last executing test programs: 56.982446416s ago: executing program 4 (id=247): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x3) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) accept4(r0, 0x0, 0x0, 0x800) 56.547342829s ago: executing program 4 (id=249): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0}, 0x0, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000100)={{@hyper}, 0x1, 0x2}) 56.241261021s ago: executing program 4 (id=260): syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4004, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c655f756d61736b3d30303030303030303030303030303030303030303031302c636f6465706167653d63703835352c696f636861727365743d6370313235302c0065fcfac35652d2119752177b83dd62bd1f7de553835128ed9475d69a7ff68815d149e3d770260f87adedaaa6166f2883a669eadf2fc703841d76d28addf20312d9c8fc5b9c22b6040000000000000005a3ee7ebad510e9785ba1b21c76ac0d23979366134009b2e8055dfdb125c12135913b94b66581"], 0x1, 0x318, &(0x7f0000000980)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x24) pwritev2(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)='7', 0x2000}], 0x1, 0x6e45, 0x80, 0x0) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xa4a43c, &(0x7f0000001700)=ANY=[], 0x1, 0x0, &(0x7f0000000000)) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x2) pwritev2(r1, &(0x7f00000000c0)=[{&(0x7f0000000200)="df", 0xff00}], 0x1, 0x7ffffe, 0x0, 0x0) 55.588634119s ago: executing program 4 (id=252): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x82) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x20000, 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) 55.377728515s ago: executing program 4 (id=253): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a000000000000000000000002001000000000000000000008000100ac1414aa"], 0x24}}, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000000c0)={0x32b, @tick=0xaa1414ac}) 54.960318086s ago: executing program 4 (id=258): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@nogrpid}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0xfe, 0x461, &(0x7f0000002180)="$eJzs289vFFUcAPDvTHcBAWlF/AGCVtHY+KOlBZWDF40mHjQx0QMea1sIslBDayKE6GoMHg2Jd+LRxL/Akyejnky86t2QECUmIBfXzO5M6W53C223bGE/n2ThvZk38943b97s23mdAPrWcPZPErE9In6PiMFGtrnAcOO/a1fOTf175dxUErXaO38l9XJXr5ybKooWx23LMyNpRPpFklfSbO7M2ROTlcrM6Tw/Nn/yw7G5M2efP35y8tjMsZlTE4cPHzo4/tKLEy90Jc6sTVf3fDK7d/cb7114a+rIhfd//i5r74P7GvsXx9Etw1ngf9fqWvc91e3Keuy/2o04k1KvW8OtGoiIrLvK9fE/GANxo/MG4/XPe9o4YF1l9+zNrRvLC6lqDbiLJbGqw2J1hwEbR/FFn/3+LT63cfrRc5dfafwAyuK+ln8ae0qR5mXK61j/cEQcqV6/mH2i5TlErc1zAwCAtfohm/88t3T+V18bWVQuydeGhiLivojYGRH3R8SuiHggL/tQRDy8wvpbl4aWzj/TS6sM7ZZk87+X87Wt5vlfMfuLoYE8d289/nJy9Hhl5kBE7IiIkShvzvLj7U5enOK1377qVP/i+d+RaqMdxVwwP8mlUssDuunJ+cluTUovfxaxp9Qu/mRhJSDr+90RsWdlp95RJI4/8+3eToWa479+cWn8y+jCOlPtm4inG/1fjZb4C8ny65NjW6Iyc2CsuCqW+uXX8293qn9N8XdB1v9bm6//lhKD/ySL12vnVl7H+T++7PibsnTT+Ntf/5uSd+tr1pvybR9Pzs+fHo/YlLxZzzdtn7hxbJEvymfxj+xvP/535sdk8T8SEdlFvC8iHo2Ix/K+ezwinoiI/cvE/9OrT37Qad9G6P/ptve/het/qLn/V54YOPHj953qv3n8Wf8fqqdG8i31+99NdG7OlrzEaq9mAAAAuPOkEbE9knR0IZ2mo6ONv5ffFVvTyuzc/LNHZz86Nd14R2AoymnxpGtw0fPQ8aSan7GRn8ifFRf7D+bPjb8euKeeH52arUz3OHbod9s6jP/MnwO9bh2w7ryvBf2rdfynPWoHcPv5/of+ZfxD/zL+oX+1G/+ftuStBcDdyfc/9C/jH/qX8Q/9y/iHvrSW9/rXK1Fa5u19iY2SiHTdqqhuiADv4ESpC6O7xzcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALvk/AAD//+Pz7ng=") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/key-users\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r1, r2, r3) 54.465282902s ago: executing program 32 (id=258): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100}}, {@nogrpid}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0xfe, 0x461, &(0x7f0000002180)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/key-users\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchown(r1, r2, r3) 26.44222549s ago: executing program 0 (id=418): syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000008380)='./bus\x00', 0x14018, &(0x7f0000000b80)=ANY=[@ANYBLOB="626172726965722c6e6f626172726965722c6e6f6465636f6d706f73652c7569b83d6f8200f9728f83d20b10f5e1caf9be25903c5d901492157139acad4d4b5c58114d0139577ece3af47e072b9f851639c807227d64435400a258e2b811f69f5a75d97e7135a216ebe96afff848df4c4218d9bab55598", @ANYRESHEX, @ANYBLOB=',barrier,nodecompose,umask=00000000000000000000002,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX, @ANYBLOB=',\x00'], 0x1, 0x6ea, &(0x7f0000000300)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180), 0xfefc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000004, 0x10012, r0, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$rose(r1, 0x104, 0x7, 0x0, &(0x7f0000000180)) 26.141988992s ago: executing program 0 (id=419): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = timerfd_create(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{}, {r1, r2+10000000}}, 0x0) read(r0, &(0x7f0000000240)=""/123, 0x7b) 25.909071559s ago: executing program 0 (id=422): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) sendmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="42d628d4cf1f2b0efa79ba7d98d674ade97d", 0x12}, {&(0x7f00000001c0)="3b900aa375c0481868c9357f0c2fd20e478eb35b2c6464", 0x17}, {&(0x7f0000000400)="639936914f267de249023032f0eb4d418ba99ff2473efceb9ba72d4ab250f3a512f3a6d39addc8db93d24f620cad88894e3b2809e472b76ee463c0d39b1a407e6939d79ed3045a62f33d347d7fa3b9640721fe68a398bb9e93baee222a2fd437e40b7b06136a1ddbe9eeeea35833d71dbcab13937ab60b5d31144b8f10513ec0385f2e103673ffe2cef5efd788d1424587b594a15be47515c6b5c1206b6961ad108ea769b4ee97623f3176b9e0f536a3a9e5711190b400e30628215230287c4c632b6497f66be80150f18c8df2089bb298a1d772dc871c977e63aac1b28d49799e70e0623b00851172f1fa09c75bd6573905b12c7bf1253e00a2ebc186bce048820976c882705884d826e821574004ed7ae49ee96806403afbb31b76de6aaed5b89c31a121e8747659649727fba5e46829c6dabac6876958ac79f38c856d58679edffd48abf288cfaa315418415ac0554aaa74e61c65b7d7cd315a076b491f7f1fdc89b8df8fbf32fd2fe00f26dbd1d7eea92d555c81eb083fb9f26f84ecf2d9ac7e92ddb9a7e729994e257bcd8a76bc73b7efd03c233ef04a7eb121a549a927b253056ea05c4ba6264bfc926bb0835f2f9be1bf1067032da09abe10df659e1689f73ef2f638ce6f20b72573f7c7c2971429b1ddfda65c2f419b3e4e4d7a2c39ebc0df997d2e70ae161b63d3869fe848becd0144ee63652e92de0799ce886ba896531475b144fb57bd61b7eebd9b4bb9e1c44f005a0907873c88e70124c2254d119fcd24db3a20c9573fc04b572fd232b06fc399c54dd9050185f9084daf2abd97cbbfcdd1021873fb213a3ca4ee378ee7aa0fd056f3813c2ad796b998809c23ef813bc40d994701dafd634bf2b98bab29bfced0f6dc7b5ad92b79935f1a80e3cb947cc832245d7eda8f1cfe1c0c754114d488764f7115cc8c5922c0960e08e0f54b55c3d59786322d7efb31c55eaeb148b1bba8065cfbdf61146e27c23fe7676baaa2f5292e43ed1c8f3e1743b7825bc19c8bb8a8029600846c4735c43687faf7433ae751fd882a243172c72090c0b4ee7f613b7ef2443663d83cce3de84cf9d66537b53285c6a5600897e78e052c148d0765a52ab2270280deb3e8173ae7afe5455c466c420b5879c916d90ac074beefe912a9abf7d29e2c010072d8a0a971a391d1ff994a5f4cf7fc8ec063230763c249f83abef6401815e7e3c0f88536b9975d739141af78596213f9edfa9c6e17088e6ba4ca4ed443b4f57442b6a18e43475b61efb96b52d5bf715275384483aaa9a54e424f9b7d09f8cd1ba26c75741420121d3369d840c0fde171641b5763538a6a3272288c6e53638885677be4dece8dd16a9b38c58ef90f412495029317d61098ffff77143682a70efec20336902ed9547a455f902c2f4ea9e714c03bf2fbb1e714760a8fedd2a8d6521810c9b77207f3ee0297c9986a82606ba77ec0487b95b724481c36b2673f1f19764c2d1bb60ccbfa5cddf82248b9a551aaafd9d2fbd896235aecc8724cf3b718635337f95f7fcf828fd81ba5e9b98fd58611c1e8673fa4d5c063fe78f12afe965d49cecc9db7d7beaa7eba4efe7acdd6a05b433f177ee75ece9b4836b4e249151eaf20ea80b7d5b246dfea172b827440cb7189d43fb30bf4263d9271545ab979a02463011a7569732044680f792b3209bf90a3035bbf2fe37427eb156b97949b0ae5b87b52d4c62e400c708e4950c7d47820068f088d5ca26077b420682489d484af8377e26a8d613224d4931111c30d1bce7977a50361cbcab6755db988716a7e22c91be84707aae90d90c11b51a4081776bf7bff24c39cf45e93a9fa7ff0872de76628b32537ad4e765f23cff67d365c2dcf88dd539884a25f74f8a6b401db16e137d3c93f127d745774f3967d667e38f413ebe8dfe00a00821c5209c1f55d126e5ebabfcc765a084529a4d9fac1e6246276e359a51c7ce85ca6bdcedc2db5eddb42f3245dda2eca11a6a1af7ef82220de23dfda69c97f5d3db188442d82e7196c1afb77d0850a8d709cde6950e879ddc42bc6c4636da43116858125600ef20244c65d9bb932c124239f44777f918196a753cf83e13f6af88ee0b3423ec4098b1aaf4ad763ee4b5bccc989e0d977fe0dc9322e2187b9d0b0cea1de8bde2c657a91428d98b7219535a2f6365b9afad585d5861ca6527a7ad3767ce425a3d70c83fc558d08d18e5ed5baed8cb83ca4858ac1fe3c394c25372462ace1caddf53f3a93befe6131cddde4338ba347509b169c52d33285b05389870445479b6dd07e8f02ab86f2dccde3a2ca1b87d5692c9ddcd3b6d94f77f1bf763ef890e4f8133833527e2def259f7859e17eee77742ed864c7ad3ecbba80351a9383f39566965c7657d8835ea9ec595879e39a42d40208f8da55823a1ca5456e8ce98e0968e646c3ac90c97d9b221723ec6583fbf237af4e4684dedb8317015d6d595427c095af31b691d38659938649e2a50c35b77f907b14eeeefde2571489ee3d1de39953182270cb4ca48bfada1419dd1a0abde8ebf61d959e4cc89b95bc20b862ceef3605ba3d50d9f16c80ba864404c534ec78502c898b5d1a6473efd68adb55b1411028340e39e0a7c7ad575bf9f6bef38eeb110eb30b6301c3fd97935a90442cb8ba1a39656dbc798d5b3d9718c660994075e8f54e7dabaab579c24235741507c5f15a8443fc69ff87243f35d662c787612f706602da5b8087aa42d7ceda25a3785045b99b9a767ede37f58c8f861a71fbe5ce508942c0633fb3eddb75ccec5c383214775795144eb176ad8b9730c288ca4e0ba83a8fe96e9a180b74caa9336029a8258b9139a83bb6b1e212030e09d21fe3b58e55956b3d50d9f1c3fb6aea39b89f99fc960f66be82ede58425cda66ecc1330dc4e3790af122f2cf19a9a037b19b0eb30bc7b30577f8abfb85b642fe15f70ccac0e0cd4ba31d7784867f84704f9f5036adcd363c109b0cfbb9f13bb2f29401ef2673d5a6861975e25fcd8819c1ff465a25141a31b2258323a8a90ecdf278e40f0bf81140ef4072fb314fceb04704cf8e44adc857c39144f7c2fc12d51ab4b7b1c827f35b525be49a2e2b82da57ca1690324013c8d4d658e76637121753f8eec978dce2027d167bffad1d72287417a74d1fc10359d302255b7f7fda15589d50fe82d30e48b3f70edeb832814bb9c03825d26677f0f0e1372ecf2b821a88f020cec38d00462bcebcc7695f7a36f697b590c66d8f41529a9326ba696adbe3bc198735218498264c75c726eb4d60e5512d7dc6c18b52bd2295319561e95f5b2c9ff31b59a57b46f81e72c12af8cf0760fa2833ee2932e4db7215bee732eff8489711758cad146191d39bdf9bdf7558241628fbdb3e1e6633bab770317e23f850bea8338ef8e6cb6b81452f2ec5edb152c487d409872818fae8d74b8d931d87cc0798270a8f7eaf028ead95885736f62d4808a556327fc637c194298a0abbb918db01d0f8803ff8be4f8e906a79eda2f59c751054a48ad830effd7c1317063fd296fc34ea7baeb16f3648b2c0c046747e45a52e497306bb07ea5c44e4baf76ea0c69853882e707b950eb40c7175c99f8d4bca886af4ee39ab1785cfcaf689f5538cce34f273b33c81685a73793f2e5f15038ef086667fbf81153f4a2303ca05d61bb116c56865044dd9e1dc3897fbe9dd754906b5dd60d665193eb3b1b81abd32b9df719aa1fe3083f7b1cc6d8ace69e1d860727be895433fea25f8a9f2cc468b31db1c74e63f316902c46110692fcf0703ca7fe69460ef6757070b721cebe4ce2d9568a1553a45808f7f46c00de2ace802a5556d36a009abfe38aed13b59caf80c7e7c7b0cc8893c1a2161b193dcbb0f630015fb3a32658bd1f8379f287c5686f4987d319583cb4b3c213d4ad36e0aff50dba9fd324f4ff656f944d595eb0b2c300dcd1194d552af920887c7bf02c1854108d867410356c48c64eb1e98d9b28e56b4977a7d71f4b59ac49331f37a919ca09c8f384c56c551ece7ca5d9e97bbb00386620edf2a66be5fdd61cb7ecd9a3dfbfe278eb659463b6c991d6e4320ec1aac38d6070c092f932c829e2de8bea272c3804d00dbf488c3baa21b37397e8a73691d8207141ed1c9070101360ae82d73f9089c97c7a351d69aa8264a7fc45c5efa2f141551db68fdda2821f431245cdee6517391d44a15b7a63e5689a0063b43f9883202719831dd37ddc48e56838dd1110859aa89630c43f38a62dfd59c3d69a7a68f0ed1f59de6d101170d8ce9cf2b1ed8a20469ae8eb42277bed0585b2a129787d6397bd151cea3fc719c0c8c085324d5640f916b0d2443cb928283781bac8721f1589749b196531cdf64fc3bcf4f0377093c0545a2e4a316d7ba48234d3888d5770ae6fdb60baaafa89aa41305f15521dfe5059a32511aa4b22cc2ed7e60d64f76560f31ee54ef690a9327e2be27d534a3caf535a44718fc5d84a7ee022f410872b0c40885f12e3e2b5a5598839e025993f876c39fe6f8413414f010ce39350fddf50ccbe12bb866e0ce3669a1d1a7f0d4e1763830722c9dd9da1efe5716ae57ec258004de0d69629be14809e803a47bf41a97b4d81c032077c74aad1ebfac3d7d3fe9cadc0f18649acc0fa4934124279d237fc16cf4eddc7333e971a7fcb0878a073eaf3f0e237937ccb2f5332cb7fce50cd9758d5ff742cdbce5c77414c1915060c82aa71745a57d266f4e778ebcad2d3b8afcc5938e8abc07d152c2c3d770b8aecfc090ef15d051bb184322ae1432d2b95a26f41cf4ff753e75af3f360f224374ba6839d469926c613f8472bf69aeb6b75955f67ac9ca77936cda6104ec6caf113ce9eb3f0bac3e410f498aa2cbc030cf07996a72d8f88bb9e21148872464687312ed81ffc45a0cb2d29a5eca275c9e945e53074dc4c5d533ff22744e1a7e07d0eaa5cb6cf4babbc288b1612a96eb68b82a18d888af84a9c56fd28d511126831829797ddf2d145682bf681107c848d544d34b9166b74ebf0a906c038d60484ceefed8bf471d1fc0b45836408e4e34196e414456d53c89f2e7c2fe393ca4e9ff66a50b52b52dcbd1144073a8951d1b4bd9d3c46eaa91a87552c29ca82f254bbc0f2128e3a694a58838e1a07dd1ac8985124d4e84b356d4a0ba064255ba25fa6c4e9aabe59809769b71ca8df2641b6321d4dfc79c7d9ffc24ffd94b30f9e16b074e011afc4997992f73df3c19748be5a8a466efde8e55e36676744c82138832db17bccd95151281832fdce8029da8f4497e0d554e9c948676df9040fb25099da2adc64ca7e6a6df58fd16ad4a4982ce38fd169eecd469424f63a09ae0a22319ac2cc0b00a06b6cadeff5de3608fbab52ef9dbc9606610513956a37da14617964dd200b47749dd981cf564323dab8e4529b3273f5adbd4f6e9dfa2af5cfee63a5999732f51c047d86b4af1baf1edb8a904971b7d2755e595931bb15f2344c28a4b35a4afd3770f3c7484f755dddc46b26f3bc09e2dc17317d971aa999d3e592680b3b18c5ca83c9e9163af497f1da71b0735b417fbeceac73371493e92b4056bd3f9ff86ded2131d22843e50d9eda71e96924ad6be8ac443a100d691fff0f534847874f7cef46eb79e7ec996fa96465aec254eb0da9a0497c008df0c2e01bfec6903d64729a83f00f7a6640", 0xfb7}], 0x3, 0x0, 0x0, 0x20000010}, 0x420c5) 24.885943604s ago: executing program 0 (id=427): syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc51, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x104000, 0x0) 24.552790439s ago: executing program 0 (id=430): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x100000000000600d, 0x0) r0 = creat(&(0x7f0000000140)='./file0\x00', 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) ioctl$BLKTRACESTART(r0, 0x1261, 0x2) 23.793429005s ago: executing program 0 (id=436): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x974b, 0x8, 0x2, 0xffdffffa}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 23.136149333s ago: executing program 33 (id=436): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x974b, 0x8, 0x2, 0xffdffffa}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 20.287010983s ago: executing program 1 (id=462): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/73, 0x49) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 18.206138977s ago: executing program 1 (id=479): r0 = socket$inet6(0xa, 0x3, 0x5) r1 = socket$l2tp6(0xa, 0x2, 0x73) dup2(r1, r0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x1, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000002100)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x200}, 0x80, 0x0}, 0x5b4}], 0x1, 0x0) 17.906592659s ago: executing program 1 (id=481): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f0000000140)=@hopopts={0x16}, 0x8) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x20000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000002c0)={r1, 0xa9ac}, &(0x7f0000000300)=0x8) 17.772134079s ago: executing program 1 (id=482): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3804402, &(0x7f0000000600)={[{@user_xattr}, {@data_err_abort}, {@resuid}, {@errors_remount}, {@norecovery}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x5}}, {@noinit_itable}, {@nomblk_io_submit}, {@grpquota}, {@nogrpid}]}, 0x1, 0x54f, &(0x7f0000001080)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x851800, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c678082004000000000000003c6c8f34a19c079fa197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder-control\x00', 0x800, 0x0) 17.07463923s ago: executing program 1 (id=487): mount$bind(0x0, &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000600010000000800090001000000050002"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x44}}, 0x0) 14.994188524s ago: executing program 1 (id=497): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x00') r1 = fanotify_init(0x0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0x18}], 0x1) fanotify_mark(r1, 0x1, 0x40001019, r0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000001840)={0x2020}, 0x2020) 14.543305697s ago: executing program 34 (id=497): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='loginuid\x00') r1 = fanotify_init(0x0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0x18}], 0x1) fanotify_mark(r1, 0x1, 0x40001019, r0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000001840)={0x2020}, 0x2020) 8.028299898s ago: executing program 3 (id=525): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 7.806204834s ago: executing program 3 (id=530): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000004000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050003"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x80, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffd}, @beacon=[@NL80211_ATTR_BEACON_HEAD={0x4f, 0xe, {{{}, {0xb4c}, @device_a, @device_b, @from_mac=@broadcast}, 0x400000000000, @default, 0x0, @void, @val, @void, @void, @val={0x6, 0x2}, @void, @val={0x25, 0x3, {0x0, 0x34}}, @void, @void, @val={0x2d, 0x1a, {0x40, 0x2, 0x1, 0x0, {0x6, 0x117b, 0x0, 0x6, 0x0, 0x0, 0x1, 0x1}, 0x8, 0x6, 0x2}}, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_HE_BSS_COLOR={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x90}, 0x0) 7.421986772s ago: executing program 3 (id=532): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) syz_open_procfs(r0, &(0x7f0000000180)='maps\x00') 7.108543156s ago: executing program 3 (id=535): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) mount_setattr(0xffffffffffffff9c, &(0x7f0000000740)='.\x00', 0x8900, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 6.969674136s ago: executing program 3 (id=536): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) r3 = socket(0x1, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x0, r3}, 0x10) 6.464418203s ago: executing program 5 (id=539): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x62000024) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x8380, 0x0, 0x0, 0x805}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x20900}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 6.290519376s ago: executing program 5 (id=540): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0422"], 0x20) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e04004120"], 0x7) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c831, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) syz_init_net_socket$netrom(0x6, 0x5, 0x0) 6.193885503s ago: executing program 5 (id=541): r0 = socket$inet(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000140)={@random="5b1a033f2511", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "fdcdae25a7a296872a8a5290e48e30acf8afc7e67d70a62c979cefa10a0028bd", "ae0000000000000000e400", {"35f3c07eeca4a20a9858ac1500", "63081fe8fe001a08ed082ad7121d696f"}}}}}}}, 0x0) 6.076467212s ago: executing program 5 (id=542): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x3e4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000280)={{&(0x7f0000000000/0x3000)=nil, 0x3000}, 0x4}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) utimensat(0xffffffffffffffff, 0x0, &(0x7f0000000580)={{0x0, 0x3ffffffe}, {0x0, 0x3ffffffe}}, 0x0) 5.401114541s ago: executing program 5 (id=543): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_REWIND(r2, 0x40084146, &(0x7f00000000c0)=0x3fa5548c) 4.660987436s ago: executing program 3 (id=544): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) bind$packet(r0, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x2, 0x6, @dev}, 0x14) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) 4.61058038s ago: executing program 2 (id=545): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='fdb_delete\x00', r1}, 0x10) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYRES8=r2], &(0x7f0000000780)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8937, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 4.051312881s ago: executing program 2 (id=546): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file1\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r1, 0x2000009) ftruncate(r0, 0x1362001) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) 3.030088446s ago: executing program 2 (id=547): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000440)=0x7ff, 0x4) 1.211444181s ago: executing program 6 (id=437): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x8102, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r1, 0x400454ce, 0x5) setgroups(0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1}) 1.210610341s ago: executing program 2 (id=556): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000001b80)=[{{&(0x7f0000000040)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000340)="fd", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000006c0)='\f', 0x1}], 0x1}}], 0x2, 0x4000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000100)="9f", 0x1, 0x840, &(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r2, 0x9}, 0x8) 1.187771932s ago: executing program 5 (id=557): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800010, &(0x7f0000001040)={[{@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@nostrict}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@session}, {@gid}, {@dmode={'dmode', 0x3d, 0x8}}, {@undelete}, {@partition={'partition', 0x3d, 0x1}}, {@unhide}, {}]}, 0x1, 0xc43, &(0x7f00000001c0)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x842, 0x0) 557.635889ms ago: executing program 6 (id=548): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c8, &(0x7f0000000240)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c0045ac5eecd9dc2a316ea31d0a6205ebc2a167d4bcf0165441813d430b39d7badf3347f2512b4a49bd5e4a2495ca79d447f8aad4d7d5faf776c890c3a9e4b6ec1fb20bcfa9592f926caf1627a4b02c197b80a3228781194e64edea16f4520ae41729791d4eb9c485e89d8990a983354b42e4738c7908cceb48dbe27fa8d01219449ce5869b85c1bc8e3c2a19bd665f707038a766a4a9969051b991d22174df43508d5ed1a5f691f07fc5dc"], 0x1, 0x442a, &(0x7f0000008940)="$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") open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x40802, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r1, 0x9) copy_file_range(r1, 0x0, r0, 0x0, 0xffffffffa003e459, 0x700000000000000) 557.511069ms ago: executing program 2 (id=549): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000e40), 0x1, 0xd99, &(0x7f0000000e80)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101740, 0x179) ioctl$FITRIM(r1, 0x80086e8a, 0x0) 0s ago: executing program 2 (id=550): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_pressure(r1, &(0x7f00000002c0)='memory.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r2, &(0x7f0000000040)={'full', 0x20, 0x100001, 0x20, 0x100002}, 0x2f) write$cgroup_pressure(r2, &(0x7f00000005c0)={'full', 0x20, 0x7, 0x20, 0x1}, 0x2f) kernel console output (not intermixed with test programs): d80a5b93e5d [ 86.364879][ T4531] loop3: detected capacity change from 0 to 512 [ 86.405068][ T4262] Bluetooth: hci0: command 0x0c1a tx timeout [ 86.467119][ T4531] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 86.489819][ T4531] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.505027][ T4532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.54'. [ 86.519722][ T4532] device bridge_slave_1 left promiscuous mode [ 86.541212][ T4532] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.564895][ T4262] Bluetooth: hci1: command 0x0c1a tx timeout [ 86.581404][ T4532] device bridge_slave_0 left promiscuous mode [ 86.597501][ T4532] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.616076][ T4295] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 86.660101][ T126] cfg80211: failed to load regulatory.db [ 86.666066][ T4262] Bluetooth: hci2: command 0x0c1a tx timeout [ 86.674621][ T26] audit: type=1804 audit(1739298430.898:4): pid=4538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.55" name="/newroot/15/file1/file1" dev="loop3" ino=15 res=1 errno=0 [ 86.713305][ T4531] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.55: bg 0: block 248: padding at end of block bitmap is not set [ 86.738123][ T4262] Bluetooth: hci4: command 0x0c1a tx timeout [ 86.743110][ T4265] Bluetooth: hci3: command 0x0c1a tx timeout [ 86.786638][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 86.821756][ T4295] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.832401][ T4295] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 86.845968][ T4295] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 86.856655][ T4295] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.868711][ T4295] usb 3-1: Product: syz [ 86.872909][ T4295] usb 3-1: Manufacturer: syz [ 86.878977][ T4295] usb 3-1: SerialNumber: syz [ 87.113989][ T4295] usb 3-1: 0:2 : does not exist [ 87.148366][ T4295] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 87.273761][ T4295] usb 3-1: USB disconnect, device number 3 [ 87.302070][ T4544] loop4: detected capacity change from 0 to 4096 [ 87.319384][ T4547] loop1: detected capacity change from 0 to 8 [ 87.519796][ T4547] overlayfs: failed to resolve './file0': -2 [ 87.540016][ T4553] loop0: detected capacity change from 0 to 256 [ 87.587183][ T4243] udevd[4243]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 87.770880][ T4256] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 87.817861][ T4256] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 88.056719][ T4565] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 88.066513][ T4565] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 88.094427][ T4569] loop0: detected capacity change from 0 to 256 [ 88.485016][ T4265] Bluetooth: hci0: command 0x0406 tx timeout [ 88.644886][ T4262] Bluetooth: hci1: command 0x0406 tx timeout [ 88.751859][ T4265] Bluetooth: hci2: command 0x0406 tx timeout [ 88.775042][ T4480] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 88.805053][ T4262] Bluetooth: hci3: command 0x0406 tx timeout [ 88.811130][ T4262] Bluetooth: hci4: command 0x0406 tx timeout [ 88.945007][ T4479] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 88.974936][ T4480] usb 3-1: Using ep0 maxpacket: 32 [ 88.981893][ T4480] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 88.994506][ T4480] usb 3-1: config 0 has no interface number 0 [ 89.010460][ T4480] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 89.019880][ T4480] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.028425][ T4480] usb 3-1: Product: syz [ 89.032837][ T4480] usb 3-1: Manufacturer: syz [ 89.038105][ T4480] usb 3-1: SerialNumber: syz [ 89.048596][ T4480] usb 3-1: config 0 descriptor?? [ 89.057707][ T4480] smsc95xx v2.0.0 [ 89.174923][ T4479] usb 5-1: Using ep0 maxpacket: 32 [ 89.187022][ T4479] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 89.219537][ T4479] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 89.249206][ T4479] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 89.293109][ T4479] usb 5-1: Product: syz [ 89.297893][ T4479] usb 5-1: Manufacturer: syz [ 89.304568][ T4479] usb 5-1: SerialNumber: syz [ 89.339962][ T4479] usb 5-1: config 0 descriptor?? [ 89.349922][ T4585] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 89.478607][ T4480] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 89.500915][ T4480] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 89.538926][ T4593] loop1: detected capacity change from 0 to 2048 [ 89.611205][ T4593] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 89.668658][ T4295] usb 5-1: USB disconnect, device number 3 [ 89.690731][ T26] audit: type=1800 audit(1739298433.918:5): pid=4593 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.81" name="file1" dev="loop1" ino=1415 res=0 errno=0 [ 90.123350][ T4480] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 90.154588][ T4480] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 90.184336][ T4480] usb 3-1: USB disconnect, device number 4 [ 90.536225][ T4605] loop1: detected capacity change from 0 to 1024 [ 90.583615][ T4605] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 90.635919][ T4605] EXT4-fs error (device loop1): ext4_get_journal_inode:5723: inode #32: comm syz.1.86: iget: special inode unallocated [ 90.692695][ T4605] EXT4-fs (loop1): no journal found [ 90.698404][ T4605] EXT4-fs (loop1): can't get journal size [ 90.717491][ T4605] EXT4-fs error (device loop1): ext4_protect_reserved_inode:160: inode #32: comm syz.1.86: iget: special inode unallocated [ 90.746342][ T4605] EXT4-fs (loop1): failed to initialize system zone (-117) [ 90.753865][ T4605] EXT4-fs (loop1): mount failed [ 91.555874][ T4621] capability: warning: `syz.1.92' uses deprecated v2 capabilities in a way that may be insecure [ 91.733149][ T4625] loop4: detected capacity change from 0 to 8192 [ 91.834677][ T4625] usb usb1: usbfs: interface 0 claimed by hub while 'syz.4.93' sets config #0 [ 92.301777][ T4265] Bluetooth: hci5: sending frame failed (-49) [ 92.309314][ T4262] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 92.582443][ T4628] loop3: detected capacity change from 0 to 32768 [ 92.652952][ T4628] XFS (loop3): Mounting V5 Filesystem [ 92.854687][ T4650] Zero length message leads to an empty skb [ 92.862018][ T4628] XFS (loop3): Ending clean mount [ 92.946762][ T4579] Set syz1 is full, maxelem 65536 reached [ 93.100001][ T4654] loop7: detected capacity change from 0 to 16384 [ 93.132749][ T4257] XFS (loop3): Unmounting Filesystem [ 93.140693][ T4294] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 93.171569][ T4654] loop7: detected capacity change from 16384 to 16383 [ 93.258568][ T4654] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.272845][ T4654] Buffer I/O error on dev loop7, logical block 0, async page read [ 93.291198][ T4654] ldm_validate_partition_table(): Disk read failed. [ 93.312542][ T4654] Dev loop7: unable to read RDB block 0 [ 93.332676][ T4654] loop7: unable to read partition table [ 93.339672][ T4654] loop7: partition table beyond EOD, truncated [ 93.346870][ T4294] usb 3-1: Using ep0 maxpacket: 32 [ 93.354376][ T4654] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 93.369377][ T4294] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 93.393860][ T4294] usb 3-1: config 0 has no interface number 0 [ 93.409707][ T4294] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 93.461830][ T4294] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 93.487072][ T4294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.499864][ T4294] usb 3-1: Product: syz [ 93.504083][ T4294] usb 3-1: Manufacturer: syz [ 93.511073][ T4294] usb 3-1: SerialNumber: syz [ 93.521141][ T4294] usb 3-1: config 0 descriptor?? [ 93.548721][ T4294] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 93.576859][ T4294] em28xx 3-1:0.132: Video interface 132 found: [ 93.953553][ T4294] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 94.294966][ T4240] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.312603][ T4685] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.320885][ T4685] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.415403][ T4686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.500315][ T4240] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 94.514914][ T4240] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.550978][ T4240] usb 1-1: config 0 descriptor?? [ 94.576723][ T4294] em28xx 3-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 94.602774][ T4240] cp210x 1-1:0.0: cp210x converter detected [ 94.612114][ T4294] em28xx 3-1:0.132: failed to read eeprom (err=-5) [ 94.628230][ T4294] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 94.715000][ T4294] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 94.728027][ T4294] em28xx 3-1:0.132: analog set to bulk mode. [ 94.744259][ T126] em28xx 3-1:0.132: Registering V4L2 extension [ 94.754684][ T4692] loop1: detected capacity change from 0 to 8192 [ 94.771010][ T4294] usb 3-1: USB disconnect, device number 5 [ 94.799988][ T4692] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 94.827480][ T4294] em28xx 3-1:0.132: Disconnecting em28xx [ 94.841373][ T4692] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 94.860572][ T4692] REISERFS (device loop1): using ordered data mode [ 94.872195][ T4692] reiserfs: using flush barriers [ 94.896533][ T4692] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 94.913446][ T4692] REISERFS (device loop1): checking transaction log (loop1) [ 94.932991][ T4692] REISERFS (device loop1): Using r5 hash to sort names [ 94.989490][ T4692] reiserfs: enabling write barrier flush mode [ 95.012549][ T4240] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 95.023533][ T4692] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 95.067194][ T4240] usb 1-1: cp210x converter now attached to ttyUSB0 [ 95.106762][ T126] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 95.114582][ T126] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 95.163431][ T126] em28xx 3-1:0.132: No AC97 audio processor [ 95.193425][ T126] usb 3-1: Decoder not found [ 95.244859][ T126] em28xx 3-1:0.132: failed to create media graph [ 95.274835][ T126] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 95.298498][ T4240] usb 1-1: USB disconnect, device number 2 [ 95.321674][ T4698] loop3: detected capacity change from 0 to 1024 [ 95.341894][ T126] em28xx 3-1:0.132: Remote control support is not available for this card. [ 95.355800][ T4240] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 95.383440][ T4701] loop2: detected capacity change from 0 to 512 [ 95.388829][ T4294] em28xx 3-1:0.132: Closing input extension [ 95.401588][ T4240] cp210x 1-1:0.0: device disconnected [ 95.428065][ T4701] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 95.452355][ T4294] em28xx 3-1:0.132: Freeing device [ 95.500189][ T4701] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 95.513765][ T4702] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 95.565229][ T4701] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.121: bad orphan inode 131083 [ 95.613554][ T4706] loop1: detected capacity change from 0 to 256 [ 95.644644][ T4701] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 95.667455][ T4241] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 95.807828][ T4262] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 96.030643][ T4713] netlink: 'syz.0.123': attribute type 1 has an invalid length. [ 96.122714][ T4261] EXT4-fs (loop2): unmounting filesystem. [ 96.554287][ T4734] loop2: detected capacity change from 0 to 128 [ 96.650214][ T26] audit: type=1800 audit(1739298440.878:6): pid=4734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.130" name="file1" dev="loop2" ino=1048606 res=0 errno=0 [ 96.690074][ T4715] loop4: detected capacity change from 0 to 32768 [ 96.717934][ T4715] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.124 (4715) [ 96.773228][ T4715] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 96.793109][ T4715] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 96.802815][ T4715] BTRFS info (device loop4): setting nodatacow, compression disabled [ 96.829632][ T4715] BTRFS info (device loop4): max_inline at 93 [ 96.850587][ T4715] BTRFS info (device loop4): turning off barriers [ 96.857247][ T4715] BTRFS info (device loop4): turning on flush-on-commit [ 96.877304][ T4715] BTRFS info (device loop4): doing ref verification [ 96.885427][ T4715] BTRFS info (device loop4): force clearing of disk cache [ 96.892985][ T4715] BTRFS info (device loop4): enabling ssd optimizations [ 96.941030][ T4715] BTRFS info (device loop4): max_inline at 4096 [ 96.953424][ T4715] BTRFS info (device loop4): using free space tree [ 97.236421][ T4733] loop3: detected capacity change from 0 to 32768 [ 97.249096][ T4715] BTRFS info (device loop4): rebuilding free space tree [ 97.286266][ T4323] FAT-fs (loop2): error, invalid FAT chain (i_pos 548, last_block 8) [ 97.295848][ T4733] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.131 (4733) [ 97.325026][ T4241] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (4241) [ 97.325649][ T4323] FAT-fs (loop2): Filesystem has been set read-only [ 97.393748][ T4323] FAT-fs (loop2): error, corrupted file size (i_pos 548, 522) [ 98.053462][ T4778] netlink: 'syz.2.142': attribute type 1 has an invalid length. [ 98.053808][ T4256] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 98.438992][ T4769] loop1: detected capacity change from 0 to 32768 [ 98.487780][ T4769] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.138 (4769) [ 98.541433][ T4769] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 98.572313][ T4769] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 98.622367][ T4769] BTRFS info (device loop1): turning off barriers [ 98.654825][ T4769] BTRFS info (device loop1): disabling tree log [ 98.661158][ T4769] BTRFS info (device loop1): using free space tree [ 98.740522][ T4791] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.846497][ T4791] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.040079][ T4769] BTRFS info (device loop1): enabling ssd optimizations [ 99.415164][ T4249] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 99.470976][ T4792] loop3: detected capacity change from 0 to 32768 [ 99.540504][ T4792] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.148 (4792) [ 99.776349][ T4792] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 99.780941][ T4819] loop4: detected capacity change from 0 to 128 [ 99.819541][ T4792] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 99.890107][ T4792] BTRFS info (device loop3): using free space tree [ 100.046535][ T4824] netlink: 4 bytes leftover after parsing attributes in process `syz.1.149'. [ 100.110495][ T4824] device bridge_slave_1 left promiscuous mode [ 100.145178][ T4819] EXT4-fs (loop4): Test dummy encryption mode enabled [ 100.152668][ T4824] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.186490][ T4824] device bridge_slave_0 left promiscuous mode [ 100.192569][ T4792] BTRFS info (device loop3): enabling ssd optimizations [ 100.216153][ T4819] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 100.272330][ T4819] ext4 filesystem being mounted at /33/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 100.295156][ T4824] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.413540][ T4257] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 100.676752][ T4819] fscrypt (loop4): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 100.861710][ T4256] EXT4-fs (loop4): unmounting filesystem. [ 101.139179][ T4870] loop0: detected capacity change from 0 to 8 [ 101.191951][ T4870] SQUASHFS error: zstd decompression failed, data probably corrupt [ 101.206635][ T4870] SQUASHFS error: Failed to read block 0x4ec: -5 [ 101.213026][ T4870] SQUASHFS error: Unable to read metadata cache entry [4ea] [ 101.241070][ T4870] SQUASHFS error: Unable to read inode 0x2011f [ 101.459133][ T4875] loop7: detected capacity change from 0 to 16384 [ 101.463211][ T4876] loop3: detected capacity change from 0 to 512 [ 101.473591][ T4876] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 101.507206][ T4876] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.159: bad orphan inode 131083 [ 101.525040][ T4875] loop7: detected capacity change from 16384 to 16383 [ 101.535611][ T4876] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 101.578073][ T4876] xt_hashlimit: size too large, truncated to 1048576 [ 101.602032][ T4875] I/O error, dev loop7, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 101.644818][ T4875] Buffer I/O error on dev loop7, logical block 3, async page read [ 101.673149][ T4875] loop7: unable to read partition table [ 101.680181][ T4875] loop7: partition table beyond EOD, truncated [ 101.704853][ T4875] loop_reread_partitions: partition scan of loop7 () failed (rc=-5) [ 101.903297][ T4866] loop4: detected capacity change from 0 to 32768 [ 101.971698][ T4884] Bluetooth: MGMT ver 1.22 [ 102.511885][ T4880] loop0: detected capacity change from 0 to 40427 [ 102.522796][ T4880] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 102.537313][ T4880] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 102.557619][ T4880] F2FS-fs (loop0): invalid crc value [ 102.568283][ T4880] F2FS-fs (loop0): Found nat_bits in checkpoint [ 102.622086][ T4880] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 102.631173][ T4880] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 103.188425][ T4899] loop1: detected capacity change from 0 to 32768 [ 103.209377][ T4899] XFS (loop1): Mounting V5 Filesystem [ 103.261207][ T4899] XFS (loop1): Ending clean mount [ 103.749290][ T4866] XFS (loop4): Mounting V5 Filesystem [ 103.942721][ T4866] XFS (loop4): Ending clean mount [ 103.950598][ T4249] XFS (loop1): Unmounting Filesystem [ 104.045707][ T4866] XFS (loop4): Quotacheck needed: Please wait. [ 104.181829][ T4866] XFS (loop4): Quotacheck: Done. [ 104.281420][ T4256] XFS (loop4): Unmounting Filesystem [ 104.683177][ T4923] loop1: detected capacity change from 0 to 1024 [ 104.928879][ T4925] loop0: detected capacity change from 0 to 4096 [ 105.765019][ T4479] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 105.855534][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.964815][ T4479] usb 5-1: Using ep0 maxpacket: 8 [ 105.972012][ T4479] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 105.999835][ T4479] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 106.049121][ T4479] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 106.081940][ T4479] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.118820][ T4479] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.160797][ T4479] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 106.189069][ T4479] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.441058][ T4479] usb 5-1: usb_control_msg returned -32 [ 106.448202][ T4479] usbtmc 5-1:16.0: can't read capabilities [ 106.942097][ T4966] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.980987][ T4966] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.083796][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 107.272473][ T4330] usb 5-1: USB disconnect, device number 4 [ 107.362887][ T4976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.188'. [ 107.440914][ T4976] device hsr_slave_1 left promiscuous mode [ 108.460177][ T5003] loop3: detected capacity change from 0 to 164 [ 108.538581][ T5003] Unable to read rock-ridge attributes [ 108.594991][ T4298] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 108.790083][ T4298] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 108.811324][ T4298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.844850][ T4298] usb 2-1: Product: syz [ 108.849078][ T4298] usb 2-1: Manufacturer: syz [ 108.853702][ T4298] usb 2-1: SerialNumber: syz [ 108.893418][ T5008] loop3: detected capacity change from 0 to 64 [ 109.075536][ T5010] input: syz0 as /devices/virtual/input/input5 [ 109.317818][ T5005] loop4: detected capacity change from 0 to 32768 [ 109.327921][ T5005] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.199 (5005) [ 109.387456][ T5005] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 109.423789][ T5005] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 109.489461][ T5005] BTRFS info (device loop4): setting nodatacow, compression disabled [ 109.508317][ T5005] BTRFS info (device loop4): force clearing of disk cache [ 109.551619][ T5005] BTRFS info (device loop4): enabling ssd optimizations [ 109.564947][ T5005] BTRFS info (device loop4): using spread ssd allocation scheme [ 109.572870][ T5005] BTRFS info (device loop4): doing ref verification [ 109.608934][ T5005] BTRFS info (device loop4): not using ssd optimizations [ 109.654379][ T5005] BTRFS info (device loop4): not using spread ssd allocation scheme [ 109.677485][ T5005] BTRFS info (device loop4): using free space tree [ 109.796226][ T5038] loop2: detected capacity change from 0 to 164 [ 109.839211][ T5038] ISOFS: unable to read i-node block [ 109.886728][ T5038] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 109.918632][ T4298] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 109.935024][ T4298] cdc_ncm 2-1:1.0: setting tx_max = 184 [ 109.970488][ T5005] BTRFS info (device loop4): rebuilding free space tree [ 110.153496][ T4298] cdc_ncm 2-1:1.0 eth1: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 110.184663][ T4298] usb 2-1: USB disconnect, device number 2 [ 110.198114][ T4298] cdc_ncm 2-1:1.0 eth1: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 110.242869][ T26] audit: type=1804 audit(1739298454.468:7): pid=5005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.199" name="/newroot/40/bus/bus" dev="loop4" ino=263 res=1 errno=0 [ 110.374267][ T5024] loop0: detected capacity change from 0 to 32768 [ 110.412506][ T4256] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 110.444417][ T5024] XFS (loop0): Mounting V5 Filesystem [ 110.613379][ T5024] XFS (loop0): Ending clean mount [ 111.045697][ T4240] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 111.066635][ T5071] loop1: detected capacity change from 0 to 256 [ 111.082790][ T4253] XFS (loop0): Unmounting Filesystem [ 111.159554][ T26] audit: type=1804 audit(1739298455.388:8): pid=5071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.213" name="/newroot/53/file0/file1" dev="loop1" ino=1048607 res=1 errno=0 [ 111.295859][ T4240] usb 3-1: Using ep0 maxpacket: 8 [ 111.325972][ T4240] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 111.369852][ T4240] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 111.395200][ T4240] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 111.434802][ T4240] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 111.454882][ T4240] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.504928][ T4240] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 111.534423][ T4240] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.769573][ T4240] usb 3-1: GET_CAPABILITIES returned 0 [ 111.775442][ T4240] usbtmc 3-1:16.0: can't read capabilities [ 112.016106][ C1] usbtmc 3-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 112.028898][ T4861] usb 3-1: USB disconnect, device number 6 [ 112.098056][ T5077] loop1: detected capacity change from 0 to 40427 [ 112.110046][ T5077] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 112.119555][ T5077] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 112.143058][ T5077] F2FS-fs (loop1): invalid crc value [ 112.158033][ T5077] F2FS-fs (loop1): Found nat_bits in checkpoint [ 112.214895][ T5077] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 112.214934][ T4240] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 112.225246][ T5077] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 112.378167][ T5098] Illegal XDP return value 4292518224 on prog (id 26) dev N/A, expect packet loss! [ 112.427846][ T4240] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.446265][ T4240] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.466351][ T4240] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 112.509711][ T4240] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.531558][ T4240] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.572063][ T4240] usb 1-1: config 0 descriptor?? [ 112.671351][ T5103] netlink: 'syz.2.227': attribute type 3 has an invalid length. [ 112.852414][ T5107] loop2: detected capacity change from 0 to 512 [ 112.882318][ T5107] EXT4-fs (loop2): Test dummy encryption mode enabled [ 112.910019][ T5107] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 112.962256][ T5107] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 112.989988][ T4240] plantronics 0003:047F:FFFF.0002: unknown main item tag 0xd [ 112.993374][ T5107] System zones: [ 113.006541][ T4240] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 113.024852][ T5107] 1-12 [ 113.035881][ T4240] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 113.061036][ T5107] EXT4-fs (loop2): 1 truncate cleaned up [ 113.073201][ T5107] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 113.257470][ T5107] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 113.424970][ T4479] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 113.506735][ T5107] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 113.524007][ T5129] loop4: detected capacity change from 0 to 256 [ 113.537386][ T5126] loop3: detected capacity change from 0 to 512 [ 113.544496][ T5107] overlayfs: failed to resolve './file0': -2 [ 113.556665][ T4330] usb 1-1: USB disconnect, device number 3 [ 113.565819][ T5126] EXT4-fs: Ignoring removed i_version option [ 113.588118][ T5126] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.596346][ T5126] ext4: Unknown parameter 'seclabel' [ 113.615032][ T4479] usb 2-1: Using ep0 maxpacket: 32 [ 113.622388][ T4479] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 113.641106][ T4479] usb 2-1: config 0 has no interface number 0 [ 113.665887][ T4479] usb 2-1: config 0 interface 12 has no altsetting 0 [ 113.708255][ T4479] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 113.727303][ T4479] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.745052][ T4479] usb 2-1: Product: syz [ 113.755315][ T4479] usb 2-1: Manufacturer: syz [ 113.765182][ T4479] usb 2-1: SerialNumber: syz [ 113.777800][ T4479] usb 2-1: config 0 descriptor?? [ 113.796812][ T4261] EXT4-fs (loop2): unmounting filesystem. [ 114.684825][ T41] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 114.883839][ T41] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 114.909381][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.925924][ T41] usb 1-1: Product: syz [ 114.933392][ T41] usb 1-1: Manufacturer: syz [ 114.941940][ T41] usb 1-1: SerialNumber: syz [ 114.970080][ T41] usb 1-1: config 0 descriptor?? [ 115.038144][ T4479] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 115.081494][ T4262] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 115.091970][ T4262] CPU: 0 PID: 4262 Comm: kworker/u5:5 Not tainted 6.1.128-syzkaller #0 [ 115.100273][ T4262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 115.110363][ T4262] Workqueue: hci3 hci_rx_work [ 115.115109][ T4262] Call Trace: [ 115.118410][ T4262] [ 115.121386][ T4262] dump_stack_lvl+0x1e3/0x2cb [ 115.126116][ T4262] ? nf_tcp_handle_invalid+0x642/0x642 [ 115.131599][ T4262] ? panic+0x764/0x764 [ 115.135731][ T4262] sysfs_create_dir_ns+0x2c6/0x390 [ 115.140874][ T4262] ? sysfs_warn_dup+0xa0/0xa0 [ 115.145581][ T4262] kobject_add_internal+0x6df/0xd10 [ 115.150830][ T4262] kobject_add+0x14e/0x210 [ 115.155283][ T4262] ? device_add+0x3c2/0xfd0 [ 115.159960][ T4262] ? kobject_init+0x1d0/0x1d0 [ 115.164688][ T4262] ? __raw_spin_lock_init+0x41/0x100 [ 115.170012][ T4262] ? get_device_parent+0x128/0x400 [ 115.175309][ T4262] device_add+0x476/0xfd0 [ 115.179721][ T4262] hci_conn_add_sysfs+0xe4/0x1f0 [ 115.184712][ T4262] le_conn_complete_evt+0xcc6/0x1320 [ 115.190043][ T4262] ? trace_contention_end+0x61/0x170 [ 115.195385][ T4262] ? hci_le_big_info_adv_report_evt+0x390/0x390 [ 115.201680][ T4262] ? __mutex_unlock_slowpath+0x218/0x750 [ 115.207366][ T4262] ? mutex_unlock+0x10/0x10 [ 115.211912][ T4262] ? skb_pull_data+0x10e/0x220 [ 115.216720][ T4262] hci_le_conn_complete_evt+0x188/0x410 [ 115.222296][ T4262] hci_event_packet+0xa40/0x1510 [ 115.227262][ T4262] ? hci_remote_host_features_evt+0x210/0x210 [ 115.233368][ T4262] ? bis_list+0x290/0x290 [ 115.237715][ T4262] ? kcov_remote_start+0x4ae/0x7c0 [ 115.242861][ T4262] ? lockdep_hardirqs_on+0x30/0x130 [ 115.248089][ T4262] ? hci_send_to_monitor+0x99/0x4d0 [ 115.253324][ T4262] hci_rx_work+0x3a6/0xd10 [ 115.258217][ T4262] ? process_one_work+0x7a9/0x11d0 [ 115.263365][ T4262] process_one_work+0x8a9/0x11d0 [ 115.268341][ T4262] ? worker_detach_from_pool+0x260/0x260 [ 115.274001][ T4262] ? _raw_spin_lock_irqsave+0x120/0x120 [ 115.279589][ T4262] ? kthread_data+0x4e/0xc0 [ 115.284126][ T4262] ? wq_worker_running+0x97/0x190 [ 115.289198][ T4262] worker_thread+0xa47/0x1200 [ 115.293913][ T4262] ? release_firmware_map_entry+0x186/0x186 [ 115.299857][ T4262] ? _raw_spin_unlock+0x40/0x40 [ 115.304771][ T4262] kthread+0x28d/0x320 [ 115.308888][ T4262] ? worker_clr_flags+0x190/0x190 [ 115.313946][ T4262] ? kthread_blkcg+0xd0/0xd0 [ 115.318575][ T4262] ret_from_fork+0x1f/0x30 [ 115.323046][ T4262] [ 115.328387][ T4330] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 115.335989][ T4262] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 115.349314][ T4262] Bluetooth: hci3: failed to register connection device [ 115.361310][ T4479] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 115.370269][ T4479] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 115.378277][ T4479] f81534: probe of 2-1:0.12 failed with error -71 [ 115.387237][ T41] usb 1-1: Firmware: major: 15, minor: 97, hardware type: UNKNOWN (127) [ 115.388783][ T4479] usb 2-1: USB disconnect, device number 3 [ 115.558531][ T4330] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 115.568033][ T4330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.579469][ T4330] usb 4-1: config 0 descriptor?? [ 115.588947][ T41] usb 1-1: no permanent extended address found, random address set [ 115.589787][ T4330] cp210x 4-1:0.0: cp210x converter detected [ 115.601935][ T41] usb 1-1: atusb_probe: initialization failed, error = -524 [ 115.621063][ T41] atusb: probe of 1-1:0.0 failed with error -524 [ 115.724882][ T951] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 115.802980][ T41] usb 1-1: USB disconnect, device number 4 [ 115.850553][ T5169] loop4: detected capacity change from 0 to 64 [ 115.904895][ T951] usb 3-1: Using ep0 maxpacket: 8 [ 115.912279][ T951] usb 3-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.944241][ T951] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.957946][ T951] usb 3-1: config 0 interface 0 has no altsetting 0 [ 115.964649][ T951] usb 3-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 115.974319][ T951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.994199][ T951] usb 3-1: config 0 descriptor?? [ 116.014489][ T5157] loop3: detected capacity change from 0 to 256 [ 116.052760][ T5157] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 116.109954][ T4330] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 116.132660][ T4330] usb 4-1: cp210x converter now attached to ttyUSB0 [ 116.303876][ T5171] loop1: detected capacity change from 0 to 32768 [ 116.313046][ T5171] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.250 (5171) [ 116.339114][ T4516] usb 4-1: USB disconnect, device number 3 [ 116.352192][ T4516] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 116.370984][ T4516] cp210x 4-1:0.0: device disconnected [ 116.402687][ T5171] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 116.414612][ T951] chicony 0003:04F2:1421.0003: nested delimiters [ 116.439008][ T5171] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 116.448946][ T951] chicony 0003:04F2:1421.0003: item 0 4 2 10 parsing failed [ 116.471128][ T5171] BTRFS info (device loop1): setting nodatacow, compression disabled [ 116.485892][ T951] chicony 0003:04F2:1421.0003: Chicony hid parse failed: -22 [ 116.501859][ T951] chicony: probe of 0003:04F2:1421.0003 failed with error -22 [ 116.512874][ T5171] BTRFS info (device loop1): force clearing of disk cache [ 116.538518][ T5171] BTRFS info (device loop1): enabling ssd optimizations [ 116.564850][ T5171] BTRFS info (device loop1): using spread ssd allocation scheme [ 116.572565][ T5171] BTRFS info (device loop1): doing ref verification [ 116.614932][ T5171] BTRFS info (device loop1): not using ssd optimizations [ 116.622038][ T5171] BTRFS info (device loop1): not using spread ssd allocation scheme [ 116.654842][ T5171] BTRFS info (device loop1): using free space tree [ 116.659408][ T4479] usb 3-1: USB disconnect, device number 7 [ 116.937717][ T5171] BTRFS info (device loop1): rebuilding free space tree [ 117.180950][ T26] audit: type=1804 audit(1739298461.408:9): pid=5171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.250" name="/newroot/57/bus/bus" dev="loop1" ino=263 res=1 errno=0 [ 117.202004][ C1] vkms_vblank_simulate: vblank timer overrun [ 117.252219][ T4305] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.294875][ T4240] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 117.368400][ T4249] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 117.438857][ T4305] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.514792][ T4240] usb 4-1: Using ep0 maxpacket: 8 [ 117.530862][ T4240] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.551255][ T4240] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 117.571774][ T4240] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 117.624846][ T4240] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 117.655771][ T4240] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 117.694817][ T4240] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.739905][ T4240] hub 4-1:1.0: bad descriptor, ignoring hub [ 117.764934][ T4240] hub: probe of 4-1:1.0 failed with error -5 [ 117.782077][ T4240] cdc_wdm 4-1:1.0: skipping garbage [ 117.791700][ T4240] cdc_wdm 4-1:1.0: skipping garbage [ 117.810783][ T5208] loop0: detected capacity change from 0 to 4096 [ 117.828539][ T4240] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 117.847565][ T4240] cdc_wdm 4-1:1.0: Unknown control protocol [ 117.858890][ T5208] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 118.093485][ T5214] loop1: detected capacity change from 0 to 64 [ 118.188377][ T4305] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.316088][ T4305] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.398338][ T5200] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 118.610832][ T4265] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 118.622051][ T4265] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 118.632828][ T5200] usb 4-1: device firmware changed [ 118.638672][ T4265] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 118.647255][ T4265] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 118.658410][ T4265] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 118.658422][ T5200] cdc_wdm 4-1:1.0: Error autopm - -16 [ 118.665733][ T4330] usb 4-1: USB disconnect, device number 4 [ 118.677536][ T4265] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 118.874830][ T4330] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 119.064958][ T4330] usb 4-1: Using ep0 maxpacket: 8 [ 119.077305][ T4330] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.093170][ T4330] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 119.124335][ T4330] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 119.202539][ T4330] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 119.220912][ T4330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.263052][ T4330] hub 4-1:1.0: bad descriptor, ignoring hub [ 119.280882][ T4330] hub: probe of 4-1:1.0 failed with error -5 [ 119.290238][ T4330] cdc_wdm 4-1:1.0: skipping garbage [ 119.303103][ T4330] cdc_wdm 4-1:1.0: skipping garbage [ 119.308827][ T4330] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 119.362061][ T5220] chnl_net:caif_netlink_parms(): no params data found [ 119.575068][ T4240] usb 4-1: USB disconnect, device number 5 [ 119.587014][ T5242] loop2: detected capacity change from 0 to 8 [ 119.612761][ T5242] SQUASHFS error: Failed to read block 0x62b: -5 [ 119.635112][ T5242] SQUASHFS error: Unable to read metadata cache entry [629] [ 119.642554][ T5242] SQUASHFS error: Unable to read inode 0x11f [ 119.667686][ T5245] loop0: detected capacity change from 0 to 512 [ 119.730717][ T4243] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 119.755840][ T5245] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 119.892386][ T5220] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.912653][ T5220] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.938697][ T5220] device bridge_slave_0 entered promiscuous mode [ 119.967435][ T5220] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.978457][ T5220] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.988087][ T5220] device bridge_slave_1 entered promiscuous mode [ 120.013738][ T4253] EXT4-fs (loop0): unmounting filesystem. [ 120.199512][ T5220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.228906][ T5220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.315797][ T5256] loop0: detected capacity change from 0 to 1024 [ 120.375715][ T5220] team0: Port device team_slave_0 added [ 120.384021][ T5220] team0: Port device team_slave_1 added [ 120.392172][ T5172] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 120.524895][ T4516] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 120.611171][ T5263] 9p: Unknown uid 00000000004294967295 [ 120.725146][ T4265] Bluetooth: hci3: command 0x0409 tx timeout [ 120.726925][ T4516] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.820506][ T4516] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 120.875857][ T4516] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 120.915687][ T4516] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.929747][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.960831][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.013330][ T4516] usb 4-1: config 0 descriptor?? [ 121.032988][ T5220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.080586][ T5220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.111340][ T5220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.203508][ T5220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.390406][ T4305] device hsr_slave_0 left promiscuous mode [ 121.401896][ T5281] loop2: detected capacity change from 0 to 256 [ 121.420583][ T4305] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.434920][ T4305] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.439767][ T4516] hid-steam 0003:28DE:1142.0004: item fetching failed at offset 4/5 [ 121.472249][ T4305] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.480775][ T4516] hid-steam 0003:28DE:1142.0004: steam_probe:parse of hid interface failed [ 121.494539][ T5281] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 121.512104][ T4305] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.520180][ T4516] hid-steam: probe of 0003:28DE:1142.0004 failed with error -22 [ 121.642571][ T4516] usb 4-1: USB disconnect, device number 6 [ 121.660138][ T5281] exFAT-fs (loop2): hint_cluster is invalid (17) [ 121.683579][ T4305] device veth1_macvtap left promiscuous mode [ 121.719175][ T4305] device veth0_macvtap left promiscuous mode [ 121.765738][ T4305] device veth1_vlan left promiscuous mode [ 121.771870][ T4305] device veth0_vlan left promiscuous mode [ 121.965750][ T4520] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 122.167893][ T4520] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 122.173194][ T5297] loop2: detected capacity change from 0 to 512 [ 122.194944][ T4520] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 122.205475][ T4520] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 122.214549][ T4520] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.246645][ T5289] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 122.303569][ T5297] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 122.355068][ T5297] ext4 filesystem being mounted at /47/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.426582][ T5291] loop1: detected capacity change from 0 to 32768 [ 122.581702][ T4469] usb 1-1: USB disconnect, device number 5 [ 122.598595][ T5291] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 122.658523][ T4261] EXT4-fs (loop2): unmounting filesystem. [ 122.806889][ T4265] Bluetooth: hci3: command 0x041b tx timeout [ 122.821569][ T26] audit: type=1800 audit(1739298467.048:10): pid=5291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.280" name="bus" dev="loop1" ino=17058 res=0 errno=0 [ 123.083756][ T4249] ocfs2: Unmounting device (7,1) on (node local) [ 123.374463][ T4305] team0 (unregistering): Port device team_slave_1 removed [ 123.420788][ T4305] team0 (unregistering): Port device team_slave_0 removed [ 123.465971][ T4305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.514565][ T4305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.012101][ T4305] bond0 (unregistering): Released all slaves [ 124.069541][ T5220] device hsr_slave_0 entered promiscuous mode [ 124.076593][ T5220] device hsr_slave_1 entered promiscuous mode [ 124.083240][ T5220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.090997][ T5220] Cannot create hsr debugfs directory [ 124.588198][ T5321] loop0: detected capacity change from 0 to 32768 [ 124.662618][ T5324] loop2: detected capacity change from 0 to 4096 [ 124.670455][ T5324] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 124.740736][ T5220] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 124.764442][ T5321] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 124.806770][ T5220] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 124.815579][ T5321] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #2304 has bad signature [ 124.831470][ T5321] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 124.841387][ T5321] OCFS2: File system is now read-only. [ 124.846930][ T5321] (syz.0.296,5321,0):ocfs2_search_chain:1785 ERROR: status = -30 [ 124.855934][ T5321] (syz.0.296,5321,0):ocfs2_search_chain:1871 ERROR: status = -30 [ 124.863703][ T5321] (syz.0.296,5321,0):ocfs2_claim_suballoc_bits:1940 ERROR: status = -30 [ 124.873487][ T5321] (syz.0.296,5321,0):ocfs2_claim_suballoc_bits:1983 ERROR: status = -30 [ 124.881949][ T5321] (syz.0.296,5321,0):__ocfs2_claim_clusters:2355 ERROR: status = -30 [ 124.890130][ T5321] (syz.0.296,5321,0):__ocfs2_claim_clusters:2363 ERROR: status = -30 [ 124.898294][ T5321] (syz.0.296,5321,0):ocfs2_local_alloc_new_window:1203 ERROR: status = -30 [ 124.906980][ T5321] (syz.0.296,5321,0):ocfs2_local_alloc_new_window:1228 ERROR: status = -30 [ 124.915662][ T5321] (syz.0.296,5321,0):ocfs2_local_alloc_slide_window:1302 ERROR: status = -30 [ 124.924964][ T5321] (syz.0.296,5321,0):ocfs2_local_alloc_slide_window:1321 ERROR: status = -30 [ 124.934260][ T5321] (syz.0.296,5321,0):ocfs2_reserve_local_alloc_bits:671 ERROR: status = -30 [ 124.943051][ T5321] (syz.0.296,5321,0):ocfs2_reserve_local_alloc_bits:709 ERROR: status = -30 [ 124.952376][ T5321] (syz.0.296,5321,0):ocfs2_reserve_clusters_with_limit:1166 ERROR: status = -30 [ 124.961573][ T5321] (syz.0.296,5321,0):ocfs2_reserve_clusters_with_limit:1215 ERROR: status = -30 [ 124.970686][ T5321] (syz.0.296,5321,0):ocfs2_symlink:1911 ERROR: status = -30 [ 124.978665][ T5321] (syz.0.296,5321,0):ocfs2_symlink:2065 ERROR: status = -30 [ 124.987925][ T4265] Bluetooth: hci3: command 0x040f tx timeout [ 125.009129][ T5220] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 125.037768][ T5324] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 125.078427][ T5220] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 125.197607][ T4253] (syz-executor,4253,1):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 125.232245][ T4253] ocfs2: Unmounting device (7,0) on (node local) [ 125.417272][ T5220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 125.466800][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 125.506252][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.537190][ T5220] 8021q: adding VLAN 0 to HW filter on device team0 [ 125.591951][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 125.650810][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 125.689041][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.696465][ T4323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.735972][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 125.754321][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 125.778770][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 125.788154][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.796694][ T4323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.811168][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 125.858676][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 125.876324][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 125.888446][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 125.898026][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 125.908070][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 125.934912][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 125.949646][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 125.962612][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 126.014042][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 126.038062][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 126.053799][ T5347] input: syz1 as /devices/virtual/input/input6 [ 126.065261][ T5220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 126.346102][ T5355] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.404237][ T5355] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.890471][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 126.908479][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 126.971195][ T5220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 127.045664][ T4265] Bluetooth: hci3: command 0x0419 tx timeout [ 127.729531][ T5372] loop0: detected capacity change from 0 to 32768 [ 127.774441][ T5372] (syz.0.294,5372,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 127.883997][ T5372] (syz.0.294,5372,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 128.028690][ T5372] (syz.0.294,5372,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 128.059332][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 128.094832][ T5372] JBD2: Ignoring recovery information on journal [ 128.122575][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 128.180299][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 128.206567][ T5372] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 128.220485][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 128.301095][ T5220] device veth0_vlan entered promiscuous mode [ 128.326805][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 128.345724][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 128.404080][ T5220] device veth1_vlan entered promiscuous mode [ 128.433581][ T5372] ocfs2: Unmounting device (7,0) on (node local) [ 128.538362][ T5209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 128.568579][ T5209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 128.593662][ T5220] device veth0_macvtap entered promiscuous mode [ 128.633587][ T5220] device veth1_macvtap entered promiscuous mode [ 128.659546][ T5405] tipc: Started in network mode [ 128.664695][ T5405] tipc: Node identity ac1414aa, cluster identity 4711 [ 128.726988][ T5405] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 128.756248][ T5405] tipc: Enabled bearer , priority 10 [ 128.807219][ T5389] loop3: detected capacity change from 0 to 32768 [ 128.817501][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.852924][ T5172] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (5172) [ 128.867913][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 128.889953][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.907950][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.919017][ T5389] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 128.928430][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.971676][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.984923][ T5389] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 129.004889][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 129.011519][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.035102][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.059421][ T5389] BTRFS info (device loop3): using free space tree [ 129.088174][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.144967][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 129.157930][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.280943][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 129.288987][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 129.400950][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 129.422058][ T5389] BTRFS info (device loop3): enabling ssd optimizations [ 129.429227][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 129.441010][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 129.500170][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 129.531475][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.564940][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 129.579978][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.609733][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.637573][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.654263][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.671755][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.682558][ T5220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.700092][ T5220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.705177][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 129.722990][ T5220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.755127][ T4516] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 129.763326][ T4257] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 129.782366][ T5209] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 129.793492][ T5209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 129.816127][ T5220] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.828310][ T5220] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.838971][ T5220] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.848190][ T5220] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.911023][ T4470] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 129.949948][ T4477] tipc: Node number set to 2886997162 [ 129.984891][ T4516] usb 2-1: Using ep0 maxpacket: 16 [ 129.993387][ T4516] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.000895][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 130.031635][ T4516] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.059815][ T4516] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 130.124188][ T4516] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 130.124929][ T4470] usb 1-1: Using ep0 maxpacket: 16 [ 130.150169][ T4516] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.150696][ T4470] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 130.192494][ T4516] usb 2-1: config 0 descriptor?? [ 130.219913][ T4470] usb 1-1: config 0 has no interface number 0 [ 130.239458][ T4470] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 130.264927][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 130.273444][ T4470] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 130.304127][ T4470] usb 1-1: config 0 interface 41 has no altsetting 0 [ 130.346549][ T4470] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 130.391538][ T4470] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.411798][ T4470] usb 1-1: Product: syz [ 130.424926][ T4470] usb 1-1: Manufacturer: syz [ 130.429575][ T4470] usb 1-1: SerialNumber: syz [ 130.447443][ T4470] usb 1-1: config 0 descriptor?? [ 130.469933][ T5439] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 130.504927][ T5439] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 130.576119][ T4305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.584444][ T4305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.631825][ T4516] HID 045e:07da: Invalid code 65791 type 1 [ 130.675193][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 130.691408][ T4516] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0005/input/input7 [ 130.769772][ T5439] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 130.776894][ T4516] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 130.815019][ T5439] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 130.843512][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.902903][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.920845][ T5440] usb 2-1: USB disconnect, device number 4 [ 130.957883][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 131.256953][ T5453] loop5: detected capacity change from 0 to 1024 [ 131.412026][ T5453] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 131.526167][ T4470] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 131.781392][ T4470] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 131.805979][ T5220] EXT4-fs (loop5): unmounting filesystem. [ 131.816874][ T4470] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 131.864406][ T4470] CoreChips: probe of 1-1:0.41 failed with error -71 [ 131.932520][ T4470] usb 1-1: USB disconnect, device number 6 [ 132.325191][ T4240] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 132.526694][ T4240] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.569532][ T4240] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.610214][ T4240] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 132.635384][ T4240] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.655828][ T4240] usb 6-1: config 0 descriptor?? [ 132.738684][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.745185][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.074070][ T4240] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 133.088497][ T4240] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 133.112983][ T4240] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.0006/input/input8 [ 133.150257][ T4240] cm6533_jd 0003:0D8C:0022.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0 [ 133.318833][ T4240] usb 6-1: USB disconnect, device number 2 [ 133.413852][ T5483] loop3: detected capacity change from 0 to 40427 [ 133.439760][ T5483] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 133.465333][ T5483] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 133.515546][ T5483] F2FS-fs (loop3): invalid crc value [ 133.544951][ T5483] F2FS-fs (loop3): Found nat_bits in checkpoint [ 133.696273][ T5519] syz.2.323 sent an empty control message without MSG_MORE. [ 133.780204][ T5483] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 133.795304][ T5483] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 133.926438][ C0] net_ratelimit: 4 callbacks suppressed [ 133.926457][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 134.324995][ T4240] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 134.534979][ T4240] usb 6-1: Using ep0 maxpacket: 32 [ 134.542132][ T4240] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 134.572094][ T4240] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.602977][ T4240] usb 6-1: config 0 descriptor?? [ 134.685170][ T4516] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 134.825321][ T4240] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 134.848706][ T4240] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 134.872340][ T4240] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 134.882050][ T4240] usb 6-1: media controller created [ 134.889754][ T4516] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.907525][ T4516] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.927874][ T4516] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 134.942855][ T4240] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.958886][ T4516] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 134.964934][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 134.978514][ T4516] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.005210][ T4516] usb 2-1: config 0 descriptor?? [ 135.440575][ T4516] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd [ 135.470801][ T4516] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving [ 135.508011][ T4516] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 135.805584][ T5583] loop1: detected capacity change from 0 to 512 [ 135.860257][ T5583] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 135.894956][ T4240] stb0899_attach: Driver disabled by Kconfig [ 135.901873][ T4240] az6027: no front-end attached [ 135.901873][ T4240] [ 135.923190][ T4240] az6027: usb out operation failed. (-71) [ 135.932774][ T5583] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 135.944645][ T5583] System zones: 1-12 [ 135.949244][ T4240] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 135.958847][ T5583] EXT4-fs (loop1): orphan cleanup on readonly fs [ 135.967112][ T5583] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.330: Inode bitmap for bg 0 marked uninitialized [ 135.990243][ T5588] loop3: detected capacity change from 0 to 512 [ 136.004942][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 136.016890][ T5583] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 136.028737][ T4240] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input9 [ 136.133828][ T4240] dvb-usb: schedule remote query interval to 400 msecs. [ 136.150786][ T5588] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 136.165836][ T5588] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.185283][ T4240] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 136.235948][ T4240] usb 6-1: USB disconnect, device number 3 [ 136.356478][ T5599] loop2: detected capacity change from 0 to 1024 [ 136.396406][ T4240] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 136.469189][ T5172] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 136.503775][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 137.044869][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 137.045266][ T4240] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 137.103750][ T26] audit: type=1326 audit(1739298481.328:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5614 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cad8cde9 code=0x7ffc0000 [ 137.105877][ T5618] loop3: detected capacity change from 0 to 128 [ 137.153475][ T26] audit: type=1326 audit(1739298481.358:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5614 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cad8cde9 code=0x7ffc0000 [ 137.196831][ T26] audit: type=1326 audit(1739298481.368:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5614 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7f19cad8cde9 code=0x7ffc0000 [ 137.219728][ T5618] loop3: detected capacity change from 0 to 512 [ 137.235230][ T5618] EXT4-fs: Ignoring removed bh option [ 137.240749][ T5618] ext4: Unknown parameter 'smackfsfloor' [ 137.286924][ T26] audit: type=1326 audit(1739298481.368:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5614 comm="syz.2.349" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cad8cde9 code=0x7ffc0000 [ 137.287294][ T4240] usb 6-1: Using ep0 maxpacket: 8 [ 137.388308][ T4240] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 137.422940][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 137.443902][ T4240] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 137.485152][ T4240] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.507093][ T4240] usb 6-1: config 0 descriptor?? [ 137.630315][ T4470] usb 2-1: USB disconnect, device number 5 [ 137.737848][ T4240] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 138.084866][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 138.263456][ T4329] usb 6-1: USB disconnect, device number 4 [ 138.481155][ T5645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.358'. [ 138.493054][ T5644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.359'. [ 139.073340][ T5659] process 'syz.3.365' launched './file0' with NULL argv: empty string added [ 139.126301][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 139.681935][ T5682] loop1: detected capacity change from 0 to 256 [ 139.714409][ T5683] netlink: 104 bytes leftover after parsing attributes in process `syz.5.374'. [ 139.739358][ T5682] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 139.841157][ T26] audit: type=1800 audit(1739298484.068:15): pid=5682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.373" name="file1" dev="loop1" ino=1048617 res=0 errno=0 [ 139.880956][ T5682] syz.1.373: attempt to access beyond end of device [ 139.880956][ T5682] loop1: rw=0, sector=34359738496, nr_sectors = 8 limit=256 [ 139.998538][ T26] audit: type=1326 audit(1739298484.228:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5686 comm="syz.3.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61fb38cde9 code=0x7ffc0000 [ 140.008465][ T5682] syz.1.373: attempt to access beyond end of device [ 140.008465][ T5682] loop1: rw=0, sector=136, nr_sectors = 3648 limit=256 [ 140.051053][ T5682] syz.1.373: attempt to access beyond end of device [ 140.051053][ T5682] loop1: rw=0, sector=3784, nr_sectors = 445 limit=256 [ 140.064687][ T26] audit: type=1326 audit(1739298484.288:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5686 comm="syz.3.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61fb38cde9 code=0x7ffc0000 [ 140.164870][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 140.265123][ T4240] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 140.483009][ T4240] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.511516][ T4240] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.531703][ T4240] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 140.553264][ T4240] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.574451][ T4240] usb 6-1: config 0 descriptor?? [ 141.018809][ T4240] cp2112 0003:10C4:EA90.0008: unknown main item tag 0x0 [ 141.032411][ T5724] loop3: detected capacity change from 0 to 64 [ 141.062925][ T4240] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 141.129234][ T41] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 141.205919][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 141.217689][ T4240] cp2112 0003:10C4:EA90.0008: Part Number: 0x82 Device Version: 0xFE [ 141.282327][ T5730] loop8: detected capacity change from 0 to 7 [ 141.300240][ T5730] Dev loop8: unable to read RDB block 7 [ 141.308068][ T5730] loop8: AHDI p1 p3 p4 [ 141.320362][ T5730] loop8: partition table partially beyond EOD, truncated [ 141.330720][ T5730] loop8: p1 start 975770946 is beyond EOD, truncated [ 141.342572][ T5730] loop8: p3 start 1600350066 is beyond EOD, truncated [ 141.347176][ T41] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.368942][ T41] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 141.384677][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.429082][ T41] usb 1-1: config 0 descriptor?? [ 141.463051][ T41] pwc: Askey VC010 type 2 USB webcam detected. [ 141.794842][ T2184] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 141.830561][ T4240] cp2112 0003:10C4:EA90.0008: error reading lock byte: -71 [ 141.846630][ T4240] usb 6-1: USB disconnect, device number 5 [ 141.865515][ T41] pwc: recv_control_msg error -32 req 02 val 2b00 [ 141.873833][ T41] pwc: recv_control_msg error -32 req 02 val 2700 [ 141.890083][ T41] pwc: recv_control_msg error -32 req 02 val 2c00 [ 141.978659][ T2184] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 141.990636][ T2184] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 142.000661][ T2184] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 142.009953][ T2184] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.021099][ T5738] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 142.108336][ T41] pwc: recv_control_msg error -71 req 04 val 1300 [ 142.122931][ T41] pwc: recv_control_msg error -71 req 04 val 1400 [ 142.131226][ T41] pwc: recv_control_msg error -71 req 02 val 2000 [ 142.141677][ T41] pwc: recv_control_msg error -71 req 02 val 2100 [ 142.150224][ T41] pwc: recv_control_msg error -71 req 04 val 1500 [ 142.157531][ T41] pwc: recv_control_msg error -71 req 02 val 2500 [ 142.164247][ T41] pwc: recv_control_msg error -71 req 02 val 2400 [ 142.172590][ T41] pwc: recv_control_msg error -71 req 02 val 2600 [ 142.179649][ T41] pwc: recv_control_msg error -71 req 02 val 2900 [ 142.186647][ T41] pwc: recv_control_msg error -71 req 02 val 2800 [ 142.193456][ T41] pwc: recv_control_msg error -71 req 04 val 1100 [ 142.201018][ T41] pwc: recv_control_msg error -71 req 04 val 1200 [ 142.210493][ T41] pwc: Registered as video103. [ 142.218147][ T41] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 142.238343][ T41] usb 1-1: USB disconnect, device number 7 [ 142.244866][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 142.252615][ T2184] usb 4-1: USB disconnect, device number 7 [ 142.950200][ T5754] loop2: detected capacity change from 0 to 32768 [ 143.140423][ T5754] XFS (loop2): Mounting V5 Filesystem [ 143.145538][ T5764] Process accounting resumed [ 143.262429][ T5754] XFS (loop2): Ending clean mount [ 143.284859][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 143.297277][ T5754] XFS (loop2): Quotacheck needed: Please wait. [ 143.332950][ T4327] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x1ca/0x290, xfs_agfl block 0x3 [ 143.361081][ T4327] XFS (loop2): Unmount and run xfs_repair [ 143.374584][ T4327] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 143.382325][ T4327] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 143.423828][ T4327] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 143.433425][ T4327] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 143.455943][ T5773] 9pnet: p9_errstr2errno: server reported unknown error słm6'tT [ 143.470632][ T4327] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 143.488997][ T4327] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 143.514875][ T4327] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 143.544807][ T4327] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 143.553724][ T4327] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 143.588197][ T4327] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x250/0x430" at daddr 0x3 len 1 error 74 [ 143.633531][ T5754] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 143.730604][ T5754] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x1ca/0x290, xfs_agfl block 0x3 [ 143.795805][ T5754] XFS (loop2): Unmount and run xfs_repair [ 143.801600][ T5754] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 143.834806][ T5754] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 143.854641][ T5754] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 143.880268][ T5754] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 143.910985][ T5754] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 143.943938][ T5754] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 143.972413][ T5754] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 144.004414][ T5754] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 144.033825][ T5754] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 144.060863][ T5781] loop5: detected capacity change from 0 to 2048 [ 144.065113][ T5754] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x250/0x430" at daddr 0x3 len 1 error 74 [ 144.121838][ T5781] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 144.161222][ T5754] XFS (loop2): page discard on page ffffea00014c49c0, inode 0x244a, pos 0. [ 144.284090][ T4470] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x1ca/0x290, xfs_agfl block 0x3 [ 144.324869][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 144.332291][ T4470] XFS (loop2): Unmount and run xfs_repair [ 144.343652][ T4470] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 144.369336][ T4470] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 144.402455][ T4470] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 144.439361][ T4470] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 144.448926][ T5783] loop1: detected capacity change from 0 to 8192 [ 144.466223][ T4470] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 144.491516][ T5783] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 144.515040][ T5783] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 144.524367][ T5783] REISERFS (device loop1): using ordered data mode [ 144.542429][ T4470] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 144.559422][ T5783] reiserfs: using flush barriers [ 144.575302][ T5783] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 144.596958][ T4470] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 144.603625][ T5783] REISERFS (device loop1): checking transaction log (loop1) [ 144.614578][ T4470] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 144.641574][ T5783] REISERFS (device loop1): Using r5 hash to sort names [ 144.651056][ T5783] REISERFS (device loop1): using 3.5.x disk format [ 144.654268][ T4470] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 144.681558][ T5783] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 144.690999][ T5754] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x250/0x430" at daddr 0x3 len 1 error 74 [ 144.795497][ T5783] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3717, free_space(entry_count) 2 [ 144.825495][ T5783] REISERFS error (device loop1): vs-5150 search_by_key: invalid format found in block 532. Fsck? [ 144.833656][ T2184] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x1ca/0x290, xfs_agfl block 0x3 [ 144.838078][ T5783] REISERFS (device loop1): Remounting filesystem read-only [ 144.863145][ T2184] XFS (loop2): Unmount and run xfs_repair [ 144.878382][ T2184] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 144.888651][ T2184] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 144.903598][ T2184] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 144.914307][ T2184] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 144.929534][ T2184] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 144.939900][ T2184] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 144.955107][ T2184] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 144.986036][ T2184] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 145.005503][ T2184] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 145.025233][ T46] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x250/0x430" at daddr 0x3 len 1 error 74 [ 145.041307][ T46] XFS (loop2): page discard on page ffffea00014c49c0, inode 0x244a, pos 0. [ 145.105557][ T4261] XFS (loop2): Unmounting Filesystem [ 145.364884][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 145.497411][ T5790] loop3: detected capacity change from 0 to 32768 [ 145.593050][ T5790] [ 145.593050][ T5790] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 145.593050][ T5790] [ 145.773708][ T5790] read_mapping_page failed! [ 145.794613][ T5790] ERROR: (device loop3): txCommit: [ 145.794613][ T5790] [ 146.065606][ T4257] [ 146.065606][ T4257] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.065606][ T4257] [ 146.095027][ T4257] [ 146.095027][ T4257] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 146.095027][ T4257] [ 146.404873][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 146.557975][ T5822] loop2: detected capacity change from 0 to 512 [ 146.581369][ T5822] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 146.646573][ T5822] EXT4-fs (loop2): 1 truncate cleaned up [ 146.667388][ T5822] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 146.705026][ T5830] 9pnet: p9_errstr2errno: server reported unknown error @01777777777777777777777 [ 146.769743][ T5800] loop5: detected capacity change from 0 to 40427 [ 146.849100][ T5800] F2FS-fs (loop5): invalid crc value [ 146.911139][ T5800] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 146.974376][ T4261] EXT4-fs (loop2): unmounting filesystem. [ 146.994110][ T5802] loop1: detected capacity change from 0 to 40427 [ 147.090132][ T5802] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x3ffff [ 147.140971][ T5802] F2FS-fs (loop1): invalid crc value [ 147.197271][ T5802] F2FS-fs (loop1): Found nat_bits in checkpoint [ 147.238035][ T5800] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 147.368787][ T5800] syz.5.416: attempt to access beyond end of device [ 147.368787][ T5800] loop5: rw=524288, sector=77824, nr_sectors = 200 limit=40427 [ 147.427611][ T5800] syz.5.416: attempt to access beyond end of device [ 147.427611][ T5800] loop5: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 147.445015][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 147.447824][ T5802] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 147.485732][ T5800] syz.5.416: attempt to access beyond end of device [ 147.485732][ T5800] loop5: rw=0, sector=77824, nr_sectors = 8 limit=40427 [ 147.548191][ T5800] syz.5.416: attempt to access beyond end of device [ 147.548191][ T5800] loop5: rw=34817, sector=77824, nr_sectors = 56 limit=40427 [ 147.603578][ T5802] F2FS-fs (loop1) : inject slab alloc in f2fs_kmem_cache_alloc of __vfs_getxattr+0x3e0/0x410 [ 147.768670][ T5863] loop2: detected capacity change from 0 to 164 [ 147.793327][ T4249] syz-executor: attempt to access beyond end of device [ 147.793327][ T4249] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 147.807741][ T5220] syz-executor: attempt to access beyond end of device [ 147.807741][ T5220] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 147.833837][ T5863] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 147.912325][ T5863] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 148.484892][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 148.573501][ T4327] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.822854][ T4327] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.963863][ T4327] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.128189][ T4327] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.215101][ T5440] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 149.221896][ T5879] loop5: detected capacity change from 0 to 8192 [ 149.278708][ T5879] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 149.404865][ T5440] usb 3-1: Using ep0 maxpacket: 8 [ 149.414447][ T5440] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 149.473904][ T5440] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 149.513811][ T5440] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.525164][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 149.561620][ T5440] usb 3-1: config 0 descriptor?? [ 149.793425][ T5440] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 149.909914][ T4262] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.928983][ T4262] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.938042][ T4262] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.949269][ T4262] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.958625][ T4262] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 149.968517][ T4262] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 150.157456][ T5912] hugetlbfs: syz.3.444 (5912): Using mlock ulimits for SHM_HUGETLB is obsolete [ 150.292101][ T4329] usb 3-1: USB disconnect, device number 8 [ 150.564862][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 150.647044][ T5926] loop3: detected capacity change from 0 to 512 [ 150.655569][ T5926] EXT4-fs (loop3): Test dummy encryption mode enabled [ 150.662475][ T5926] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 150.720192][ T5926] EXT4-fs error (device loop3): ext4_orphan_get:1426: comm syz.3.448: bad orphan inode 131083 [ 150.732614][ T5926] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 151.016207][ T5935] loop5: detected capacity change from 0 to 512 [ 151.080767][ T4257] EXT4-fs (loop3): unmounting filesystem. [ 151.191624][ T5935] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 151.216168][ T5901] chnl_net:caif_netlink_parms(): no params data found [ 151.274862][ T5935] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 151.456786][ T5935] EXT4-fs (loop5): shut down requested (2) [ 151.604855][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 151.624018][ T5220] EXT4-fs (loop5): unmounting filesystem. [ 152.004942][ T4265] Bluetooth: hci1: command 0x0409 tx timeout [ 152.078425][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.105643][ T2184] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 152.105737][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.151176][ T5901] device bridge_slave_0 entered promiscuous mode [ 152.212431][ T4327] device hsr_slave_0 left promiscuous mode [ 152.235045][ T4327] device hsr_slave_1 left promiscuous mode [ 152.242356][ T5978] loop3: detected capacity change from 0 to 1764 [ 152.258042][ T4327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.291315][ T4327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.304879][ T2184] usb 2-1: Using ep0 maxpacket: 8 [ 152.313613][ T2184] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 152.326092][ T4327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.371690][ T4327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.372489][ T2184] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 152.429583][ T2184] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.463749][ T2184] usb 2-1: config 0 descriptor?? [ 152.481111][ T4327] device bridge_slave_1 left promiscuous mode [ 152.497952][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.523217][ T4327] device bridge_slave_0 left promiscuous mode [ 152.531916][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.644849][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 152.717861][ T2184] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 152.734097][ T4327] device veth1_macvtap left promiscuous mode [ 152.754049][ T4327] device veth0_macvtap left promiscuous mode [ 152.774350][ T4327] device veth1_vlan left promiscuous mode [ 152.781950][ T4327] device veth0_vlan left promiscuous mode [ 153.217276][ T41] usb 2-1: USB disconnect, device number 6 [ 153.694622][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 153.959766][ T4327] team0 (unregistering): Port device team_slave_1 removed [ 154.085029][ T4265] Bluetooth: hci1: command 0x041b tx timeout [ 154.114083][ T4327] team0 (unregistering): Port device team_slave_0 removed [ 154.303260][ T6031] loop1: detected capacity change from 0 to 1024 [ 154.317940][ T6031] EXT4-fs: Ignoring removed nomblk_io_submit option [ 154.349179][ T4327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.400194][ T6022] loop5: detected capacity change from 0 to 32768 [ 154.458330][ T4327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.468770][ T6031] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 154.509181][ T6022] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 154.618112][ T26] audit: type=1800 audit(1739298498.848:18): pid=6022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.478" name="bus" dev="loop5" ino=17058 res=0 errno=0 [ 154.724927][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 154.745621][ T6031] loop1: detected capacity change from 1024 to 0 [ 154.789931][ T5220] ocfs2: Unmounting device (7,5) on (node local) [ 154.920782][ C0] I/O error, dev loop1, sector 32 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 154.981426][ T6042] loop2: detected capacity change from 0 to 1024 [ 155.012509][ T6042] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 155.030125][ T6042] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.056275][ C1] I/O error, dev loop1, sector 10 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 155.066176][ C1] I/O error, dev loop1, sector 12 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2 [ 155.075058][ T4249] EXT4-fs error (device loop1): ext4_get_inode_loc:4644: inode #2: block 5: comm syz-executor: unable to read itable block [ 155.135750][ T11] loop: Write error at byte offset 9223372036854776831, length 1024. [ 155.165828][ T4261] EXT4-fs (loop2): unmounting filesystem. [ 155.221348][ C1] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 155.230985][ C1] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 155.241238][ C1] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 155.249788][ T4249] EXT4-fs (loop1): I/O error while writing superblock [ 155.268737][ T4249] EXT4-fs (loop1): Remounting filesystem read-only [ 155.275473][ T4249] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5885: IO failure [ 155.284607][ T11] loop: Write error at byte offset 9223372036854776831, length 1024. [ 155.304592][ C1] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 155.314184][ C1] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 155.323684][ C1] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 155.332822][ T4249] EXT4-fs (loop1): I/O error while writing superblock [ 155.361477][ T4249] EXT4-fs (loop1): Remounting filesystem read-only [ 155.368141][ T4249] EXT4-fs error (device loop1): ext4_dirty_inode:6089: inode #2: comm syz-executor: mark_inode_dirty error [ 155.399338][ T46] loop: Write error at byte offset 9223372036854776831, length 1024. [ 155.411484][ C0] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 155.421144][ C0] I/O error, dev loop1, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 155.430649][ C0] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 155.439449][ T4249] EXT4-fs (loop1): I/O error while writing superblock [ 155.446675][ T4249] EXT4-fs (loop1): Remounting filesystem read-only [ 155.461819][ C1] I/O error, dev loop1, sector 12 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2 [ 155.472715][ T46] EXT4-fs error (device loop1): __ext4_get_inode_loc_noinmem:4629: inode #2: block 5: comm kworker/u4:3: unable to read itable block [ 155.521375][ T5209] loop: Write error at byte offset 9223372036854776831, length 1024. [ 155.542882][ C1] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 155.551243][ T46] EXT4-fs (loop1): I/O error while writing superblock [ 155.572550][ T46] EXT4-fs (loop1): Remounting filesystem read-only [ 155.600284][ T4249] EXT4-fs (loop1): unmounting filesystem. [ 155.629965][ T4305] loop: Write error at byte offset 9223372036854776831, length 1024. [ 155.649498][ C0] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 155.658755][ T56] loop: Write error at byte offset 9223372036854841343, length 1024. [ 155.686517][ C1] Buffer I/O error on dev loop1, logical block 64, lost sync page write [ 155.769704][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 155.782770][ T6050] loop2: detected capacity change from 0 to 2048 [ 155.835095][ T6050] loop2: p1 < > p4 [ 155.850653][ T6050] loop2: p4 size 8388608 extends beyond EOD, truncated [ 156.032935][ T6057] loop5: detected capacity change from 0 to 2048 [ 156.107673][ T6057] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 156.165093][ T4265] Bluetooth: hci1: command 0x040f tx timeout [ 156.410546][ T6062] loop2: detected capacity change from 0 to 512 [ 156.426023][ T6062] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 156.458742][ T4327] bond0 (unregistering): Released all slaves [ 156.514372][ T6062] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 156.595642][ T6062] EXT4-fs (loop2): 1 truncate cleaned up [ 156.601451][ T6062] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 156.672379][ T6055] loop3: detected capacity change from 0 to 32768 [ 156.695857][ T6055] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.490 (6055) [ 156.732088][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.739651][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.750443][ T5901] device bridge_slave_1 entered promiscuous mode [ 156.785657][ T6055] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 156.804904][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 156.832186][ T6055] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 156.842868][ T4261] EXT4-fs (loop2): unmounting filesystem. [ 156.876316][ T6055] BTRFS info (device loop3): using free space tree [ 157.158812][ T5901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.184377][ T6055] BTRFS info (device loop3): enabling ssd optimizations [ 157.217500][ T5901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.368703][ T5901] team0: Port device team_slave_0 added [ 157.412458][ T5901] team0: Port device team_slave_1 added [ 157.529247][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.550184][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.654805][ T5901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.703876][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.746820][ T4257] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 157.784819][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.844936][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 157.897424][ T5901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.084228][ T6075] loop2: detected capacity change from 0 to 32768 [ 158.187001][ T6075] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 158.244862][ T4265] Bluetooth: hci1: command 0x0419 tx timeout [ 158.271499][ T6114] loop5: detected capacity change from 0 to 1024 [ 158.279263][ T6114] EXT4-fs: Ignoring removed nomblk_io_submit option [ 158.290695][ T26] audit: type=1800 audit(1739298502.518:19): pid=6075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.495" name="bus" dev="loop2" ino=17058 res=0 errno=0 [ 158.398579][ T5901] device hsr_slave_0 entered promiscuous mode [ 158.416007][ T5901] device hsr_slave_1 entered promiscuous mode [ 158.435187][ T6114] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 158.509808][ T5901] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.566781][ T5901] Cannot create hsr debugfs directory [ 158.567137][ T4265] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 158.586392][ T4265] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 158.594678][ T4265] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 158.606110][ T4265] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 158.623596][ T4265] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 158.635511][ T4265] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 158.641760][ T4261] ocfs2: Unmounting device (7,2) on (node local) [ 158.884862][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 158.968419][ T5220] EXT4-fs (loop5): unmounting filesystem. [ 159.185479][ T4327] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.402911][ T4327] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.500946][ T6143] loop2: detected capacity change from 0 to 2048 [ 159.578743][ T6143] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 159.622665][ T4327] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.666190][ T6148] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 159.679498][ T6143] syz.2.505: attempt to access beyond end of device [ 159.679498][ T6143] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048 [ 159.728577][ T6151] loop5: detected capacity change from 0 to 164 [ 159.799419][ T6151] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 159.842426][ T4327] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.870226][ T6151] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 159.924975][ C0] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 160.271862][ T5901] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 160.306311][ T5901] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 160.364187][ T5901] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 160.392649][ T6166] loop2: detected capacity change from 0 to 2048 [ 160.420387][ T5901] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 160.515861][ T6121] chnl_net:caif_netlink_parms(): no params data found [ 160.526975][ T6166] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 160.667700][ T4327] tipc: Disabling bearer [ 160.669219][ T6173] loop3: detected capacity change from 0 to 2048 [ 160.698241][ T4327] tipc: Left network mode [ 160.725161][ T4262] Bluetooth: hci0: command 0x0409 tx timeout [ 160.898157][ T4261] EXT4-fs (loop2): unmounting filesystem. [ 160.908465][ T6173] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 161.111028][ T6121] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.123648][ T6121] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.137701][ T6121] device bridge_slave_0 entered promiscuous mode [ 161.157397][ T5901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.204596][ T6121] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.228494][ T6121] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.238932][ T6160] loop5: detected capacity change from 0 to 32768 [ 161.253871][ T6121] device bridge_slave_1 entered promiscuous mode [ 161.318818][ T26] audit: type=1326 audit(1739298505.548:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cad8cde9 code=0x7ffc0000 [ 161.364569][ T5307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 161.381143][ T6160] XFS (loop5): Mounting V5 Filesystem [ 161.390599][ T5307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 161.418873][ T26] audit: type=1326 audit(1739298505.548:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cad8cde9 code=0x7ffc0000 [ 161.458910][ T26] audit: type=1326 audit(1739298505.548:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f19cad8cde9 code=0x7ffc0000 [ 161.496741][ T6121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.507313][ T26] audit: type=1326 audit(1739298505.548:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cad8cde9 code=0x7ffc0000 [ 161.530075][ T26] audit: type=1326 audit(1739298505.548:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cad8cde9 code=0x7ffc0000 [ 161.560127][ T26] audit: type=1326 audit(1739298505.558:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19cad8cde9 code=0x7ffc0000 [ 161.594862][ T26] audit: type=1326 audit(1739298505.558:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cad8cde9 code=0x7ffc0000 [ 161.619330][ T6121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.653722][ T26] audit: type=1326 audit(1739298505.558:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cad8cde9 code=0x7ffc0000 [ 161.659138][ T6160] XFS (loop5): Ending clean mount [ 161.713256][ T26] audit: type=1326 audit(1739298505.558:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f19cad8b750 code=0x7ffc0000 [ 161.749658][ T5901] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.789256][ T6121] team0: Port device team_slave_0 added [ 161.795128][ T26] audit: type=1326 audit(1739298505.558:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6192 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f19cad8b750 code=0x7ffc0000 [ 161.822381][ T6201] loop2: detected capacity change from 0 to 2048 [ 161.883608][ T6201] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 161.954694][ T6201] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 161.956594][ T6121] team0: Port device team_slave_1 added [ 161.995024][ T6201] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 162.038637][ T6209] input: syz0 as /devices/virtual/input/input11 [ 162.075647][ T6201] EXT4-fs (loop2): This should not happen!! Data will be lost [ 162.075647][ T6201] [ 162.095034][ T6201] EXT4-fs (loop2): Total free blocks count 0 [ 162.135017][ T6201] EXT4-fs (loop2): Free/Dirty block details [ 162.153239][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 162.175019][ T6201] EXT4-fs (loop2): free_blocks=2415919104 [ 162.181064][ T6201] EXT4-fs (loop2): dirty_blocks=16 [ 162.183625][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 162.196843][ T6201] EXT4-fs (loop2): Block reservation details [ 162.218716][ T6201] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 162.225263][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.232435][ T4323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.255401][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 162.267034][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 162.276105][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 162.287382][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.294543][ T4323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.309483][ T6207] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 16 with error 28 [ 162.389520][ T5220] XFS (loop5): Unmounting Filesystem [ 162.459619][ T6121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.467757][ T6121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.560629][ T6121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.657683][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 162.676717][ T6121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.683745][ T6121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.761861][ T6121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.805474][ T4262] Bluetooth: hci0: command 0x041b tx timeout [ 162.819697][ T6217] device pim6reg1 entered promiscuous mode [ 163.017352][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 163.092099][ T6121] device hsr_slave_0 entered promiscuous mode [ 163.145542][ T6121] device hsr_slave_1 entered promiscuous mode [ 163.161561][ T6121] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.210825][ T6121] Cannot create hsr debugfs directory [ 163.253237][ T6239] loop3: detected capacity change from 0 to 164 [ 163.278945][ T6239] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 163.290342][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 163.355213][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 163.406245][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 163.424308][ T6239] rock: corrupted directory entry. extent=28, offset=0, size=16777216 [ 163.476356][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 163.486109][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 163.513482][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 163.547799][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 163.561888][ T6245] loop2: detected capacity change from 0 to 512 [ 163.589324][ T6245] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 163.673422][ T6245] EXT4-fs (loop2): 1 orphan inode deleted [ 163.683013][ T6245] EXT4-fs (loop2): 1 truncate cleaned up [ 163.689199][ T6245] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 163.712780][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 163.747298][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 163.817941][ T5901] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 163.831393][ T6245] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 163.892509][ T6245] EXT4-fs (loop2): Remounting filesystem read-only [ 164.110001][ T4261] EXT4-fs (loop2): unmounting filesystem. [ 164.341565][ T6267] loop2: detected capacity change from 0 to 16 [ 164.389158][ T6267] erofs: (device loop2): mounted with root inode @ nid 36. [ 164.503869][ T4327] device hsr_slave_0 left promiscuous mode [ 164.525362][ T4327] device hsr_slave_1 left promiscuous mode [ 164.537442][ T4327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.591577][ T4327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.625687][ T4327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.633160][ T4327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.751839][ T4327] device veth1_macvtap left promiscuous mode [ 164.766583][ T4327] device veth0_macvtap left promiscuous mode [ 164.781151][ T4327] device veth1_vlan left promiscuous mode [ 164.795394][ T4327] device veth0_vlan left promiscuous mode [ 164.884946][ T4262] Bluetooth: hci0: command 0x040f tx timeout [ 165.269070][ T6294] netlink: 12 bytes leftover after parsing attributes in process `syz.2.537'. [ 165.761057][ T4262] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 166.111916][ T4327] team0 (unregistering): Port device team_slave_1 removed [ 166.205023][ T4327] team0 (unregistering): Port device team_slave_0 removed [ 166.267636][ T4327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.333614][ T4327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.964975][ T4262] Bluetooth: hci0: command 0x0419 tx timeout [ 167.033118][ T4327] bond0 (unregistering): Released all slaves [ 167.254567][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.263018][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.291424][ T5901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.500511][ T6121] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 167.575143][ T6121] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 167.607905][ T6121] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 167.636107][ T6121] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 167.935105][ T6121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.985176][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 168.001230][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 168.058640][ T6121] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.097642][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 168.128967][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 168.172789][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.179990][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.199687][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 168.208783][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 168.227061][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.234232][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.288452][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.333494][ T6335] loop2: detected capacity change from 0 to 8192 [ 168.381886][ T6335] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 168.405123][ T6335] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 168.414510][ T6335] REISERFS (device loop2): using ordered data mode [ 168.419394][ T4327] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.421693][ T6335] reiserfs: using flush barriers [ 168.451323][ T6335] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 168.480982][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.485401][ T6335] REISERFS (device loop2): checking transaction log (loop2) [ 168.496007][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 168.529193][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 168.579195][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 168.662088][ T6335] REISERFS (device loop2): Using tea hash to sort names [ 168.675785][ T4266] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 168.681213][ T6335] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 168.692951][ T4266] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 168.703465][ T4266] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 168.716630][ T4266] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 168.724350][ T4266] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 168.726604][ T4327] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.742752][ T4266] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 168.775636][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.791684][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.802028][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.812372][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.821008][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.829988][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 168.830531][ T6335] REISERFS warning: reiserfs-5082 is_leaf: free space seems wrong: level=1, nr_items=2, free_space=65532 rdkey [ 168.839305][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 168.867575][ T6335] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 540. Fsck? [ 168.878955][ T6335] REISERFS (device loop2): Remounting filesystem read-only [ 168.887813][ T6335] REISERFS error (device loop2): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 5 0x0 SD] stat data [ 168.925602][ T4327] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.941082][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.950990][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.963559][ T6121] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 169.017527][ T4327] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.043819][ T5901] device veth0_vlan entered promiscuous mode [ 169.061102][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 169.072659][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.127070][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.141022][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.187380][ T5901] device veth1_vlan entered promiscuous mode [ 169.338536][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 169.357670][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 169.398256][ T5901] device veth0_macvtap entered promiscuous mode [ 169.473371][ T5901] device veth1_macvtap entered promiscuous mode [ 169.529327][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 169.538645][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 169.548729][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 169.557181][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 169.570151][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.582288][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.597984][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.612084][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.625527][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.641862][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.655339][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.684909][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 169.693682][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 169.719366][ T6121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.756941][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.794089][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.833360][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.843982][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.848067][ T4266] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 169.861316][ T5901] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.862713][ T4266] Bluetooth: hci3: Injecting HCI hardware error event [ 169.884613][ T4262] Bluetooth: hci3: hardware error 0x00 [ 169.897273][ T5901] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.910738][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.950523][ T5901] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.965436][ T5901] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.974215][ T5901] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.010693][ T5901] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.052178][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 170.066932][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 170.300791][ T6345] chnl_net:caif_netlink_parms(): no params data found [ 170.444638][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.460174][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.510933][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 170.573177][ T4305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.582538][ T4305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.667176][ T5209] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 170.679906][ T5209] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 170.691186][ T5209] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 170.705088][ T6345] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.712708][ T6345] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.733077][ T6345] device bridge_slave_0 entered promiscuous mode [ 170.791188][ T6121] device veth0_vlan entered promiscuous mode [ 170.805284][ T4266] Bluetooth: hci2: command 0x0409 tx timeout [ 170.827955][ T6345] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.857633][ T6345] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.916400][ T6345] device bridge_slave_1 entered promiscuous mode [ 170.951473][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 170.981546][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.000614][ T6121] device veth1_vlan entered promiscuous mode [ 171.028979][ T6391] loop5: detected capacity change from 0 to 2048 [ 171.082043][ T6391] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 171.137017][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.142342][ T26] kauditd_printk_skb: 8 callbacks suppressed [ 171.142359][ T26] audit: type=1800 audit(1739302610.370:38): pid=6391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.557" name="file1" dev="loop5" ino=1346 res=0 errno=0 [ 171.146666][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.181284][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 171.267261][ T6345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.391521][ T6345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.422928][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 171.456515][ T35] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 171.565623][ T6121] device veth0_macvtap entered promiscuous mode [ 171.610190][ T6345] team0: Port device team_slave_0 added [ 171.690802][ T6402] loop2: detected capacity change from 0 to 4096 [ 171.717908][ T6121] device veth1_macvtap entered promiscuous mode [ 171.730644][ T6345] team0: Port device team_slave_1 added [ 171.812787][ T6405] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 171.834317][ T6121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.901705][ T6121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.947026][ T6121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.973909][ T6402] syz.2.549 (6402) used greatest stack depth: 18768 bytes left [ 171.988401][ T6121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.005108][ T4262] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 172.014150][ T6121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.054834][ T6121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.091783][ T6121] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.112166][ T6121] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.129135][ T6404] loop6: detected capacity change from 0 to 32768 [ 172.144659][ T6121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.246643][ T6404] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 172.248175][ T26] audit: type=1800 audit(1739302611.480:39): pid=6398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.557" name="file1" dev="loop5" ino=1346 res=0 errno=0 [ 172.280035][ T6398] syz.5.557 (6398) used greatest stack depth: 18624 bytes left [ 172.321064][ T26] audit: type=1800 audit(1739302611.550:40): pid=6404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.548" name="bus" dev="loop6" ino=17058 res=0 errno=0 [ 172.354128][ T6404] [ 172.356520][ T6404] ====================================================== [ 172.363673][ T6404] WARNING: possible circular locking dependency detected [ 172.370708][ T6404] 6.1.128-syzkaller #0 Not tainted [ 172.375903][ T6404] ------------------------------------------------------ [ 172.382917][ T6404] syz.6.548/6404 is trying to acquire lock: [ 172.388974][ T6404] ffff88823bdde660 (&oi->ip_alloc_sem/1){+.+.}-{3:3}, at: ocfs2_remap_file_range+0x488/0x8d0 [ 172.399270][ T6404] [ 172.399270][ T6404] but task is already holding lock: [ 172.406671][ T6404] ffff888059808660 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_remap_file_range+0x45c/0x8d0 [ 172.417673][ T6404] [ 172.417673][ T6404] which lock already depends on the new lock. [ 172.417673][ T6404] [ 172.428159][ T6404] [ 172.428159][ T6404] the existing dependency chain (in reverse order) is: [ 172.437166][ T6404] [ 172.437166][ T6404] -> #2 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 172.445956][ T6404] lock_acquire+0x1f8/0x5a0 [ 172.451040][ T6404] down_read+0xad/0xa30 [ 172.455723][ T6404] ocfs2_read_virt_blocks+0x2dc/0xab0 [ 172.461641][ T6404] ocfs2_find_entry+0x436/0x28c0 [ 172.467113][ T6404] ocfs2_find_files_on_disk+0x10d/0x3a0 [ 172.473202][ T6404] ocfs2_lookup_ino_from_name+0xad/0x1e0 [ 172.479361][ T6404] ocfs2_get_system_file_inode+0x314/0x7b0 [ 172.485700][ T6404] ocfs2_init_global_system_inodes+0x328/0x720 [ 172.492398][ T6404] ocfs2_fill_super+0x2f72/0x5720 [ 172.497947][ T6404] mount_bdev+0x2c9/0x3f0 [ 172.502897][ T6404] legacy_get_tree+0xeb/0x180 [ 172.508133][ T6404] vfs_get_tree+0x88/0x270 [ 172.513089][ T6404] do_new_mount+0x2ba/0xb40 [ 172.518152][ T6404] __se_sys_mount+0x2d5/0x3c0 [ 172.523354][ T6404] do_syscall_64+0x3b/0xb0 [ 172.528329][ T6404] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.534792][ T6404] [ 172.534792][ T6404] -> #1 (&osb->system_file_mutex){+.+.}-{3:3}: [ 172.543170][ T6404] lock_acquire+0x1f8/0x5a0 [ 172.548241][ T6404] __mutex_lock+0x132/0xd80 [ 172.553283][ T6404] ocfs2_get_system_file_inode+0x1a1/0x7b0 [ 172.559664][ T6404] ocfs2_reserve_suballoc_bits+0x167/0x5190 [ 172.566110][ T6404] ocfs2_reserve_new_metadata_blocks+0x418/0x9b0 [ 172.573009][ T6404] ocfs2_create_refcount_tree+0x33c/0x15b0 [ 172.579339][ T6404] ocfs2_reflink_remap_blocks+0x2f2/0x1f20 [ 172.585678][ T6404] ocfs2_remap_file_range+0x5f2/0x8d0 [ 172.591602][ T6404] vfs_copy_file_range+0x10d6/0x1640 [ 172.597445][ T6404] __se_sys_copy_file_range+0x3ea/0x5d0 [ 172.603533][ T6404] do_syscall_64+0x3b/0xb0 [ 172.608481][ T6404] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.614922][ T6404] [ 172.614922][ T6404] -> #0 (&oi->ip_alloc_sem/1){+.+.}-{3:3}: [ 172.622940][ T6404] validate_chain+0x1661/0x5950 [ 172.628317][ T6404] __lock_acquire+0x125b/0x1f80 [ 172.633698][ T6404] lock_acquire+0x1f8/0x5a0 [ 172.638757][ T6404] down_write_nested+0x39/0x60 [ 172.644047][ T6404] ocfs2_remap_file_range+0x488/0x8d0 [ 172.649942][ T6404] vfs_copy_file_range+0x10d6/0x1640 [ 172.655755][ T6404] __se_sys_copy_file_range+0x3ea/0x5d0 [ 172.661838][ T6404] do_syscall_64+0x3b/0xb0 [ 172.666786][ T6404] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 172.673227][ T6404] [ 172.673227][ T6404] other info that might help us debug this: [ 172.673227][ T6404] [ 172.683491][ T6404] Chain exists of: [ 172.683491][ T6404] &oi->ip_alloc_sem/1 --> &osb->system_file_mutex --> &ocfs2_file_ip_alloc_sem_key [ 172.683491][ T6404] [ 172.698808][ T6404] Possible unsafe locking scenario: [ 172.698808][ T6404] [ 172.706352][ T6404] CPU0 CPU1 [ 172.711738][ T6404] ---- ---- [ 172.717113][ T6404] lock(&ocfs2_file_ip_alloc_sem_key); [ 172.722679][ T6404] lock(&osb->system_file_mutex); [ 172.730310][ T6404] lock(&ocfs2_file_ip_alloc_sem_key); [ 172.738476][ T6404] lock(&oi->ip_alloc_sem/1); [ 172.743265][ T6404] [ 172.743265][ T6404] *** DEADLOCK *** [ 172.743265][ T6404] [ 172.751431][ T6404] 4 locks held by syz.6.548/6404: [ 172.756469][ T6404] #0: ffff8880505c8460 (sb_writers#27){.+.+}-{0:0}, at: vfs_copy_file_range+0x981/0x1640 [ 172.766414][ T6404] #1: ffff8880598089c8 (&sb->s_type->i_mutex_key#32){+.+.}-{3:3}, at: lock_two_nondirectories+0xde/0x130 [ 172.777783][ T6404] #2: ffff88823bdde9c8 (&sb->s_type->i_mutex_key#32/4){+.+.}-{3:3}, at: ocfs2_reflink_inodes_lock+0x164/0xec0 [ 172.789544][ T6404] #3: ffff888059808660 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_remap_file_range+0x45c/0x8d0 [ 172.800974][ T6404] [ 172.800974][ T6404] stack backtrace: [ 172.806971][ T6404] CPU: 1 PID: 6404 Comm: syz.6.548 Not tainted 6.1.128-syzkaller #0 [ 172.814976][ T6404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 172.825043][ T6404] Call Trace: [ 172.828330][ T6404] [ 172.831256][ T6404] dump_stack_lvl+0x1e3/0x2cb [ 172.836022][ T6404] ? nf_tcp_handle_invalid+0x642/0x642 [ 172.841482][ T6404] ? print_circular_bug+0x12b/0x1a0 [ 172.846686][ T6404] check_noncircular+0x2fa/0x3b0 [ 172.851639][ T6404] ? add_chain_block+0x850/0x850 [ 172.856572][ T6404] ? queued_spin_lock_slowpath+0x42/0x50 [ 172.862216][ T6404] ? lockdep_lock+0x1a7/0x2a0 [ 172.866916][ T6404] ? _find_first_zero_bit+0xd0/0x100 [ 172.872223][ T6404] validate_chain+0x1661/0x5950 [ 172.877168][ T6404] ? reacquire_held_locks+0x660/0x660 [ 172.882567][ T6404] ? __lock_acquire+0x1f80/0x1f80 [ 172.887633][ T6404] ? look_up_lock_class+0x77/0x140 [ 172.888666][ T4262] Bluetooth: hci2: command 0x041b tx timeout [ 172.892763][ T6404] ? register_lock_class+0x100/0x990 [ 172.904308][ T6404] ? is_dynamic_key+0x260/0x260 [ 172.909273][ T6404] ? mark_lock+0x9a/0x340 [ 172.913662][ T6404] __lock_acquire+0x125b/0x1f80 [ 172.918550][ T6404] lock_acquire+0x1f8/0x5a0 [ 172.923065][ T6404] ? ocfs2_remap_file_range+0x488/0x8d0 [ 172.928614][ T6404] ? read_lock_is_recursive+0x10/0x10 [ 172.933998][ T6404] ? __might_sleep+0xb0/0xb0 [ 172.938588][ T6404] ? rwsem_write_trylock+0x166/0x210 [ 172.943878][ T6404] ? clear_nonspinnable+0x60/0x60 [ 172.948932][ T6404] down_write_nested+0x39/0x60 [ 172.953903][ T6404] ? ocfs2_remap_file_range+0x488/0x8d0 [ 172.959488][ T6404] ocfs2_remap_file_range+0x488/0x8d0 [ 172.964882][ T6404] ? ocfs2_fallocate+0x350/0x350 [ 172.969846][ T6404] ? rcu_read_lock_any_held+0xb3/0x160 [ 172.975310][ T6404] ? rcu_read_lock_bh_held+0x110/0x110 [ 172.980771][ T6404] ? end_current_label_crit_section+0x147/0x170 [ 172.987033][ T6404] ? ocfs2_fallocate+0x350/0x350 [ 172.992084][ T6404] vfs_copy_file_range+0x10d6/0x1640 [ 172.997389][ T6404] ? generic_copy_file_range+0x210/0x210 [ 173.003030][ T6404] ? __fget_files+0x28/0x4a0 [ 173.007637][ T6404] ? __fdget+0x182/0x210 [ 173.011879][ T6404] __se_sys_copy_file_range+0x3ea/0x5d0 [ 173.017455][ T6404] ? __x64_sys_copy_file_range+0xf0/0xf0 [ 173.023087][ T6404] ? syscall_enter_from_user_mode+0x2e/0x230 [ 173.029071][ T6404] ? lockdep_hardirqs_on+0x94/0x130 [ 173.034279][ T6404] ? __x64_sys_copy_file_range+0x1d/0xf0 [ 173.039949][ T6404] do_syscall_64+0x3b/0xb0 [ 173.044361][ T6404] ? clear_bhb_loop+0x45/0xa0 [ 173.049049][ T6404] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 173.054964][ T6404] RIP: 0033:0x7f96b738cde9 [ 173.059405][ T6404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.079045][ T6404] RSP: 002b:00007f96b8122038 EFLAGS: 00000246 ORIG_RAX: 0000000000000146 [ 173.087490][ T6404] RAX: ffffffffffffffda RBX: 00007f96b75a5fa0 RCX: 00007f96b738cde9 [ 173.095483][ T6404] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000006 [ 173.103460][ T6404] RBP: 00007f96b740e2a0 R08: ffffffffa003e459 R09: 0700000000000000 [ 173.111519][ T6404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 173.119513][ T6404] R13: 0000000000000000 R14: 00007f96b75a5fa0 R15: 00007ffd77a52908 [ 173.127518][ T6404] [ 173.312215][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 173.320146][ T5901] ocfs2: Unmounting device (7,6) on (node local) [ 173.347178][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 173.415983][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 173.445743][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 173.827789][ T4327] device hsr_slave_0 left promiscuous mode [ 173.855822][ T4327] device hsr_slave_1 left promiscuous mode [ 173.862346][ T4327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.892196][ T4327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.912758][ T4327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.920641][ T4327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.928814][ T4327] device bridge_slave_1 left promiscuous mode [ 173.935336][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.944333][ T4327] device bridge_slave_0 left promiscuous mode [ 173.951073][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.962145][ T4327] device veth1_macvtap left promiscuous mode [ 173.970700][ T4327] device veth0_macvtap left promiscuous mode [ 173.977783][ T4327] device veth1_vlan left promiscuous mode [ 173.988030][ T4327] device veth0_vlan left promiscuous mode [ 174.200866][ T4327] team0 (unregistering): Port device team_slave_1 removed [ 174.229994][ T4327] team0 (unregistering): Port device team_slave_0 removed [ 174.260528][ T4327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.291543][ T4327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.513922][ T4327] bond0 (unregistering): Released all slaves [ 175.358026][ T4327] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.399039][ T4327] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.442577][ T4327] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.501458][ T4327] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.580731][ T4327] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.621491][ T4327] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.701716][ T4327] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.752186][ T4327] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.896281][ T4327] device hsr_slave_0 left promiscuous mode [ 176.902718][ T4327] device hsr_slave_1 left promiscuous mode [ 176.911590][ T4327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.919201][ T4327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.927406][ T4327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.935034][ T4327] device bridge_slave_1 left promiscuous mode [ 176.941216][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.949387][ T4327] device bridge_slave_0 left promiscuous mode [ 176.955803][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.966832][ T4327] device hsr_slave_0 left promiscuous mode [ 176.973019][ T4327] device hsr_slave_1 left promiscuous mode [ 176.979519][ T4327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.987886][ T4327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.995870][ T4327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.003297][ T4327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.011016][ T4327] device bridge_slave_1 left promiscuous mode [ 177.017242][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.025594][ T4327] device bridge_slave_0 left promiscuous mode [ 177.031795][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.041840][ T4327] device bridge_slave_1 left promiscuous mode [ 177.048180][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.056458][ T4327] device bridge_slave_0 left promiscuous mode [ 177.062621][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.072687][ T4327] device hsr_slave_0 left promiscuous mode [ 177.078882][ T4327] device hsr_slave_1 left promiscuous mode [ 177.085416][ T4327] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.092869][ T4327] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.100620][ T4327] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.108101][ T4327] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.116151][ T4327] device bridge_slave_1 left promiscuous mode [ 177.122328][ T4327] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.130371][ T4327] device bridge_slave_0 left promiscuous mode [ 177.137273][ T4327] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.148973][ T4327] device veth1_macvtap left promiscuous mode [ 177.155619][ T4327] device veth0_macvtap left promiscuous mode [ 177.161805][ T4327] device veth1_vlan left promiscuous mode [ 177.167726][ T4327] device veth0_vlan left promiscuous mode [ 177.174044][ T4327] device veth1_macvtap left promiscuous mode [ 177.180234][ T4327] device veth0_macvtap left promiscuous mode [ 177.186335][ T4327] device veth1_vlan left promiscuous mode [ 177.192233][ T4327] device veth0_vlan left promiscuous mode [ 177.199041][ T4327] device veth1_macvtap left promiscuous mode [ 177.205289][ T4327] device veth0_macvtap left promiscuous mode [ 177.211348][ T4327] device veth1_vlan left promiscuous mode [ 177.217211][ T4327] device veth0_vlan left promiscuous mode [ 177.479971][ T4327] team0 (unregistering): Port device team_slave_1 removed [ 177.508619][ T4327] team0 (unregistering): Port device team_slave_0 removed [ 177.538173][ T4327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.569230][ T4327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.619813][ T4327] bond0 (unregistering): Released all slaves [ 177.752046][ T4327] team0 (unregistering): Port device team_slave_1 removed [ 177.782950][ T4327] team0 (unregistering): Port device team_slave_0 removed [ 177.811455][ T4327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.841793][ T4327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.892025][ T4327] bond0 (unregistering): Released all slaves [ 177.944474][ T4327] team0 (unregistering): Port device team_slave_1 removed [ 177.958185][ T4327] team0 (unregistering): Port device team_slave_0 removed [ 177.969501][ T4327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.981707][ T4327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.023046][ T4327] bond0 (unregistering): Released all slaves [ 178.117738][ T4327] team0 (unregistering): Port device team_slave_1 removed [ 178.146657][ T4327] team0 (unregistering): Port device team_slave_0 removed [ 178.157659][ T4327] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.188276][ T4327] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.239510][ T4327] bond0 (unregistering): Released all slaves