoint [ 83.349210][ T6033] Unable to read rock-ridge attributes [ 83.369025][ T6039] loop2: detected capacity change from 0 to 2048 [ 83.456305][ T6033] Unable to read rock-ridge attributes [ 83.479313][ T6039] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.534124][ T6020] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 83.541355][ T6020] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 83.752233][ T5901] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.883288][ T5835] syz-executor: attempt to access beyond end of device [ 83.883288][ T5835] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 83.923316][ T5835] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 83.927390][ T5901] usb 1-1: Using ep0 maxpacket: 32 [ 83.975034][ T5901] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 84.001900][ T5901] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.047375][ T5901] usb 1-1: config 0 descriptor?? [ 84.076116][ T5901] gspca_main: sunplus-2.14.0 probing 041e:400b [ 84.140767][ T6065] netlink: 20 bytes leftover after parsing attributes in process `syz.1.54'. [ 84.201401][ T6068] [U]  [ 84.551874][ T962] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 84.707039][ T962] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.749359][ T962] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.810298][ T962] usb 5-1: New USB device found, idVendor=056a, idProduct=0325, bcdDevice= 0.00 [ 84.856944][ T962] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.903597][ T962] usb 5-1: config 0 descriptor?? [ 85.177414][ T962] usbhid 5-1:0.0: can't add hid device: -71 [ 85.201398][ T6088] loop3: detected capacity change from 0 to 4096 [ 85.204506][ T962] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 85.293409][ T5901] gspca_sunplus: reg_r err -71 [ 85.298294][ T5901] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 85.305727][ T962] usb 5-1: USB disconnect, device number 2 [ 85.328728][ T5901] usb 1-1: USB disconnect, device number 2 [ 85.492285][ T6092] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 85.519598][ T6083] loop1: detected capacity change from 0 to 40427 [ 85.545278][ T6083] F2FS-fs (loop1): Found nat_bits in checkpoint [ 85.559629][ T29] audit: type=1800 audit(1729793423.576:2): pid=6088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.63" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 85.597664][ T29] audit: type=1800 audit(1729793423.596:3): pid=6088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.63" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 85.684143][ T6083] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 85.951299][ T6105] loop0: detected capacity change from 0 to 128 [ 85.995795][ T6105] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.054480][ T6109] netlink: 144316 bytes leftover after parsing attributes in process `syz.5.71'. [ 86.068456][ T6105] ext4 filesystem being mounted at /5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 86.100438][ C0] vkms_vblank_simulate: vblank timer overrun [ 86.187981][ T6099] loop3: detected capacity change from 0 to 8192 [ 86.270653][ T9] cfg80211: failed to load regulatory.db [ 86.410092][ T5837] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.512443][ T6117] sctp: [Deprecated]: syz.5.75 (pid 6117) Use of int in maxseg socket option. [ 86.512443][ T6117] Use struct sctp_assoc_value instead [ 86.646974][ T6120] overlayfs: failed to clone lowerpath [ 86.967039][ T6123] loop4: detected capacity change from 0 to 8192 [ 87.007231][ T6135] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 87.036234][ T6134] loop5: detected capacity change from 0 to 2048 [ 87.104851][ T6138] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 87.146151][ T6134] NILFS error (device loop5): nilfs_check_folio: bad entry in directory #2: directory entry across blocks - offset=80, inode=15, rec_len=2072, name_len=5 [ 87.204642][ T6134] Remounting filesystem read-only [ 87.622684][ T6152] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.743054][ T6157] netlink: 132 bytes leftover after parsing attributes in process `syz.5.92'. [ 87.938501][ T6164] loop1: detected capacity change from 0 to 128 [ 87.956469][ T6164] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 88.062383][ T6157] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.070699][ T6157] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.104482][ T5842] sysv_free_block: trying to free block not in datazone [ 88.131966][ T5842] sysv_free_block: trying to free block not in datazone [ 88.138953][ T5842] sysv_free_block: trying to free block not in datazone [ 88.146019][ T5842] sysv_free_block: trying to free block not in datazone [ 88.161927][ T5842] sysv_free_block: trying to free block not in datazone [ 88.169035][ T5842] sysv_free_block: trying to free block not in datazone [ 88.185373][ T5842] sysv_free_block: trying to free block not in datazone [ 88.262432][ T5842] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 88.435668][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.97'. [ 88.468477][ T6155] loop3: detected capacity change from 0 to 32768 [ 88.479486][ T6155] XFS: attr2 mount option is deprecated. [ 88.485391][ T6155] XFS: ikeep mount option is deprecated. [ 88.501233][ T6155] XFS: noikeep mount option is deprecated. [ 88.610551][ T6148] loop4: detected capacity change from 0 to 32768 [ 88.639627][ T6155] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 88.648786][ T6148] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 88.710509][ T6184] netlink: 24 bytes leftover after parsing attributes in process `syz.2.100'. [ 88.739999][ T6157] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.763095][ T6157] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.908754][ T6148] XFS (loop4): Ending clean mount [ 88.909940][ T6155] XFS (loop3): Ending clean mount [ 88.938315][ T6148] XFS (loop4): Quotacheck needed: Please wait. [ 88.947705][ T6155] XFS (loop3): Quotacheck needed: Please wait. [ 89.032735][ T6148] XFS (loop4): Quotacheck: Done. [ 89.034422][ T6155] XFS (loop3): Quotacheck: Done. [ 89.048471][ T6157] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.060131][ T6157] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.069182][ T6157] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.084722][ T6157] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.135375][ T5836] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 89.158402][ T5835] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 89.833628][ T6216] loop3: detected capacity change from 0 to 256 [ 90.120066][ T6216] FAT-fs (loop3): Directory bread(block 64) failed [ 90.143264][ T5951] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 90.150598][ T6213] loop5: detected capacity change from 0 to 32768 [ 90.165013][ T6213] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.112 (6213) [ 90.202286][ T6216] FAT-fs (loop3): Directory bread(block 65) failed [ 90.209258][ T6213] BTRFS info (device loop5): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 90.230039][ T6213] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 90.239230][ T6216] FAT-fs (loop3): Directory bread(block 66) failed [ 90.239798][ T6213] BTRFS info (device loop5): disk space caching is enabled [ 90.255962][ T6213] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 90.292082][ T6216] FAT-fs (loop3): Directory bread(block 67) failed [ 90.298812][ T6216] FAT-fs (loop3): Directory bread(block 68) failed [ 90.307694][ T6216] FAT-fs (loop3): Directory bread(block 69) failed [ 90.336240][ T6216] FAT-fs (loop3): Directory bread(block 70) failed [ 90.350884][ T6216] FAT-fs (loop3): Directory bread(block 71) failed [ 90.357608][ T5951] usb 5-1: Using ep0 maxpacket: 8 [ 90.412091][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.474244][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.502014][ T5951] usb 5-1: New USB device found, idVendor=054c, idProduct=0ce6, bcdDevice= 0.00 [ 90.508387][ T6216] FAT-fs (loop3): Directory bread(block 72) failed [ 90.511208][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.535602][ T5951] usb 5-1: config 0 descriptor?? [ 90.583022][ T6216] FAT-fs (loop3): Directory bread(block 73) failed [ 90.606962][ T6213] BTRFS info (device loop5): rebuilding free space tree [ 90.659679][ T6213] BTRFS info (device loop5): disabling free space tree [ 90.667836][ T6213] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 90.678933][ T6213] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 90.801882][ T5901] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 91.011293][ T5901] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 91.021431][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.045337][ T5951] hid (null): unknown global tag 0xe [ 91.056079][ T5951] playstation 0003:054C:0CE6.0001: unknown main item tag 0x0 [ 91.065155][ T5951] playstation 0003:054C:0CE6.0001: unknown global tag 0xe [ 91.073145][ T5951] playstation 0003:054C:0CE6.0001: item 0 0 1 14 parsing failed [ 91.081275][ T6255] loop3: detected capacity change from 0 to 16 [ 91.081399][ T5951] playstation 0003:054C:0CE6.0001: Parse failed [ 91.093234][ T6252] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 91.094345][ T5951] playstation 0003:054C:0CE6.0001: probe with driver playstation failed with error -22 [ 91.130986][ T5901] usb 2-1: config 0 descriptor?? [ 91.140478][ T6255] erofs: (device loop3): mounted with root inode @ nid 36. [ 91.180421][ T5901] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 91.223012][ T5852] BTRFS info (device loop5): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 91.343601][ T5951] usb 5-1: USB disconnect, device number 3 [ 91.367051][ T5835] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 305 [ 91.422533][ T5835] erofs: (device loop3): erofs_read_inode: bogus i_mode (0) @ nid 305 [ 91.660167][ T6267] loop0: detected capacity change from 0 to 512 [ 91.673206][ T6267] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 91.687187][ T6267] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 91.716072][ T6267] EXT4-fs (loop0): 1 truncate cleaned up [ 91.742349][ T6267] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 91.801315][ T5901] gspca_stv06xx: vv6410 sensor detected [ 91.822267][ T6271] loop2: detected capacity change from 0 to 1024 [ 91.853980][ T6271] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 91.866494][ T6271] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 91.892219][ T6271] EXT4-fs (loop2): invalid journal inode [ 91.897962][ T6271] EXT4-fs (loop2): can't get journal size [ 91.914057][ T6273] loop5: detected capacity change from 0 to 4096 [ 91.924679][ T6273] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512). [ 91.927099][ T6271] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.015852][ T6271] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 37: comm syz.2.128: path /25/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 92.048748][ T6271] EXT4-fs error (device loop2): ext4_readdir:261: inode #2: block 3: comm syz.2.128: path /25/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=511, rec_len=65535, size=1024 fake=0 [ 92.093245][ T5901] STV06xx 2-1:0.0: probe with driver STV06xx failed with error -71 [ 92.133567][ T6273] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 92.143758][ T5901] usb 2-1: USB disconnect, device number 3 [ 92.270217][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.456992][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.519867][ T2898] ntfs3(loop5): ino=5, ntfs3_write_inode failed, -22. [ 92.554706][ T6278] loop4: detected capacity change from 0 to 32768 [ 93.023384][ T6278] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 93.051315][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.080179][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.088638][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.097545][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.139150][ T5927] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.253200][ T6284] loop0: detected capacity change from 0 to 40427 [ 93.321871][ T6284] F2FS-fs (loop0): Invalid log blocks per segment (4278190089) [ 93.333716][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 93.354201][ T5847] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.372314][ T6284] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 93.389692][ T5927] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.391052][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.453138][ T6284] F2FS-fs (loop0): invalid crc value [ 93.511921][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 93.523809][ T9] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 93.545334][ T5927] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.568119][ T6284] F2FS-fs (loop0): Found nat_bits in checkpoint [ 93.581930][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.597375][ T6287] loop2: detected capacity change from 0 to 32768 [ 93.617085][ T6287] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.133 (6287) [ 93.632559][ T9] usb 2-1: config 0 descriptor?? [ 93.705397][ T9] gspca_main: sq930x-2.14.0 probing 041e:403c [ 93.787500][ T6287] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 93.797842][ T6287] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm [ 93.806416][ T6287] BTRFS info (device loop2): using free-space-tree [ 93.826969][ T6278] XFS (loop4): Ending clean mount [ 93.845871][ T6278] XFS (loop4): Quotacheck needed: Please wait. [ 93.898615][ T5927] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.918048][ T6288] chnl_net:caif_netlink_parms(): no params data found [ 93.970609][ T6284] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 94.007027][ T6278] XFS (loop4): Quotacheck: Done. [ 94.059916][ T6284] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 94.231150][ T6333] Process accounting resumed [ 94.288003][ T5837] syz-executor: attempt to access beyond end of device [ 94.288003][ T5837] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 94.302830][ T5837] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 94.356174][ T5850] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 94.410352][ T5836] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 94.650559][ T5927] bridge_slave_1: left allmulticast mode [ 94.661875][ T5927] bridge_slave_1: left promiscuous mode [ 94.661933][ T9] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 94.675148][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.732223][ T9] sq930x 2-1:0.0: probe with driver sq930x failed with error -71 [ 94.753589][ T5927] bridge_slave_0: left allmulticast mode [ 94.782088][ T9] usb 2-1: USB disconnect, device number 4 [ 94.800430][ T5927] bridge_slave_0: left promiscuous mode [ 94.813940][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.251943][ T5951] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 95.445267][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.456388][ T5847] Bluetooth: hci0: command tx timeout [ 95.501875][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.536591][ T5951] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 95.568612][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.633825][ T5951] usb 5-1: config 0 descriptor?? [ 96.067257][ T6370] netlink: 'syz.0.158': attribute type 1 has an invalid length. [ 96.088020][ T6370] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.158'. [ 96.274731][ T5951] hid-led 0003:27B8:01ED.0002: probe with driver hid-led failed with error -71 [ 96.290339][ T6376] loop0: detected capacity change from 0 to 128 [ 96.304935][ T5951] usb 5-1: USB disconnect, device number 4 [ 96.557997][ T5927] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.597964][ T5927] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.639993][ T5927] bond0 (unregistering): Released all slaves [ 96.660592][ T6288] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.673790][ T6288] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.688786][ T6288] bridge_slave_0: entered allmulticast mode [ 96.713954][ T6288] bridge_slave_0: entered promiscuous mode [ 96.745501][ T6368] warning: `syz.1.157' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.769872][ T6288] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.801998][ T6288] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.827990][ T6288] bridge_slave_1: entered allmulticast mode [ 96.854138][ T6288] bridge_slave_1: entered promiscuous mode [ 96.968039][ T6374] loop5: detected capacity change from 0 to 32768 [ 96.977022][ T6374] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.161 (6374) [ 97.018754][ T6374] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 97.063349][ T6374] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 97.107276][ T6374] BTRFS info (device loop5): using free-space-tree [ 97.504099][ T6403] loop1: detected capacity change from 0 to 128 [ 97.551299][ T6378] loop0: detected capacity change from 0 to 40427 [ 97.564657][ T6403] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 97.577049][ T5847] Bluetooth: hci0: command tx timeout [ 97.662152][ T6378] F2FS-fs (loop0): Found nat_bits in checkpoint [ 97.677801][ T6288] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.681405][ T6380] loop2: detected capacity change from 0 to 32768 [ 97.713500][ T6380] find_entry called with index >= next_index [ 97.723197][ T6403] ext4 filesystem being mounted at /31/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 97.808509][ T6288] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.903366][ T5852] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 97.941153][ T6378] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 97.978258][ T6378] syz.0.162: attempt to access beyond end of device [ 97.978258][ T6378] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 98.104159][ T6421] loop4: detected capacity change from 0 to 128 [ 98.155881][ T5837] syz-executor: attempt to access beyond end of device [ 98.155881][ T5837] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 98.186292][ T5837] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 98.244635][ T5842] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.287134][ T6421] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 98.362723][ T6421] ext4 filesystem being mounted at /19/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 98.486520][ T6421] fscrypt (loop4, inode 12): Mutually exclusive encryption flags (0x17) [ 98.732904][ T5836] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 98.899770][ T6437] loop1: detected capacity change from 0 to 512 [ 98.941852][ T6437] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 99.021149][ T6437] EXT4-fs (loop1): 1 truncate cleaned up [ 99.117295][ T6437] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.216257][ T6288] team0: Port device team_slave_0 added [ 99.222626][ T5951] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 99.244704][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.359410][ T6288] team0: Port device team_slave_1 added [ 99.391900][ T5951] usb 6-1: Using ep0 maxpacket: 32 [ 99.407950][ T5951] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.439908][ T6452] loop1: detected capacity change from 0 to 2048 [ 99.446427][ T5951] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.446488][ T5951] usb 6-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.00 [ 99.446518][ T5951] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.504283][ T5951] usb 6-1: config 0 descriptor?? [ 99.533622][ T6458] loop2: detected capacity change from 0 to 16 [ 99.560999][ T6452] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 99.571450][ T6458] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 99.612687][ T5847] Bluetooth: hci0: command tx timeout [ 99.689250][ T6452] UDF-fs: error (device loop1): udf_read_inode: (ino 1347) failed !bh [ 99.928155][ T5927] hsr_slave_0: left promiscuous mode [ 99.992483][ T5927] hsr_slave_1: left promiscuous mode [ 100.132049][ T5927] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.139592][ T5927] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 100.140680][ T9] usb 6-1: USB disconnect, device number 2 [ 100.183334][ T5927] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.190780][ T5927] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 100.272169][ T5927] veth1_macvtap: left promiscuous mode [ 100.278016][ T5927] veth0_macvtap: left promiscuous mode [ 100.311420][ T6454] loop0: detected capacity change from 0 to 32768 [ 100.312215][ T5927] veth1_vlan: left promiscuous mode [ 100.323692][ T5927] veth0_vlan: left promiscuous mode [ 100.427932][ T6460] loop4: detected capacity change from 0 to 40427 [ 100.444007][ T6460] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 100.459753][ T6454] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 100.470875][ T6460] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 100.567427][ T6460] F2FS-fs (loop4): invalid crc value [ 100.603657][ T6454] XFS (loop0): Ending clean mount [ 100.614941][ T6454] XFS (loop0): Quotacheck needed: Please wait. [ 100.619167][ T6460] F2FS-fs (loop4): Found nat_bits in checkpoint [ 100.659091][ T6454] XFS (loop0): Quotacheck: Done. [ 100.799302][ T5837] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 100.844785][ T6460] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 100.852428][ T6460] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 100.923762][ T6475] f2fs_ckpt-7:4: attempt to access beyond end of device [ 100.923762][ T6475] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 100.961398][ T6475] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 101.009873][ T6483] syz.4.182: attempt to access beyond end of device [ 101.009873][ T6483] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 101.519965][ T5927] team0 (unregistering): Port device team_slave_1 removed [ 101.563011][ T5927] team0 (unregistering): Port device team_slave_0 removed [ 101.697685][ T5847] Bluetooth: hci0: command tx timeout [ 102.171301][ T6462] netlink: 'syz.2.183': attribute type 1 has an invalid length. [ 102.216115][ T6496] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.226286][ T6496] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.236062][ T6496] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.245002][ T6496] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.395192][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.196'. [ 102.434814][ T6502] netlink: 12 bytes leftover after parsing attributes in process `syz.0.196'. [ 102.483095][ T6288] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.490877][ T6288] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.517579][ T6288] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.531345][ T6288] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.539022][ T6288] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.540401][ T6504] loop2: detected capacity change from 0 to 2048 [ 102.565630][ T6288] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.625774][ T6506] capability: warning: `syz.5.197' uses deprecated v2 capabilities in a way that may be insecure [ 102.672693][ T6504] EXT4-fs: Ignoring removed mblk_io_submit option [ 102.765214][ T6498] loop4: detected capacity change from 0 to 32768 [ 102.771173][ T6504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.784389][ T6498] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.193 (6498) [ 102.806747][ T6507] mkiss: ax0: crc mode is auto. [ 102.826836][ T6498] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 102.883694][ T6288] hsr_slave_0: entered promiscuous mode [ 102.894512][ T6498] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 102.950984][ T6498] BTRFS info (device loop4): using free-space-tree [ 102.977578][ T6504] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.195: bg 0: block 234: padding at end of block bitmap is not set [ 103.033287][ T6504] EXT4-fs (loop2): Remounting filesystem read-only [ 103.070057][ T6288] hsr_slave_1: entered promiscuous mode [ 103.077389][ T6288] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.113692][ T6288] Cannot create hsr debugfs directory [ 103.130064][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.318652][ T6498] BTRFS info (device loop4): rebuilding free space tree [ 103.697276][ T6512] loop0: detected capacity change from 0 to 32768 [ 103.855625][ T6512] JBD2: Ignoring recovery information on journal [ 103.862618][ T6498] BTRFS warning (device loop4): failed to trim 1 device(s), last error -512 [ 104.001191][ T5836] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 104.277760][ T6512] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 104.551936][ T6562] loop2: detected capacity change from 0 to 32768 [ 104.925093][ T6562] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow [ 104.974538][ T6562] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 105.007448][ T6562] bcachefs (loop2): Version upgrade required: [ 105.007448][ T6562] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 105.007448][ T6562] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots [ 105.007448][ T6562] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 105.021521][ T6288] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 105.102975][ T5951] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 105.186590][ T6593] loop4: detected capacity change from 0 to 1764 [ 105.226312][ T6562] bcachefs (loop2): dropping and reconstructing all alloc info [ 105.293120][ T6288] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 105.301161][ T5951] usb 6-1: Using ep0 maxpacket: 8 [ 105.319852][ T5951] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 105.323389][ T5837] ocfs2: Unmounting device (7,0) on (node local) [ 105.347156][ T5951] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 105.361669][ T5951] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 105.416751][ T6593] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 105.443987][ T5951] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 105.464641][ T5951] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 105.474595][ T5951] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.624092][ T6562] bcachefs (loop2): check_topology... done [ 105.630106][ T6562] bcachefs (loop2): accounting_read... [ 105.633866][ T6288] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 105.652210][ T6562] done [ 105.655109][ T6562] bcachefs (loop2): alloc_read... done [ 105.660691][ T6562] bcachefs (loop2): stripes_read... done [ 105.681943][ T6562] bcachefs (loop2): snapshots_read... done [ 105.688536][ T6562] bcachefs (loop2): check_allocations... [ 105.814765][ T5951] usb 6-1: GET_CAPABILITIES returned 0 [ 105.828365][ T5951] usbtmc 6-1:16.0: can't read capabilities [ 105.833320][ T6562] done [ 105.883576][ T6562] bcachefs (loop2): going read-write [ 105.928286][ T6562] bcachefs (loop2): done starting filesystem [ 105.988322][ T6288] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 106.006707][ T5901] usb 6-1: USB disconnect, device number 3 [ 106.061900][ T29] audit: type=1800 audit(1729793444.076:4): pid=6562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.206" name="file0" dev="loop2" ino=4099 res=0 errno=0 [ 106.155666][ T5850] bcachefs (loop2): shutting down [ 106.160967][ T5850] bcachefs (loop2): going read-only [ 106.166902][ T5850] bcachefs (loop2): finished waiting for writes to stop [ 106.232709][ T6625] loop4: detected capacity change from 0 to 512 [ 106.289835][ T6625] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 106.432562][ T5850] bcachefs (loop2): flushing journal and stopping allocators, journal seq 11 [ 106.515287][ T6622] loop0: detected capacity change from 0 to 32768 [ 106.551496][ T6625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 106.564890][ T6625] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.580049][ T6288] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.599039][ T6288] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.663094][ T5850] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 12 [ 106.743101][ T6288] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 106.753653][ T6288] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.767159][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.774346][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.799312][ T5850] bcachefs (loop2): unshutdown complete, journal seq 13 [ 106.811009][ T6622] XFS (loop0): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 106.827457][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.842910][ T5850] bcachefs (loop2): done going read-only, filesystem not clean [ 106.860403][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.867634][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.884704][ T6642] sctp: [Deprecated]: syz.1.225 (pid 6642) Use of struct sctp_assoc_value in delayed_ack socket option. [ 106.884704][ T6642] Use struct sctp_sack_info instead [ 107.037739][ T6622] XFS (loop0): Ending clean mount [ 107.088378][ T5850] bcachefs (loop2): shutdown complete [ 107.330378][ T5837] XFS (loop0): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 108.090575][ T6288] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.364290][ T5951] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 108.552066][ T5951] usb 5-1: Using ep0 maxpacket: 32 [ 108.620643][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 108.647567][ T6661] mmap: syz.1.230 (6661) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 108.647639][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 108.721660][ T5951] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 108.792648][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.840377][ T5951] usb 5-1: config 0 descriptor?? [ 108.866177][ T6677] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 108.892647][ T5951] hub 5-1:0.0: USB hub found [ 109.068037][ T6288] veth0_vlan: entered promiscuous mode [ 109.120612][ T6288] veth1_vlan: entered promiscuous mode [ 109.155700][ T5951] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 109.196388][ T6288] veth0_macvtap: entered promiscuous mode [ 109.206981][ T6288] veth1_macvtap: entered promiscuous mode [ 109.223352][ T6288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.234083][ T6288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.244032][ T6288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.254554][ T6288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.264440][ T6288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.275012][ T6288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.284981][ T6288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.296574][ T6288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.310377][ T6288] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.352560][ T6288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.368094][ T6288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.392024][ T6288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.401933][ T5951] usbhid 5-1:0.0: can't add hid device: -71 [ 109.403079][ T6288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.419053][ T6288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.429258][ T5951] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 109.437342][ T6288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.437377][ T6288] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.437401][ T6288] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.444004][ T6288] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.483024][ T6288] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.491927][ T6288] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.501440][ T6288] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.510301][ T6288] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.594584][ T5951] usb 5-1: USB disconnect, device number 5 [ 109.710178][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.716799][ T6706] loop1: detected capacity change from 0 to 512 [ 109.759174][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.855967][ T6364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.876384][ T6364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.917392][ T6706] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.985534][ T6706] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.025931][ T5847] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 110.034780][ T5847] Bluetooth: hci2: Injecting HCI hardware error event [ 110.049594][ T5847] Bluetooth: hci2: hardware error 0x00 [ 110.255355][ T6688] loop0: detected capacity change from 0 to 32768 [ 110.275942][ T6688] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.235 (6688) [ 110.353539][ T6725] loop4: detected capacity change from 0 to 1764 [ 110.373688][ T6688] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 110.432724][ T6688] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 110.441491][ T6688] BTRFS info (device loop0): using free-space-tree [ 110.463200][ T6731] Driver unsupported XDP return value 0 on prog (id 26) dev N/A, expect packet loss! [ 110.479551][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.666787][ T6742] loop2: detected capacity change from 0 to 512 [ 111.017085][ T6742] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.048755][ T6762] sp0: Synchronizing with TNC [ 111.216801][ T6742] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.246: bg 0: block 425: padding at end of block bitmap is not set [ 111.282736][ T6742] EXT4-fs (loop2): Remounting filesystem read-only [ 111.430763][ T6779] fuse: Unknown parameter '00000000000000000000' [ 111.481250][ T6779] loop4: detected capacity change from 0 to 2048 [ 111.503247][ T6779] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 111.715998][ T5837] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 111.873453][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.104190][ T2913] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.412158][ T5847] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 112.567379][ T2913] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.813674][ T6817] netlink: 14 bytes leftover after parsing attributes in process `syz.6.264'. [ 112.913035][ T6815] loop1: detected capacity change from 0 to 4096 [ 112.987409][ T6815] NILFS (loop1): invalid segment: Checksum error in segment payload [ 113.006427][ T6815] NILFS (loop1): trying rollback from an earlier position [ 113.013141][ T2913] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.151120][ T6815] NILFS (loop1): recovery complete [ 113.168503][ T6825] loop0: detected capacity change from 0 to 1024 [ 113.196314][ T6826] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 113.289331][ T6825] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.356148][ T2913] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.407360][ T6825] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2863: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 113.562697][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.612951][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.623796][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.651675][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.653325][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.787036][ T5851] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 113.798798][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.806350][ T2913] bridge_slave_1: left allmulticast mode [ 113.813389][ T2913] bridge_slave_1: left promiscuous mode [ 113.819139][ T2913] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.953471][ T2913] bridge_slave_0: left allmulticast mode [ 113.993914][ T2913] bridge_slave_0: left promiscuous mode [ 114.033016][ T2913] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.246549][ T6816] loop5: detected capacity change from 0 to 32768 [ 114.306014][ T6816] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.266 (6816) [ 114.370200][ T6816] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 114.392061][ T6816] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 114.423305][ T6816] BTRFS info (device loop5): using free-space-tree [ 114.727977][ T6827] loop6: detected capacity change from 0 to 40427 [ 114.775628][ T29] audit: type=1800 audit(1729793452.796:5): pid=6816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.266" name="bus" dev="loop5" ino=263 res=0 errno=0 [ 114.826494][ T6827] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 114.855011][ T6827] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 114.930619][ T6827] F2FS-fs (loop6): invalid crc value [ 115.005704][ T5852] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 115.048153][ T6891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.282'. [ 115.081506][ T6827] F2FS-fs (loop6): Found nat_bits in checkpoint [ 115.255017][ T6827] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 115.262343][ T6827] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 115.301945][ T9] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 115.377399][ T6827] syz.6.269: attempt to access beyond end of device [ 115.377399][ T6827] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 115.499984][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 115.516859][ T6288] syz-executor: attempt to access beyond end of device [ 115.516859][ T6288] loop6: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 115.541880][ T9] usb 2-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 115.571496][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.589368][ T6288] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 115.604154][ T9] usb 2-1: config 0 descriptor?? [ 115.757834][ T2913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 115.792351][ T2913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 115.817526][ T2913] bond0 (unregistering): Released all slaves [ 115.932097][ T5847] Bluetooth: hci4: command tx timeout [ 115.999080][ T6900] netlink: 'syz.4.286': attribute type 49 has an invalid length. [ 116.089593][ T9] elecom 0003:056E:00E6.0004: item fetching failed at offset 0/69 [ 116.100086][ T9] elecom 0003:056E:00E6.0004: probe with driver elecom failed with error -22 [ 116.302636][ T6913] netlink: 8 bytes leftover after parsing attributes in process `syz.4.290'. [ 116.333439][ T9] usb 2-1: USB disconnect, device number 5 [ 116.477436][ T6920] loop5: detected capacity change from 0 to 64 [ 116.630371][ T6925] syz.4.294 uses old SIOCAX25GETINFO [ 116.666671][ T29] audit: type=1800 audit(1729793454.686:6): pid=6920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.293" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 116.731168][ T29] audit: type=1800 audit(1729793454.716:7): pid=6920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.293" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 116.998810][ T2913] hsr_slave_0: left promiscuous mode [ 117.038060][ T2913] hsr_slave_1: left promiscuous mode [ 117.068598][ T2913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.078813][ T6933] loop0: detected capacity change from 0 to 2239 [ 117.085412][ T2913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.094874][ T6933] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1fffff [ 117.111632][ T6933] syz.0.298: attempt to access beyond end of device [ 117.111632][ T6933] loop0: rw=12288, sector=4096, nr_sectors = 8 limit=2239 [ 117.139087][ T2913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.172013][ T2913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.192874][ T6933] syz.0.298: attempt to access beyond end of device [ 117.192874][ T6933] loop0: rw=12288, sector=8192, nr_sectors = 8 limit=2239 [ 117.249409][ T6933] F2FS-fs (loop0): Failed to get valid F2FS checkpoint [ 117.272847][ T2913] veth1_macvtap: left promiscuous mode [ 117.284941][ T2913] veth0_macvtap: left promiscuous mode [ 117.302853][ T2913] veth1_vlan: left promiscuous mode [ 117.312907][ T2913] veth0_vlan: left promiscuous mode [ 117.564998][ T6951] binder: 6950:6951 ioctl c018620c 20000240 returned -22 [ 117.948965][ T6936] loop1: detected capacity change from 0 to 32768 [ 117.950904][ T6958] loop6: detected capacity change from 0 to 256 [ 118.012224][ T5847] Bluetooth: hci4: command tx timeout [ 118.044243][ T6936] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 118.177213][ T6936] XFS (loop1): Ending clean mount [ 118.237668][ T6936] XFS (loop1): Quotacheck needed: Please wait. [ 118.370469][ T6936] XFS (loop1): Quotacheck: Done. [ 118.501719][ T5842] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 118.786562][ T2913] team0 (unregistering): Port device team_slave_1 removed [ 118.917884][ T2913] team0 (unregistering): Port device team_slave_0 removed [ 118.920262][ T6973] loop5: detected capacity change from 0 to 32768 [ 118.940025][ T6973] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.311 (6973) [ 118.970753][ T6973] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 118.983297][ T6973] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 118.993197][ T6973] BTRFS info (device loop5): using free-space-tree [ 119.375282][ T5852] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 119.927769][ T7004] random: crng reseeded on system resumption [ 120.005458][ T6953] netlink: 32 bytes leftover after parsing attributes in process `syz.0.306'. [ 120.047551][ T6953] netem: unknown loss type 13 [ 120.066743][ T6953] netem: change failed [ 120.092256][ T5847] Bluetooth: hci4: command tx timeout [ 120.122089][ T6997] tap0: tun_chr_ioctl cmd 1074025677 [ 120.127770][ T6997] tap0: linktype set to 768 [ 120.457847][ T7009] Zero length message leads to an empty skb [ 120.472184][ T6835] chnl_net:caif_netlink_parms(): no params data found [ 120.976894][ T7024] loop5: detected capacity change from 0 to 32768 [ 121.078856][ T7021] netlink: 136 bytes leftover after parsing attributes in process `syz.0.322'. [ 121.088862][ T7021] netlink: 89 bytes leftover after parsing attributes in process `syz.0.322'. [ 121.119928][ T7024] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 121.650279][ T7026] loop6: detected capacity change from 0 to 32768 [ 121.721258][ T7024] XFS (loop5): Ending clean mount [ 121.777441][ T7024] XFS (loop5): Quotacheck needed: Please wait. [ 121.806358][ T7026] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 121.815557][ T5898] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 121.900715][ T6835] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.909064][ T6835] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.916500][ T6835] bridge_slave_0: entered allmulticast mode [ 121.923947][ T6835] bridge_slave_0: entered promiscuous mode [ 121.933385][ T6835] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.936731][ T7024] XFS (loop5): Quotacheck: Done. [ 121.940581][ T6835] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.952911][ T6835] bridge_slave_1: entered allmulticast mode [ 121.960075][ T6835] bridge_slave_1: entered promiscuous mode [ 121.993383][ T5898] usb 5-1: Using ep0 maxpacket: 8 [ 122.077918][ T29] audit: type=1804 audit(1729793460.096:8): pid=7024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.325" name="/newroot/67/file0/file1" dev="loop5" ino=9286 res=1 errno=0 [ 122.102001][ T29] audit: type=1326 audit(1729793460.096:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz.0.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdceb17e719 code=0x7ffc0000 [ 122.124785][ T29] audit: type=1326 audit(1729793460.096:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz.0.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7fdceb17e719 code=0x7ffc0000 [ 122.152188][ T5898] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 122.168677][ T5898] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 122.179409][ T5847] Bluetooth: hci4: command tx timeout [ 122.184969][ T5898] usb 5-1: config 135 has no interface number 0 [ 122.191429][ T5898] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 122.208220][ T5898] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 122.215985][ T29] audit: type=1326 audit(1729793460.226:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz.0.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdceb17e719 code=0x7ffc0000 [ 122.220959][ T6835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.239681][ T29] audit: type=1326 audit(1729793460.226:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7080 comm="syz.0.335" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdceb17e719 code=0x7ffc0000 [ 122.288273][ T5852] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 122.296348][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.333640][ T5898] usb 5-1: Product: syz [ 122.337865][ T5898] usb 5-1: Manufacturer: syz [ 122.395345][ T6835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.441552][ T7026] XFS (loop6): Ending clean mount [ 122.453698][ T7026] XFS (loop6): Quotacheck needed: Please wait. [ 122.475726][ T5898] usb 5-1: SerialNumber: syz [ 122.509685][ T5898] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 122.561855][ T5898] usb 5-1: No valid video chain found. [ 122.605135][ T7026] XFS (loop6): Quotacheck: Done. [ 122.654650][ T6835] team0: Port device team_slave_0 added [ 122.728791][ T6835] team0: Port device team_slave_1 added [ 122.730921][ T5897] usb 5-1: USB disconnect, device number 6 [ 122.852455][ T6288] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 122.942792][ T6835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.951951][ T6835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.032214][ T6835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.044949][ T6835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.052601][ T6835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.080146][ T6835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.311969][ T962] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 123.325460][ T6835] hsr_slave_0: entered promiscuous mode [ 123.421380][ T6835] hsr_slave_1: entered promiscuous mode [ 123.612015][ T962] usb 6-1: Using ep0 maxpacket: 16 [ 123.627792][ T962] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 123.642184][ T962] usb 6-1: config 0 has no interface number 0 [ 123.675135][ T962] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 123.716220][ T962] usb 6-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 123.761253][ T962] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 123.785703][ T962] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.809889][ T962] usb 6-1: Product: syz [ 123.850704][ T962] usb 6-1: Manufacturer: syz [ 123.875219][ T962] usb 6-1: SerialNumber: syz [ 123.927946][ T962] usb 6-1: config 0 descriptor?? [ 123.972388][ T7094] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 123.989783][ T7094] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 124.171087][ T6835] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 124.232561][ T9] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 124.272324][ T7094] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 124.279966][ T7094] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 124.299694][ T6835] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 124.338340][ T6835] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 124.390815][ T6835] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 124.448465][ T9] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 124.458080][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.506694][ T9] usb 7-1: Product: syz [ 124.523711][ T9] usb 7-1: Manufacturer: syz [ 124.540837][ T9] usb 7-1: SerialNumber: syz [ 124.564687][ T9] usb 7-1: config 0 descriptor?? [ 124.781464][ T6835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.870182][ T7142] loop1: detected capacity change from 0 to 512 [ 124.878992][ T6835] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.907727][ T7142] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 124.910529][ T2898] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.924831][ T2898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.965380][ T962] asix 6-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 124.981961][ T7142] EXT4-fs (loop1): 1 truncate cleaned up [ 124.988934][ T7142] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.014400][ T962] asix 6-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 125.033810][ T962] asix 6-1:0.251: probe with driver asix failed with error -71 [ 125.051476][ T962] usb 6-1: USB disconnect, device number 4 [ 125.110842][ T2898] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.117995][ T2898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.288590][ T5842] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.411996][ T9] usb 7-1: Firmware version (0.0) predates our first public release. [ 125.420129][ T9] usb 7-1: Please update to version 0.2 or newer [ 125.756230][ T6835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.789190][ T7162] loop0: detected capacity change from 0 to 40427 [ 125.874527][ T7162] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1fffff [ 125.883985][ T7162] F2FS-fs (loop0): Image doesn't support compression [ 125.891030][ T7162] F2FS-fs (loop0): Image doesn't support compression [ 125.898649][ T7162] F2FS-fs (loop0): build fault injection attr: rate: 0, type: 0x4 [ 126.002175][ T7162] F2FS-fs (loop0): invalid crc value [ 126.010573][ T7180] loop1: detected capacity change from 0 to 164 [ 126.034289][ T7162] F2FS-fs (loop0): Found nat_bits in checkpoint [ 126.092032][ T9] usb 7-1: USB disconnect, device number 2 [ 126.197769][ T7162] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 126.230282][ T29] audit: type=1800 audit(1729793464.246:13): pid=7162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.356" name="bus" dev="loop0" ino=14 res=0 errno=0 [ 126.394926][ T5837] syz-executor: attempt to access beyond end of device [ 126.394926][ T5837] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 126.410728][ T5837] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 126.420406][ T5837] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 126.712989][ T6835] veth0_vlan: entered promiscuous mode [ 126.727124][ T6835] veth1_vlan: entered promiscuous mode [ 126.754008][ T6835] veth0_macvtap: entered promiscuous mode [ 126.764254][ T6835] veth1_macvtap: entered promiscuous mode [ 126.781292][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.792161][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.802393][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.813826][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.823773][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.834291][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.844242][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.855231][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.861927][ T9] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 126.866945][ T6835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 126.952309][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.972008][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.991826][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.016462][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.026479][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.037722][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.047785][ T6835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 127.058444][ T6835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 127.070057][ T6835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 127.073867][ T9] usb 7-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 127.080559][ T6835] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.095784][ T6835] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.104885][ T6835] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.114224][ T6835] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 127.118995][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.300373][ T9] usb 7-1: config 0 descriptor?? [ 127.344456][ T9] ums-realtek 7-1:0.0: USB Mass Storage device detected [ 127.395563][ T2898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.439461][ T2898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.737478][ T2913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 127.752304][ T2913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.082454][ T9] usb 7-1: USB disconnect, device number 3 [ 128.203868][ T7235] netlink: 20 bytes leftover after parsing attributes in process `syz.1.375'. [ 128.477621][ T7240] loop4: detected capacity change from 0 to 2048 [ 128.486880][ T7200] loop5: detected capacity change from 0 to 40427 [ 128.513615][ T7200] F2FS-fs (loop5): Insane cp_payload (553648128 >= 504) [ 128.520627][ T7200] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 128.589043][ T7251] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.606109][ T7200] F2FS-fs (loop5): invalid crc value [ 128.651925][ T25] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 128.675758][ T7200] F2FS-fs (loop5): Found nat_bits in checkpoint [ 128.823267][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 128.860164][ T7258] loop6: detected capacity change from 0 to 512 [ 128.872621][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.900675][ T25] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.932475][ T25] usb 1-1: New USB device found, idVendor=0b05, idProduct=19b6, bcdDevice= 0.40 [ 128.942954][ T7258] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.952244][ T7200] F2FS-fs (loop5): Start checkpoint disabled! [ 128.968116][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.988257][ T25] usb 1-1: Product: syz [ 129.009966][ T7258] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.035156][ T25] usb 1-1: Manufacturer: syz [ 129.041619][ T7200] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 129.061948][ T25] usb 1-1: SerialNumber: syz [ 129.082634][ T7200] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 129.183371][ T7200] syz.5.366: attempt to access beyond end of device [ 129.183371][ T7200] loop5: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 129.260711][ T6288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.426034][ T2898] kworker/u8:6: attempt to access beyond end of device [ 129.426034][ T2898] loop5: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 129.460749][ T2898] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 129.478790][ T2898] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 129.494677][ T2898] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 129.502127][ T5897] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 129.520315][ T2898] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 129.673674][ T5897] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 129.691870][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 129.724917][ T5897] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 129.744510][ T25] hid (null): report_id 2668810406 is invalid [ 129.782543][ T25] asus 0003:0B05:19B6.0005: report_id 2668810406 is invalid [ 129.789905][ T25] asus 0003:0B05:19B6.0005: item 0 4 1 8 parsing failed [ 129.803062][ T5897] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 129.832712][ T25] asus 0003:0B05:19B6.0005: Asus hid parse failed: -22 [ 129.839698][ T25] asus 0003:0B05:19B6.0005: probe with driver asus failed with error -22 [ 129.860366][ T5897] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.902045][ T5897] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.970872][ T5897] usb 5-1: config 0 descriptor?? [ 130.002542][ T7275] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 130.013472][ T25] usb 1-1: USB disconnect, device number 3 [ 130.044162][ T7292] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.390'. [ 130.137104][ T7292] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 130.339334][ T7304] netlink: 60 bytes leftover after parsing attributes in process `syz.1.394'. [ 130.461541][ T7309] loop6: detected capacity change from 0 to 512 [ 130.503762][ T7309] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 130.508068][ T5901] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 130.604718][ T5897] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 130.625625][ T7309] EXT4-fs (loop6): 1 truncate cleaned up [ 130.625724][ T5897] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 130.632669][ T7309] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.766279][ T7309] EXT4-fs warning (device loop6): verify_group_input:137: Cannot add at group 31 (only 1 groups) [ 130.791140][ T5838] usb 5-1: USB disconnect, device number 7 [ 130.861970][ T5901] usb 6-1: Using ep0 maxpacket: 8 [ 130.874151][ T5901] usb 6-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 130.886833][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.908868][ T5901] usb 6-1: Product: syz [ 130.950976][ T5901] usb 6-1: Manufacturer: syz [ 130.972276][ T5901] usb 6-1: SerialNumber: syz [ 130.996411][ T5901] usb 6-1: config 0 descriptor?? [ 131.018053][ T6288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.032344][ T5901] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 131.233238][ T5901] gspca_sn9c2028: read1 error -32 [ 131.241020][ T5901] gspca_sn9c2028: read1 error -32 [ 131.500561][ T7347] loop0: detected capacity change from 0 to 512 [ 131.515752][ T5838] usb 6-1: USB disconnect, device number 5 [ 131.633847][ T7347] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.646961][ T7347] ext4 filesystem being mounted at /64/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.733183][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.4.408'. [ 131.762815][ T2898] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 131.834673][ T2898] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 1 with error 28 [ 131.898915][ T2898] EXT4-fs (loop0): This should not happen!! Data will be lost [ 131.898915][ T2898] [ 131.924002][ T2898] EXT4-fs (loop0): Total free blocks count 0 [ 131.938006][ T2898] EXT4-fs (loop0): Free/Dirty block details [ 131.950373][ T2898] EXT4-fs (loop0): free_blocks=65280 [ 131.968501][ T2898] EXT4-fs (loop0): dirty_blocks=1 [ 131.996274][ T2898] EXT4-fs (loop0): Block reservation details [ 132.019742][ T2898] EXT4-fs (loop0): i_reserved_data_blocks=1 [ 132.079198][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.336762][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.352215][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.813473][ T7399] loop1: detected capacity change from 0 to 8 [ 132.820324][ T7399] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 132.888135][ T7394] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 132.895044][ T7394] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 132.913916][ T7394] vhci_hcd vhci_hcd.0: Device attached [ 133.142387][ T5951] vhci_hcd: vhci_device speed not set [ 133.172010][ T5838] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 133.202338][ T5951] usb 41-1: new full-speed USB device number 2 using vhci_hcd [ 133.364427][ T5838] usb 5-1: config 0 has no interfaces? [ 133.371191][ T5838] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 133.377734][ T7408] loop6: detected capacity change from 0 to 40427 [ 133.409710][ T5838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.439787][ T7408] F2FS-fs (loop6): invalid crc value [ 133.451125][ T7408] F2FS-fs (loop6): Found nat_bits in checkpoint [ 133.490227][ T5838] usb 5-1: config 0 descriptor?? [ 133.650134][ T7408] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 133.745500][ T7408] syz.6.426: attempt to access beyond end of device [ 133.745500][ T7408] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 133.751655][ T5838] usb 5-1: USB disconnect, device number 8 [ 133.772315][ T7397] vhci_hcd: connection reset by peer [ 133.791018][ T2898] vhci_hcd: stop threads [ 133.806593][ T2898] vhci_hcd: release socket [ 133.825944][ T7408] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 133.831994][ T5951] vhci_hcd: vhci_device speed not set [ 133.842355][ T2898] vhci_hcd: disconnect device [ 133.860286][ T7424] loop7: detected capacity change from 0 to 1024 [ 133.861967][ T7408] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 133.988168][ T7428] Attempt to restore checkpoint with obsolete wellknown handles [ 134.029189][ T7424] hfsplus: xattr searching failed [ 134.087918][ T7424] hfsplus: catalog searching failed [ 134.196962][ T35] hfsplus: b-tree write err: -5, ino 3 [ 134.447727][ T7438] loop0: detected capacity change from 0 to 256 [ 134.557699][ T7438] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 134.577399][ T7437] loop7: detected capacity change from 0 to 2048 [ 134.641628][ T7411] loop1: detected capacity change from 0 to 32768 [ 134.668068][ T7437] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 134.758332][ T7437] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.968427][ T7448] Bluetooth: MGMT ver 1.23 [ 135.185811][ T7457] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 135.500456][ T7459] loop0: detected capacity change from 0 to 4096 [ 135.712647][ T7459] NILFS (loop0): invalid segment: Checksum error in segment payload [ 135.720699][ T7459] NILFS (loop0): trying rollback from an earlier position [ 135.845464][ T7459] NILFS (loop0): recovery complete [ 135.939041][ T7491] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.171457][ T7502] capability: warning: `syz.6.456' uses 32-bit capabilities (legacy support in use) [ 136.268947][ T7499] program syz.6.456 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 136.482142][ T29] audit: type=1326 audit(1729793474.496:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.5.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7217e719 code=0x7ffc0000 [ 136.518989][ T29] audit: type=1326 audit(1729793474.506:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.5.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7217e719 code=0x7ffc0000 [ 136.598555][ T29] audit: type=1326 audit(1729793474.566:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.5.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f7a7217e719 code=0x7ffc0000 [ 136.668582][ T29] audit: type=1326 audit(1729793474.566:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.5.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7217e719 code=0x7ffc0000 [ 136.761947][ T29] audit: type=1326 audit(1729793474.566:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.5.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7217e719 code=0x7ffc0000 [ 136.800094][ T962] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 136.842546][ T5901] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 136.859576][ T29] audit: type=1326 audit(1729793474.586:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.5.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f7a7217e719 code=0x7ffc0000 [ 136.968294][ T29] audit: type=1326 audit(1729793474.586:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.5.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7217e719 code=0x7ffc0000 [ 136.983798][ T962] usb 8-1: config 0 has an invalid interface number: 103 but max is 0 [ 137.011231][ T7532] loop0: detected capacity change from 0 to 128 [ 137.018040][ T5901] usb 5-1: Using ep0 maxpacket: 8 [ 137.025861][ T5901] usb 5-1: config 150 has an invalid interface number: 204 but max is 1 [ 137.037249][ T5901] usb 5-1: config 150 has no interface number 0 [ 137.048658][ T29] audit: type=1326 audit(1729793474.586:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.5.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7217e719 code=0x7ffc0000 [ 137.078617][ T962] usb 8-1: config 0 has no interface number 0 [ 137.089895][ T5901] usb 5-1: config 150 interface 204 has no altsetting 0 [ 137.102850][ T5901] usb 5-1: config 150 interface 1 has no altsetting 0 [ 137.109434][ T962] usb 8-1: New USB device found, idVendor=2013, idProduct=1faa, bcdDevice=de.4d [ 137.122909][ T962] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.155983][ T5901] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 137.178309][ T29] audit: type=1326 audit(1729793474.586:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.5.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=255 compat=0 ip=0x7f7a7217e719 code=0x7ffc0000 [ 137.194226][ T962] usb 8-1: Product: syz [ 137.204688][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.204722][ T5901] usb 5-1: Product: syz [ 137.204743][ T5901] usb 5-1: Manufacturer: syz [ 137.204764][ T5901] usb 5-1: SerialNumber: syz [ 137.227805][ T29] audit: type=1326 audit(1729793474.586:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7516 comm="syz.5.464" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a7217e719 code=0x7ffc0000 [ 137.325058][ T7541] loop5: detected capacity change from 0 to 1024 [ 137.340126][ T962] usb 8-1: Manufacturer: syz [ 137.351836][ T962] usb 8-1: SerialNumber: syz [ 137.369232][ T962] usb 8-1: config 0 descriptor?? [ 137.375473][ T7541] EXT4-fs: Ignoring removed orlov option [ 137.391697][ T7541] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.409300][ T7545] loop0: detected capacity change from 0 to 256 [ 137.473793][ T7541] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.487344][ T7545] FAT-fs (loop0): Directory bread(block 64) failed [ 137.500465][ T5901] xr_serial 5-1:150.204: xr_serial converter detected [ 137.512184][ T7545] FAT-fs (loop0): Directory bread(block 65) failed [ 137.518989][ T7545] FAT-fs (loop0): Directory bread(block 66) failed [ 137.526071][ T7545] FAT-fs (loop0): Directory bread(block 67) failed [ 137.540330][ T7545] FAT-fs (loop0): Directory bread(block 68) failed [ 137.547423][ T7545] FAT-fs (loop0): Directory bread(block 69) failed [ 137.557236][ T7545] FAT-fs (loop0): Directory bread(block 70) failed [ 137.564117][ T7545] FAT-fs (loop0): Directory bread(block 71) failed [ 137.578745][ T7545] FAT-fs (loop0): Directory bread(block 72) failed [ 137.586203][ T7545] FAT-fs (loop0): Directory bread(block 73) failed [ 137.613570][ T962] dvb-usb: found a 'DiBcom STK8096-PVR reference design' in warm state. [ 137.661390][ T962] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 137.688724][ T5852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.707156][ T962] dvbdev: DVB: registering new adapter (DiBcom STK8096-PVR reference design) [ 137.728367][ T962] usb 8-1: media controller created [ 137.792931][ T5897] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 137.795544][ T962] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 137.938034][ T962] DVB: Unable to find symbol dib8000_attach() [ 137.958156][ T962] dvb-usb: no frontend was attached by 'DiBcom STK8096-PVR reference design' [ 137.958598][ T7557] loop5: detected capacity change from 0 to 1024 [ 137.975121][ T5897] usb 7-1: Using ep0 maxpacket: 8 [ 137.989802][ T962] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 137.992672][ T5897] usb 7-1: config 0 has no interfaces? [ 138.016451][ T7557] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 138.025864][ T5897] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.031021][ T962] dvbdev: DVB: registering new adapter (DiBcom STK8096-PVR reference design) [ 138.041867][ T5897] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.061893][ T7557] EXT4-fs (loop5): Test dummy encryption mode enabled [ 138.085126][ T962] usb 8-1: media controller created [ 138.092245][ T5897] usb 7-1: Product: syz [ 138.096492][ T5897] usb 7-1: Manufacturer: syz [ 138.105053][ T5901] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 138.107881][ T962] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.111413][ T5901] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 138.115163][ T5901] usb 5-1: USB disconnect, device number 9 [ 138.158400][ T5897] usb 7-1: SerialNumber: syz [ 138.160485][ T7557] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.168812][ T5901] xr_serial 5-1:150.204: device disconnected [ 138.183155][ T5897] usb 7-1: config 0 descriptor?? [ 138.364870][ T5852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.369315][ T962] DVB: Unable to find symbol dib8000_attach() [ 138.380915][ T962] dvb-usb: no frontend was attached by 'DiBcom STK8096-PVR reference design' [ 138.415679][ T5901] usb 7-1: USB disconnect, device number 4 [ 138.561883][ T962] rc_core: IR keymap rc-dib0700-rc5 not found [ 138.568443][ T962] Registered IR keymap rc-empty [ 138.574146][ T962] dvb-usb: could not initialize remote control. [ 138.587707][ T962] dvb-usb: DiBcom STK8096-PVR reference design successfully initialized and connected. [ 138.627126][ T962] usb 8-1: USB disconnect, device number 2 [ 138.763741][ T962] dvb-usb: DiBcom STK8096-PVR reference design successfully deinitialized and disconnected. [ 139.492604][ T5901] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 139.672476][ T1213] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 139.684161][ T5901] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 139.705044][ T5901] usb 5-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 139.732242][ T5901] usb 5-1: Manufacturer: syz [ 139.749357][ T5901] usb 5-1: config 0 descriptor?? [ 139.870703][ T1213] usb 6-1: Using ep0 maxpacket: 8 [ 139.894186][ T1213] usb 6-1: config 0 has an invalid interface number: 52 but max is 0 [ 139.930199][ T1213] usb 6-1: config 0 has an invalid descriptor of length 72, skipping remainder of the config [ 139.949364][ T7583] loop6: detected capacity change from 0 to 32768 [ 139.981980][ T1213] usb 6-1: config 0 has no interface number 0 [ 139.998707][ T1213] usb 6-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xA2, changing to 0x82 [ 140.052084][ T1213] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x82 has an invalid bInterval 231, changing to 11 [ 140.072003][ T1213] usb 6-1: config 0 interface 52 altsetting 1 endpoint 0x82 has invalid maxpacket 25303, setting to 1024 [ 140.101831][ T1213] usb 6-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.131864][ T1213] usb 6-1: config 0 interface 52 has no altsetting 0 [ 140.317823][ T7593] loop7: detected capacity change from 0 to 40427 [ 140.328141][ T7593] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12 [ 140.336615][ T7593] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 140.347013][ T5901] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 140.524028][ T1213] usb 6-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 140.533900][ T1213] usb 6-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 140.542995][ T1213] usb 6-1: Product: syz [ 140.547328][ T1213] usb 6-1: SerialNumber: syz [ 140.568564][ T1213] usb 6-1: config 0 descriptor?? [ 140.569297][ T7601] loop0: detected capacity change from 0 to 32768 [ 140.603644][ T7601] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.493 (7601) [ 140.643239][ T7601] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 140.664887][ T7601] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 140.686541][ T7601] BTRFS info (device loop0): disk space caching is enabled [ 140.694362][ T7601] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 140.725280][ T5901] gs_usb 5-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 140.726871][ T7593] F2FS-fs (loop7): Found nat_bits in checkpoint [ 140.827868][ T1213] input: syz (Stick) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.52/input/input13 [ 140.923629][ T7612] loop6: detected capacity change from 0 to 512 [ 140.942453][ T5901] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 140.990329][ T7593] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0 [ 140.999263][ T7593] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5 [ 141.010098][ T7603] loop1: detected capacity change from 0 to 32768 [ 141.042605][ T5951] usb 5-1: USB disconnect, device number 10 [ 141.107908][ T7612] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.144805][ T7612] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 141.155447][ T962] usb 6-1: USB disconnect, device number 6 [ 141.193076][ T5845] synaptics_usb 6-1:0.52: synusb_open - usb_submit_urb failed, error: -19 [ 141.238432][ T7603] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 141.346207][ T7601] BTRFS info (device loop0): rebuilding free space tree [ 141.386494][ T7601] BTRFS info (device loop0): disabling free space tree [ 141.394218][ T7601] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 141.404719][ T7601] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 141.444161][ T6288] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.588909][ T1213] IPVS: starting estimator thread 0... [ 141.600089][ T7603] XFS (loop1): Ending clean mount [ 141.619717][ T7601] BTRFS info (device loop0): balance: start -d -m [ 141.682044][ T7642] IPVS: using max 16 ests per chain, 38400 per kthread [ 141.694610][ T7601] BTRFS info (device loop0): balance: canceled [ 141.705743][ T7603] XFS (loop1): Quotacheck needed: Please wait. [ 141.793300][ T7603] XFS (loop1): Quotacheck: Done. [ 141.832613][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 141.832637][ T29] audit: type=1800 audit(1729793479.856:25): pid=7603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.492" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 141.929267][ T7644] loop6: detected capacity change from 0 to 4096 [ 141.966546][ T5842] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 142.003501][ T5837] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 142.006807][ T7651] netlink: 52 bytes leftover after parsing attributes in process `syz.5.498'. [ 142.022914][ T7651] netlink: 68 bytes leftover after parsing attributes in process `syz.5.498'. [ 142.233862][ T7657] netlink: 244 bytes leftover after parsing attributes in process `syz.5.504'. [ 142.370894][ T7656] loop4: detected capacity change from 0 to 2048 [ 142.529801][ T5951] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 142.531657][ T7656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.793023][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.172399][ T5951] usb 8-1: Using ep0 maxpacket: 16 [ 143.179448][ T5951] usb 8-1: config 0 has an invalid descriptor of length 115, skipping remainder of the config [ 143.191218][ T5951] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.201864][ T5951] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 101, changing to 10 [ 143.231876][ T5951] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24675, setting to 1024 [ 143.256116][ T5951] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.303180][ T5951] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 143.330807][ T5951] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 143.398281][ T5951] usb 8-1: Manufacturer: syz [ 143.444747][ T5951] usb 8-1: config 0 descriptor?? [ 143.484535][ T5951] mceusb 8-1:0.0: mceusb_dev_probe: device setup failed! [ 143.491627][ T5951] mceusb 8-1:0.0: probe with driver mceusb failed with error -12 [ 143.561623][ T5951] usbhid 8-1:0.0: can't add hid device: -22 [ 143.592602][ T5951] usbhid 8-1:0.0: probe with driver usbhid failed with error -22 [ 143.687294][ T5951] usb 8-1: USB disconnect, device number 3 [ 143.850215][ T7687] sp0: Synchronizing with TNC [ 144.102761][ T7669] loop6: detected capacity change from 0 to 40427 [ 144.159964][ T7669] F2FS-fs (loop6): invalid crc value [ 144.183354][ T7669] F2FS-fs (loop6): Found nat_bits in checkpoint [ 144.418617][ T7669] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4 [ 144.475767][ T29] audit: type=1800 audit(1729793482.496:26): pid=7669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.509" name="file0" dev="loop6" ino=10 res=0 errno=0 [ 144.524113][ T7706] loop7: detected capacity change from 0 to 256 [ 144.687645][ T7709] loop5: detected capacity change from 0 to 512 [ 144.698714][ T7711] program syz.4.526 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.793125][ T6288] syz-executor: attempt to access beyond end of device [ 144.793125][ T6288] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 144.812902][ T6288] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 144.840906][ T7712] loop1: detected capacity change from 0 to 2048 [ 144.880735][ T7686] loop0: detected capacity change from 0 to 32768 [ 144.997539][ T7686] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 145.006125][ T7686] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 145.110826][ T7719] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 145.141674][ T7709] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 145.156750][ T7686] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 1ms [ 145.165297][ T7709] ext4 filesystem being mounted at /106/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.176739][ T5951] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 145.183852][ T5951] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 145.270142][ T5951] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 86ms [ 145.280002][ T5951] gfs2: fsid=syz:syz.0: jid=0: Done [ 145.286158][ T7686] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 145.391271][ T7719] NILFS (loop1): vblocknr = 18 has abnormal lifetime: start cno (= 504403158265495554) > current cno (= 3) [ 145.409951][ T7719] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=2) [ 145.444524][ T5852] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 145.507466][ T7719] Remounting filesystem read-only [ 145.513979][ T5842] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer [ 146.229761][ T7757] loop5: detected capacity change from 0 to 256 [ 146.394343][ T7763] loop7: detected capacity change from 0 to 1024 [ 146.422927][ T7757] FAT-fs (loop5): Directory bread(block 64) failed [ 146.451124][ T7757] FAT-fs (loop5): Directory bread(block 65) failed [ 146.482862][ T7757] FAT-fs (loop5): Directory bread(block 66) failed [ 146.489448][ T7757] FAT-fs (loop5): Directory bread(block 67) failed [ 146.509163][ T7757] FAT-fs (loop5): Directory bread(block 68) failed [ 146.523736][ T7757] FAT-fs (loop5): Directory bread(block 69) failed [ 146.530868][ T7757] FAT-fs (loop5): Directory bread(block 70) failed [ 146.537595][ T7757] FAT-fs (loop5): Directory bread(block 71) failed [ 146.544809][ T7757] FAT-fs (loop5): Directory bread(block 72) failed [ 146.551538][ T7757] FAT-fs (loop5): Directory bread(block 73) failed [ 146.599071][ T7757] FAT-fs (loop5): Filesystem has been set read-only [ 146.633763][ T7757] FAT-fs (loop5): error, invalid access to FAT (entry 0x00006c61) [ 146.642797][ T29] audit: type=1800 audit(1729793484.636:27): pid=7757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.544" name="cpu.stat" dev="loop5" ino=1048628 res=0 errno=0 [ 147.175615][ T7786] tun0: tun_chr_ioctl cmd 2147767507 [ 147.476677][ T7792] netlink: 'syz.6.558': attribute type 10 has an invalid length. [ 147.622432][ T7792] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 147.708163][ T7809] loop7: detected capacity change from 0 to 128 [ 148.143280][ T7826] netlink: 'syz.0.573': attribute type 32 has an invalid length. [ 148.400704][ T7840] loop4: detected capacity change from 0 to 164 [ 148.431668][ T7830] loop0: detected capacity change from 0 to 512 [ 148.446069][ T7830] EXT4-fs: Ignoring removed oldalloc option [ 148.614376][ T7830] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 148.816465][ T7849] loop7: detected capacity change from 0 to 1024 [ 148.998513][ T7849] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.135978][ T7849] EXT4-fs (loop7): shut down requested (2) [ 149.209926][ T7855] loop5: detected capacity change from 0 to 1764 [ 149.327438][ T6835] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.743962][ T7864] loop6: detected capacity change from 0 to 32768 [ 149.837097][ T7864] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 150.013874][ T5851] Bluetooth: hci5: command 0x0405 tx timeout [ 150.258965][ T7851] loop4: detected capacity change from 0 to 32768 [ 150.294783][ T7864] XFS (loop6): Ending clean mount [ 150.387181][ T7851] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 150.543316][ T6288] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 150.748646][ T7851] XFS (loop4): Ending clean mount [ 150.779645][ T7921] loop5: detected capacity change from 0 to 64 [ 150.871061][ T29] audit: type=1800 audit(1729793488.886:28): pid=7851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.583" name="file1" dev="loop4" ino=9286 res=0 errno=0 [ 151.190182][ T5836] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 151.199225][ T5838] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 151.231739][ T7932] netlink: 830 bytes leftover after parsing attributes in process `syz.5.612'. [ 151.392098][ T5838] usb 2-1: Using ep0 maxpacket: 16 [ 151.408579][ T5838] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.434763][ T5838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 151.510338][ T5838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 151.551649][ T5838] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 151.563919][ T5838] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.622467][ T5838] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 151.632171][ T7938] syzkaller0: tun_chr_ioctl cmd 2147767517 [ 151.638171][ T5838] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 151.663588][ T5838] usb 2-1: Manufacturer: syz [ 151.686887][ T5838] usb 2-1: config 0 descriptor?? [ 151.694998][ T7941] netlink: 24 bytes leftover after parsing attributes in process `syz.0.617'. [ 152.082894][ T7951] netlink: 16 bytes leftover after parsing attributes in process `syz.4.621'. [ 152.122144][ T5838] rc_core: IR keymap rc-hauppauge not found [ 152.136213][ T5838] Registered IR keymap rc-empty [ 152.173328][ T5838] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 152.190353][ T7926] loop7: detected capacity change from 0 to 32768 [ 152.193414][ T5838] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 152.245331][ T5838] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 152.277482][ T5838] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input14 [ 152.287527][ T7926] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 152.348336][ T5838] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 152.382034][ T5838] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 152.402494][ T5838] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 152.419326][ T7968] netlink: 209840 bytes leftover after parsing attributes in process `syz.4.626'. [ 152.429191][ T5838] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 152.452011][ T5838] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 152.471995][ T5838] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 152.491945][ T5838] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 152.523232][ T5838] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 152.561943][ T5838] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 152.601972][ T5838] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 152.663051][ T5838] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 152.705689][ T5838] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 152.766132][ T5838] usb 2-1: USB disconnect, device number 6 [ 152.834844][ T7926] XFS (loop7): Ending clean mount [ 152.844091][ T7926] XFS (loop7): Quotacheck needed: Please wait. [ 152.916556][ T7926] XFS (loop7): Quotacheck: Done. [ 152.921040][ T7980] loop4: detected capacity change from 0 to 1024 [ 152.998736][ T7980] EXT4-fs: Ignoring removed orlov option [ 153.033160][ T7980] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.108258][ T29] audit: type=1400 audit(1729793491.126:29): apparmor="DENIED" operation="change_onexec" class="file" info="label not found" error=-2 profile="unconfined" name=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 [ 153.113187][ T7980] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.135381][ T7949] loop5: detected capacity change from 0 to 32768 [ 153.204309][ C0] vkms_vblank_simulate: vblank timer overrun [ 153.255307][ T6835] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 153.325522][ T7949] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.620 (7949) [ 153.344812][ T7980] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2793: inode #14: comm syz.4.629: corrupted in-inode xattr: bad magic number in in-inode xattr [ 153.374145][ T7980] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #14: comm syz.4.629: attempt to clear invalid blocks 1634560256 len 1 [ 153.421842][ T7949] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 153.451250][ T7949] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm [ 153.478181][ T7949] BTRFS info (device loop5): using free-space-tree [ 153.890301][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.141007][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.6.646'. [ 154.506230][ T8047] netlink: 8 bytes leftover after parsing attributes in process `syz.7.653'. [ 154.507947][ T5852] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 154.591986][ T962] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 154.670788][ T8052] fuse: Unknown parameter '00000000000000000000' [ 154.809625][ T8058] loop1: detected capacity change from 0 to 16 [ 154.817161][ T8058] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 154.826608][ T8050] loop7: detected capacity change from 0 to 4096 [ 154.832226][ T8052] loop0: detected capacity change from 0 to 2048 [ 154.935690][ T8052] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 154.971894][ T962] usb 7-1: Using ep0 maxpacket: 8 [ 154.995082][ T962] usb 7-1: config 135 has an invalid interface number: 230 but max is 0 [ 155.011941][ T962] usb 7-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 155.039744][ T962] usb 7-1: config 135 has no interface number 0 [ 155.090345][ T962] usb 7-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 155.211837][ T962] usb 7-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 155.247115][ T962] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.271078][ T962] usb 7-1: Product: syz [ 155.282109][ T962] usb 7-1: Manufacturer: syz [ 155.284150][ T8065] loop1: detected capacity change from 0 to 2048 [ 155.288427][ T962] usb 7-1: SerialNumber: syz [ 155.329495][ T962] usb 7-1: Found UVC 0.00 device syz (18ec:3288) [ 155.331355][ T8065] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 155.408208][ T962] usb 7-1: No valid video chain found. [ 155.526267][ T8072] loop4: detected capacity change from 0 to 8 [ 155.601122][ T25] usb 7-1: USB disconnect, device number 5 [ 155.716388][ T8072] SQUASHFS error: Failed to read block 0x260685: -5 [ 155.758574][ T8072] SQUASHFS error: Unable to read metadata cache entry [260685] [ 155.825817][ T8072] SQUASHFS error: Unable to read directory block [260685:0] [ 156.063924][ T8090] pimreg: entered allmulticast mode [ 156.082090][ T5951] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 156.175203][ T8094] loop1: detected capacity change from 0 to 256 [ 156.192233][ T8090] dvmrp5: entered allmulticast mode [ 156.198017][ T8095] pimreg: left allmulticast mode [ 156.203610][ T8095] dvmrp5: left allmulticast mode [ 156.209507][ T8094] exfat: Deprecated parameter 'utf8' [ 156.257607][ T5951] usb 6-1: config 0 interface 0 has no altsetting 0 [ 156.272954][ T5951] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 156.309039][ T5951] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.335284][ T8094] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x0ec8ca35, utbl_chksum : 0xe619d30d) [ 156.351061][ T5951] usb 6-1: config 0 descriptor?? [ 156.477505][ T29] audit: type=1804 audit(1729793494.496:30): pid=8094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.674" name="/newroot/131/file0/bus" dev="loop1" ino=1048630 res=1 errno=0 [ 156.621167][ T8101] sp0: Synchronizing with TNC [ 156.808699][ T8106] input: syz1 as /devices/virtual/input/input15 [ 157.187447][ T5951] video4linux radio48: keene_cmd_main failed (-71) [ 157.224196][ T5951] radio-keene 6-1:0.0: V4L2 device registered as radio48 [ 157.251291][ T5951] usb 6-1: USB disconnect, device number 7 [ 157.279232][ T8092] loop0: detected capacity change from 0 to 32768 [ 157.358284][ T8092] ERROR: (device loop0): jfs_readdir: DT_GETPAGE: dtree page corrupt [ 157.358284][ T8092] [ 157.425782][ T8092] ERROR: (device loop0): remounting filesystem as read-only [ 157.521079][ T8125] loop7: detected capacity change from 0 to 128 [ 157.582197][ T8125] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 157.732154][ T8125] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 157.761251][ T8125] fscrypt (loop7, inode 12): Unsupported encryption flags (0x99) [ 157.924465][ T6835] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 158.008410][ T8143] sp0: Synchronizing with TNC [ 158.071530][ T8147] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.695'. [ 158.148376][ T8147] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 158.188911][ T8150] loop6: detected capacity change from 0 to 1024 [ 158.245797][ T8150] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 158.529730][ T8139] loop1: detected capacity change from 0 to 32768 [ 158.552459][ T8139] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.691 (8139) [ 158.799210][ T8139] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 158.809934][ T8139] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 158.818692][ T8139] BTRFS info (device loop1): using free-space-tree [ 158.942025][ T962] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 158.998620][ T8174] loop7: detected capacity change from 0 to 4096 [ 159.079422][ T8191] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.262976][ T962] usb 7-1: Using ep0 maxpacket: 8 [ 159.269711][ T962] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.283120][ T962] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.304224][ T962] usb 7-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 159.331955][ T962] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.351454][ T962] usb 7-1: Product: syz [ 159.359611][ T962] usb 7-1: Manufacturer: syz [ 159.379789][ T962] usb 7-1: SerialNumber: syz [ 159.556677][ T8204] loop4: detected capacity change from 0 to 512 [ 159.593865][ T8209] loop5: detected capacity change from 0 to 128 [ 159.624624][ T8204] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 159.635751][ T962] usbhid 7-1:1.0: can't add hid device: -22 [ 159.652038][ T962] usbhid 7-1:1.0: probe with driver usbhid failed with error -22 [ 159.667229][ T29] audit: type=1800 audit(1729793497.686:31): pid=8209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.714" name="file1" dev="loop5" ino=1048631 res=0 errno=0 [ 159.687951][ C0] vkms_vblank_simulate: vblank timer overrun [ 159.708230][ T8209] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8) [ 159.731468][ T8204] EXT4-fs (loop4): 1 truncate cleaned up [ 159.752272][ T8209] FAT-fs (loop5): Filesystem has been set read-only [ 159.759276][ T8209] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522) [ 159.772122][ T29] audit: type=1800 audit(1729793497.686:32): pid=8209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.714" name="file1" dev="loop5" ino=1048631 res=0 errno=0 [ 159.795194][ T8204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 159.840526][ T5927] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 159.868740][ T962] usb 7-1: USB disconnect, device number 6 [ 160.090964][ T5842] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 160.120922][ T8219] loop0: detected capacity change from 0 to 1024 [ 160.195123][ T5836] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.247863][ T8219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.437300][ T8227] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 160.488025][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.931795][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 265.938852][ C1] rcu: 0-...!: (1 GPs behind) idle=8a5c/1/0x4000000000000000 softirq=23297/23465 fqs=0 [ 265.950462][ C1] rcu: (detected by 1, t=10506 jiffies, g=20745, q=1262 ncpus=2) [ 265.958289][ C1] Sending NMI from CPU 1 to CPUs 0: [ 265.958323][ C0] NMI backtrace for cpu 0 [ 265.958337][ C0] CPU: 0 UID: 0 PID: 8235 Comm: syz.1.719 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 265.958363][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 265.958378][ C0] RIP: 0010:_raw_spin_lock_irqsave+0xe9/0x120 [ 265.958422][ C0] Code: f6 31 d2 31 c9 41 b8 01 00 00 00 45 31 c9 ff 75 08 e8 3b 23 a0 f5 48 83 c4 08 4c 89 f7 e8 df 8a a1 f5 48 c7 04 24 0e 36 e0 45 <4b> c7 04 2f 00 00 00 00 65 48 8b 04 25 28 00 00 00 48 3b 44 24 40 [ 265.958443][ C0] RSP: 0018:ffffc90000007b60 EFLAGS: 00000046 [ 265.958464][ C0] RAX: 49127b8c99de1000 RBX: 1ffff92000000f70 RCX: 0000000000000001 [ 265.958482][ C0] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc90000007ae0 [ 265.958499][ C0] RBP: ffffc90000007bf0 R08: 0000000000000003 R09: fffff52000000f5c [ 265.958516][ C0] R10: dffffc0000000000 R11: fffff52000000f5c R12: 0000000000000046 [ 265.958534][ C0] R13: 1ffff92000000f6c R14: ffffffff9a66ef28 R15: dffffc0000000000 [ 265.958556][ C0] FS: 00007f741e83c6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 265.958577][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 265.958594][ C0] CR2: 0000000020006038 CR3: 0000000024c7e000 CR4: 0000000000350ef0 [ 265.958612][ C0] Call Trace: [ 265.958622][ C0] [ 265.958633][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 265.958666][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 265.958712][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 265.958743][ C0] ? nmi_handle+0x2a/0x5a0 [ 265.958780][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 265.958814][ C0] ? nmi_handle+0x151/0x5a0 [ 265.958839][ C0] ? nmi_handle+0x2a/0x5a0 [ 265.958865][ C0] ? _raw_spin_lock_irqsave+0xe9/0x120 [ 265.958902][ C0] ? default_do_nmi+0x63/0x160 [ 265.958935][ C0] ? exc_nmi+0x123/0x1f0 [ 265.958965][ C0] ? end_repeat_nmi+0xf/0x53 [ 265.958999][ C0] ? _raw_spin_lock_irqsave+0xe9/0x120 [ 265.959036][ C0] ? _raw_spin_lock_irqsave+0xe9/0x120 [ 265.959074][ C0] ? _raw_spin_lock_irqsave+0xe9/0x120 [ 265.959111][ C0] [ 265.959119][ C0] [ 265.959129][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 265.959173][ C0] debug_object_activate+0x16d/0x510 [ 265.959213][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 265.959246][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 265.959281][ C0] ? advance_sched+0xa02/0xca0 [ 265.959313][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.959340][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 265.959376][ C0] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 265.959415][ C0] enqueue_hrtimer+0x30/0x3c0 [ 265.959444][ C0] __hrtimer_run_queues+0x6cb/0xd50 [ 265.959470][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 265.959514][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 265.959540][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.959566][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 265.959605][ C0] hrtimer_interrupt+0x396/0x990 [ 265.959645][ C0] __sysvec_apic_timer_interrupt+0x112/0x420 [ 265.959696][ C0] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 265.959735][ C0] [ 265.959743][ C0] [ 265.959752][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 265.959778][ C0] RIP: 0010:lock_acquire+0x264/0x550 [ 265.959815][ C0] Code: 2b 00 74 08 4c 89 f7 e8 6a 55 8e 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 265.959834][ C0] RSP: 0018:ffffc9001b81f400 EFLAGS: 00000206 [ 265.959855][ C0] RAX: 0000000000000001 RBX: 1ffff92003703e8c RCX: 49127b8c99de1000 [ 265.959872][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0adcc0 RDI: ffffffff8c6102a0 [ 265.959891][ C0] RBP: ffffc9001b81f548 R08: ffffffff942c9807 R09: 1ffffffff2859300 [ 265.959909][ C0] R10: dffffc0000000000 R11: fffffbfff2859301 R12: 1ffff92003703e88 [ 265.959928][ C0] R13: dffffc0000000000 R14: ffffc9001b81f460 R15: 0000000000000246 [ 265.959962][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 265.960001][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.960028][ C0] ? skb_set_owner_w+0x238/0x3e0 [ 265.960060][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.960087][ C0] ? sock_alloc_send_pskb+0x93b/0xa60 [ 265.960119][ C0] ? apparmor_socket_sock_rcv_skb+0xc3/0x100 [ 265.960147][ C0] ? sk_filter_trim_cap+0x1b3/0xa80 [ 265.960171][ C0] sk_filter_trim_cap+0x1d0/0xa80 [ 265.960194][ C0] ? sk_filter_trim_cap+0x1b3/0xa80 [ 265.960222][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 265.960253][ C0] ? __pfx_sk_filter_trim_cap+0x10/0x10 [ 265.960277][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.960303][ C0] ? skb_copy_datagram_from_iter+0x5ed/0x6a0 [ 265.960336][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.960370][ C0] unix_dgram_sendmsg+0xb15/0x1f80 [ 265.960407][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.960434][ C0] ? aa_sk_perm+0x96d/0xab0 [ 265.960461][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 265.960489][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.960517][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.960544][ C0] ? aa_sock_msg_perm+0x91/0x160 [ 265.960570][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.960597][ C0] ? unix_seqpacket_sendmsg+0x110/0x1e0 [ 265.960625][ C0] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 265.960650][ C0] __sock_sendmsg+0x223/0x270 [ 265.960691][ C0] ____sys_sendmsg+0x52a/0x7e0 [ 265.960725][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.960756][ C0] ? rcu_is_watching+0x15/0xb0 [ 265.960785][ C0] ? __might_fault+0xaa/0x120 [ 265.960827][ C0] __sys_sendmmsg+0x3ab/0x730 [ 265.960861][ C0] ? __pfx___sys_sendmmsg+0x10/0x10 [ 265.960909][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.960936][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 265.960973][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 265.961011][ C0] ? __send_signal_locked+0xb44/0xdc0 [ 265.961038][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.961065][ C0] ? __lock_task_sighand+0x2a5/0x2d0 [ 265.961089][ C0] ? __lock_task_sighand+0x29/0x2d0 [ 265.961117][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.961144][ C0] ? group_send_sig_info+0x2e0/0x310 [ 265.961174][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 265.961206][ C0] ? bpf_trace_run2+0x1fc/0x540 [ 265.961234][ C0] ? bpf_send_signal_common+0x2dd/0x430 [ 265.961266][ C0] ? __pfx_lock_release+0x10/0x10 [ 265.961320][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 265.961359][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 265.961402][ C0] __x64_sys_sendmmsg+0xa0/0xb0 [ 265.961432][ C0] do_syscall_64+0xf3/0x230 [ 265.961461][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.961499][ C0] RIP: 0033:0x7f741d97e719 [ 265.961519][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.961540][ C0] RSP: 002b:00007f741e83c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 265.961563][ C0] RAX: ffffffffffffffda RBX: 00007f741db35f80 RCX: 00007f741d97e719 [ 265.961581][ C0] RDX: 0000000004000190 RSI: 0000000020000180 RDI: 0000000000000003 [ 265.961597][ C0] RBP: 00007f741d9f12be R08: 0000000000000000 R09: 0000000000000000 [ 265.961613][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.961628][ C0] R13: 0000000000000000 R14: 00007f741db35f80 R15: 00007fff8f0e9338 [ 265.961655][ C0] [ 265.962314][ C1] rcu: rcu_preempt kthread starved for 10506 jiffies! g20745 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 266.698601][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 266.708673][ C1] rcu: RCU grace-period kthread stack dump: [ 266.714572][ C1] task:rcu_preempt state:R running task stack:25200 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 266.726404][ C1] Call Trace: [ 266.729701][ C1] [ 266.732649][ C1] __schedule+0x18af/0x4bd0 [ 266.737219][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.742892][ C1] ? __pfx___schedule+0x10/0x10 [ 266.747784][ C1] ? __pfx_lock_release+0x10/0x10 [ 266.752837][ C1] ? __asan_memset+0x23/0x50 [ 266.757495][ C1] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 266.763377][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 266.769760][ C1] ? schedule+0x90/0x320 [ 266.774045][ C1] schedule+0x14b/0x320 [ 266.778244][ C1] schedule_timeout+0x1be/0x310 [ 266.783147][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 266.788560][ C1] ? __pfx_process_timeout+0x10/0x10 [ 266.793900][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.799570][ C1] ? prepare_to_swait_event+0x330/0x350 [ 266.805163][ C1] rcu_gp_fqs_loop+0x2df/0x1330 [ 266.810039][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 266.815264][ C1] ? rcu_gp_init+0x1256/0x1630 [ 266.820062][ C1] ? __pfx_rcu_gp_init+0x10/0x10 [ 266.825034][ C1] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 266.830960][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 266.836269][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 266.842209][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.847873][ C1] ? finish_swait+0xd4/0x1e0 [ 266.852509][ C1] rcu_gp_kthread+0xa7/0x3b0 [ 266.857131][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 266.862349][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 266.868282][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 266.873966][ C1] ? __kthread_parkme+0x169/0x1d0 [ 266.879035][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 266.884257][ C1] kthread+0x2f2/0x390 [ 266.888350][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 266.893569][ C1] ? __pfx_kthread+0x10/0x10 [ 266.898205][ C1] ret_from_fork+0x4d/0x80 [ 266.902669][ C1] ? __pfx_kthread+0x10/0x10 [ 266.907464][ C1] ret_from_fork_asm+0x1a/0x30 [ 266.912279][ C1] [ 266.915312][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 266.921650][ C1] CPU: 1 UID: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.12.0-rc4-syzkaller-00047-gc2ee9f594da8 #0 [ 266.932346][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 266.943210][ C1] Workqueue: events_unbound toggle_allocation_gate [ 266.949763][ C1] RIP: 0010:smp_call_function_many_cond+0x19f3/0x2ca0 [ 266.956564][ C1] Code: 45 8b 65 00 44 89 e6 83 e6 01 31 ff e8 56 f3 0b 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 01 ef 0b 00 eb 38 f3 90 <42> 0f b6 04 23 84 c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 e5 ee [ 266.976470][ C1] RSP: 0018:ffffc90000ab76e0 EFLAGS: 00000293 [ 266.982571][ C1] RAX: ffffffff8188e8fb RBX: 1ffff110170c8ca1 RCX: ffff88801f693c00 [ 266.990568][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 266.998557][ C1] RBP: ffffc90000ab78e0 R08: ffffffff8188e8ca R09: 1ffffffff2859300 [ 267.006551][ C1] R10: dffffc0000000000 R11: fffffbfff2859301 R12: dffffc0000000000 [ 267.014546][ C1] R13: ffff8880b8646508 R14: ffff8880b873fc80 R15: 0000000000000000 [ 267.022544][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 267.031493][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 267.038105][ C1] CR2: 000055557f6bd588 CR3: 000000000e734000 CR4: 0000000000350ef0 [ 267.046099][ C1] Call Trace: [ 267.049389][ C1] [ 267.052247][ C1] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 267.058610][ C1] ? print_other_cpu_stall+0x1475/0x15b0 [ 267.064282][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 267.070123][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.075786][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.081440][ C1] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 267.087750][ C1] ? rcu_sched_clock_irq+0xa1a/0x10d0 [ 267.093194][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 267.098862][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.104523][ C1] ? hrtimer_run_queues+0x16c/0x460 [ 267.110178][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.115924][ C1] ? acct_account_cputime+0x207/0x210 [ 267.121339][ C1] ? update_process_times+0x1ce/0x230 [ 267.126830][ C1] ? tick_nohz_handler+0x37c/0x500 [ 267.131983][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 267.137478][ C1] ? __hrtimer_run_queues+0x553/0xd50 [ 267.142876][ C1] ? ktime_get_update_offsets_now+0x3c/0x250 [ 267.148915][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 267.154679][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.160365][ C1] ? ktime_get_update_offsets_now+0x22d/0x250 [ 267.166823][ C1] ? hrtimer_interrupt+0x396/0x990 [ 267.171989][ C1] ? __sysvec_apic_timer_interrupt+0x112/0x420 [ 267.178174][ C1] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 267.184110][ C1] [ 267.187152][ C1] [ 267.190097][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 267.196728][ C1] ? smp_call_function_many_cond+0x19da/0x2ca0 [ 267.202991][ C1] ? smp_call_function_many_cond+0x1a0b/0x2ca0 [ 267.209172][ C1] ? smp_call_function_many_cond+0x19f3/0x2ca0 [ 267.215450][ C1] ? kmem_cache_alloc_bulk_noprof+0x156/0x7c0 [ 267.221547][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.227552][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 267.232615][ C1] ? __pfx___text_poke+0x10/0x10 [ 267.237575][ C1] ? process_scheduled_works+0x976/0x1850 [ 267.243327][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.249007][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 267.255353][ C1] ? __pfx___might_resched+0x10/0x10 [ 267.260665][ C1] ? __mutex_trylock_common+0x183/0x2e0 [ 267.266237][ C1] ? __pfx___might_resched+0x10/0x10 [ 267.271553][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 267.276603][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 267.281739][ C1] text_poke_bp_batch+0x352/0xb30 [ 267.286791][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.292457][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 267.298112][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 267.303157][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.308812][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.314640][ C1] ? arch_jump_label_transform_queue+0x9b/0x100 [ 267.320909][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 267.326697][ C1] ? process_scheduled_works+0x976/0x1850 [ 267.332498][ C1] text_poke_finish+0x30/0x50 [ 267.337249][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 267.343298][ C1] static_key_enable_cpuslocked+0x136/0x260 [ 267.349242][ C1] static_key_enable+0x1a/0x20 [ 267.354039][ C1] toggle_allocation_gate+0xbc/0x260 [ 267.359349][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 267.365262][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 267.371640][ C1] process_scheduled_works+0xa65/0x1850 [ 267.377332][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 267.383357][ C1] ? assign_work+0x364/0x3d0 [ 267.387983][ C1] worker_thread+0x870/0xd30 [ 267.392622][ C1] ? __kthread_parkme+0x169/0x1d0 [ 267.397683][ C1] ? __pfx_worker_thread+0x10/0x10 [ 267.402824][ C1] kthread+0x2f2/0x390 [ 267.406908][ C1] ? __pfx_worker_thread+0x10/0x10 [ 267.412048][ C1] ? __pfx_kthread+0x10/0x10 [ 267.416655][ C1] ret_from_fork+0x4d/0x80 [ 267.421101][ C1] ? __pfx_kthread+0x10/0x10 [ 267.425706][ C1] ret_from_fork_asm+0x1a/0x30 [ 267.430516][ C1]