last executing test programs: 6.838376162s ago: executing program 3 (id=313): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000540)='kfree\x00', r1}, 0x10) syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000021275710570bbd2bcce70102030109021b000100000000090400000103010200090503"], 0x0) open_tree(0xffffffffffffffff, 0x0, 0x89901) 6.591052442s ago: executing program 0 (id=315): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902"], 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000580001c0"]) 5.552037166s ago: executing program 1 (id=321): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000001c0)=""/4068, 0xfe4) 5.348515013s ago: executing program 1 (id=324): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = socket(0x2b, 0x1, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x11e, 0x1, 0x0, 0x20000000) 5.294739061s ago: executing program 4 (id=325): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000100)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@data_err_ignore}, {@errors_remount}, {@test_dummy_encryption}, {@nobarrier}, {@noblock_validity}, {@minixdf}, {@oldalloc}]}, 0x1, 0xba6, &(0x7f0000000c00)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.164954733s ago: executing program 3 (id=326): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f0000000080)=0x700) chdir(&(0x7f0000000380)='./file0\x00') creat(&(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000e00)='./file0\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 5.102797871s ago: executing program 1 (id=327): syz_read_part_table(0x634, &(0x7f0000001480)="$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") pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) splice(r0, 0x0, r2, 0x0, 0xfdef, 0x0) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359ffc7b79af52f7d6d1ce7e29c3ee5e5ca97c5e499dc2aac63a010080000000e6ff4faa2ad9c084a003eae5ffffffffffffff00000000000100", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b732673618180142391cb400001d00"}) write$P9_ROPEN(r1, &(0x7f0000000300)={0x18}, 0x18) 4.864266071s ago: executing program 2 (id=328): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x0, 0xea60}, 0x10) sendmmsg$unix(r1, &(0x7f00000bd000), 0x100, 0x0) recvmmsg(r1, &(0x7f0000005540)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/195, 0xc3}}], 0x1, 0x0, 0x0) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) 4.757595106s ago: executing program 0 (id=329): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) readlinkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 1.562181331s ago: executing program 1 (id=330): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x8) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000080)={0x2020}, 0x2020) 1.559785348s ago: executing program 3 (id=331): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000800850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_devices(r0, &(0x7f0000002d80)=ANY=[], 0xffdd) 1.558921454s ago: executing program 4 (id=332): ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40485404, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="40000000120005010000010000000000050019000000000028001a00ac1e0001000000000000000000000000ffffffff00000000000000000000000002000000bc59fc23ef6633f204a42473e7b47db599847ecb20c28fa8194910256d7f7da55ca71f8f1eefb4b9528058d9eca8754e0937d547a066e648b2ee6e5a4ef46d4e3f2b2b780b"], 0x40}}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) syz_open_procfs(0x0, &(0x7f0000000200)='net/vlan/vlan0\x00') 1.497205024s ago: executing program 0 (id=333): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000140)={0x0, 0x3}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) 1.322791772s ago: executing program 1 (id=334): landlock_create_ruleset(&(0x7f0000000080)={0x8000}, 0x10, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 1.285492109s ago: executing program 4 (id=335): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x2041}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x800041}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) 1.283505623s ago: executing program 2 (id=336): sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080), 0xc, 0x0}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x4, 0x3}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r1}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000400)={r0, &(0x7f0000000080), 0x20000000}, 0x20) 1.250785328s ago: executing program 0 (id=337): r0 = socket(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000003c00)=0x90) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="c9", 0x1) 1.216942456s ago: executing program 3 (id=338): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 1.089585819s ago: executing program 1 (id=339): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "f896e404"}, @local=@item_012={0x1, 0x2, 0x0, 'e'}, @main=@item_012={0x2, 0x0, 0x9, "f792"}, @main=@item_4={0x3, 0x0, 0x0, "9ef12d19"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}}, 0x0) ioctl$HIDIOCGUSAGE(r1, 0x501c4814, &(0x7f00000000c0)={0x2, 0xffffffff, 0x0, 0x0, 0x4e496f8}) 1.078645642s ago: executing program 2 (id=340): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000240)='./file7\x00', 0xc03, &(0x7f0000001a40)=ANY=[@ANYRES8=0x0, @ANYBLOB, @ANYRES16, @ANYRESDEC, @ANYRES16=0x0, @ANYRESOCT, @ANYRES32], 0x2, 0x5fa2, &(0x7f0000003080)="$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") ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, 0x0) r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 1.062332279s ago: executing program 4 (id=341): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, &(0x7f0000000800)={'syz1\x00', {}, 0x44, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 932.811607ms ago: executing program 4 (id=342): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x100, 0x1, r1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000300), 0x20000000}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000300)={r2, &(0x7f0000000240), 0x0}, 0x20) 840.212749ms ago: executing program 4 (id=343): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)={{0x12, 0x1, 0x0, 0xe4, 0xc5, 0xad, 0x10, 0x61d, 0xc020, 0x9c15, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x10, 0x2d, 0xb0}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x3, "39c85c"}, 0x0, 0x0, 0x0, 0x0}) 550.237723ms ago: executing program 2 (id=344): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r3, 0x5608, 0x0) 316.869936ms ago: executing program 2 (id=345): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r1 = gettid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000200)=r1) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffbfbbffb, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000002580)="b0", 0xfffffffffffffd57, 0x200000c1, 0x0, 0x0) 267.424982ms ago: executing program 3 (id=346): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00'}, 0x90) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b88f8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008000000a5000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78}) 251.940433ms ago: executing program 0 (id=347): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 115.308254ms ago: executing program 2 (id=348): r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000040), 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000540)=0x96, 0x4) sendto$inet6(r1, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) 20.852704ms ago: executing program 0 (id=349): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000ebffff004d564b"]) 0s ago: executing program 3 (id=350): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000002000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000060000850000008200000095"], &(0x7f0000001fc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="d8", 0x1}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.25' (ED25519) to the list of known hosts. [ 48.578933][ T5217] cgroup: Unknown subsys name 'net' [ 48.803419][ T5217] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.085590][ T5217] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.021771][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.056925][ T5232] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.064445][ T5232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.072788][ T5232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.080911][ T5232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.088980][ T5232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.096604][ T5232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 52.104022][ T5232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.106844][ T5229] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.122569][ T5229] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.132282][ T5229] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 52.139670][ T5229] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.179055][ T5229] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.187158][ T5229] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.195187][ T5229] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.204537][ T5229] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.210950][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.219981][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 52.228794][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.238870][ T4624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.253884][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.263972][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.277717][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 52.285834][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 52.293134][ T5229] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 52.306720][ T5232] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 52.314454][ T5232] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 52.329709][ T5232] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 52.337986][ T5232] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 52.345306][ T5232] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 52.567228][ T5230] chnl_net:caif_netlink_parms(): no params data found [ 52.609710][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 52.673145][ T5234] chnl_net:caif_netlink_parms(): no params data found [ 52.806109][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.813660][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.822750][ T5230] bridge_slave_0: entered allmulticast mode [ 52.829518][ T5230] bridge_slave_0: entered promiscuous mode [ 52.837929][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.845010][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.852292][ T5230] bridge_slave_1: entered allmulticast mode [ 52.859602][ T5230] bridge_slave_1: entered promiscuous mode [ 52.873762][ T5239] chnl_net:caif_netlink_parms(): no params data found [ 52.904205][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.911409][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.919068][ T5227] bridge_slave_0: entered allmulticast mode [ 52.925569][ T5227] bridge_slave_0: entered promiscuous mode [ 52.940376][ T5236] chnl_net:caif_netlink_parms(): no params data found [ 52.980829][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.990132][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.999684][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.006897][ T5227] bridge_slave_1: entered allmulticast mode [ 53.013580][ T5227] bridge_slave_1: entered promiscuous mode [ 53.043939][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.075872][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.123987][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.149174][ T5234] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.156290][ T5234] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.163495][ T5234] bridge_slave_0: entered allmulticast mode [ 53.170267][ T5234] bridge_slave_0: entered promiscuous mode [ 53.178835][ T5234] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.185938][ T5234] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.193303][ T5234] bridge_slave_1: entered allmulticast mode [ 53.200599][ T5234] bridge_slave_1: entered promiscuous mode [ 53.208978][ T5230] team0: Port device team_slave_0 added [ 53.242227][ T5239] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.249388][ T5239] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.256504][ T5239] bridge_slave_0: entered allmulticast mode [ 53.263317][ T5239] bridge_slave_0: entered promiscuous mode [ 53.271312][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.278802][ T5239] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.285966][ T5239] bridge_slave_1: entered allmulticast mode [ 53.293251][ T5239] bridge_slave_1: entered promiscuous mode [ 53.308367][ T5230] team0: Port device team_slave_1 added [ 53.329048][ T5227] team0: Port device team_slave_0 added [ 53.371848][ T5227] team0: Port device team_slave_1 added [ 53.395285][ T5234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.425797][ T5236] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.433012][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.441080][ T5236] bridge_slave_0: entered allmulticast mode [ 53.448880][ T5236] bridge_slave_0: entered promiscuous mode [ 53.457229][ T5239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.467996][ T5234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.478617][ T5239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.488740][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.495692][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.522531][ T5230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.540424][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.547772][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.554923][ T5236] bridge_slave_1: entered allmulticast mode [ 53.561851][ T5236] bridge_slave_1: entered promiscuous mode [ 53.600484][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.607896][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.634452][ T5230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.649565][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.657171][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.683669][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.697661][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.704641][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.730797][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.753110][ T5234] team0: Port device team_slave_0 added [ 53.768304][ T5239] team0: Port device team_slave_0 added [ 53.776045][ T5239] team0: Port device team_slave_1 added [ 53.794515][ T5234] team0: Port device team_slave_1 added [ 53.824072][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.831146][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.857163][ T5239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.872859][ T5236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.904569][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.911636][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.937801][ T5234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.950229][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.957278][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.983312][ T5239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.000581][ T5236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.020047][ T5230] hsr_slave_0: entered promiscuous mode [ 54.026192][ T5230] hsr_slave_1: entered promiscuous mode [ 54.048087][ T5234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.055132][ T5234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.081465][ T5234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.119341][ T5227] hsr_slave_0: entered promiscuous mode [ 54.125452][ T5227] hsr_slave_1: entered promiscuous mode [ 54.131726][ T5227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.139589][ T5227] Cannot create hsr debugfs directory [ 54.161922][ T5236] team0: Port device team_slave_0 added [ 54.167617][ T5232] Bluetooth: hci1: command tx timeout [ 54.185524][ T5234] hsr_slave_0: entered promiscuous mode [ 54.192178][ T5234] hsr_slave_1: entered promiscuous mode [ 54.199480][ T5234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.207419][ T5234] Cannot create hsr debugfs directory [ 54.236857][ T5232] Bluetooth: hci0: command tx timeout [ 54.244421][ T5236] team0: Port device team_slave_1 added [ 54.252252][ T5239] hsr_slave_0: entered promiscuous mode [ 54.260075][ T5239] hsr_slave_1: entered promiscuous mode [ 54.266042][ T5239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.273699][ T5239] Cannot create hsr debugfs directory [ 54.312879][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.320148][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.326712][ T5232] Bluetooth: hci3: command tx timeout [ 54.346152][ T4624] Bluetooth: hci2: command tx timeout [ 54.358050][ T5236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.396863][ T4624] Bluetooth: hci4: command tx timeout [ 54.402825][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.410486][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.437171][ T5236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.578906][ T5236] hsr_slave_0: entered promiscuous mode [ 54.585283][ T5236] hsr_slave_1: entered promiscuous mode [ 54.592104][ T5236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.602700][ T5236] Cannot create hsr debugfs directory [ 54.767856][ T5234] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.780863][ T5234] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.791623][ T5234] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.809532][ T5234] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.863433][ T5227] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.875797][ T5227] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.902174][ T5227] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.918523][ T5227] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.944589][ T5230] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.954279][ T5230] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.970224][ T5230] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.996527][ T5230] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.057118][ T5239] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.065888][ T5239] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.075299][ T5239] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.101385][ T5239] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.154680][ T5236] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.173734][ T5236] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.183426][ T5236] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.214131][ T5236] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.233759][ T5234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.274991][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.305405][ T5234] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.319458][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.339293][ T5230] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.356973][ T2976] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.364297][ T2976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.378712][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.400550][ T2976] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.407640][ T2976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.432544][ T2976] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.439685][ T2976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.451722][ T2976] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.458819][ T2976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.483524][ T2976] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.490621][ T2976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.501593][ T2976] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.508695][ T2976] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.681888][ T5239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.731543][ T5236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.779538][ T5239] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.811730][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.818877][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.851615][ T5236] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.899232][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.906370][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.918611][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.925765][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.941362][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.948526][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.010634][ T5236] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.033380][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.043122][ T5234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.064216][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.099624][ T5239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.200717][ T5234] veth0_vlan: entered promiscuous mode [ 56.219658][ T5230] veth0_vlan: entered promiscuous mode [ 56.231910][ T5227] veth0_vlan: entered promiscuous mode [ 56.239011][ T4624] Bluetooth: hci1: command tx timeout [ 56.273303][ T5234] veth1_vlan: entered promiscuous mode [ 56.291408][ T5230] veth1_vlan: entered promiscuous mode [ 56.311144][ T5227] veth1_vlan: entered promiscuous mode [ 56.317595][ T4624] Bluetooth: hci0: command tx timeout [ 56.374607][ T5230] veth0_macvtap: entered promiscuous mode [ 56.390215][ T5236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.398489][ T4624] Bluetooth: hci3: command tx timeout [ 56.398932][ T5232] Bluetooth: hci2: command tx timeout [ 56.412422][ T5230] veth1_macvtap: entered promiscuous mode [ 56.445468][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.469227][ T5239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.477623][ T5232] Bluetooth: hci4: command tx timeout [ 56.483773][ T5234] veth0_macvtap: entered promiscuous mode [ 56.509369][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.521460][ T5230] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.531039][ T5230] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.548386][ T5230] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.559407][ T5230] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.570721][ T5227] veth0_macvtap: entered promiscuous mode [ 56.582445][ T5227] veth1_macvtap: entered promiscuous mode [ 56.609604][ T5234] veth1_macvtap: entered promiscuous mode [ 56.635185][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.658989][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.672528][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.689220][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.704582][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.722191][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.750203][ T5227] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.759894][ T5227] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.770622][ T5227] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.779551][ T5227] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.821134][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.831711][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.842161][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.852787][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.863759][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.899460][ T5236] veth0_vlan: entered promiscuous mode [ 56.905662][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.919482][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.929468][ T5234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 56.939940][ T5234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.951713][ T5234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.962566][ T5234] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.971672][ T5234] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.980628][ T5234] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.989512][ T5234] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.031378][ T3046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.048470][ T3046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.101800][ T5236] veth1_vlan: entered promiscuous mode [ 57.114466][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.123168][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.176317][ T5239] veth0_vlan: entered promiscuous mode [ 57.214710][ T3046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.221366][ T5239] veth1_vlan: entered promiscuous mode [ 57.223507][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.243697][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.251427][ T3046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.324217][ T5239] veth0_macvtap: entered promiscuous mode [ 57.351021][ T5236] veth0_macvtap: entered promiscuous mode [ 57.362665][ T5236] veth1_macvtap: entered promiscuous mode [ 57.382602][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.388480][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.398548][ T5239] veth1_macvtap: entered promiscuous mode [ 57.405623][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.407420][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.418187][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.433014][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.443216][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.454512][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.464497][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.475392][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.489149][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.516256][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.527297][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.542720][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.553227][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.563466][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.574247][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.586531][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.614398][ T5236] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.624508][ T5236] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.633478][ T5236] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.642628][ T5236] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.655060][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.665937][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.675951][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.687750][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.698563][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.709821][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.720286][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.730849][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.741919][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.769515][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.780225][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.790406][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.801097][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.811701][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.822525][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.833204][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.844820][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.862029][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.912528][ T5239] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.939262][ T5239] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.949099][ T5239] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.962699][ T5239] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.249384][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.295570][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.368160][ T5232] Bluetooth: hci1: command tx timeout [ 58.397928][ T5232] Bluetooth: hci0: command tx timeout [ 58.476850][ T5232] Bluetooth: hci2: command tx timeout [ 58.484569][ T5311] loop1: detected capacity change from 0 to 32768 [ 58.487729][ T5232] Bluetooth: hci3: command tx timeout [ 58.491804][ T5311] ======================================================= [ 58.491804][ T5311] WARNING: The mand mount option has been deprecated and [ 58.491804][ T5311] and is ignored by this kernel. Remove the mand [ 58.491804][ T5311] option from the mount to silence this warning. [ 58.491804][ T5311] ======================================================= [ 58.556895][ T5232] Bluetooth: hci4: command tx timeout [ 58.564564][ T2976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.572904][ T2976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.641220][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.659403][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.675480][ T2976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.684960][ T2976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.688772][ T5311] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 58.794069][ T5331] loop0: detected capacity change from 0 to 256 [ 58.825526][ T5330] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 58.960434][ T5331] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 59.000559][ T5311] XFS (loop1): Ending clean mount [ 59.037184][ T5337] loop4: detected capacity change from 0 to 256 [ 59.107623][ T1177] kernel read not supported for file /input/event0 (pid: 1177 comm: kworker/0:2) [ 59.143530][ T5311] XFS (loop1): Quotacheck needed: Please wait. [ 59.254426][ T5311] XFS (loop1): Quotacheck: Done. [ 59.413375][ T5234] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 59.805925][ T5356] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 59.854090][ T5354] cgroup: fork rejected by pids controller in /syz4 [ 59.906232][ T5357] warning: `syz.3.20' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 59.934765][ T5343] loop2: detected capacity change from 0 to 32768 [ 60.092917][ T5343] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 60.251318][ T5382] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 60.339237][ T5343] XFS (loop2): Ending clean mount [ 60.351462][ T5343] XFS (loop2): Quotacheck needed: Please wait. [ 60.397588][ T5232] Bluetooth: hci1: command tx timeout [ 60.403485][ T5343] XFS (loop2): Quotacheck: Done. [ 60.417249][ T5312] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 60.487065][ T5232] Bluetooth: hci0: command tx timeout [ 60.542456][ T5230] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 60.559363][ T5232] Bluetooth: hci3: command tx timeout [ 60.565394][ T5232] Bluetooth: hci2: command tx timeout [ 60.579438][ T1177] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 60.618155][ T5312] usb 2-1: Using ep0 maxpacket: 8 [ 60.640484][ T5312] usb 2-1: config index 0 descriptor too short (expected 5924, got 36) [ 60.680331][ T5312] usb 2-1: config 250 has an invalid interface number: 228 but max is -1 [ 60.730252][ T5312] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 60.743300][ T5312] usb 2-1: config 250 has no interface number 0 [ 60.750872][ T5312] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 60.773271][ T1177] usb 1-1: Using ep0 maxpacket: 8 [ 60.799012][ T1177] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 60.817292][ T5312] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 60.833614][ T1177] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 60.843146][ T5312] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 60.853863][ T1177] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.869426][ T5312] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 60.897445][ T1177] usb 1-1: config 0 descriptor?? [ 60.905984][ T5312] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 60.928707][ T5312] usb 2-1: config 250 interface 228 has no altsetting 0 [ 60.940130][ T5312] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 60.949694][ T5312] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 60.970920][ T5312] usb 2-1: Product: syz [ 60.980307][ T5312] usb 2-1: SerialNumber: syz [ 60.995355][ T5312] hub 2-1:250.228: bad descriptor, ignoring hub [ 61.002123][ T5312] hub 2-1:250.228: probe with driver hub failed with error -5 [ 61.280036][ T1108] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.470985][ T1108] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.619133][ T1108] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.648280][ T5312] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 2 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 61.800226][ T1108] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.225922][ T1108] bridge_slave_1: left allmulticast mode [ 62.255263][ T1108] bridge_slave_1: left promiscuous mode [ 62.328149][ T1108] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.418162][ T1108] bridge_slave_0: left allmulticast mode [ 62.423866][ T1108] bridge_slave_0: left promiscuous mode [ 62.528555][ T1108] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.690867][ T4624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.700171][ T4624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.717690][ T4624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.748715][ T4624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.769255][ T4624] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 63.781841][ T4624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.906275][ T1108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.933617][ T1108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.946490][ T1108] bond0 (unregistering): Released all slaves [ 64.152475][ T5376] usb 2-1: reset high-speed USB device number 2 using dummy_hcd [ 64.636939][ T1108] hsr_slave_0: left promiscuous mode [ 64.668558][ T1108] hsr_slave_1: left promiscuous mode [ 64.685694][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.706169][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.725970][ T1108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.745958][ T1108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.790718][ T1108] veth1_macvtap: left promiscuous mode [ 64.809388][ T1108] veth0_macvtap: left promiscuous mode [ 64.825878][ T1108] veth1_vlan: left promiscuous mode [ 64.845734][ T1108] veth0_vlan: left promiscuous mode [ 64.894405][ T5416] loop3: detected capacity change from 0 to 32768 [ 64.932619][ T5416] XFS (loop3): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 64.947440][ T5274] usb 2-1: USB disconnect, device number 2 [ 65.007645][ T5274] usblp0: removed [ 65.073890][ T5452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.42'. [ 65.158923][ T5416] XFS (loop3): Ending clean mount [ 65.303150][ T5458] loop1: detected capacity change from 0 to 256 [ 65.350795][ T5458] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 65.360329][ T1177] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 65.400476][ T1177] usb 1-1: USB disconnect, device number 2 [ 65.422643][ T29] audit: type=1800 audit(1724788155.018:2): pid=5458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.44" name="file1" dev="loop1" ino=1048604 res=0 errno=0 [ 65.431983][ T1177] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 65.479577][ T29] audit: type=1800 audit(1724788155.038:3): pid=5458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.44" name="file1" dev="loop1" ino=1048604 res=0 errno=0 [ 65.511179][ T29] audit: type=1800 audit(1724788155.048:4): pid=5458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.44" name="file1" dev="loop1" ino=1048604 res=0 errno=0 [ 65.604717][ T5236] XFS (loop3): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6 [ 65.847606][ T5232] Bluetooth: hci4: command tx timeout [ 66.186387][ T1108] team0 (unregistering): Port device team_slave_1 removed [ 66.237483][ T5484] Bluetooth: MGMT ver 1.23 [ 66.277767][ T1108] team0 (unregistering): Port device team_slave_0 removed [ 66.348324][ T5489] loop3: detected capacity change from 0 to 512 [ 66.380567][ T5489] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.54: casefold flag without casefold feature [ 66.398545][ T5489] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.54: couldn't read orphan inode 15 (err -117) [ 66.414268][ T5489] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 66.529921][ T5236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.991784][ T5274] libceph: connect (1)[c::]:6789 error -101 [ 67.004436][ T5274] libceph: mon0 (1)[c::]:6789 connect error [ 67.021092][ T5274] libceph: connect (1)[c::]:6789 error -101 [ 67.034467][ T29] audit: type=1326 audit(1724788156.628:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5504 comm="syz.0.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85f379e79 code=0x7fc00000 [ 67.063282][ T5274] libceph: mon0 (1)[c::]:6789 connect error [ 67.301483][ T5516] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.331270][ T5405] chnl_net:caif_netlink_parms(): no params data found [ 67.347702][ T5270] libceph: connect (1)[c::]:6789 error -101 [ 67.356777][ T5270] libceph: mon0 (1)[c::]:6789 connect error [ 67.468410][ T5520] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.65'. [ 67.712292][ T29] audit: type=1326 audit(1724788157.298:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5504 comm="syz.0.61" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa85f379e79 code=0x7fc00000 [ 67.768811][ T5507] ceph: No mds server is up or the cluster is laggy [ 67.785853][ T5526] loop3: detected capacity change from 0 to 40427 [ 67.812254][ T5405] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.819554][ T5405] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.826795][ T5405] bridge_slave_0: entered allmulticast mode [ 67.832038][ T5526] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 67.833615][ T5405] bridge_slave_0: entered promiscuous mode [ 67.841422][ T5526] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 67.887861][ T5270] libceph: connect (1)[c::]:6789 error -101 [ 67.891754][ T5534] loop0: detected capacity change from 0 to 512 [ 67.893896][ T5270] libceph: mon0 (1)[c::]:6789 connect error [ 67.913001][ T5534] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 67.934098][ T5405] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.942748][ T5232] Bluetooth: hci4: command tx timeout [ 67.955510][ T5534] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 67.956788][ T5405] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.989252][ T5526] F2FS-fs (loop3): invalid crc value [ 68.003837][ T5405] bridge_slave_1: entered allmulticast mode [ 68.032377][ T5405] bridge_slave_1: entered promiscuous mode [ 68.038312][ T5539] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 68.084906][ T5526] F2FS-fs (loop3): Found nat_bits in checkpoint [ 68.195676][ T5534] EXT4-fs (loop0): 1 orphan inode deleted [ 68.210664][ T5534] EXT4-fs (loop0): 1 truncate cleaned up [ 68.228132][ T5534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.258802][ T5526] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 68.266103][ T5526] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 68.358638][ T5405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.408130][ T5227] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.445457][ T5405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.540025][ T5405] team0: Port device team_slave_0 added [ 68.577572][ T5405] team0: Port device team_slave_1 added [ 68.597995][ T5546] loop1: detected capacity change from 0 to 32768 [ 68.644945][ T5546] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.70 (5546) [ 68.664588][ T2976] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 68.680922][ T2976] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 68.751757][ T5546] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 68.786834][ T5546] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 68.804989][ T5546] BTRFS info (device loop1): using free-space-tree [ 68.809938][ T5405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.844976][ T5405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.945631][ T5405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.019542][ T5405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.030199][ T5405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.081855][ T5405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.298537][ T5581] loop3: detected capacity change from 0 to 256 [ 69.318878][ T5581] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x795b649f, utbl_chksum : 0xe619d30d) [ 69.379834][ T5556] loop0: detected capacity change from 0 to 32768 [ 69.464740][ T5405] hsr_slave_0: entered promiscuous mode [ 69.479380][ T5556] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 69.545901][ T5405] hsr_slave_1: entered promiscuous mode [ 69.575183][ T5405] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.585096][ T5405] Cannot create hsr debugfs directory [ 69.629452][ T5556] XFS (loop0): Ending clean mount [ 69.663681][ T5556] XFS (loop0): Quotacheck needed: Please wait. [ 69.700299][ T5591] BTRFS info (device loop1): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 69.773844][ T5556] XFS (loop0): Quotacheck: Done. [ 69.826272][ T5603] loop3: detected capacity change from 0 to 512 [ 69.909597][ T5603] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 69.933497][ T5234] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 69.956499][ T5556] XFS (loop0): User initiated shutdown received. [ 69.967749][ T5556] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x110/0x160 (fs/xfs/xfs_fsops.c:447). Shutting down filesystem. [ 69.992466][ T5603] EXT4-fs (loop3): 1 truncate cleaned up [ 70.007997][ T5556] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 70.017574][ T5232] Bluetooth: hci4: command tx timeout [ 70.058150][ T5603] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.085862][ T5227] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 70.551102][ T29] audit: type=1326 audit(1724788160.148:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5624 comm="syz.0.80" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa85f379e79 code=0x0 [ 70.683104][ T5628] loop1: detected capacity change from 0 to 1024 [ 70.747045][ T5628] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.898561][ T5234] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.932813][ T5236] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.056153][ T62] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.233052][ T62] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.365041][ T62] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.540374][ T62] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.600180][ T1273] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.607083][ T1273] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.669008][ T5405] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.725314][ T5405] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.777128][ T5405] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.877387][ T5405] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.002128][ T5656] loop0: detected capacity change from 0 to 4096 [ 72.048300][ T5656] ntfs3: loop0: Different NTFS sector size (2048) and media sector size (512). [ 72.083145][ T5232] Bluetooth: hci4: command tx timeout [ 72.187846][ T62] bridge_slave_1: left allmulticast mode [ 72.201336][ T62] bridge_slave_1: left promiscuous mode [ 72.219953][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.242981][ T4624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.252614][ T4624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.260787][ T4624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.295197][ T5656] ntfs3: loop0: Failed to initialize $Extend/$ObjId. [ 72.303291][ T62] bridge_slave_0: left allmulticast mode [ 72.339856][ T62] bridge_slave_0: left promiscuous mode [ 72.348452][ T4624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.356384][ T4624] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.363895][ T4624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.389923][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.648484][ T29] audit: type=1800 audit(1724788162.248:8): pid=5656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.88" name="bus" dev="loop0" ino=33 res=0 errno=0 [ 72.753237][ T5682] loop1: detected capacity change from 0 to 256 [ 73.407223][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.448659][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.516412][ T62] bond0 (unregistering): Released all slaves [ 73.578623][ T5704] loop1: detected capacity change from 0 to 256 [ 73.979570][ T5405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.000328][ T5405] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.033923][ T5405] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 74.044361][ T5405] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.064787][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.071951][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.099598][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.106783][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.396891][ T4624] Bluetooth: hci3: command tx timeout [ 74.555627][ T5405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.646711][ T62] hsr_slave_0: left promiscuous mode [ 74.682252][ T62] hsr_slave_1: left promiscuous mode [ 74.694190][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.711583][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.727630][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.735088][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 74.779202][ T62] veth1_macvtap: left promiscuous mode [ 74.784775][ T62] veth0_macvtap: left promiscuous mode [ 74.791442][ T62] veth1_vlan: left promiscuous mode [ 74.797545][ T62] veth0_vlan: left promiscuous mode [ 75.334023][ T5754] loop1: detected capacity change from 0 to 4096 [ 75.397938][ T5754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.621724][ T5234] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.849170][ T62] team0 (unregistering): Port device team_slave_1 removed [ 75.943701][ T62] team0 (unregistering): Port device team_slave_0 removed [ 76.245814][ T5765] loop0: detected capacity change from 0 to 32768 [ 76.272698][ T5765] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.110 (5765) [ 76.456023][ T5756] loop2: detected capacity change from 0 to 65536 [ 76.476795][ T4624] Bluetooth: hci3: command tx timeout [ 76.505343][ T5765] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 76.524368][ T5765] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 76.534696][ T5765] BTRFS info (device loop0): using free-space-tree [ 76.537360][ T5756] XFS (loop2): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 76.703167][ T5756] XFS (loop2): Ending clean mount [ 76.719335][ T943] cfg80211: failed to load regulatory.db [ 76.784638][ T5765] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.836854][ T5227] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 77.005900][ T5230] XFS (loop2): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5 [ 77.365781][ T5814] loop1: detected capacity change from 0 to 512 [ 77.496236][ T5814] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.509115][ T5814] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.622632][ T5666] chnl_net:caif_netlink_parms(): no params data found [ 77.765072][ T5234] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.926992][ T5837] @ÿ: renamed from veth0_vlan (while UP) [ 78.144655][ T5666] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.152370][ T5666] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.159685][ T5666] bridge_slave_0: entered allmulticast mode [ 78.168649][ T5666] bridge_slave_0: entered promiscuous mode [ 78.176307][ T5666] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.185979][ T5666] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.193251][ T5666] bridge_slave_1: entered allmulticast mode [ 78.200228][ T5666] bridge_slave_1: entered promiscuous mode [ 78.334053][ T5666] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.393630][ T5666] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.486431][ T5861] loop0: detected capacity change from 0 to 164 [ 78.518141][ T5666] team0: Port device team_slave_0 added [ 78.567438][ T4624] Bluetooth: hci3: command tx timeout [ 78.575438][ T5666] team0: Port device team_slave_1 added [ 78.606899][ T5865] loop2: detected capacity change from 0 to 512 [ 78.615713][ T5865] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 78.648094][ T5861] loop0: detected capacity change from 164 to 0 [ 78.660430][ T5865] EXT4-fs (loop2): 1 orphan inode deleted [ 78.666201][ T5865] EXT4-fs (loop2): 1 truncate cleaned up [ 78.666289][ T5666] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.688827][ T5666] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.709357][ T5865] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.728053][ T5666] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.864352][ T5405] veth0_vlan: entered promiscuous mode [ 78.878088][ T5405] veth1_vlan: entered promiscuous mode [ 78.890671][ T5666] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.914759][ T5666] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.942904][ T5666] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.972560][ T5230] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.973177][ T5405] veth0_macvtap: entered promiscuous mode [ 79.026953][ T5405] veth1_macvtap: entered promiscuous mode [ 79.238157][ T5666] hsr_slave_0: entered promiscuous mode [ 79.257533][ T5666] hsr_slave_1: entered promiscuous mode [ 79.269734][ T5666] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.278342][ T5666] Cannot create hsr debugfs directory [ 79.312021][ T5880] loop2: detected capacity change from 0 to 8192 [ 79.469789][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.484843][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.507888][ T5889] loop0: detected capacity change from 0 to 128 [ 79.543779][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.591760][ T5889] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 79.646759][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.690020][ T5889] ext4 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 79.726613][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.752752][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.778542][ T5405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.935361][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.948751][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.960342][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.971160][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.981614][ T5405] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.997813][ T5405] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.016299][ T5227] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.029362][ T5405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.115111][ T5896] loop0: detected capacity change from 0 to 128 [ 80.137462][ T5896] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 80.189709][ T5405] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.213834][ T5405] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.243075][ T5405] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.267701][ T5405] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.380778][ T5905] loop0: detected capacity change from 0 to 128 [ 80.387366][ T1177] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 80.515013][ T5905] syz.0.148: attempt to access beyond end of device [ 80.515013][ T5905] loop0: rw=34817, sector=97, nr_sectors = 32 limit=128 [ 80.586697][ T1177] usb 3-1: Using ep0 maxpacket: 16 [ 80.594228][ T1177] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 80.616670][ T1177] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 80.636823][ T4624] Bluetooth: hci3: command tx timeout [ 80.646249][ T1177] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 80.665559][ T1177] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.684116][ T1177] usb 3-1: Product: syz [ 80.691847][ T1177] usb 3-1: Manufacturer: syz [ 80.696484][ T1177] usb 3-1: SerialNumber: syz [ 80.708847][ T1177] usb 3-1: config 0 descriptor?? [ 80.723853][ T1177] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 80.751280][ T1177] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 80.841427][ T3046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.866638][ T3046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.943388][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.964771][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.124068][ T943] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 81.213667][ T5900] loop1: detected capacity change from 0 to 40427 [ 81.229039][ T5900] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 81.234486][ T5919] Illegal XDP return value 4294967294 on prog (id 22) dev N/A, expect packet loss! [ 81.256595][ T5900] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 81.299256][ T5900] F2FS-fs (loop1): Found nat_bits in checkpoint [ 81.346817][ T943] usb 1-1: Using ep0 maxpacket: 8 [ 81.358412][ T943] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 81.371818][ T1177] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 81.380279][ T943] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.410354][ T1177] em28xx 3-1:0.0: Config register raw data: 0x56 [ 81.414380][ T943] usb 1-1: Product: syz [ 81.422455][ T943] usb 1-1: Manufacturer: syz [ 81.430311][ T943] usb 1-1: SerialNumber: syz [ 81.447271][ T5900] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 81.454344][ T5900] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 81.467837][ T943] usb 1-1: config 0 descriptor?? [ 81.531631][ T5666] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.565138][ T5666] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.641270][ T5666] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.673781][ T5666] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.698974][ T943] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 81.826402][ T1177] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 81.868741][ T1177] em28xx 3-1:0.0: No AC97 audio processor [ 81.922037][ T1177] usb 3-1: USB disconnect, device number 2 [ 81.952182][ T5666] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.959862][ T1177] em28xx 3-1:0.0: Disconnecting em28xx [ 81.973766][ T1177] em28xx 3-1:0.0: Freeing device [ 82.050907][ T5666] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.096224][ T3046] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.103410][ T3046] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.130376][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.137550][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.476258][ T5666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.556336][ T5666] veth0_vlan: entered promiscuous mode [ 82.572936][ T943] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 82.587728][ T943] usb 1-1: USB disconnect, device number 3 [ 82.638391][ T5666] veth1_vlan: entered promiscuous mode [ 82.661395][ T5666] veth0_macvtap: entered promiscuous mode [ 82.700439][ T5666] veth1_macvtap: entered promiscuous mode [ 82.725488][ T5666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.738646][ T5666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.748590][ T5666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.759107][ T5666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.769083][ T5666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.779572][ T5666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.789974][ T5666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.802509][ T5666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.813835][ T5666] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.879768][ T5666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.890990][ T5666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.901390][ T5666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.911908][ T5666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.921877][ T5666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.932377][ T5666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.942252][ T5666] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.952835][ T5666] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.956607][ T5964] loop2: detected capacity change from 0 to 40427 [ 82.964476][ T5666] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.979132][ T5666] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.987909][ T5666] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.997254][ T5666] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.005943][ T5666] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.023901][ T5964] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 83.030660][ T5964] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 83.132399][ T5968] loop1: detected capacity change from 0 to 256 [ 83.164332][ T5964] F2FS-fs (loop2): Found nat_bits in checkpoint [ 83.232730][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.255989][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.283172][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.292755][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.334426][ T5964] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 83.342997][ T5964] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 83.350353][ T5968] syz.1.152: attempt to access beyond end of device [ 83.350353][ T5968] loop1: rw=2049, sector=256, nr_sectors = 4 limit=256 [ 83.418466][ T29] audit: type=1800 audit(1724788173.018:9): pid=5964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.155" name="bus" dev="loop2" ino=14 res=0 errno=0 [ 83.477387][ T5274] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 83.518925][ T5230] syz-executor: attempt to access beyond end of device [ 83.518925][ T5230] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 83.576237][ T5230] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 83.602605][ T5230] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 83.644419][ T5984] loop0: detected capacity change from 0 to 512 [ 83.679664][ T5984] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 83.700154][ T5274] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 83.721743][ T5274] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.777543][ T5274] usb 5-1: config 0 descriptor?? [ 83.778072][ T5984] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 83.798869][ T5274] cp210x 5-1:0.0: cp210x converter detected [ 83.820131][ T5984] EXT4-fs (loop0): 1 truncate cleaned up [ 83.845520][ T5984] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.869340][ T5995] loop3: detected capacity change from 0 to 64 [ 84.178223][ T5227] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.192016][ T5666] hfs: request for non-existent node 131072 in B*Tree [ 84.215442][ T5274] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 84.306474][ T6004] loop3: detected capacity change from 0 to 128 [ 84.306509][ T5274] usb 5-1: cp210x converter now attached to ttyUSB0 [ 84.362825][ T6004] syz.3.162 uses obsolete (PF_INET,SOCK_PACKET) [ 84.481524][ T5274] usb 5-1: USB disconnect, device number 2 [ 84.493568][ T5274] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 84.518946][ T5274] cp210x 5-1:0.0: device disconnected [ 84.892300][ T6021] loop3: detected capacity change from 0 to 2048 [ 84.915247][ T6021] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 84.964533][ T6021] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.201200][ T6033] loop1: detected capacity change from 0 to 256 [ 85.230078][ T6033] exfat: Deprecated parameter 'utf8' [ 85.285289][ T6033] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x0ec8ca35, utbl_chksum : 0xe619d30d) [ 85.635266][ T6049] loop1: detected capacity change from 0 to 16 [ 85.659848][ T6049] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 85.740213][ T6048] loop3: detected capacity change from 0 to 4096 [ 85.797578][ T6048] NILFS (loop3): invalid segment: Checksum error in segment payload [ 85.809165][ T6048] NILFS (loop3): trying rollback from an earlier position [ 85.901208][ T6048] NILFS (loop3): recovery complete [ 85.950217][ T6055] loop2: detected capacity change from 0 to 128 [ 85.957697][ T6056] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 86.005302][ T6055] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.032726][ T6060] loop0: detected capacity change from 0 to 128 [ 86.063854][ T6055] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 86.102120][ T6060] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 86.154615][ T6060] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 86.192764][ T6060] EXT4-fs (loop0): shut down requested (2) [ 86.193836][ T6055] syz.2.186 (pid 6055) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 86.382980][ T5227] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.434984][ T6055] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 86.451092][ T6055] fscrypt: key with descriptor e8dab99234bb312e is too short (got 33 bytes, need 64+ bytes) [ 86.538681][ T5230] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 86.550172][ T6070] input: syz1 as /devices/virtual/input/input5 [ 86.688570][ T6054] loop1: detected capacity change from 0 to 32768 [ 87.666752][ T6076] loop3: detected capacity change from 0 to 32768 [ 87.688961][ T6076] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.189 (6076) [ 87.743298][ T6076] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 87.775118][ T6076] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 87.816886][ T6077] loop2: detected capacity change from 0 to 32768 [ 87.832111][ T6076] BTRFS info (device loop3): using free-space-tree [ 87.851155][ T6077] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.190 (6077) [ 88.072322][ T6088] loop1: detected capacity change from 0 to 32768 [ 88.096930][ T6088] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.194 (6088) [ 88.229016][ T6109] loop0: detected capacity change from 0 to 16 [ 88.239718][ T6077] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 88.263355][ T6077] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 88.281032][ T6088] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 88.282401][ T6077] BTRFS info (device loop2): using free-space-tree [ 88.349424][ T6088] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 88.385141][ T6088] BTRFS info (device loop1): using free-space-tree [ 88.665170][ T5666] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 88.714796][ T6138] use of bytesused == 0 is deprecated and will be removed in the future, [ 88.757140][ T6138] use the actual size instead. [ 88.828207][ T6077] BTRFS info (device loop2): rebuilding free space tree [ 88.836414][ T6091] loop4: detected capacity change from 0 to 32768 [ 88.929279][ T6091] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 88.956997][ T6154] loop0: detected capacity change from 0 to 1024 [ 89.237498][ T6091] XFS (loop4): Ending clean mount [ 89.262529][ T6077] syz.2.190 (6077) used greatest stack depth: 18336 bytes left [ 89.324584][ T6091] XFS (loop4): Quotacheck needed: Please wait. [ 89.378190][ T5234] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 89.429453][ T5230] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 89.446534][ T11] hfsplus: b-tree write err: -5, ino 4 [ 89.462686][ T6091] XFS (loop4): Quotacheck: Done. [ 89.493293][ T6091] XFS (loop4): User initiated shutdown received. [ 89.499869][ T6091] XFS (loop4): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xe2/0x160 (fs/xfs/xfs_fsops.c:457). Shutting down filesystem. [ 89.513267][ T6091] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 89.560920][ T5405] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 89.622096][ T5312] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.870861][ T6168] loop1: detected capacity change from 0 to 512 [ 89.908306][ T6168] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 89.986520][ T5312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 90.003411][ T5312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 90.013680][ T5312] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 90.026997][ T5312] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 90.036064][ T5312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.051233][ T6168] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c019, mo2=0002] [ 90.070845][ T6168] System zones: 1-12 [ 90.080024][ T5312] usb 4-1: config 0 descriptor?? [ 90.127092][ T6168] EXT4-fs (loop1): 1 truncate cleaned up [ 90.133818][ T6168] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 90.224580][ T5234] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.486021][ T6186] loop1: detected capacity change from 0 to 256 [ 90.503020][ T6177] loop4: detected capacity change from 0 to 32768 [ 90.515163][ T6177] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.206 (6177) [ 90.534546][ T6186] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 90.558101][ T5312] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 90.573634][ T6177] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 90.574883][ T5312] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 90.596241][ T6177] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 90.612447][ T6177] BTRFS info (device loop4): using free-space-tree [ 90.617529][ T5312] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 90.831063][ T6208] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 90.860487][ T6209] loop2: detected capacity change from 0 to 256 [ 90.997543][ T5405] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 91.615734][ T6232] loop4: detected capacity change from 0 to 8 [ 91.621373][ T6233] loop1: detected capacity change from 0 to 512 [ 91.752388][ T6232] evm: overlay not supported [ 91.794659][ T5270] usb 4-1: USB disconnect, device number 2 [ 91.928787][ T6238] loop1: detected capacity change from 0 to 256 [ 91.931672][ T6239] loop2: detected capacity change from 0 to 128 [ 91.964569][ T6238] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84361, utbl_chksum : 0xe619d30d) [ 91.996362][ T6239] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 92.496252][ T6246] loop1: detected capacity change from 0 to 8192 [ 92.500159][ T6259] loop0: detected capacity change from 0 to 512 [ 92.730956][ T6246] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 92.799959][ T6257] loop3: detected capacity change from 0 to 32768 [ 92.807087][ T6257] XFS: attr2 mount option is deprecated. [ 92.815153][ T6259] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.235: casefold flag without casefold feature [ 92.845954][ T6259] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.235: couldn't read orphan inode 15 (err -117) [ 92.869352][ T29] audit: type=1800 audit(1724788182.468:10): pid=6246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.228" name="bus" dev="loop1" ino=1048627 res=0 errno=0 [ 92.928746][ T6257] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 92.936089][ T6259] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.943582][ T6270] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 92.996076][ T6270] overlayfs: failed to set xattr on upper [ 93.002317][ T6270] overlayfs: ...falling back to redirect_dir=nofollow. [ 93.009800][ T6270] overlayfs: ...falling back to uuid=null. [ 93.015727][ T6270] overlayfs: maximum fs stacking depth exceeded [ 93.024096][ T6257] XFS (loop3): Ending clean mount [ 93.074804][ T6257] XFS (loop3): Quotacheck needed: Please wait. [ 93.092306][ T5227] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.116069][ T6257] XFS (loop3): Quotacheck: Done. [ 93.326672][ T5666] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 93.426901][ T29] audit: type=1326 audit(1724788183.018:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6277 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85f379e79 code=0x7fc00000 [ 93.484005][ T6280] loop2: detected capacity change from 0 to 2048 [ 93.486824][ T29] audit: type=1326 audit(1724788183.018:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6277 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa85f379e79 code=0x7fc00000 [ 93.493013][ T6280] NILFS (loop2): invalid segment: Inconsistency found [ 93.519526][ T6280] NILFS (loop2): trying rollback from an earlier position [ 93.567519][ T29] audit: type=1326 audit(1724788183.018:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6277 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85f379e79 code=0x7fc00000 [ 93.589878][ T29] audit: type=1326 audit(1724788183.018:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6277 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85f379e79 code=0x7fc00000 [ 93.612205][ T29] audit: type=1326 audit(1724788183.018:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6277 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85f379e79 code=0x7fc00000 [ 93.634407][ T29] audit: type=1326 audit(1724788183.018:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6277 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85f379e79 code=0x7fc00000 [ 93.657191][ T29] audit: type=1326 audit(1724788183.018:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6277 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85f379e79 code=0x7fc00000 [ 93.680322][ T29] audit: type=1326 audit(1724788183.018:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6277 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85f379e79 code=0x7fc00000 [ 93.702772][ T29] audit: type=1326 audit(1724788183.018:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6277 comm="syz.0.238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa85f379e79 code=0x7fc00000 [ 93.718324][ T6280] NILFS (loop2): recovery complete [ 93.774410][ T6290] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 93.891732][ T6292] loop1: detected capacity change from 0 to 64 [ 93.902635][ T6292] hfs: umask requires a value [ 93.919144][ T6292] hfs: unable to parse mount options [ 93.930300][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 94.135179][ T6292] loop1: detected capacity change from 0 to 16 [ 94.156239][ T8] usb 1-1: config 0 has no interfaces? [ 94.162589][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 94.195139][ T6292] erofs: (device loop1): mounted with root inode @ nid 36. [ 94.208898][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.228126][ T8] usb 1-1: config 0 descriptor?? [ 94.234360][ T6284] loop4: detected capacity change from 0 to 32768 [ 94.284598][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 87 @ nid 36 [ 94.294533][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 86 @ nid 36 [ 94.304821][ T6292] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 363 @ lcn 82 of nid 36 [ 94.317235][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 83 @ nid 36 [ 94.326529][ T6292] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 363 @ lcn 82 of nid 36 [ 94.344985][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 82 @ nid 36 [ 94.362324][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 79 @ nid 36 [ 94.397008][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 78 @ nid 36 [ 94.411420][ T6292] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1485 @ lcn 75 of nid 36 [ 94.432932][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 76 @ nid 36 [ 94.462028][ T8] usb 1-1: USB disconnect, device number 4 [ 94.465169][ T6292] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1485 @ lcn 75 of nid 36 [ 94.486426][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 75 @ nid 36 [ 94.501278][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 74 @ nid 36 [ 94.510954][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 72 @ nid 36 [ 94.523323][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 71 @ nid 36 [ 94.532863][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 70 @ nid 36 [ 94.549300][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 63 @ nid 36 [ 94.561234][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 61 @ nid 36 [ 94.573447][ T6292] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 94.586915][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 59 @ nid 36 [ 94.596065][ T6292] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1024 @ lcn 58 of nid 36 [ 94.606914][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 58 @ nid 36 [ 94.616060][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 56 @ nid 36 [ 94.625283][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 54 @ nid 36 [ 94.634750][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 50 @ nid 36 [ 94.645349][ T6292] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 94.663717][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 47 @ nid 36 [ 94.673868][ T6292] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1586 @ lcn 46 of nid 36 [ 94.684687][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 46 @ nid 36 [ 94.701738][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 45 @ nid 36 [ 94.711077][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 94.719992][ T6292] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 94.733503][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 43 @ nid 36 [ 94.750688][ T6292] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 94.799234][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 42 @ nid 36 [ 94.809909][ T6292] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 94.829099][ T2976] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.839813][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 41 @ nid 36 [ 94.854509][ T6292] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 774 @ lcn 40 of nid 36 [ 94.879688][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 40 @ nid 36 [ 94.894541][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 39 @ nid 36 [ 94.903856][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 38 @ nid 36 [ 94.922481][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 94.929464][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 36 @ nid 36 [ 94.951760][ T9] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 94.967148][ T9] usb 4-1: config 0 has too many interfaces: 241, using maximum allowed: 32 [ 94.977133][ T6292] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1468 @ lcn 31 of nid 36 [ 94.995197][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 241 [ 95.012744][ T9] usb 4-1: config 0 has no interface number 0 [ 95.019516][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 31 @ nid 36 [ 95.036658][ T9] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 95.038647][ T2976] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.078064][ T9] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 95.104791][ T9] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 95.127108][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 25 @ nid 36 [ 95.136288][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 24 @ nid 36 [ 95.176946][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 19 @ nid 36 [ 95.237042][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 13 @ nid 36 [ 95.246416][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 8 @ nid 36 [ 95.466130][ T2976] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.590011][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 6 @ nid 36 [ 95.656786][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 4 @ nid 36 [ 95.666087][ T6292] erofs: (device loop1): z_erofs_do_map_blocks: invalid logical cluster 0 at nid 36 [ 95.806677][ T6292] erofs: (device loop1): z_erofs_readahead: readahead error at folio 0 @ nid 36 [ 95.880439][ T6292] syz.1.245: attempt to access beyond end of device [ 95.880439][ T6292] loop1: rw=524288, sector=296, nr_sectors = 16 limit=16 [ 95.936800][ T6292] syz.1.245: attempt to access beyond end of device [ 95.936800][ T6292] loop1: rw=524288, sector=1049264, nr_sectors = 16 limit=16 [ 95.951179][ T6292] syz.1.245: attempt to access beyond end of device [ 95.951179][ T6292] loop1: rw=524288, sector=720, nr_sectors = 128 limit=16 [ 96.005418][ T2976] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.156910][ T6292] syz.1.245: attempt to access beyond end of device [ 96.156910][ T6292] loop1: rw=524288, sector=13478624080, nr_sectors = 24 limit=16 [ 96.607611][ T2976] bridge_slave_1: left allmulticast mode [ 96.614282][ T2976] bridge_slave_1: left promiscuous mode [ 96.726873][ T2976] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.207364][ T2976] bridge_slave_0: left allmulticast mode [ 98.213056][ T2976] bridge_slave_0: left promiscuous mode [ 98.336779][ T2976] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.812158][ T6292] syz.1.245: attempt to access beyond end of device [ 98.812158][ T6292] loop1: rw=524288, sector=13478624032, nr_sectors = 48 limit=16 [ 98.846767][ T6292] syz.1.245: attempt to access beyond end of device [ 98.846767][ T6292] loop1: rw=524288, sector=32, nr_sectors = 64 limit=16 [ 98.943826][ T6292] syz.1.245: attempt to access beyond end of device [ 98.943826][ T6292] loop1: rw=524288, sector=8, nr_sectors = 24 limit=16 [ 99.295673][ T6292] syz.1.245: attempt to access beyond end of device [ 99.295673][ T6292] loop1: rw=524288, sector=14425508768, nr_sectors = 8 limit=16 [ 102.289233][ T5232] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 102.300150][ T5232] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 102.308356][ T5232] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 102.317723][ T5232] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 102.326366][ T5232] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 102.334161][ T5232] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 102.413243][ T9] usb 4-1: string descriptor 0 read error: -71 [ 102.419575][ T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 102.428739][ T9] usb 4-1: New USB device strings: Mfr=228, Product=255, SerialNumber=0 [ 102.467472][ T9] usb 4-1: config 0 descriptor?? [ 102.474205][ T9] usb 4-1: can't set config #0, error -71 [ 102.481532][ T9] usb 4-1: USB disconnect, device number 3 [ 102.500391][ T6308] loop1: detected capacity change from 0 to 128 [ 102.561126][ T6308] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 102.598091][ T6308] sysv_free_block: trying to free block not in datazone [ 102.613525][ T6308] sysv_free_block: trying to free block not in datazone [ 102.633547][ T6308] sysv_free_block: trying to free block not in datazone [ 102.643822][ T6308] sysv_free_block: trying to free block not in datazone [ 102.685333][ T6308] sysv_free_block: trying to free block not in datazone [ 102.711516][ T2976] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.726687][ T6308] sysv_free_block: trying to free block not in datazone [ 102.736946][ T6308] sysv_free_block: trying to free block not in datazone [ 102.753943][ T2976] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.773989][ T2976] bond0 (unregistering): Released all slaves [ 102.809577][ T6313] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 102.817299][ T6313] IPv6: NLM_F_CREATE should be set when creating new route [ 102.824596][ T6313] IPv6: NLM_F_CREATE should be set when creating new route [ 102.875541][ T6317] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 103.102275][ T6330] loop3: detected capacity change from 0 to 256 [ 103.216227][ T2976] hsr_slave_0: left promiscuous mode [ 103.265521][ T2976] hsr_slave_1: left promiscuous mode [ 103.335617][ T2976] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.375608][ T2976] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.385640][ T6339] loop2: detected capacity change from 0 to 64 [ 103.407678][ T2976] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.443853][ T2976] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.468235][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.262'. [ 103.543259][ T2976] veth1_macvtap: left promiscuous mode [ 103.569264][ T2976] veth0_macvtap: left promiscuous mode [ 103.583893][ T2976] veth1_vlan: left promiscuous mode [ 103.605796][ T2976] veth0_vlan: left promiscuous mode [ 103.663533][ T6350] loop2: detected capacity change from 0 to 512 [ 103.689481][ T6350] EXT4-fs: Ignoring removed i_version option [ 103.719174][ T6350] EXT4-fs: Ignoring removed nobh option [ 103.738127][ T6350] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 103.786060][ T6350] EXT4-fs (loop2): 1 truncate cleaned up [ 103.800242][ T6350] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.027692][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 104.027710][ T29] audit: type=1804 audit(1724788193.618:30): pid=6308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.261" name="/newroot/59/file0" dev="loop1" ino=2 res=1 errno=0 [ 104.045869][ T5230] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.090844][ T5234] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 104.172484][ T6357] loop3: detected capacity change from 0 to 2048 [ 104.280385][ T6357] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.266: bad orphan inode 8192 [ 104.297128][ T6357] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.396814][ T5232] Bluetooth: hci4: command tx timeout [ 104.417454][ T5666] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.435586][ T29] audit: type=1326 audit(1724788193.998:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6367 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7329779e79 code=0x7ffc0000 [ 104.506677][ T29] audit: type=1326 audit(1724788194.028:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6367 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7329779e79 code=0x7ffc0000 [ 104.582181][ T29] audit: type=1326 audit(1724788194.058:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6367 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7329779e79 code=0x7ffc0000 [ 104.613642][ T6370] loop3: detected capacity change from 0 to 64 [ 104.643499][ T29] audit: type=1326 audit(1724788194.058:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6367 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7329779e79 code=0x7ffc0000 [ 104.727547][ T29] audit: type=1326 audit(1724788194.058:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6367 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7329779e79 code=0x7ffc0000 [ 104.785845][ T29] audit: type=1326 audit(1724788194.058:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6367 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7329779e79 code=0x7ffc0000 [ 104.872277][ T29] audit: type=1326 audit(1724788194.058:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6367 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7329779e79 code=0x7ffc0000 [ 104.943522][ T29] audit: type=1326 audit(1724788194.058:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6367 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7329779e79 code=0x7ffc0000 [ 105.006660][ T29] audit: type=1326 audit(1724788194.058:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6367 comm="syz.1.269" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7329779e79 code=0x7ffc0000 [ 105.186496][ T6366] loop2: detected capacity change from 0 to 32768 [ 105.209228][ T6366] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.270 (6366) [ 105.246872][ T6366] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 105.286483][ T6366] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 105.305736][ T6366] BTRFS info (device loop2): using free-space-tree [ 105.368564][ T2976] team0 (unregistering): Port device team_slave_1 removed [ 105.395102][ T6368] loop1: detected capacity change from 0 to 32768 [ 105.486460][ T2976] team0 (unregistering): Port device team_slave_0 removed [ 105.591893][ T5230] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 106.193575][ T6378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.274'. [ 106.400055][ T51] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.476677][ T5232] Bluetooth: hci4: command tx timeout [ 106.585966][ T6304] chnl_net:caif_netlink_parms(): no params data found [ 106.617663][ T6418] loop0: detected capacity change from 0 to 1024 [ 106.664432][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.716314][ T51] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.768459][ T51] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 106.799888][ T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.844624][ T51] usb 2-1: config 0 descriptor?? [ 106.849145][ T11] hfsplus: b-tree write err: -5, ino 4 [ 107.068013][ T6304] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.090672][ T6304] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.122590][ T6304] bridge_slave_0: entered allmulticast mode [ 107.148314][ T6304] bridge_slave_0: entered promiscuous mode [ 107.176835][ T6304] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.183975][ T6304] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.216342][ T6435] loop0: detected capacity change from 0 to 4096 [ 107.225904][ T6304] bridge_slave_1: entered allmulticast mode [ 107.248082][ T6304] bridge_slave_1: entered promiscuous mode [ 107.251344][ T6435] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 107.326077][ T6304] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.348297][ T51] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 107.355665][ T51] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 107.381390][ T6304] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.410075][ T51] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0D8C:0022.0002/input/input6 [ 107.488125][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 107.514998][ T51] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 107.532012][ T6304] team0: Port device team_slave_0 added [ 107.586501][ T6304] team0: Port device team_slave_1 added [ 107.614804][ T51] usb 2-1: USB disconnect, device number 3 [ 107.685564][ T6420] loop2: detected capacity change from 0 to 32768 [ 107.706025][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 107.735072][ T8] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 107.744417][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.757069][ T6304] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.764038][ T6304] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.774594][ T6445] loop0: detected capacity change from 0 to 1024 [ 107.803657][ T6304] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.815910][ T8] usb 4-1: config 0 descriptor?? [ 107.845400][ T6304] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.852473][ T6304] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.879178][ T6304] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.915506][ T6420] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 107.986186][ T6304] hsr_slave_0: entered promiscuous mode [ 107.999401][ T6420] XFS (loop2): Ending clean mount [ 108.023765][ T6304] hsr_slave_1: entered promiscuous mode [ 108.036223][ T6304] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 108.053868][ T6304] Cannot create hsr debugfs directory [ 108.120447][ T5230] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 108.174716][ T62] hfsplus: b-tree write err: -5, ino 4 [ 108.556753][ T5232] Bluetooth: hci4: command tx timeout [ 109.006756][ T51] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 109.040494][ T8] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 109.059072][ T8] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 109.097461][ T8] asix 4-1:0.0: probe with driver asix failed with error -71 [ 109.134381][ T8] usb 4-1: USB disconnect, device number 4 [ 109.180174][ T6304] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 109.195888][ T6304] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 109.211757][ T6304] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 109.221556][ T51] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 109.228210][ T6304] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 109.236255][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.258806][ T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.270528][ T51] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 109.336071][ T51] usb 3-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 109.356106][ T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.394809][ T6304] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.407935][ T51] usb 3-1: config 0 descriptor?? [ 109.555989][ T6304] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.574366][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.581609][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.635467][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.642727][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.704988][ T6495] loop0: detected capacity change from 0 to 32768 [ 109.714704][ T6495] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.293 (6495) [ 109.729132][ T6304] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 109.730811][ T6495] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 109.749959][ T6495] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 109.766743][ T6495] BTRFS info (device loop0): using free-space-tree [ 109.783650][ T6304] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.851754][ T51] thrustmaster 0003:044F:B653.0003: unbalanced delimiter at end of report description [ 109.906029][ T51] thrustmaster 0003:044F:B653.0003: parse failed [ 109.913033][ T51] thrustmaster 0003:044F:B653.0003: probe with driver thrustmaster failed with error -22 [ 110.154128][ T6493] loop1: detected capacity change from 0 to 32768 [ 110.163323][ T51] usb 3-1: USB disconnect, device number 3 [ 110.248169][ T6493] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 110.363129][ T6529] BTRFS info (device loop0): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 110.377281][ T6304] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.467531][ T6493] XFS (loop1): Ending clean mount [ 110.475600][ T6493] XFS (loop1): Quotacheck needed: Please wait. [ 110.592225][ T6493] XFS (loop1): Quotacheck: Done. [ 110.648274][ T5232] Bluetooth: hci4: command tx timeout [ 110.725061][ T5227] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 110.727466][ T6304] veth0_vlan: entered promiscuous mode [ 110.757848][ T6304] veth1_vlan: entered promiscuous mode [ 110.778831][ T6304] veth0_macvtap: entered promiscuous mode [ 110.788857][ T6304] veth1_macvtap: entered promiscuous mode [ 110.811062][ T6493] XFS (loop1): User initiated shutdown received. [ 110.839011][ T6304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.852027][ T6304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.853055][ T6493] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0xe2/0x160 (fs/xfs/xfs_fsops.c:453). Shutting down filesystem. [ 110.876053][ T6304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.877409][ T6493] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 110.901641][ T6304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.921973][ T6304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.939292][ T6304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.956245][ T6304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.966877][ T5312] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 110.974582][ T6304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.998634][ T6304] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.005441][ T5234] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 111.108375][ T6304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.156761][ T6304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.184690][ T6304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.213670][ T5312] usb 4-1: config 0 has an invalid interface number: 18 but max is 0 [ 111.226706][ T5312] usb 4-1: config 0 has no interface number 0 [ 111.243070][ T6304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.260262][ T5312] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.293981][ T6304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.306716][ T5312] usb 4-1: config 0 interface 18 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.329694][ T6559] 9pnet: p9_errstr2errno: server reported unknown error œæçæŒÎsÅ‚Ï£žßä“X\x§ÃãEµ [ 111.352201][ T6304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.383328][ T6304] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.394016][ T5312] usb 4-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.10 [ 111.403372][ T5312] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 111.416690][ T6304] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.433988][ T5312] usb 4-1: Manufacturer: syz [ 111.445965][ T5312] usb 4-1: config 0 descriptor?? [ 111.483635][ T6304] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.609592][ T6304] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.622505][ T6304] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.636740][ T6304] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.645485][ T6304] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.966697][ T3046] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.975306][ T3046] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.008684][ T6557] loop2: detected capacity change from 0 to 32768 [ 112.074979][ T6557] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section replicas_v0: invalid device 2 in entry user: 1/1 [2] [ 112.074979][ T6557] replicas_v0 (size 24): [ 112.074979][ T6557] btree: 1 [0] journal: 1 [0] user: 1 [2] [ 112.074979][ T6557] [ 112.082073][ T5312] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.18/0003:054C:03D5.0004/input/input7 [ 112.161089][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.169147][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.190002][ T5312] sony 0003:054C:03D5.0004: input,hidraw0: USB HID v0.00 Joystick [syz] on usb-dummy_hcd.3-1/input18 [ 112.212850][ T6580] loop1: detected capacity change from 0 to 2048 [ 112.239273][ T6557] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry [ 112.299564][ T6580] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=18576, location=18576 [ 112.394201][ T6580] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.510079][ T8] usb 4-1: USB disconnect, device number 5 [ 112.738042][ T6593] raw_sendmsg: syz.0.306 forgot to set AF_INET. Fix it! [ 113.014535][ T6608] loop4: detected capacity change from 0 to 128 [ 113.062609][ T6608] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 113.142638][ T6614] loop2: detected capacity change from 0 to 512 [ 113.160461][ T6608] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 113.173099][ T6614] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.183837][ T6614] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 113.261725][ T6614] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c118, mo2=0002] [ 113.271925][ T6614] System zones: 1-12 [ 113.317993][ T6614] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.311: corrupted in-inode xattr: e_value size too large [ 113.357959][ T6304] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 113.406654][ T5312] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 113.416427][ T6614] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.311: couldn't read orphan inode 15 (err -117) [ 113.451529][ T6614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.645327][ T6600] loop1: detected capacity change from 0 to 32768 [ 113.650416][ T6625] netlink: 232 bytes leftover after parsing attributes in process `syz.4.314'. [ 113.700975][ T5312] usb 4-1: Using ep0 maxpacket: 16 [ 113.713563][ T5312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 113.723449][ T6625] netlink: 72 bytes leftover after parsing attributes in process `syz.4.314'. [ 113.755625][ T5230] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.768150][ T5312] usb 4-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc [ 113.783640][ T5312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.800606][ T5312] usb 4-1: Product: syz [ 113.819949][ T51] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 113.830751][ T5312] usb 4-1: Manufacturer: syz [ 113.880662][ T5312] usb 4-1: SerialNumber: syz [ 113.919921][ T5312] usb 4-1: config 0 descriptor?? [ 113.942379][ T5312] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 114.059684][ T51] usb 1-1: Using ep0 maxpacket: 16 [ 114.090276][ T51] usb 1-1: config 0 has no interfaces? [ 114.095839][ T51] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 114.145516][ T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.178211][ T5312] usb 4-1: USB disconnect, device number 6 [ 114.188605][ T51] usb 1-1: config 0 descriptor?? [ 114.414929][ T6621] kvm: kvm [6620]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x2090100 [ 114.464333][ T51] usb 1-1: USB disconnect, device number 5 [ 114.713033][ T6673] loop2: detected capacity change from 0 to 1024 [ 114.824967][ T6671] loop4: detected capacity change from 0 to 4096 [ 114.906434][ T6680] loop3: detected capacity change from 0 to 2048 [ 114.917136][ T6673] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6 [ 114.986250][ T6680] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 115.021473][ T6683] loop1: detected capacity change from 0 to 2048 [ 115.056411][ T6671] EXT4-fs: Ignoring removed oldalloc option [ 115.084523][ T6671] EXT4-fs (loop4): Test dummy encryption mode enabled [ 115.099736][ T6683] loop1: p1 < > p3 [ 115.109484][ T6683] loop1: p3 size 134217728 extends beyond EOD, truncated [ 115.128833][ T6671] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.161641][ T6671] EXT4-fs (loop4): shut down requested (2) [ 115.187884][ T6671] fs-verity: sha512 using implementation "sha512-avx2" [ 118.408268][ T6304] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.949586][ T6722] input: syz1 as /devices/virtual/input/input9 [ 119.166968][ T5270] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 119.294553][ T6723] loop2: detected capacity change from 0 to 32768 [ 119.318550][ T6723] syz.2.340: attempt to access beyond end of device [ 119.318550][ T6723] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 119.332434][ T6723] lbmIODone: I/O error in JFS log [ 119.338808][ T6723] *** Log Format Error ! *** [ 119.343779][ T6723] lmLogInit: exit(-22) [ 119.348945][ T6723] lmLogOpen: exit(-22) [ 119.368923][ T5270] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 119.390885][ T5270] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 119.406960][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 119.418131][ T5270] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 119.447683][ T5270] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 119.469224][ T5270] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 119.481502][ T5270] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.500551][ T5270] usb 2-1: config 0 descriptor?? [ 119.603766][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 119.648861][ T9] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 119.667986][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.694618][ T9] usb 5-1: Product: syz [ 119.711570][ T9] usb 5-1: Manufacturer: syz [ 119.716215][ T9] usb 5-1: SerialNumber: syz [ 119.765995][ T9] usb 5-1: config 0 descriptor?? [ 119.783668][ T9] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 119.931586][ T6739] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 119.939871][ T5270] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 119.944194][ T6739] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 119.952139][ T5270] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 119.959949][ T6739] CPU: 0 UID: 0 PID: 6739 Comm: syz.2.348 Not tainted 6.11.0-rc5-next-20240827-syzkaller #0 [ 119.959974][ T6739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 119.959984][ T6739] RIP: 0010:mmap_region+0xc12/0x27f0 [ 119.960008][ T6739] Code: 0f b6 44 25 00 84 c0 0f 85 b7 19 00 00 41 8b 1e bf 01 00 00 00 89 de e8 3c a8 ad ff 83 fb 01 0f 85 88 01 00 00 e8 ee a3 ad ff <41> 80 3c 24 00 74 07 31 ff e8 40 7b 16 00 48 8b 1c 25 00 00 00 00 [ 119.960021][ T6739] RSP: 0018:ffffc90005257800 EFLAGS: 00010283 [ 119.960046][ T6739] RAX: ffffffff81e66a72 RBX: 0000000000000001 RCX: 0000000000040000 [ 119.960058][ T6739] RDX: ffffc90003de4000 RSI: 0000000000001af3 RDI: 0000000000001af4 [ 119.960072][ T6739] RBP: ffffc90005257c50 R08: ffffffff81e66a64 R09: 1ffffffff26f6f06 [ 119.960085][ T6739] R10: dffffc0000000000 R11: fffffbfff26f6f07 R12: dffffc0000000000 [ 119.960099][ T6739] R13: 1ffff92000a4af63 R14: ffffc90005257b18 R15: ffffc90005257ae0 [ 119.960112][ T6739] FS: 00007f0f6ecf16c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 119.960129][ T6739] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.960142][ T6739] CR2: 0000001b3281fffc CR3: 000000007cbd4000 CR4: 00000000003526f0 [ 119.960158][ T6739] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 119.960170][ T6739] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 119.960182][ T6739] Call Trace: [ 119.960190][ T6739] [ 119.960199][ T6739] ? __die_body+0x5f/0xb0 [ 119.960223][ T6739] ? die_addr+0xb0/0xe0 [ 119.960241][ T6739] ? exc_general_protection+0x3dd/0x5d0 [ 119.960270][ T6739] ? asm_exc_general_protection+0x26/0x30 [ 119.960301][ T6739] ? mmap_region+0xc04/0x27f0 [ 119.960319][ T6739] ? mmap_region+0xc12/0x27f0 [ 119.960338][ T6739] ? mmap_region+0xc12/0x27f0 [ 119.960368][ T6739] ? __pfx_mmap_region+0x10/0x10 [ 119.960396][ T6739] ? __pfx_lock_acquire+0x10/0x10 [ 119.960427][ T6739] ? mm_get_unmapped_area_vmflags+0xb9/0xf0 [ 119.960453][ T6739] ? bpf_lsm_mmap_addr+0x9/0x10 [ 119.960473][ T6739] ? security_mmap_addr+0x6f/0x250 [ 119.960497][ T6739] ? __get_unmapped_area+0x2ed/0x350 [ 119.960518][ T6739] do_mmap+0x8f0/0x1000 [ 119.960542][ T6739] ? __pfx_do_mmap+0x10/0x10 [ 119.960560][ T6739] ? __pfx_down_write_killable+0x10/0x10 [ 119.960577][ T6739] ? common_file_perm+0x1a6/0x210 [ 119.978498][ T5270] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 119.988359][ T6739] vm_mmap_pgoff+0x1dd/0x3d0 [ 119.988395][ T6739] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 119.988413][ T6739] ? __fget_files+0x29/0x470 [ 119.988435][ T6739] ? __fget_files+0x3f3/0x470 [ 119.988455][ T6739] ? __fget_files+0x29/0x470 [ 119.988478][ T6739] ksys_mmap_pgoff+0x4eb/0x720 [ 119.988496][ T6739] ? __x64_sys_mmap+0x7f/0x140 [ 119.988515][ T6739] do_syscall_64+0xf3/0x230 [ 119.988540][ T6739] ? clear_bhb_loop+0x35/0x90 [ 119.988566][ T6739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.988588][ T6739] RIP: 0033:0x7f0f6df79e79 [ 119.988615][ T6739] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.988630][ T6739] RSP: 002b:00007f0f6ecf1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 119.988652][ T6739] RAX: ffffffffffffffda RBX: 00007f0f6e115f80 RCX: 00007f0f6df79e79 [ 119.988665][ T6739] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000000020003000 [ 119.988676][ T6739] RBP: 00007f0f6dfe793e R08: 0000000000000003 R09: 0000000000000000 [ 119.988687][ T6739] R10: 0000000002000011 R11: 0000000000000246 R12: 0000000000000000 [ 120.241460][ T51] usb 2-1: USB disconnect, device number 4 [ 120.243345][ T6739] R13: 0000000000000000 R14: 00007f0f6e115f80 R15: 00007ffc14d8fd48 [ 120.243370][ T6739] [ 120.243378][ T6739] Modules linked in: [ 120.335399][ T6739] ---[ end trace 0000000000000000 ]--- [ 120.343669][ T6739] RIP: 0010:mmap_region+0xc12/0x27f0 [ 120.349098][ T6739] Code: 0f b6 44 25 00 84 c0 0f 85 b7 19 00 00 41 8b 1e bf 01 00 00 00 89 de e8 3c a8 ad ff 83 fb 01 0f 85 88 01 00 00 e8 ee a3 ad ff <41> 80 3c 24 00 74 07 31 ff e8 40 7b 16 00 48 8b 1c 25 00 00 00 00 [ 120.369762][ T6739] RSP: 0018:ffffc90005257800 EFLAGS: 00010283 [ 120.375904][ T6739] RAX: ffffffff81e66a72 RBX: 0000000000000001 RCX: 0000000000040000 [ 120.383972][ T6739] RDX: ffffc90003de4000 RSI: 0000000000001af3 RDI: 0000000000001af4 [ 120.392061][ T6739] RBP: ffffc90005257c50 R08: ffffffff81e66a64 R09: 1ffffffff26f6f06 [ 120.400135][ T6739] R10: dffffc0000000000 R11: fffffbfff26f6f07 R12: dffffc0000000000 [ 120.408210][ T6739] R13: 1ffff92000a4af63 R14: ffffc90005257b18 R15: ffffc90005257ae0 [ 120.416245][ T6739] FS: 00007f0f6ecf16c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 120.425565][ T6739] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.432272][ T6739] CR2: 0000001b3281fffc CR3: 000000007cbd4000 CR4: 00000000003506f0 [ 120.440324][ T6739] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 120.450186][ T6739] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 120.458589][ T6739] Kernel panic - not syncing: Fatal exception [ 120.464884][ T6739] Kernel Offset: disabled [ 120.469192][ T6739] Rebooting in 86400 seconds..