last executing test programs: 26.74701866s ago: executing program 1 (id=697): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xe, 0x5, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil) 25.090809381s ago: executing program 1 (id=709): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000500)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@loopback, 0x0, 0xfffc, 0x4e23, 0x5, 0xa, 0x20, 0x80, 0x32}, {0x5, 0x3, 0x8, 0x1, 0x9, 0xc8, 0x0, 0xffffffffffffffff}, {}, 0x800000, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x18}, 0x0, 0x2b}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x99, 0x4}}, 0xe8) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 24.932042633s ago: executing program 3 (id=710): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0x0) listen(r0, 0x0) 24.864824434s ago: executing program 1 (id=712): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0x12, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000004c0)={r3, &(0x7f00000002c0), &(0x7f0000000300)=@tcp6=r0, 0x1}, 0x20) 24.704002316s ago: executing program 3 (id=713): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 24.667542796s ago: executing program 1 (id=715): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 24.504000529s ago: executing program 3 (id=716): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0x3, @loopback, 0x8}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f0000000280)=0x10000, 0x4) 24.41514117s ago: executing program 1 (id=717): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 23.952609106s ago: executing program 3 (id=720): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 23.879891196s ago: executing program 1 (id=721): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000005600)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x20400, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) 23.60243307s ago: executing program 32 (id=721): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000240)='./bus\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x1, 0x54f4, &(0x7f0000005600)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x20400, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@desc={0x1, 0x0, @desc3}}) 23.59386452s ago: executing program 3 (id=723): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x50044) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000400)=0x6204500) 23.169720855s ago: executing program 3 (id=728): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000803, &(0x7f0000002ac0)=ANY=[], 0x2, 0x1ed, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r0, 0xaa1f, 0xff39, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) 8.038852838s ago: executing program 33 (id=728): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000803, &(0x7f0000002ac0)=ANY=[], 0x2, 0x1ed, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r0, 0xaa1f, 0xff39, 0x3) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) 6.005628684s ago: executing program 4 (id=810): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0) 4.260741996s ago: executing program 4 (id=820): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x7, &(0x7f00000006c0)={0x0, 0x0, 0xac1d}) fcntl$lock(r0, 0x25, &(0x7f0000000040)={0x1, 0x0, 0x8000, 0x7}) fcntl$lock(r0, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x2}) 4.056063339s ago: executing program 4 (id=822): r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 3.729588413s ago: executing program 4 (id=824): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xf, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xf4240}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000001780)="000000000000000002b2138373ef", 0x0, 0x10003, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.609606864s ago: executing program 5 (id=825): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xe8c}, 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='upd'], 0x1a, 0xffffffffffffffff) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 3.276011128s ago: executing program 4 (id=827): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.09993861s ago: executing program 5 (id=830): r0 = io_uring_setup(0x280d, &(0x7f0000001280)={0x0, 0x160, 0x100, 0xffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x10) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001340)={0x1, 0x1, 0x0, &(0x7f00000001c0)=[{0x0}], 0x0}, 0x20) 2.828086434s ago: executing program 5 (id=831): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7800, 0x80, 0xfffffffc, 0xdc67}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000140)={'syztnl1\x00', &(0x7f0000000240)={'syztnl0\x00', r1, 0x29, 0x0, 0x6, 0x7f, 0x5, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, 0x0, 0x40, 0x6, 0x41}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f00000000c0)={'syztnl1\x00', r1, 0x0, 0x0, 0x0, 0x0, 0xd, @dev={0xfe, 0x80, '\x00', 0x8}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x0, 0xfffffffc}}) 2.014650124s ago: executing program 2 (id=835): setrlimit(0xf, &(0x7f00000000c0)={0x4, 0x7}) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) 1.784376417s ago: executing program 0 (id=836): timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x27}, 0x74) recvmmsg(r0, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40012040, 0x0) 1.703999708s ago: executing program 5 (id=837): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1ff, 0xc0005) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000140)=""/71) 1.478950351s ago: executing program 0 (id=838): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x500}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x3000, 0x3}) 1.263193594s ago: executing program 2 (id=839): r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x8, 0xf, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) 1.184124895s ago: executing program 0 (id=840): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 1.169699295s ago: executing program 5 (id=841): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x2000414, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000540)="$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") syz_mount_image$ext4(&(0x7f0000000580)='ext3\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f0000000080), 0x0, 0x5ee, &(0x7f0000000bc0)="$eJzs3c9vFdUeAPDvTH/QUt5rIS/vPVxIE2MgUQotYIhxAVtDCP6IGzdWWhAp0NAaLZpQEtyYGDfGmLhyIf4VKtGFG1e60sSNK0NC1LA08Zq5nWl727ktLW2nMp9PcntnzpnDOUP77Zk5PWduALU1mH1JI/ZGxGQS0Z/Mzud1Rp45OHfcvT/eOZu9kmg0XvgtiSRPK45P8ve+vHBPRHz/dRJ7fvp2Wb1TM9cujk5MjF/N9w9NX5o8NDVz7eCFS6Pnx8+PXx55auT4saPHjg8fXtd5XS9JO3Xz9Tf73zv98mef/JkMf/7z6SROxLP5gYvPY6MMxmDz/yRZntV3fKMrq0hH/nPSsSgt6aywQaxJ8f3rioj/RX90xMI3rz/efa7SxgGbqpFENICaSsQ/1FRxHVDc2y+9D04ruSoBtsLdk3MDAMvjv3NubDB6mmMDO+8lsXhYJ4mI9Y3MtdoVEd99c3p+jGwzxuGAcrM3IuL/ZfGfNON/IHpioBn/aUv8Z9cFZ/L3LP35dda/dKhY/MPWmYv/nhXjP9rE/yuL4v/VddY/uLD5Wm9L/Peu95QAAAAAAACgtm6fjIgny/7+n87P/4mS+T99EXFiA+ofXLK//O//6Z0NqAYocfdkxDOl83/TYvbvQEe+9a/mfICu5NyF3vHDEfHviDgQXTvOXZgYH16hjoPv7/m4Xd7g3Py/m8Urqz97XzgivdO5o7XM2Oj06IOeNxBx90bEI6Xzf5P5/j8p6f+z3weT91nHnsdvnWmXt3r8A5ul8WnE/tL+f+GpFcnKz+c4lPX/+dfSOh59+4Mv29W/OP6bE43z/dXa7RET8OCy/n/nyvE/kCx+Xs/U2us4MtPZaJe33uv/7uTF5iNnuvO0t0anp68OR3Qnpzqy1Jb0kbW3GR5GRTwU8ZLF/4HHVh7/K7v+742I2SX/dvJ765riwn//6vulXXtc/0N1svgfW1P/X7aRHzs7n/JFXrZ5zMitga/a1X9//f/RZl9/IE8x/gdzPirCtLs1vSRSO8uytrq9AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAwSCNiVyTp0Px2mg4NRfRFxH9iZzpxZWr6iXNX3rg8luU1P/8/LT7pt39uPyk+/39g0f7Ikv0jEbE7Ij7s6G3uD529MjFW9ckDAAAAAAAAAAAAAAAAAADANtHXZv1/5teOqlsHbLrOqhsAVKYk/n+ooh3A1tP/Q32Jf6gv8Q/1Jf6hvsQ/1Jf4h/oS/1Bf4h8AAAAAAB4qu/fd/jGJiNmne5uvTHee11Vpy4DNllbdAKAyHvED9WXqD9SXe3wgWSW/p22h1UquZPLsAxQGAAAAAAAAAAAAgNrZv9f6f6gr6/+hvqz/h/oq1v/vq7gdwNZzjw/EKiv5S9f/r1oKAAAAAAAAAAAAANhIUzPXLo5OTIxftfHS9mjGVm40Go3r2U/BdmnPP3yjmAq/XdqzZKNY63d/par7nQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT6OwAA//9ocBjd") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 969.290877ms ago: executing program 2 (id=842): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x9, 0x8, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000003bc0)={r1, &(0x7f0000003a80)="759b19", &(0x7f0000003b40)=""/74}, 0x20) 943.679878ms ago: executing program 0 (id=843): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}}, 0x1c) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0603d06, &(0x7f0000000040)) 795.52783ms ago: executing program 4 (id=844): syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="0180613e04b0c63f6642531e0800450000"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 668.318021ms ago: executing program 2 (id=845): sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d30000000000000050003"], 0x44}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000047400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080007002609090914000600626f6e643000000000000000000000000800"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) 603.954052ms ago: executing program 0 (id=846): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 360.378895ms ago: executing program 2 (id=847): setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0xfffffffc, 0xff, 0x80000000}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b2a, &(0x7f0000000040)) 249.796647ms ago: executing program 0 (id=848): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'hsr0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0x8}}}}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}}, 0x0) 44.476539ms ago: executing program 2 (id=849): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x2808000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x294, &(0x7f0000000500)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) 0s ago: executing program 5 (id=850): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt(r1, 0x7fffffff, 0x8, 0x0, 0x0) kernel console output (not intermixed with test programs): y 0 port 6081 - 0 [ 66.043348][ T4257] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.052161][ T4257] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.061016][ T4257] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.089851][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.099070][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.125640][ T4254] device veth1_vlan entered promiscuous mode [ 66.136377][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.152862][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.164730][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.172257][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.180733][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.190118][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.197988][ T4268] Bluetooth: hci4: command 0x040f tx timeout [ 66.205404][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.213881][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.222925][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.231536][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.252139][ T4253] device veth0_macvtap entered promiscuous mode [ 66.269212][ T4252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.280217][ T48] Bluetooth: hci3: command 0x040f tx timeout [ 66.281849][ T4252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.286603][ T4268] Bluetooth: hci1: command 0x040f tx timeout [ 66.286639][ T4268] Bluetooth: hci2: command 0x040f tx timeout [ 66.286667][ T4268] Bluetooth: hci0: command 0x040f tx timeout [ 66.318727][ T4252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.326489][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.335151][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.343727][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.352428][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.362434][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.371518][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.381145][ T4261] device veth0_vlan entered promiscuous mode [ 66.388781][ T4253] device veth1_macvtap entered promiscuous mode [ 66.425833][ T4252] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.440944][ T4252] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.450633][ T4252] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.459588][ T4252] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.481882][ T4261] device veth1_vlan entered promiscuous mode [ 66.492932][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.504820][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.515868][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.526575][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.538063][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.561188][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.570583][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.579382][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.588255][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.597889][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.607611][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.616758][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.649673][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.661482][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.671653][ T4253] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.683490][ T4253] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.695561][ T4253] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.714784][ T4253] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.723539][ T4253] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.733747][ T4253] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.743061][ T4253] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.755902][ T4254] device veth0_macvtap entered promiscuous mode [ 66.768191][ T4306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.773831][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.776615][ T4306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.784925][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.805808][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.814747][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.847282][ T4254] device veth1_macvtap entered promiscuous mode [ 66.860572][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.871697][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.885710][ T4261] device veth0_macvtap entered promiscuous mode [ 66.945414][ T4261] device veth1_macvtap entered promiscuous mode [ 66.955935][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.964596][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.003834][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.012809][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.021455][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.032320][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.037731][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.050488][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.056148][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.061792][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.080123][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.091436][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.101979][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.112991][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.151664][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.166398][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.181426][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.195183][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.208526][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.219122][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.229890][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.240594][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.252393][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.263882][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.287761][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.296192][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.308262][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.322429][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.331812][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.346041][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.362082][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.378186][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.408250][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.417716][ T4334] loop0: detected capacity change from 0 to 1024 [ 67.421922][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.450332][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.467121][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.490882][ T4261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.499296][ T4334] hfsplus: xattr search failed [ 67.516382][ T4254] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.532424][ T4254] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.555253][ T4254] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.564115][ T4254] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.598370][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.619347][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.653445][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.673130][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.691462][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.702026][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.712901][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.724511][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.735127][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.747993][ T4261] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.758647][ T4261] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.770529][ T4261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.799375][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.811498][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.823355][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.835323][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.845317][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.858317][ T4261] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.887792][ T4261] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.896676][ T4261] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.908469][ T4261] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.992933][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.012722][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.096389][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.150576][ T4306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.196950][ T4306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.255822][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.274633][ T4268] Bluetooth: hci4: command 0x0419 tx timeout [ 68.319641][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.328451][ T4306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.355035][ T48] Bluetooth: hci3: command 0x0419 tx timeout [ 68.355392][ T4268] Bluetooth: hci2: command 0x0419 tx timeout [ 68.361132][ T48] Bluetooth: hci1: command 0x0419 tx timeout [ 68.367174][ T4268] Bluetooth: hci0: command 0x0419 tx timeout [ 68.394503][ T4306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.411937][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.437444][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.447209][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.474576][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.495482][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.532171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.571361][ T4357] loop0: detected capacity change from 0 to 128 [ 68.650239][ T4359] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 68.835828][ T4367] loop3: detected capacity change from 0 to 256 [ 68.876720][ T4366] loop2: detected capacity change from 0 to 512 [ 68.920022][ T4366] EXT4-fs: Ignoring removed bh option [ 68.953655][ T4367] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 69.065565][ T4366] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 69.160703][ T4366] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 69.173366][ T4379] loop4: detected capacity change from 0 to 256 [ 69.285450][ T4366] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.10: corrupted in-inode xattr [ 69.364991][ T4366] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.10: couldn't read orphan inode 15 (err -117) [ 69.436266][ T4366] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 69.760099][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 69.767065][ T4388] autofs4:pid:4388:autofs_fill_super: pipe file descriptor does not contain proper ops [ 69.990950][ T4396] loop2: detected capacity change from 0 to 512 [ 70.060152][ T4396] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.22: invalid indirect mapped block 10 (level 1) [ 70.110534][ T4392] loop4: detected capacity change from 0 to 8192 [ 70.183748][ T4396] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.22: invalid indirect mapped block 8 (level 1) [ 70.215519][ T4396] EXT4-fs (loop2): 1 truncate cleaned up [ 70.221183][ T4392] ======================================================= [ 70.221183][ T4392] WARNING: The mand mount option has been deprecated and [ 70.221183][ T4392] and is ignored by this kernel. Remove the mand [ 70.221183][ T4392] option from the mount to silence this warning. [ 70.221183][ T4392] ======================================================= [ 70.261140][ T4392] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 70.327678][ T4396] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 70.559366][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 71.000327][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.006956][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.236445][ T4471] netlink: 104 bytes leftover after parsing attributes in process `syz.0.54'. [ 72.525305][ T4478] loop1: detected capacity change from 0 to 1024 [ 72.537425][ T4484] loop3: detected capacity change from 0 to 256 [ 72.671232][ T4484] FAT-fs (loop3): Directory bread(block 64) failed [ 72.724289][ T4484] FAT-fs (loop3): Directory bread(block 65) failed [ 72.731075][ T4484] FAT-fs (loop3): Directory bread(block 66) failed [ 72.773366][ T4484] FAT-fs (loop3): Directory bread(block 67) failed [ 72.791080][ T4484] FAT-fs (loop3): Directory bread(block 68) failed [ 72.800861][ T4484] FAT-fs (loop3): Directory bread(block 69) failed [ 72.811342][ T4484] FAT-fs (loop3): Directory bread(block 70) failed [ 72.822360][ T4484] FAT-fs (loop3): Directory bread(block 71) failed [ 72.832960][ T4484] FAT-fs (loop3): Directory bread(block 72) failed [ 72.849738][ T4484] FAT-fs (loop3): Directory bread(block 73) failed [ 72.861240][ T9] hfsplus: b-tree write err: -5, ino 3 [ 73.500480][ T4507] loop4: detected capacity change from 0 to 1024 [ 73.520644][ T4507] EXT4-fs: Ignoring removed bh option [ 73.654763][ T4507] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 73.759175][ T4507] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 74.018628][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 74.025126][ T4525] loop2: detected capacity change from 0 to 16 [ 74.162804][ T4525] erofs: (device loop2): mounted with root inode @ nid 36. [ 74.241372][ T4525] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36 [ 74.458599][ T4540] loop1: detected capacity change from 0 to 256 [ 74.576397][ T4540] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 74.796186][ T4540] exFAT-fs (loop1): hint_cluster is invalid (17) [ 74.913616][ T126] kernel write not supported for file /dsp (pid: 126 comm: kworker/1:2) [ 74.933407][ T126] kernel write not supported for file /dsp (pid: 126 comm: kworker/1:2) [ 75.182545][ T4268] Bluetooth: Frame is too long (len 12, expected len 4) [ 75.237457][ T4562] loop0: detected capacity change from 0 to 16 [ 75.305163][ T4562] erofs: (device loop0): mounted with root inode @ nid 36. [ 75.368970][ T4268] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 75.408400][ T4562] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 75.523110][ T26] audit: type=1800 audit(1749037778.191:2): pid=4562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.95" name="file3" dev="loop0" ino=89 res=0 errno=0 [ 75.663086][ T4550] loop4: detected capacity change from 0 to 32768 [ 75.744460][ T4550] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.90 (4550) [ 75.908133][ T4550] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 75.966570][ T4550] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 76.015056][ T4550] BTRFS info (device loop4): metadata ratio 2 [ 76.024903][ T4550] BTRFS info (device loop4): allowing degraded mounts [ 76.031732][ T4550] BTRFS info (device loop4): force zlib compression, level 3 [ 76.074507][ T4550] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 76.117237][ T7] cfg80211: failed to load regulatory.db [ 76.124541][ T4550] BTRFS info (device loop4): use zstd compression, level 3 [ 76.214309][ T4550] BTRFS info (device loop4): force clearing of disk cache [ 76.242587][ T4576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.101'. [ 76.255350][ T4550] BTRFS info (device loop4): max_inline at 0 [ 76.262123][ T4550] BTRFS info (device loop4): using free space tree [ 76.677995][ T4550] BTRFS info (device loop4): enabling ssd optimizations [ 76.703853][ T4550] BTRFS info (device loop4): rebuilding free space tree [ 76.713532][ T4599] netlink: 'syz.2.104': attribute type 1 has an invalid length. [ 76.998535][ T4562] syz.0.95 (4562) used greatest stack depth: 20240 bytes left [ 77.040567][ T26] audit: type=1800 audit(1749037779.711:3): pid=4550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.90" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 77.314871][ T4610] Bluetooth: MGMT ver 1.22 [ 77.572543][ T4615] loop3: detected capacity change from 0 to 1024 [ 77.582491][ T4254] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 77.653434][ T4617] netlink: 28 bytes leftover after parsing attributes in process `syz.2.112'. [ 77.674335][ T126] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 77.683217][ T4615] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 77.694408][ T4574] loop1: detected capacity change from 0 to 40427 [ 77.866404][ T4615] EXT4-fs (loop3): shut down requested (2) [ 77.874651][ T126] usb 1-1: Using ep0 maxpacket: 32 [ 77.924412][ T126] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 77.935150][ T4574] F2FS-fs (loop1): Found nat_bits in checkpoint [ 77.991072][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.045479][ T126] usb 1-1: config 0 descriptor?? [ 78.155200][ T4261] EXT4-fs (loop3): unmounting filesystem. [ 78.191855][ T4574] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 78.270976][ T126] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 78.312411][ T126] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 78.340778][ T4639] loop3: detected capacity change from 0 to 256 [ 78.387945][ T4639] exfat: Deprecated parameter 'utf8' [ 78.394292][ T126] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 78.401781][ T126] usb 1-1: media controller created [ 78.416801][ T4639] exfat: Deprecated parameter 'namecase' [ 78.453941][ T4639] exfat: Deprecated parameter 'namecase' [ 78.489424][ T4639] exfat: Deprecated parameter 'utf8' [ 78.498245][ T126] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 78.566460][ T126] az6027: usb out operation failed. (-71) [ 78.575687][ T4639] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x8212fc2e, utbl_chksum : 0xe619d30d) [ 78.589739][ T126] az6027: usb out operation failed. (-71) [ 78.607604][ T126] stb0899_attach: Driver disabled by Kconfig [ 78.631428][ T126] az6027: no front-end attached [ 78.631428][ T126] [ 78.654706][ T4641] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 78.687357][ T4252] syz-executor: attempt to access beyond end of device [ 78.687357][ T4252] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 78.703440][ T126] az6027: usb out operation failed. (-71) [ 78.733938][ T126] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 78.781376][ T126] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 78.840591][ T126] dvb-usb: schedule remote query interval to 400 msecs. [ 78.868718][ T126] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 78.932077][ T126] usb 1-1: USB disconnect, device number 2 [ 79.001978][ T4651] mmap: syz.3.121 (4651) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 79.129988][ T126] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 79.179308][ T4654] loop4: detected capacity change from 0 to 8 [ 79.478688][ T26] audit: type=1326 audit(1749037782.151:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4658 comm="syz.0.124" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbebd18e929 code=0x0 [ 80.493621][ T4667] loop1: detected capacity change from 0 to 32768 [ 80.685293][ T4667] XFS (loop1): Mounting V5 Filesystem [ 80.923877][ T4667] XFS (loop1): Ending clean mount [ 81.304163][ C0] sched: RT throttling activated [ 81.406614][ T4707] loop3: detected capacity change from 0 to 64 [ 81.407647][ T4683] loop2: detected capacity change from 0 to 131072 [ 81.421962][ T4683] F2FS-fs (loop2): Wrong CP boundary, start(512) end(1536) blocks(0) [ 81.430194][ T4683] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 81.435366][ T4252] XFS (loop1): Unmounting Filesystem [ 81.451432][ T4683] F2FS-fs (loop2): invalid crc value [ 81.473546][ T4683] F2FS-fs (loop2): Found nat_bits in checkpoint [ 81.532701][ T4683] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 81.539894][ T4683] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 81.838093][ T4717] loop4: detected capacity change from 0 to 2048 [ 82.009742][ T4717] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 82.478974][ T4733] loop0: detected capacity change from 0 to 1024 [ 82.501860][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 82.868385][ T4743] netlink: 16 bytes leftover after parsing attributes in process `syz.1.156'. [ 82.885926][ T4626] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 83.116858][ T4626] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 83.144439][ T4626] usb 1-1: config 179 has no interface number 0 [ 83.150853][ T4626] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 83.209704][ T4626] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 83.244281][ T4626] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 83.284225][ T4626] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8 [ 83.314974][ T4626] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 83.354374][ T4626] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 83.363511][ T4626] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.418630][ T4733] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 83.434413][ T4733] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 83.704602][ T126] usb 1-1: USB disconnect, device number 3 [ 83.704720][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 83.719519][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 83.732615][ T4756] loop2: detected capacity change from 0 to 1024 [ 83.819614][ T4756] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 83.904295][ T4756] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 83.997640][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 84.014500][ T4759] loop3: detected capacity change from 0 to 4096 [ 84.112210][ T4759] ntfs: volume version 3.1. [ 84.451374][ T4766] loop4: detected capacity change from 0 to 512 [ 84.478883][ T4766] EXT4-fs warning (device loop4): read_mmp_block:115: Error -117 while reading MMP block 15 [ 84.558428][ T4771] loop3: detected capacity change from 0 to 512 [ 84.603893][ T4771] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 84.833756][ T4771] EXT4-fs error (device loop3): ext4_do_update_inode:5253: inode #16: comm syz.3.166: corrupted inode contents [ 84.897077][ T4771] EXT4-fs error (device loop3): ext4_dirty_inode:6118: inode #16: comm syz.3.166: mark_inode_dirty error [ 84.959927][ T4771] EXT4-fs error (device loop3): ext4_do_update_inode:5253: inode #16: comm syz.3.166: corrupted inode contents [ 85.006022][ T4771] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.166: mark_inode_dirty error [ 85.021881][ T4771] EXT4-fs error (device loop3): ext4_do_update_inode:5253: inode #16: comm syz.3.166: corrupted inode contents [ 85.096605][ T4771] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 85.124513][ T4771] EXT4-fs error (device loop3): ext4_do_update_inode:5253: inode #16: comm syz.3.166: corrupted inode contents [ 85.176749][ T4771] EXT4-fs error (device loop3): ext4_truncate:4312: inode #16: comm syz.3.166: mark_inode_dirty error [ 85.197063][ T4771] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 85.229381][ T4771] EXT4-fs (loop3): 1 truncate cleaned up [ 85.239121][ T4771] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 85.259851][ T4771] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.264498][ T4789] tun0: tun_chr_ioctl cmd 1074025677 [ 85.283167][ T4763] loop2: detected capacity change from 0 to 32768 [ 85.285987][ T40] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 85.316817][ T40] EXT4-fs error (device loop3): ext4_release_dquot:6838: comm kworker/u4:2: Failed to release dquot type 1 [ 85.349422][ T4789] tun0: linktype set to 778 [ 85.529987][ T4261] EXT4-fs (loop3): unmounting filesystem. [ 85.629689][ T4794] sch_fq: defrate 0 ignored. [ 85.641554][ T4795] loop4: detected capacity change from 0 to 512 [ 85.714489][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 85.757080][ T4795] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 85.838526][ T4795] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 85.842377][ T4802] loop0: detected capacity change from 0 to 64 [ 85.899463][ T4795] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.971571][ T4802] hfs: request for non-existent node 327680 in B*Tree [ 85.981169][ T4802] hfs: request for non-existent node 327680 in B*Tree [ 85.994044][ T4802] hfs: request for non-existent node 327680 in B*Tree [ 86.035146][ T4802] hfs: request for non-existent node 327680 in B*Tree [ 86.046033][ T4804] hfs: request for non-existent node 327680 in B*Tree [ 86.053494][ T4804] hfs: request for non-existent node 327680 in B*Tree [ 86.061496][ T4795] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 86.251551][ T75] hfs: request for non-existent node 327680 in B*Tree [ 86.284335][ T75] hfs: request for non-existent node 327680 in B*Tree [ 86.390456][ T4812] loop2: detected capacity change from 0 to 16 [ 86.417471][ T4795] EXT4-fs (loop4): re-mounted. Quota mode: writeback. [ 86.417600][ T4812] erofs: (device loop2): mounted with root inode @ nid 36. [ 86.526104][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 86.684359][ T4626] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 86.718519][ T4820] loop2: detected capacity change from 0 to 512 [ 86.777103][ T4820] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.186: bad orphan inode 15 [ 86.804909][ T4820] ext4_test_bit(bit=14, block=5) = 0 [ 86.813909][ T4820] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 86.884354][ T4626] usb 1-1: Using ep0 maxpacket: 16 [ 86.894012][ T4626] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 86.907076][ T4626] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 86.917188][ T4626] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.925601][ T4626] usb 1-1: Product: syz [ 86.929981][ T4626] usb 1-1: Manufacturer: syz [ 86.935034][ T4626] usb 1-1: SerialNumber: syz [ 86.936943][ T4820] EXT4-fs error (device loop2): __ext4_new_inode:1075: comm syz.2.186: reserved inode found cleared - inode=1 [ 86.960788][ T4626] usb 1-1: config 0 descriptor?? [ 86.978149][ T4626] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 86.997257][ T4626] usb 1-1: Detected FT232R [ 87.055378][ T4820] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 87.095056][ T4820] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem [ 87.126556][ T4816] loop3: detected capacity change from 0 to 32768 [ 87.182779][ T4626] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 87.254998][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 87.298164][ T4816] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 87.352960][ T4829] loop4: detected capacity change from 0 to 4096 [ 87.417868][ T4626] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 87.454357][ T4829] NILFS (loop4): unrecognized mount option "barriñ»(sØ&Œ‹=~er" [ 87.615389][ T4626] usb 1-1: USB disconnect, device number 4 [ 87.646227][ T4626] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 87.722839][ T4626] ftdi_sio 1-1:0.0: device disconnected [ 87.750695][ T4261] ocfs2: Unmounting device (7,3) on (node local) [ 88.107323][ T4841] block nbd0: shutting down sockets [ 88.358731][ T4844] loop3: detected capacity change from 0 to 512 [ 88.400305][ T4845] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 88.438485][ C0] Illegal XDP return value 16128 on prog (id 19) dev lo, expect packet loss! [ 88.446689][ T4829] loop4: detected capacity change from 0 to 32768 [ 88.457644][ T4845] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 88.485847][ T4844] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 88.533844][ T4844] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.600256][ T4829] XFS (loop4): Mounting V5 Filesystem [ 88.612269][ T4844] EXT4-fs error (device loop3): ext4_get_first_dir_block:3594: inode #12: comm syz.3.195: directory missing '.' [ 88.635359][ T4844] EXT4-fs (loop3): Remounting filesystem read-only [ 88.693873][ T4261] EXT4-fs (loop3): unmounting filesystem. [ 88.727892][ T4829] XFS (loop4): Ending clean mount [ 89.371707][ T4254] XFS (loop4): Unmounting Filesystem [ 89.604257][ T4303] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 89.624732][ T4876] loop1: detected capacity change from 0 to 512 [ 89.678577][ T4876] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 89.803459][ T4876] EXT4-fs (loop1): 1 truncate cleaned up [ 89.813062][ T4303] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.843811][ T4876] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 89.864056][ T4303] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.933537][ T4303] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 89.973935][ T4303] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.003956][ T4303] usb 1-1: Product: syz [ 90.049251][ T4303] usb 1-1: Manufacturer: syz [ 90.055455][ T4303] usb 1-1: SerialNumber: syz [ 90.133003][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 90.139884][ T4890] loop2: detected capacity change from 0 to 64 [ 90.311526][ T4303] usb 1-1: 0:2 : does not exist [ 90.313625][ T4890] hfs: keylen 1794 too large [ 90.338812][ T4303] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 90.441529][ T4303] usb 1-1: USB disconnect, device number 5 [ 90.536908][ T4897] sch_fq: defrate 0 ignored. [ 90.763895][ T4364] udevd[4364]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.801615][ T4882] loop3: detected capacity change from 0 to 32768 [ 90.846446][ T4882] [ 90.846446][ T4882] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.846446][ T4882] [ 90.871350][ T4904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.217'. [ 90.909979][ T4907] loop4: detected capacity change from 0 to 128 [ 90.939693][ T26] audit: type=1800 audit(1749037793.611:5): pid=4882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.208" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 90.995759][ T4882] [ 90.995759][ T4882] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 90.995759][ T4882] [ 91.001153][ T4907] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 91.024730][ T4882] [ 91.024730][ T4882] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.024730][ T4882] [ 91.097781][ T107] [ 91.097781][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.097781][ T107] [ 91.161085][ T4907] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 91.219896][ T46] [ 91.219896][ T46] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.219896][ T46] [ 91.234409][ T4914] capability: warning: `syz.0.220' uses 32-bit capabilities (legacy support in use) [ 91.264328][ T46] [ 91.264328][ T46] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.264328][ T46] [ 91.305022][ T4261] [ 91.305022][ T4261] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.305022][ T4261] [ 91.346496][ T106] [ 91.346496][ T106] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.346496][ T106] [ 91.422271][ T4261] [ 91.422271][ T4261] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 91.422271][ T4261] [ 91.521650][ T4918] loop0: detected capacity change from 0 to 512 [ 91.594590][ T4918] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 91.618121][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 91.659812][ T4918] EXT4-fs (loop0): 1 truncate cleaned up [ 91.684480][ T4918] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 91.917768][ T4926] loop4: detected capacity change from 0 to 1024 [ 91.942448][ T4905] netlink: 'syz.2.218': attribute type 6 has an invalid length. [ 91.973366][ T4257] EXT4-fs (loop0): unmounting filesystem. [ 92.069702][ T4922] IPVS: Scheduler module ip_vs_ not found [ 92.307484][ T4926] loop4: detected capacity change from 0 to 4096 [ 92.720774][ T4934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.229'. [ 92.992919][ T4916] loop1: detected capacity change from 0 to 40427 [ 93.023454][ T4916] F2FS-fs (loop1): build fault injection attr: rate: 4, type: 0x3ffff [ 93.034358][ T4303] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 93.043556][ T4916] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x4 [ 93.065789][ T4916] F2FS-fs (loop1): invalid crc value [ 93.072245][ T4916] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x14e/0x300 [ 93.083809][ T4916] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x3e6/0x9b0 [ 93.128617][ T4916] F2FS-fs (loop1): Found nat_bits in checkpoint [ 93.174283][ T4626] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 93.206600][ T4916] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x3e6/0x9b0 [ 93.224364][ T4303] usb 4-1: Using ep0 maxpacket: 16 [ 93.256093][ T4303] usb 4-1: config index 0 descriptor too short (expected 69, got 36) [ 93.270485][ T4916] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x3e6/0x9b0 [ 93.284452][ T4303] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.313808][ T4916] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of __get_meta_page+0x14e/0x300 [ 93.328056][ T4303] usb 4-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89 [ 93.374289][ T4626] usb 1-1: Using ep0 maxpacket: 8 [ 93.379429][ T4303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.388011][ T4626] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 93.409184][ T4916] F2FS-fs (loop1): Start checkpoint disabled! [ 93.410350][ T4303] usb 4-1: Product: syz [ 93.425093][ T4626] usb 1-1: config 179 has no interface number 0 [ 93.436388][ T4916] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_grab_meta_page+0x63/0x210 [ 93.446748][ T4303] usb 4-1: Manufacturer: syz [ 93.450513][ T4626] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 93.462321][ T4303] usb 4-1: SerialNumber: syz [ 93.490694][ T4626] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 93.502985][ T4303] usb 4-1: config 0 descriptor?? [ 93.522731][ T4626] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 93.534630][ T4916] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 93.541837][ T4303] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622 [ 93.573633][ T4626] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 93.594403][ T4626] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 93.625550][ T4626] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 93.667842][ T4626] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.706324][ T4938] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 93.727750][ T4916] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_get_read_data_page+0xe5/0x610 [ 93.803224][ T4916] F2FS-fs (loop1) : inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x12a/0x910 [ 94.068619][ T46] kworker/u4:3: attempt to access beyond end of device [ 94.068619][ T46] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 94.109390][ T4629] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input6 [ 94.171376][ T4941] loop4: detected capacity change from 0 to 32768 [ 94.323516][ T4634] usb 1-1: USB disconnect, device number 6 [ 94.329520][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 94.329566][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 94.353061][ T4941] ERROR: (device loop4): xtSearch: XT_GETPAGE: xtree page corrupt [ 94.353061][ T4941] [ 94.365639][ T4303] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 94.389016][ T4303] gspca_pac7302: probe of 4-1:0.0 failed with error -71 [ 94.391208][ T4941] xtLookup: xtSearch returned -5 [ 94.420550][ T4634] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 94.433501][ T4303] usb 4-1: USB disconnect, device number 2 [ 94.444254][ T4941] free_index: error reading directory table [ 95.281051][ T4954] loop2: detected capacity change from 0 to 40427 [ 95.387729][ T4954] F2FS-fs (loop2): Wrong SIT boundary, start(1536) end(50334208) blocks(1024) [ 95.449402][ T4954] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 95.507466][ T4954] F2FS-fs (loop2): invalid crc value [ 95.629286][ T4954] F2FS-fs (loop2): Found nat_bits in checkpoint [ 95.881770][ T4954] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 95.920936][ T4954] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 96.447591][ T4253] syz-executor: attempt to access beyond end of device [ 96.447591][ T4253] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 97.350210][ T4968] loop3: detected capacity change from 0 to 262144 [ 97.359908][ T4968] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 scanned by syz.3.244 (4968) [ 97.394113][ T4968] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 97.405050][ T4968] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 97.414829][ T4968] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 97.425530][ T4968] BTRFS info (device loop3): trying to use backup root at mount time [ 97.433650][ T4968] BTRFS info (device loop3): turning on sync discard [ 97.440450][ T4968] BTRFS info (device loop3): setting nodatacow, compression disabled [ 97.448638][ T4968] BTRFS info (device loop3): doing ref verification [ 97.455992][ T4968] BTRFS info (device loop3): disabling tree log [ 97.462290][ T4968] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 97.473058][ T4968] BTRFS info (device loop3): trying to use backup root at mount time [ 97.481289][ T4968] BTRFS info (device loop3): use zlib compression, level 3 [ 97.488764][ T4968] BTRFS info (device loop3): using free space tree [ 97.668434][ T4968] BTRFS info (device loop3): checking UUID tree [ 98.023544][ T4261] BTRFS info (device loop3): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53 [ 98.024624][ T4979] loop1: detected capacity change from 0 to 32768 [ 98.095349][ T4979] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.248 (4979) [ 98.401497][ T4979] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 98.524456][ T4979] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 98.580295][ T4979] BTRFS info (device loop1): max_inline at 0 [ 98.653119][ T4979] BTRFS info (device loop1): enabling disk space caching [ 98.694663][ T4979] BTRFS info (device loop1): setting nodatasum [ 98.769588][ T4979] BTRFS info (device loop1): turning off barriers [ 98.777903][ T26] audit: type=1326 audit(1749037801.451:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5024 comm="syz.3.258" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb50758e929 code=0x0 [ 98.824415][ T4979] BTRFS info (device loop1): turning on flush-on-commit [ 98.831475][ T4979] BTRFS info (device loop1): enabling ssd optimizations [ 98.900998][ T4979] BTRFS info (device loop1): disabling disk space caching [ 98.964257][ T4979] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 98.973391][ T5031] loop0: detected capacity change from 0 to 64 [ 99.044353][ T4979] BTRFS info (device loop1): use zstd compression, level 3 [ 99.051691][ T4979] BTRFS info (device loop1): use zlib compression, level 3 [ 99.116620][ T4979] BTRFS info (device loop1): force clearing of disk cache [ 99.167756][ T4979] BTRFS info (device loop1): max_inline at 4096 [ 99.388985][ T5040] loop2: detected capacity change from 0 to 256 [ 99.608626][ T5040] FAT-fs (loop2): Directory bread(block 1285) failed [ 99.672598][ T5040] FAT-fs (loop2): FAT read failed (blocknr 1281) [ 99.939101][ T4979] BTRFS error (device loop1): open_ctree failed: -12 [ 100.152944][ T4377] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (4377) [ 100.818972][ T5085] sctp: [Deprecated]: syz.0.274 (pid 5085) Use of int in maxseg socket option. [ 100.818972][ T5085] Use struct sctp_assoc_value instead [ 100.832798][ T5089] loop3: detected capacity change from 0 to 8 [ 101.254973][ T5093] block nbd0: shutting down sockets [ 102.216018][ T5124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'. [ 102.641907][ T5137] netlink: 208 bytes leftover after parsing attributes in process `syz.4.295'. [ 102.710158][ T5110] loop0: detected capacity change from 0 to 32768 [ 102.736535][ T5110] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.284 (5110) [ 102.804481][ T5110] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 102.825035][ T5110] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 102.885780][ T5110] BTRFS info (device loop0): force clearing of disk cache [ 102.892986][ T5110] BTRFS info (device loop0): force zlib compression, level 3 [ 102.968938][ T5110] BTRFS info (device loop0): enabling auto defrag [ 102.987695][ T5145] loop3: detected capacity change from 0 to 64 [ 102.997154][ T5110] BTRFS info (device loop0): max_inline at 0 [ 103.003222][ T5110] BTRFS info (device loop0): enabling disk space caching [ 103.054973][ T5110] BTRFS info (device loop0): disk space caching is enabled [ 103.079286][ T5145] hfs: keylen 1794 too large [ 103.427069][ T5110] BTRFS info (device loop0): enabling ssd optimizations [ 103.439436][ T5172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.302'. [ 103.462147][ T5110] BTRFS info (device loop0): rebuilding free space tree [ 103.479719][ T3584] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 103.549601][ T5110] BTRFS info (device loop0): disabling free space tree [ 103.564748][ T5110] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 103.586170][ T5110] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 103.686315][ T3584] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 103.722885][ T3584] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 103.754050][ T3584] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.785088][ T3584] usb 3-1: config 0 descriptor?? [ 103.794328][ T5156] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 104.045718][ T4257] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 104.127164][ T5181] loop3: detected capacity change from 0 to 2048 [ 104.310303][ T5181] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 104.324883][ T3584] arvo 0003:1E7D:30D4.0001: hidraw0: USB HID v1.01 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 104.351047][ T5181] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.521386][ T26] audit: type=1800 audit(1749037807.191:7): pid=5181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.306" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 104.813794][ T4303] usb 3-1: USB disconnect, device number 2 [ 104.859560][ T5192] fido_id[5192]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 104.917611][ T4261] EXT4-fs (loop3): unmounting filesystem. [ 105.698189][ T5212] netlink: 40 bytes leftover after parsing attributes in process `syz.4.315'. [ 106.054856][ T5220] loop4: detected capacity change from 0 to 4096 [ 106.830967][ T5240] loop3: detected capacity change from 0 to 256 [ 106.871417][ T5240] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 106.910149][ T5240] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 106.974230][ T5240] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 107.469767][ T5234] loop1: detected capacity change from 0 to 32768 [ 107.481599][ T5232] loop4: detected capacity change from 0 to 32768 [ 107.566808][ T5250] loop3: detected capacity change from 0 to 8 [ 107.570294][ T5234] JBD2: Ignoring recovery information on journal [ 107.640238][ T5232] XFS (loop4): Mounting V5 Filesystem [ 107.667965][ T5250] SQUASHFS error: lzo decompression failed, data probably corrupt [ 107.681371][ T5243] loop0: detected capacity change from 0 to 32768 [ 107.699229][ T5250] SQUASHFS error: Failed to read block 0x91: -5 [ 107.706285][ T5250] SQUASHFS error: Unable to read metadata cache entry [8f] [ 107.721387][ T5250] SQUASHFS error: Unable to read inode 0x11f [ 107.757714][ T5243] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 107.792514][ T5234] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 107.912173][ T5232] XFS (loop4): Ending clean mount [ 107.976282][ T5232] XFS (loop4): Quotacheck needed: Please wait. [ 108.183254][ T5232] XFS (loop4): Quotacheck: Done. [ 108.193390][ T4252] ocfs2: Unmounting device (7,1) on (node local) [ 108.193624][ T4257] (syz-executor,4257,0):ocfs2_inode_is_valid_to_delete:872 ERROR: Skipping delete of system file 72 [ 108.280313][ T4257] ocfs2: Unmounting device (7,0) on (node local) [ 108.461173][ T5268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.335'. [ 108.615495][ T4254] XFS (loop4): Unmounting Filesystem [ 108.664123][ T5246] loop2: detected capacity change from 0 to 32768 [ 108.848225][ T5282] loop3: detected capacity change from 0 to 128 [ 108.852676][ T5246] XFS (loop2): Mounting V5 Filesystem [ 109.042940][ T5246] XFS (loop2): Ending clean mount [ 109.079441][ T5246] XFS (loop2): Quotacheck needed: Please wait. [ 109.202911][ T5246] XFS (loop2): Quotacheck: Done. [ 109.309068][ T5289] loop0: detected capacity change from 0 to 4096 [ 109.352457][ T5289] ntfs3: Unknown parameter '…àØ`/’”§´ÇÑØ”[‰iöÏSý}@' [ 109.422853][ T5292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.343'. [ 109.492384][ T4253] XFS (loop2): Unmounting Filesystem [ 109.621701][ T5296] capability: warning: `syz.1.345' uses deprecated v2 capabilities in a way that may be insecure [ 110.119750][ T5303] loop4: detected capacity change from 0 to 4096 [ 110.296335][ T5300] device bridge0 entered promiscuous mode [ 110.418288][ T5312] netlink: 24 bytes leftover after parsing attributes in process `syz.2.344'. [ 110.576873][ T5289] loop0: detected capacity change from 0 to 32768 [ 110.592470][ T5316] loop3: detected capacity change from 0 to 128 [ 110.686653][ T5289] JBD2: Ignoring recovery information on journal [ 110.808291][ T26] audit: type=1800 audit(1749037813.481:8): pid=5316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.350" name="file0" dev="loop3" ino=1048611 res=0 errno=0 [ 110.854298][ T5289] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 111.183476][ T4257] ocfs2: Unmounting device (7,0) on (node local) [ 111.329507][ T5330] loop1: detected capacity change from 0 to 128 [ 111.438596][ T5330] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 111.521924][ T5334] loop3: detected capacity change from 0 to 1024 [ 113.014406][ T5340] loop1: detected capacity change from 0 to 32768 [ 113.155583][ T5340] XFS (loop1): Mounting V5 Filesystem [ 113.315204][ T5340] XFS (loop1): Ending clean mount [ 113.440691][ T4252] XFS (loop1): Unmounting Filesystem [ 113.526524][ T4254] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 113.536465][ T4254] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 114.783351][ T5384] loop4: detected capacity change from 0 to 32768 [ 114.828093][ T26] audit: type=1800 audit(1749037817.501:9): pid=5384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.375" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 115.047713][ T5404] loop2: detected capacity change from 0 to 4096 [ 115.094463][ T5404] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 115.521091][ T5417] netlink: 8 bytes leftover after parsing attributes in process `syz.3.391'. [ 115.885322][ T5410] loop0: detected capacity change from 0 to 32768 [ 115.950893][ T5410] XFS (loop0): Mounting V5 Filesystem [ 116.041769][ T5410] XFS (loop0): Ending clean mount [ 116.157631][ T4257] XFS (loop0): Unmounting Filesystem [ 116.524059][ T5440] sctp: [Deprecated]: syz.3.397 (pid 5440) Use of struct sctp_assoc_value in delayed_ack socket option. [ 116.524059][ T5440] Use struct sctp_sack_info instead [ 116.831284][ T5454] loop0: detected capacity change from 0 to 512 [ 116.929918][ T5454] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 116.989110][ T5454] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.262474][ T4257] EXT4-fs (loop0): unmounting filesystem. [ 117.473863][ T5469] netlink: 24 bytes leftover after parsing attributes in process `syz.0.408'. [ 117.483132][ T48] Bluetooth: hci4: command 0x0405 tx timeout [ 117.630577][ T5475] loop0: detected capacity change from 0 to 256 [ 117.657416][ T5475] exfat: Deprecated parameter 'utf8' [ 117.725948][ T5475] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 118.054718][ T5455] loop3: detected capacity change from 0 to 32768 [ 118.085087][ T5455] XFS: attr2 mount option is deprecated. [ 118.133703][ T5484] program syz.1.415 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.158298][ T5455] XFS (loop3): Mounting V5 Filesystem [ 118.165146][ T5486] netlink: 32 bytes leftover after parsing attributes in process `syz.0.414'. [ 118.246366][ T5455] XFS (loop3): Ending clean mount [ 118.261385][ T5455] XFS (loop3): Quotacheck needed: Please wait. [ 118.397366][ T5455] XFS (loop3): Quotacheck: Done. [ 118.481330][ T5494] loop1: detected capacity change from 0 to 2048 [ 118.597359][ T5494] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 118.640209][ T4261] XFS (loop3): Unmounting Filesystem [ 118.748034][ T5494] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 118.837769][ T5501] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 118.894847][ T5501] EXT4-fs (loop1): This should not happen!! Data will be lost [ 118.894847][ T5501] [ 118.913439][ T5494] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 118.913908][ T5501] EXT4-fs (loop1): Total free blocks count 0 [ 118.960584][ T5501] EXT4-fs (loop1): Free/Dirty block details [ 118.975216][ T5501] EXT4-fs (loop1): free_blocks=66060288 [ 118.984977][ T5494] EXT4-fs (loop1): This should not happen!! Data will be lost [ 118.984977][ T5494] [ 119.024744][ T5501] EXT4-fs (loop1): dirty_blocks=64 [ 119.029937][ T5501] EXT4-fs (loop1): Block reservation details [ 119.572486][ T5522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.428'. [ 119.717375][ T5526] netlink: 48 bytes leftover after parsing attributes in process `syz.4.430'. [ 120.047977][ T5532] block nbd0: server does not support multiple connections per device. [ 120.067479][ T5532] block nbd0: shutting down sockets [ 120.181924][ T5538] loop3: detected capacity change from 0 to 512 [ 120.244707][ T5538] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 120.263103][ T5538] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 120.304296][ T5538] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 120.381165][ T5538] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 120.395552][ T5538] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0080] [ 120.444753][ T5538] EXT4-fs (loop3): orphan cleanup on readonly fs [ 120.499366][ T5538] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.436: bg 0: block 34: padding at end of block bitmap is not set [ 120.572030][ T5518] loop0: detected capacity change from 0 to 32768 [ 120.584736][ T5538] Quota error (device loop3): write_blk: dquota write failed [ 120.595208][ T5518] XFS: attr2 mount option is deprecated. [ 120.623310][ T5538] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 120.671760][ T5518] XFS (loop0): Mounting V5 Filesystem [ 120.694109][ T5538] EXT4-fs error (device loop3): ext4_acquire_dquot:6802: comm syz.3.436: Failed to acquire dquot type 1 [ 120.723646][ T5538] EXT4-fs (loop3): 1 truncate cleaned up [ 120.794751][ T5538] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 120.903370][ T5518] XFS (loop0): Ending clean mount [ 120.931616][ T5518] XFS (loop0): Quotacheck needed: Please wait. [ 120.990422][ T5538] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 121.014263][ T5518] XFS (loop0): Quotacheck: Done. [ 121.059197][ T5538] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e01c, mo2=0080] [ 121.083773][ T5560] __sock_release: fasync list not empty! [ 121.240603][ T4261] EXT4-fs (loop3): unmounting filesystem. [ 121.257619][ T4257] XFS (loop0): Unmounting Filesystem [ 121.530592][ T5574] loop4: detected capacity change from 0 to 128 [ 121.606697][ T5578] netlink: 104 bytes leftover after parsing attributes in process `syz.1.451'. [ 121.693733][ T5574] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 121.804395][ T5574] UDF-fs: error (device loop4): udf_read_inode: (ino 86) failed unknown file type=13 [ 122.489138][ T5580] loop2: detected capacity change from 0 to 32768 [ 122.605645][ T5594] loop4: detected capacity change from 0 to 4096 [ 122.634677][ T5594] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512) [ 122.703478][ T5580] XFS (loop2): Mounting V5 Filesystem [ 122.979485][ T5580] XFS (loop2): Ending clean mount [ 122.992509][ T5579] loop3: detected capacity change from 0 to 40427 [ 123.021506][ T5580] XFS (loop2): Quotacheck needed: Please wait. [ 123.052487][ T5579] F2FS-fs (loop3): invalid crc value [ 123.101041][ T5580] XFS (loop2): Quotacheck: Done. [ 123.129827][ T5579] F2FS-fs (loop3): Found nat_bits in checkpoint [ 123.188589][ T5580] XFS (loop2): User initiated shutdown received. [ 123.208778][ T5580] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:499). Shutting down filesystem. [ 123.259200][ T5596] loop0: detected capacity change from 0 to 32768 [ 123.261900][ T5580] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 123.327163][ T5579] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 123.335295][ T5596] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 123.353349][ T5596] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 123.379890][ T5596] BTRFS info (device loop0): setting nodatacow, compression disabled [ 123.410433][ T5596] BTRFS info (device loop0): max_inline at 0 [ 123.431644][ T5596] BTRFS info (device loop0): turning off barriers [ 123.449781][ T5596] BTRFS info (device loop0): turning on flush-on-commit [ 123.472566][ T5596] BTRFS info (device loop0): doing ref verification [ 123.509812][ T4253] XFS (loop2): Unmounting Filesystem [ 123.521295][ T5596] BTRFS info (device loop0): force clearing of disk cache [ 123.550368][ T5596] BTRFS info (device loop0): enabling ssd optimizations [ 123.562592][ T5596] BTRFS info (device loop0): max_inline at 4096 [ 123.581120][ T5596] BTRFS info (device loop0): using free space tree [ 123.581197][ T4261] syz-executor: attempt to access beyond end of device [ 123.581197][ T4261] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 123.664247][ T5623] syz.4.465 uses obsolete (PF_INET,SOCK_PACKET) [ 123.812053][ T5596] BTRFS info (device loop0): rebuilding free space tree [ 124.214324][ T4257] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 124.493849][ T5643] syz.3.464[5643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.493952][ T5643] syz.3.464[5643] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 124.639447][ T5647] netlink: 44 bytes leftover after parsing attributes in process `syz.0.467'. [ 124.721585][ T5647] netlink: 44 bytes leftover after parsing attributes in process `syz.0.467'. [ 124.781699][ T5647] Zero length message leads to an empty skb [ 125.120154][ T5658] loop2: detected capacity change from 0 to 2048 [ 125.164383][ T5658] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 125.590841][ T5650] loop3: detected capacity change from 0 to 32768 [ 125.701060][ T5650] XFS (loop3): Mounting V5 Filesystem [ 125.754593][ T5680] loop0: detected capacity change from 0 to 2048 [ 125.767952][ T5680] EXT4-fs: Ignoring removed mblk_io_submit option [ 125.791837][ T5680] EXT4-fs: Ignoring removed nobh option [ 125.860414][ T5650] XFS (loop3): Ending clean mount [ 125.866744][ T5680] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 125.887247][ T5650] XFS (loop3): Quotacheck needed: Please wait. [ 125.908728][ T5680] EXT4-fs (loop0): unmounting filesystem. [ 125.968218][ T5650] XFS (loop3): Quotacheck: Done. [ 126.195017][ T4261] XFS (loop3): Unmounting Filesystem [ 127.184550][ T5696] loop0: detected capacity change from 0 to 32768 [ 127.243338][ T5696] ocfs2: Slot 0 on device (7,0) was already allocated to this node! [ 127.295142][ T5696] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 127.329135][ T26] audit: type=1800 audit(1749037830.001:10): pid=5696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.485" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 127.339772][ T5700] loop3: detected capacity change from 0 to 32768 [ 127.397149][ T5700] XFS: attr2 mount option is deprecated. [ 127.436820][ T4257] ocfs2: Unmounting device (7,0) on (node local) [ 127.524456][ T5700] XFS (loop3): Mounting V5 Filesystem [ 127.781895][ T5700] XFS (loop3): Ending clean mount [ 127.807991][ T5700] XFS (loop3): Quotacheck needed: Please wait. [ 127.932064][ T5700] XFS (loop3): Quotacheck: Done. [ 128.238050][ T4261] XFS (loop3): Unmounting Filesystem [ 128.314681][ T5707] loop1: detected capacity change from 0 to 32768 [ 128.446071][ T5707] diRead: diIAGRead returned -5 [ 128.936399][ T5735] loop2: detected capacity change from 0 to 128 [ 129.008136][ T5735] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 129.077486][ T5735] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 129.927780][ T5759] sctp: [Deprecated]: syz.0.507 (pid 5759) Use of struct sctp_assoc_value in delayed_ack socket option. [ 129.927780][ T5759] Use struct sctp_sack_info instead [ 130.129582][ T5739] loop3: detected capacity change from 0 to 32768 [ 130.138409][ T5763] loop2: detected capacity change from 0 to 1024 [ 130.221267][ T5739] XFS (loop3): Mounting V5 Filesystem [ 130.427037][ T5739] XFS (loop3): Ending clean mount [ 130.708693][ T4261] XFS (loop3): Unmounting Filesystem [ 130.910739][ T5786] loop0: detected capacity change from 0 to 512 [ 130.981281][ T5782] loop1: detected capacity change from 0 to 4096 [ 131.024329][ T5786] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 131.108753][ T5786] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 131.299351][ T5795] device syz_tun entered promiscuous mode [ 131.332901][ T5795] device syz_tun left promiscuous mode [ 131.440088][ T4257] EXT4-fs (loop0): unmounting filesystem. [ 131.878175][ T5797] loop0: detected capacity change from 0 to 4096 [ 131.910534][ T5797] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 131.962971][ T5778] loop4: detected capacity change from 0 to 40427 [ 131.996744][ T5778] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff [ 132.081656][ T5778] F2FS-fs (loop4): invalid crc value [ 132.117720][ T5778] F2FS-fs (loop4): Found nat_bits in checkpoint [ 132.301353][ T5778] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 132.436488][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.442881][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.664951][ T4254] syz-executor: attempt to access beyond end of device [ 132.664951][ T4254] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 133.207047][ T5813] loop0: detected capacity change from 0 to 22 [ 133.255572][ T5813] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 133.289370][ T5801] loop2: detected capacity change from 0 to 40427 [ 133.303323][ T5813] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 133.390251][ T5801] F2FS-fs (loop2): invalid crc value [ 133.431126][ T5801] F2FS-fs (loop2): Found nat_bits in checkpoint [ 133.634444][ T5801] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 133.656511][ T5820] team0: Device gtp0 is of different type [ 133.951283][ T4253] syz-executor: attempt to access beyond end of device [ 133.951283][ T4253] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 134.289958][ T5015] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 134.440361][ T4252] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 134.454515][ T4252] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 134.488238][ T5015] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 134.514354][ T5015] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.522409][ T5015] usb 5-1: Product: syz [ 134.569306][ T5015] usb 5-1: Manufacturer: syz [ 134.573971][ T5015] usb 5-1: SerialNumber: syz [ 134.608463][ T5015] usb 5-1: config 0 descriptor?? [ 134.741340][ T5836] loop2: detected capacity change from 0 to 2048 [ 134.791709][ T5836] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 134.879484][ T5838] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 134.907985][ T5195] usb 5-1: USB disconnect, device number 2 [ 135.364507][ T5015] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 135.554322][ T5015] usb 4-1: Using ep0 maxpacket: 32 [ 135.562916][ T5015] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 135.614304][ T5015] usb 4-1: config 0 has no interface number 0 [ 135.639775][ T5015] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 135.667995][ T5015] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.684998][ T5015] usb 4-1: Product: syz [ 135.694423][ T5015] usb 4-1: Manufacturer: syz [ 135.699088][ T5015] usb 4-1: SerialNumber: syz [ 135.723519][ T5859] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.733277][ T5859] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.742200][ T5859] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.751019][ T5859] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.761435][ T5015] usb 4-1: config 0 descriptor?? [ 135.778819][ T5015] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 135.814803][ T5015] usb 4-1: selecting invalid altsetting 1 [ 135.830943][ T5015] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 135.864316][ T5015] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 135.891160][ T5015] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 135.933224][ T5015] usb 4-1: media controller created [ 135.975891][ T5015] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 136.249574][ T5015] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 136.286125][ T5015] zl10353_read_register: readreg error (reg=127, ret==-71) [ 136.321026][ T5015] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 136.433187][ T5015] usb 4-1: USB disconnect, device number 3 [ 137.160772][ T5883] loop0: detected capacity change from 0 to 8192 [ 137.215447][ T5883] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 137.237710][ T5883] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 137.283786][ T5883] REISERFS (device loop0): using ordered data mode [ 137.345384][ T5883] reiserfs: using flush barriers [ 137.384223][ T5883] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 137.514926][ T5883] REISERFS (device loop0): checking transaction log (loop0) [ 137.582285][ T5883] REISERFS (device loop0): Using r5 hash to sort names [ 137.638823][ T5883] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 137.684523][ T5883] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 137.709225][ T5887] loop4: detected capacity change from 0 to 32768 [ 137.883988][ T5887] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 137.928352][ T5896] loop2: detected capacity change from 0 to 4096 [ 138.031351][ T5896] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512) [ 138.083192][ T4254] ocfs2: Unmounting device (7,4) on (node local) [ 138.269735][ T5876] loop1: detected capacity change from 0 to 40427 [ 138.372222][ T5876] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 138.410730][ T5876] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 138.464968][ T5876] F2FS-fs (loop1): build fault injection attr: rate: 17008, type: 0x3ffff [ 138.473588][ T5876] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x6 [ 138.559744][ T5876] F2FS-fs (loop1): invalid crc value [ 138.641971][ T5876] F2FS-fs (loop1): Found nat_bits in checkpoint [ 138.851266][ T5876] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 138.888830][ T5876] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 139.082482][ T5876] syz.1.553: attempt to access beyond end of device [ 139.082482][ T5876] loop1: rw=2049, sector=53248, nr_sectors = 96 limit=40427 [ 139.224591][ T5917] syz.1.553: attempt to access beyond end of device [ 139.224591][ T5917] loop1: rw=2049, sector=53344, nr_sectors = 8 limit=40427 [ 139.400555][ T5920] loop4: detected capacity change from 0 to 4096 [ 139.450596][ T4252] syz-executor: attempt to access beyond end of device [ 139.450596][ T4252] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 139.534842][ T5920] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 139.558860][ T5927] loop2: detected capacity change from 0 to 64 [ 139.764706][ T5920] fs-verity: sha256 using implementation "sha256-avx2" [ 139.766517][ T5931] loop3: detected capacity change from 0 to 128 [ 139.798254][ T5920] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.568: bg 0: block 66: padding at end of block bitmap is not set [ 139.927883][ T5920] fs-verity (loop4, inode 15): ext4_end_enable_verity() failed with err -117 [ 140.083506][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 140.384210][ T4302] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 140.574213][ T4302] usb 3-1: Using ep0 maxpacket: 32 [ 140.581241][ T4302] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 140.614201][ T4302] usb 3-1: config 0 has no interface number 0 [ 140.630465][ T4302] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 140.675849][ T4302] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.683906][ T4302] usb 3-1: Product: syz [ 140.715352][ T4302] usb 3-1: Manufacturer: syz [ 140.736941][ T4302] usb 3-1: SerialNumber: syz [ 140.757159][ T4302] usb 3-1: config 0 descriptor?? [ 140.799017][ T4302] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 141.006260][ T4302] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 141.045155][ T4302] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 141.262903][ T5941] loop0: detected capacity change from 0 to 32768 [ 141.280302][ T5938] loop1: detected capacity change from 0 to 32768 [ 141.357079][ T5938] XFS (loop1): Mounting V5 Filesystem [ 141.458478][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 141.469200][ T4302] usb 3-1: USB disconnect, device number 3 [ 141.502781][ T4302] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 141.514465][ T5941] XFS (loop0): Mounting V5 Filesystem [ 141.550403][ T4302] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 141.598236][ T4302] quatech2 3-1:0.51: device disconnected [ 141.670216][ T5938] XFS (loop1): Ending clean mount [ 141.685827][ T5938] XFS (loop1): Quotacheck needed: Please wait. [ 141.711498][ T5941] XFS (loop0): Ending clean mount [ 141.738636][ T5941] XFS (loop0): Quotacheck needed: Please wait. [ 141.766649][ T5938] XFS (loop1): Quotacheck: Done. [ 141.810918][ T5941] XFS (loop0): Quotacheck: Done. [ 141.870876][ T4252] XFS (loop1): Unmounting Filesystem [ 141.918365][ T5972] loop3: detected capacity change from 0 to 1024 [ 142.123655][ T4257] XFS (loop0): Unmounting Filesystem [ 142.545920][ T5984] loop4: detected capacity change from 0 to 2048 [ 142.613298][ T5984] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 142.655676][ T5984] UDF-fs: Scanning with blocksize 512 failed [ 142.694441][ T4302] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 142.708511][ T5984] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.884294][ T4302] usb 4-1: Using ep0 maxpacket: 8 [ 142.893253][ T4302] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 142.917371][ T4302] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 142.948259][ T4302] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 142.978945][ T4302] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.012949][ T4302] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 143.041415][ T4302] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.288070][ T4302] usb 4-1: GET_CAPABILITIES returned 0 [ 143.293741][ T4302] usbtmc 4-1:16.0: can't read capabilities [ 143.447329][ T5997] mkiss: ax0: crc mode is auto. [ 143.463378][ T5982] loop2: detected capacity change from 0 to 32768 [ 143.511227][ T6002] loop4: detected capacity change from 0 to 64 [ 143.590334][ T5980] usb 4-1: usbtmc_ioctl_clear_out_halt returned -32 [ 143.607480][ T5982] XFS (loop2): Mounting V5 Filesystem [ 143.618974][ T4302] usb 4-1: USB disconnect, device number 4 [ 143.799110][ T5982] XFS (loop2): Ending clean mount [ 143.810591][ T5982] XFS (loop2): Quotacheck needed: Please wait. [ 143.881564][ T5982] XFS (loop2): Quotacheck: Done. [ 144.043779][ T4253] XFS (loop2): Unmounting Filesystem [ 144.140452][ T6011] loop0: detected capacity change from 0 to 4096 [ 144.253591][ T6011] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 144.283372][ T6011] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 144.302019][ T6011] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 144.340094][ T6011] ntfs3: loop0: try to read out of volume at offset 0x3fffffc0c00 [ 144.389335][ T6011] ntfs3: loop0: try to read out of volume at offset 0x3fffffc1c00 [ 144.414460][ T6011] ntfs3: loop0: try to read out of volume at offset 0x3fffffc2c00 [ 144.464847][ T6011] ntfs3: loop0: try to read out of volume at offset 0x3fffffc4c00 [ 144.472758][ T6011] ntfs3: loop0: try to read out of volume at offset 0x3fffffc8c00 [ 144.529043][ T6011] ntfs3: loop0: try to read out of volume at offset 0x3fffffd0c00 [ 144.570520][ T6011] ntfs3: loop0: try to read out of volume at offset 0x3fffffe0c00 [ 145.247721][ T6027] loop2: detected capacity change from 0 to 32768 [ 145.264019][ T6027] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 145.272792][ T6027] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 145.349067][ T6027] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 145.364453][ T5194] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 145.371666][ T5194] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 145.434864][ T5194] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 63ms [ 145.445568][ T5194] gfs2: fsid=syz:syz.0: jid=0: Done [ 145.453156][ T6027] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 145.605392][ T5644] kernel read not supported for file /dsp (pid: 5644 comm: kworker/0:18) [ 145.628481][ T6045] netlink: 'syz.1.613': attribute type 4 has an invalid length. [ 146.202073][ T6059] loop3: detected capacity change from 0 to 256 [ 146.211471][ T6057] loop4: detected capacity change from 0 to 8192 [ 146.292337][ T6059] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 146.315850][ T6057] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 146.369247][ T6057] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 146.378867][ T6059] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 146.394878][ T6057] REISERFS (device loop4): using ordered data mode [ 146.416011][ T6059] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 146.430000][ T6057] reiserfs: using flush barriers [ 146.479658][ T6057] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 146.496505][ T6057] REISERFS (device loop4): checking transaction log (loop4) [ 146.525094][ T6057] REISERFS (device loop4): Using rupasov hash to sort names [ 146.532468][ T6057] REISERFS (device loop4): using 3.5.x disk format [ 146.665615][ T6057] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 146.746999][ T6057] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 146.809119][ T6057] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 146.884559][ T6057] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 146.955086][ T6066] loop3: detected capacity change from 0 to 8192 [ 146.961429][ T6057] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 147.000857][ T6057] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 147.034194][ T6066] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 147.064695][ T6057] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 147.343740][ T6055] loop0: detected capacity change from 0 to 32768 [ 147.480940][ T6055] XFS (loop0): Mounting V5 Filesystem [ 147.600628][ T6055] XFS (loop0): Ending clean mount [ 148.048903][ T6094] loop2: detected capacity change from 0 to 1024 [ 148.059435][ T6094] EXT4-fs: Ignoring removed nobh option [ 148.101879][ T6094] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.134086][ T6094] EXT4-fs: Ignoring removed bh option [ 148.157912][ T4257] XFS (loop0): Unmounting Filesystem [ 148.179275][ T6094] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 148.296624][ T6094] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 148.457364][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 149.654379][ T4634] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 149.711327][ T6118] loop0: detected capacity change from 0 to 32768 [ 149.762217][ T6118] XFS (loop0): Mounting V5 Filesystem [ 149.857278][ T4634] usb 3-1: Using ep0 maxpacket: 8 [ 149.870720][ T6147] loop4: detected capacity change from 0 to 8 [ 149.892237][ T6118] XFS (loop0): Ending clean mount [ 149.900217][ T4634] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 149.919602][ T4634] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.937694][ T4634] usb 3-1: Product: syz [ 149.941906][ T4634] usb 3-1: Manufacturer: syz [ 149.949239][ T4634] usb 3-1: SerialNumber: syz [ 149.958191][ T4634] usb 3-1: config 0 descriptor?? [ 149.973470][ T6118] XFS (loop0): Quotacheck needed: Please wait. [ 150.047295][ T6118] XFS (loop0): Quotacheck: Done. [ 150.210809][ T4634] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 150.290427][ T4257] XFS (loop0): Unmounting Filesystem [ 150.410039][ T4634] gspca_sunplus: reg_w_riv err -71 [ 150.424222][ T4634] sunplus: probe of 3-1:0.0 failed with error -71 [ 150.446599][ T4634] usb 3-1: USB disconnect, device number 4 [ 150.554052][ T6152] loop4: detected capacity change from 0 to 4096 [ 150.562723][ T6152] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 150.647084][ T6152] ntfs: volume version 3.1. [ 151.159846][ T6170] loop3: detected capacity change from 0 to 256 [ 151.223550][ T6170] exfat: Deprecated parameter 'namecase' [ 151.253811][ T6170] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d) [ 152.015268][ T6196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.669'. [ 152.324346][ T5644] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 152.536671][ T5644] usb 1-1: config 0 has an invalid interface number: 205 but max is 0 [ 152.564573][ T5644] usb 1-1: config 0 has no interface number 0 [ 152.567393][ T6187] loop1: detected capacity change from 0 to 32768 [ 152.595711][ T5644] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=cd.e9 [ 152.615129][ T6187] XFS: ikeep mount option is deprecated. [ 152.620845][ T6187] XFS: noikeep mount option is deprecated. [ 152.640238][ T5644] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.666215][ T6194] loop3: detected capacity change from 0 to 32768 [ 152.680799][ T6194] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.667 (6194) [ 152.697876][ T5644] usb 1-1: Product: syz [ 152.706964][ T5644] usb 1-1: Manufacturer: syz [ 152.711661][ T5644] usb 1-1: SerialNumber: syz [ 152.747820][ T5644] usb 1-1: config 0 descriptor?? [ 152.772770][ T5644] usb_ehset_test: probe of 1-1:0.205 failed with error -32 [ 152.776294][ T6187] XFS (loop1): Mounting V5 Filesystem [ 152.792961][ T6194] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 152.860384][ T6194] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 152.947297][ T6194] BTRFS info (device loop3): force clearing of disk cache [ 152.954948][ T6194] BTRFS info (device loop3): enabling auto defrag [ 152.962583][ T6194] BTRFS info (device loop3): max_inline at 0 [ 152.975646][ T4626] usb 1-1: USB disconnect, device number 7 [ 152.989607][ T6194] BTRFS info (device loop3): enabling disk space caching [ 153.008882][ T6194] BTRFS info (device loop3): disk space caching is enabled [ 153.021575][ T6187] XFS (loop1): Ending clean mount [ 153.095482][ T6187] XFS (loop1): Quotacheck needed: Please wait. [ 153.192324][ T6187] XFS (loop1): Quotacheck: Done. [ 153.267536][ T6194] BTRFS info (device loop3): enabling ssd optimizations [ 153.282177][ T4252] XFS (loop1): Unmounting Filesystem [ 153.318332][ T6194] BTRFS info (device loop3): rebuilding free space tree [ 153.403152][ T6194] BTRFS info (device loop3): disabling free space tree [ 153.453959][ T6194] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 153.472816][ T6194] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 153.870208][ T4296] BTRFS info (device loop3): qgroup scan completed (inconsistency flag cleared) [ 154.019318][ T4261] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 154.144493][ T5195] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 154.166017][ T6256] loop0: detected capacity change from 0 to 4096 [ 154.198456][ T6256] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 154.250640][ T6259] loop1: detected capacity change from 0 to 512 [ 154.308349][ T6259] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 154.336120][ T5195] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 154.348872][ T6256] ntfs: (device loop0): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 154.385115][ T6256] ntfs: (device loop0): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 154.401448][ T5195] usb 3-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 154.436947][ T6259] EXT4-fs (loop1): 1 truncate cleaned up [ 154.441740][ T5195] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 154.442670][ T6259] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 154.489787][ T5195] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.495010][ T6256] ntfs: (device loop0): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 154.585228][ T6256] ntfs: volume version 3.1. [ 154.647230][ T26] audit: type=1804 audit(1749037857.321:11): pid=6259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.677" name="/newroot/110/bus/bus" dev="loop1" ino=18 res=1 errno=0 [ 154.751213][ T5195] usb 3-1: USB disconnect, device number 5 [ 154.754939][ T4257] ntfs: (device loop0): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 154.805068][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 155.048388][ T6254] loop4: detected capacity change from 0 to 32768 [ 155.114892][ T6254] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 155.145299][ T6254] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 155.155399][ T6269] loop3: detected capacity change from 0 to 8192 [ 155.185799][ T6269] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 155.261040][ T6277] loop1: detected capacity change from 0 to 1024 [ 155.270536][ T6269] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 155.281378][ T6269] REISERFS (device loop3): using ordered data mode [ 155.288437][ T6269] reiserfs: using flush barriers [ 155.302642][ T6269] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 155.343364][ T6254] (syz.4.681,6254,0):ocfs2_verify_group_and_input:420 ERROR: add a group which is in the current volume. [ 155.344314][ T6277] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 155.382225][ T6269] REISERFS (device loop3): checking transaction log (loop3) [ 155.391303][ T6254] (syz.4.681,6254,0):ocfs2_group_add:503 ERROR: status = -22 [ 155.425139][ T6269] REISERFS (device loop3): Using rupasov hash to sort names [ 155.432513][ T6269] REISERFS (device loop3): using 3.5.x disk format [ 155.474606][ T6269] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 155.526549][ T6277] EXT4-fs (loop1): Number of reserved GDT blocks insanely large: 8192 [ 155.544369][ T6269] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 155.577419][ T6269] REISERFS warning: green-16003 errcatch_is_left_mergeable: Invalid item type observed, run fsck ASAP [ 155.603203][ T4254] ocfs2: Unmounting device (7,4) on (node local) [ 155.640486][ T6269] REISERFS warning (device loop3): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 UNKNOWN] (nlink == 1) not found (pos 2) [ 155.714330][ T6269] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 155.894968][ T4634] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 156.116569][ T4634] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.164411][ T4634] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.175384][ T4303] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 156.180463][ T4634] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 156.221301][ T4634] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 156.241564][ T4634] usb 3-1: SerialNumber: syz [ 156.364347][ T4303] usb 5-1: Using ep0 maxpacket: 8 [ 156.372206][ T4303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.403905][ T4303] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.455616][ T4303] usb 5-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 156.474169][ T4303] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.478653][ T4634] usb 3-1: 0:2 : does not exist [ 156.489213][ T4303] usb 5-1: config 0 descriptor?? [ 156.528947][ T4634] usb 3-1: USB disconnect, device number 6 [ 156.733269][ T4303] usbhid 5-1:0.0: can't add hid device: -71 [ 156.739918][ T4303] usbhid: probe of 5-1:0.0 failed with error -71 [ 156.765530][ T4303] usb 5-1: USB disconnect, device number 3 [ 156.791812][ T6284] loop0: detected capacity change from 0 to 32768 [ 156.805177][ T4377] udevd[4377]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 156.921438][ T6284] XFS (loop0): Mounting V5 Filesystem [ 157.041174][ T6284] XFS (loop0): Ending clean mount [ 157.063747][ T6284] XFS (loop0): Quotacheck needed: Please wait. [ 157.151447][ T6284] XFS (loop0): Quotacheck: Done. [ 157.482395][ T4257] XFS (loop0): Unmounting Filesystem [ 157.566817][ T6320] mkiss: ax0: crc mode is auto. [ 158.344257][ T4634] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 158.536172][ T4634] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.562471][ T4634] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.583262][ T4634] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 158.607507][ T4634] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.633744][ T4634] usb 3-1: config 0 descriptor?? [ 158.680046][ T6318] loop4: detected capacity change from 0 to 40427 [ 158.708679][ T6318] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 158.744219][ T6318] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 158.787645][ T6318] F2FS-fs (loop4): invalid crc value [ 158.839339][ T6346] loop0: detected capacity change from 0 to 256 [ 158.892688][ T6318] F2FS-fs (loop4): Found nat_bits in checkpoint [ 159.065830][ T4634] hid (null): nested delimiters [ 159.077398][ T4634] hid-led 0003:27B8:01ED.0002: nested delimiters [ 159.094072][ T4634] hid-led 0003:27B8:01ED.0002: item 0 1 2 10 parsing failed [ 159.107656][ T6318] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 159.121474][ T6318] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 159.137998][ T4634] hid-led: probe of 0003:27B8:01ED.0002 failed with error -22 [ 159.296397][ T4634] usb 3-1: USB disconnect, device number 7 [ 159.638857][ T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.769857][ T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.810043][ T6318] overlayfs: failed to resolve './file0': -2 [ 159.984446][ T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.131602][ T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.376167][ T6376] loop3: detected capacity change from 0 to 16 [ 160.459461][ T6376] erofs: (device loop3): mounted with root inode @ nid 36. [ 160.521554][ T6375] loop0: detected capacity change from 0 to 4096 [ 160.574083][ T6376] erofs: (device loop3): z_erofs_readahead: readahead error at page 24 @ nid 36 [ 160.651475][ T6381] syz.3.728: attempt to access beyond end of device [ 160.651475][ T6381] loop3: rw=0, sector=8, nr_sectors = 32 limit=16 [ 160.713355][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 160.734381][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 160.754986][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 160.765307][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 160.774520][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 160.781824][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 160.834789][ T6376] erofs: (device loop3): z_erofs_readahead: readahead error at page 16 @ nid 36 [ 160.848575][ T6376] syz.3.728: attempt to access beyond end of device [ 160.848575][ T6376] loop3: rw=524288, sector=1049264, nr_sectors = 32 limit=16 [ 160.862991][ T6376] syz.3.728: attempt to access beyond end of device [ 160.862991][ T6376] loop3: rw=524288, sector=1049272, nr_sectors = 32 limit=16 [ 160.979510][ T6385] loop2: detected capacity change from 0 to 128 [ 161.751481][ T6380] chnl_net:caif_netlink_parms(): no params data found [ 161.937991][ T5194] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 162.070980][ T6380] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.104688][ T6380] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.125083][ T5194] usb 3-1: Using ep0 maxpacket: 8 [ 162.132167][ T5194] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 162.155657][ T6380] device bridge_slave_0 entered promiscuous mode [ 162.172834][ T5194] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 162.202136][ T5194] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 162.217397][ T6425] loop4: detected capacity change from 0 to 64 [ 162.219114][ T5194] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.250786][ T5194] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 162.276966][ T5194] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.332696][ T6380] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.344940][ T6380] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.366389][ T6380] device bridge_slave_1 entered promiscuous mode [ 162.463930][ T6380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.514871][ T6380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.530002][ T5194] usb 3-1: GET_CAPABILITIES returned 0 [ 162.536436][ T5194] usbtmc 3-1:16.0: can't read capabilities [ 162.587331][ T6428] input: syz1 as /devices/virtual/input/input7 [ 162.675939][ T6380] team0: Port device team_slave_0 added [ 162.726486][ T6380] team0: Port device team_slave_1 added [ 162.749621][ T4302] usb 3-1: USB disconnect, device number 8 [ 162.834511][ T4268] Bluetooth: hci0: command 0x0409 tx timeout [ 162.906156][ T6380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.913167][ T6380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.952010][ T6380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.971399][ T6380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.978564][ T6380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.006063][ T6380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.221635][ T6380] device hsr_slave_0 entered promiscuous mode [ 163.239997][ T6380] device hsr_slave_1 entered promiscuous mode [ 163.253015][ T6380] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.263621][ T6380] Cannot create hsr debugfs directory [ 163.316725][ T9] device hsr_slave_0 left promiscuous mode [ 163.334800][ T9] device hsr_slave_1 left promiscuous mode [ 163.390046][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.425143][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.471535][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.514505][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.540677][ T9] device bridge_slave_1 left promiscuous mode [ 163.556648][ T6450] autofs4:pid:6450:autofs_fill_super: called with bogus options [ 163.559586][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.669621][ T9] device bridge_slave_0 left promiscuous mode [ 163.683939][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.807509][ T6459] loop2: detected capacity change from 0 to 128 [ 163.836673][ T6459] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 163.854805][ T9] device veth1_macvtap left promiscuous mode [ 163.861581][ T9] device veth0_macvtap left promiscuous mode [ 163.899822][ T6459] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 163.910080][ T9] device veth1_vlan left promiscuous mode [ 163.927279][ T9] device veth0_vlan left promiscuous mode [ 164.679839][ T6455] loop0: detected capacity change from 0 to 40427 [ 164.707689][ T6455] F2FS-fs (loop0): invalid crc value [ 164.752923][ T6455] F2FS-fs (loop0): Found nat_bits in checkpoint [ 164.861461][ T6455] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 164.914382][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 164.933157][ T6479] loop4: detected capacity change from 0 to 512 [ 164.982466][ T6479] EXT4-fs: Ignoring removed i_version option [ 164.993905][ T4257] syz-executor: attempt to access beyond end of device [ 164.993905][ T4257] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 165.035082][ T6479] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 165.078327][ T6479] EXT4-fs (loop4): 1 truncate cleaned up [ 165.084061][ T6479] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 165.344468][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 165.467202][ T6483] loop4: detected capacity change from 0 to 512 [ 165.502580][ T6483] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 165.540163][ T6483] EXT4-fs (loop4): 1 truncate cleaned up [ 165.546088][ T6483] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 165.611741][ T26] audit: type=1800 audit(1749037868.281:12): pid=6483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.757" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 165.763120][ T9] team0 (unregistering): Port device team_slave_1 removed [ 165.849354][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 165.871209][ T9] team0 (unregistering): Port device team_slave_0 removed [ 165.989113][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.120973][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.428703][ T6489] loop0: detected capacity change from 0 to 32768 [ 166.903959][ T6494] loop4: detected capacity change from 0 to 32768 [ 167.003316][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 167.018323][ T6494] XFS (loop4): Mounting V5 Filesystem [ 167.068678][ T6494] XFS (loop4): Ending clean mount [ 167.236521][ T4254] XFS (loop4): Unmounting Filesystem [ 167.537502][ T6506] loop0: detected capacity change from 0 to 4096 [ 167.550126][ T6506] ntfs: (device loop0): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 167.608141][ T6506] ntfs: volume version 3.1. [ 167.742292][ T9] bond0 (unregistering): Released all slaves [ 168.230182][ T6521] Bluetooth: MGMT ver 1.22 [ 168.602441][ T6380] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 168.651641][ T6380] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 168.677002][ T6380] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 168.684591][ T4302] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 168.717588][ T6380] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 168.749122][ T6530] loop0: detected capacity change from 0 to 8192 [ 168.904275][ T4302] usb 3-1: Using ep0 maxpacket: 8 [ 168.924827][ T4302] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 168.933257][ T6380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.974759][ T4302] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 168.986299][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 169.002017][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 169.020465][ T4302] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 169.028806][ T6380] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.065455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 169.069297][ T4302] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.085200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 169.087072][ T4268] Bluetooth: hci0: command 0x0419 tx timeout [ 169.100882][ T4302] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 169.110213][ T4302] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.201479][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.208718][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.216879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 169.273034][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 169.291943][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 169.311846][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.320590][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.340564][ T4302] usb 3-1: GET_CAPABILITIES returned 0 [ 169.347229][ T4302] usbtmc 3-1:16.0: can't read capabilities [ 169.375214][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 169.436243][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 169.467395][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 169.489594][ T6528] loop4: detected capacity change from 0 to 32768 [ 169.497194][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 169.516156][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 169.542924][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 169.591177][ T6380] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 169.601298][ T7] usb 3-1: USB disconnect, device number 9 [ 169.623285][ T6380] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 169.624894][ T6528] XFS (loop4): Mounting V5 Filesystem [ 169.641721][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 169.660863][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 169.685424][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 169.701046][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 169.719303][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.728783][ T4817] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 169.794848][ T5015] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 169.840727][ T6528] XFS (loop4): Ending clean mount [ 169.862148][ T6528] XFS (loop4): Quotacheck needed: Please wait. [ 169.941595][ T6528] XFS (loop4): Quotacheck: Done. [ 169.986433][ T5015] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.025445][ T5015] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.057690][ T5015] usb 1-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 170.077139][ T5015] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.125876][ T5015] usb 1-1: config 0 descriptor?? [ 170.212321][ T4254] XFS (loop4): Unmounting Filesystem [ 170.273411][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 170.295030][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 170.323707][ T6380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.565071][ T5015] megaworld 0003:07B5:0312.0003: unknown main item tag 0x3 [ 170.583804][ T5015] megaworld 0003:07B5:0312.0003: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.0-1/input0 [ 170.596065][ T5015] megaworld 0003:07B5:0312.0003: no inputs found [ 170.809563][ T5195] usb 1-1: USB disconnect, device number 8 [ 170.860518][ T6567] fido_id[6567]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 171.642988][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 171.679018][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 171.761486][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 171.775331][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 171.796046][ T6380] device veth0_vlan entered promiscuous mode [ 171.806786][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 171.830467][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 171.850303][ T6380] device veth1_vlan entered promiscuous mode [ 171.925143][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 171.935179][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 171.955438][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 171.981183][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 171.997929][ T6380] device veth0_macvtap entered promiscuous mode [ 172.042720][ T6380] device veth1_macvtap entered promiscuous mode [ 172.093344][ T6380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.124289][ T6380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.155145][ T6380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.184345][ T6380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.214315][ T6380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.235101][ T6380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.264409][ T6380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.295048][ T6380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.328352][ T6380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.368561][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 172.395032][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 172.423679][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 172.445003][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 172.478183][ T6380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.497040][ T6593] loop2: detected capacity change from 0 to 32768 [ 172.507906][ T6380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.539808][ T6380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.563503][ T6380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.591072][ T6593] XFS (loop2): Mounting V5 Filesystem [ 172.600084][ T6380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.618999][ T6380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.630165][ T6380] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.642378][ T6380] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.655259][ T6380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.666860][ T6380] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.678703][ T6380] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.688819][ T6380] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.701828][ T6380] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.726780][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 172.757124][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 172.769933][ T6593] XFS (loop2): Ending clean mount [ 172.796933][ T6593] XFS (loop2): Quotacheck needed: Please wait. [ 172.987158][ T6593] XFS (loop2): Quotacheck: Done. [ 173.059165][ T4817] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.068748][ T4817] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.151597][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 173.201057][ T4306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.230076][ T4253] XFS (loop2): Unmounting Filesystem [ 173.232617][ T4306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.298370][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 173.913194][ T6638] loop4: detected capacity change from 0 to 65 [ 173.962431][ T6638] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 174.712618][ T6636] loop0: detected capacity change from 0 to 32768 [ 174.720366][ T6640] loop2: detected capacity change from 0 to 32768 [ 174.759141][ T6636] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.791 (6636) [ 174.796831][ T6640] [ 174.796831][ T6640] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 174.796831][ T6640] [ 174.830999][ T6636] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 174.862896][ T6640] [ 174.862896][ T6640] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 174.862896][ T6640] [ 174.884379][ T6636] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 174.893149][ T6636] BTRFS info (device loop0): setting nodatacow, compression disabled [ 174.895044][ T6640] [ 174.895044][ T6640] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 174.895044][ T6640] [ 174.933391][ T6636] BTRFS info (device loop0): max_inline at 0 [ 174.954333][ T6636] BTRFS info (device loop0): enabling disk space caching [ 174.961456][ T6636] BTRFS info (device loop0): turning off barriers [ 174.973268][ T6657] [ 174.973268][ T6657] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 174.973268][ T6657] [ 175.040132][ T6636] BTRFS info (device loop0): turning on flush-on-commit [ 175.045090][ T6640] [ 175.045090][ T6640] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 175.045090][ T6640] [ 175.075629][ T6636] BTRFS info (device loop0): doing ref verification [ 175.082343][ T6636] BTRFS info (device loop0): force clearing of disk cache [ 175.097999][ T6657] [ 175.097999][ T6657] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 175.097999][ T6657] [ 175.113401][ T6636] BTRFS info (device loop0): enabling ssd optimizations [ 175.144760][ T6636] BTRFS info (device loop0): max_inline at 4096 [ 175.148294][ T6640] [ 175.148294][ T6640] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 175.148294][ T6640] [ 175.151050][ T6636] BTRFS info (device loop0): disk space caching is enabled [ 175.212953][ T26] audit: type=1800 audit(1749037877.881:13): pid=6640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.787" name="bus" dev="loop2" ino=7 res=0 errno=0 [ 175.213540][ T106] [ 175.213540][ T106] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 175.213540][ T106] [ 175.446143][ T4253] [ 175.446143][ T4253] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 175.446143][ T4253] [ 175.469984][ T4253] [ 175.469984][ T4253] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 175.469984][ T4253] [ 175.517954][ T6636] BTRFS info (device loop0): rebuilding free space tree [ 175.542943][ T6636] BTRFS info (device loop0): disabling free space tree [ 175.594453][ T6636] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 175.617327][ T6636] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 175.890925][ T6684] loop5: detected capacity change from 0 to 4096 [ 176.032127][ T6684] ntfs: volume version 3.1. [ 176.215218][ T4257] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 176.268512][ T4268] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 176.271468][ T4268] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 176.272478][ T4268] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 176.273329][ T4268] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 176.274791][ T4268] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 176.275078][ T4268] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 176.482124][ T6703] o2cb: This node has not been configured. [ 176.482233][ T6703] o2cb: Cluster check failed. Fix errors before retrying. [ 176.482372][ T6703] (syz.4.806,6703,0):user_dlm_register:674 ERROR: status = -22 [ 176.482401][ T6703] (syz.4.806,6703,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 176.863382][ T6698] chnl_net:caif_netlink_parms(): no params data found [ 177.287571][ T6698] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.366628][ T6698] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.418253][ T6698] device bridge_slave_0 entered promiscuous mode [ 177.458955][ T6698] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.476858][ T6698] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.496532][ T6698] device bridge_slave_1 entered promiscuous mode [ 177.667384][ T6698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.699589][ T6698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.707839][ T6739] loop2: detected capacity change from 0 to 256 [ 177.817850][ T6738] netlink: 164 bytes leftover after parsing attributes in process `syz.5.811'. [ 177.869034][ T6698] team0: Port device team_slave_0 added [ 177.912328][ T6698] team0: Port device team_slave_1 added [ 178.048644][ T6698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.094190][ T6698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.167629][ T6698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.208645][ T6698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.229595][ T6698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.262647][ T6698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.317170][ T6747] netlink: 27 bytes leftover after parsing attributes in process `syz.5.815'. [ 178.354660][ T48] Bluetooth: hci5: command 0x0409 tx timeout [ 178.481552][ T6698] device hsr_slave_0 entered promiscuous mode [ 178.508117][ T6698] device hsr_slave_1 entered promiscuous mode [ 178.554348][ T6698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.590635][ T6698] Cannot create hsr debugfs directory [ 179.313841][ T6698] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 179.445692][ T6698] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 179.677923][ T6698] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 179.803040][ T6698] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 180.087316][ T6788] trusted_key: encrypted_key: keyword 'upd' not recognized [ 180.154614][ T6698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 180.209520][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 180.237427][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 180.259076][ T6698] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.355503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 180.382090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 180.392390][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.399587][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.423351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 180.434711][ T48] Bluetooth: hci5: command 0x041b tx timeout [ 180.435043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 180.444316][ T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 180.461250][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.468444][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.484616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 180.487830][ T6795] netlink: 36 bytes leftover after parsing attributes in process `syz.2.828'. [ 180.513631][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 180.528705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 180.573711][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 180.607500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 180.660364][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 180.670253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 180.694348][ T7] usb 5-1: Using ep0 maxpacket: 32 [ 180.695261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 180.712246][ T7] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 180.742371][ T7] usb 5-1: config 0 has no interface number 0 [ 180.755566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 180.756725][ T7] usb 5-1: config 0 interface 184 has no altsetting 0 [ 180.777861][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 180.783919][ T7] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 180.813067][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.817212][ T6698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 180.842198][ T7] usb 5-1: Product: syz [ 180.852325][ T7] usb 5-1: Manufacturer: syz [ 180.862463][ T7] usb 5-1: SerialNumber: syz [ 180.872728][ T6698] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 180.896737][ T7] usb 5-1: config 0 descriptor?? [ 180.932957][ T7] smsc75xx v1.0.0 [ 180.932956][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 180.933623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 181.192815][ T6812] sp0: Synchronizing with TNC [ 181.336539][ T6812] sp0: Synchronizing with TNC [ 181.751397][ T7] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 181.776940][ T6827] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 181.780746][ T7] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 181.820869][ T7] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 181.850347][ T7] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 181.873342][ T7] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 181.944264][ T7] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 181.975649][ T7] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 182.023251][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 182.030290][ T7] usb 5-1: USB disconnect, device number 4 [ 182.055471][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 182.078445][ T6698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.466914][ T6846] loop5: detected capacity change from 0 to 128 [ 182.515059][ T4268] Bluetooth: hci5: command 0x040f tx timeout [ 182.654695][ T6846] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 182.796089][ T6846] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 182.886594][ T6858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.845'. [ 183.458645][ T6870] loop2: detected capacity change from 0 to 256 [ 183.545601][ T26] audit: type=1800 audit(1749037886.221:14): pid=6870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.849" name="file1" dev="loop2" ino=1048640 res=0 errno=0 [ 183.643733][ T48] ------------[ cut here ]------------ [ 183.650697][ T48] WARNING: CPU: 0 PID: 48 at net/bluetooth/hci_conn.c:667 hci_conn_timeout+0x24f/0x450 [ 183.660536][ T48] Modules linked in: [ 183.664598][ T48] CPU: 0 PID: 48 Comm: kworker/u5:0 Not tainted 6.1.140-syzkaller #0 [ 183.672702][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 183.683509][ T48] Workqueue: hci2 hci_conn_timeout [ 183.688969][ T48] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 183.694711][ T48] Code: fe 8d e8 64 be b7 f8 48 8b 35 a5 f1 e3 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b6 80 38 f8 e8 41 48 66 f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 183.714512][ T48] RSP: 0018:ffffc90000b97c08 EFLAGS: 00010293 [ 183.720620][ T48] RAX: ffffffff891a8ecf RBX: ffff888078cf0330 RCX: ffff88801beebb80 [ 183.728699][ T48] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 183.736789][ T48] RBP: 00000000ffffffff R08: dffffc0000000000 R09: ffffed100f19e003 [ 183.744862][ T48] R10: ffffed100f19e003 R11: 1ffff1100f19e002 R12: dffffc0000000000 [ 183.752880][ T48] R13: dffffc0000000000 R14: ffff888078cf0000 R15: ffff888078cf0010 [ 183.760965][ T48] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 183.769997][ T48] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 183.776690][ T48] CR2: 0000001b2db16ff8 CR3: 0000000028fb5000 CR4: 00000000003506f0 [ 183.784764][ T48] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 183.792781][ T48] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 183.800856][ T48] Call Trace: [ 183.804209][ T48] [ 183.807173][ T48] ? process_one_work+0x7a1/0x1160 [ 183.812329][ T48] process_one_work+0x898/0x1160 [ 183.817435][ T48] ? worker_detach_from_pool+0x240/0x240 [ 183.823118][ T48] ? _raw_spin_lock_irq+0xab/0xe0 [ 183.828254][ T48] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 183.833667][ T48] ? kthread_data+0x4b/0xc0 [ 183.838398][ T48] worker_thread+0xaa2/0x1250 [ 183.843155][ T48] kthread+0x29d/0x330 [ 183.847335][ T48] ? worker_clr_flags+0x1a0/0x1a0 [ 183.852434][ T48] ? kthread_blkcg+0xd0/0xd0 [ 183.857135][ T48] ret_from_fork+0x1f/0x30 [ 183.861622][ T48] [ 183.864727][ T48] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 183.872119][ T48] CPU: 0 PID: 48 Comm: kworker/u5:0 Not tainted 6.1.140-syzkaller #0 [ 183.880245][ T48] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 183.890426][ T48] Workqueue: hci2 hci_conn_timeout [ 183.895584][ T48] Call Trace: [ 183.898889][ T48] [ 183.901844][ T48] dump_stack_lvl+0x168/0x22e [ 183.906575][ T48] ? memcpy+0x3c/0x60 [ 183.910599][ T48] ? show_regs_print_info+0x12/0x12 [ 183.915838][ T48] ? load_image+0x3b0/0x3b0 [ 183.920398][ T48] panic+0x2c9/0x710 [ 183.924338][ T48] ? bpf_jit_dump+0xd0/0xd0 [ 183.928896][ T48] ? ret_from_fork+0x1f/0x30 [ 183.933533][ T48] __warn+0x2f8/0x4f0 [ 183.937651][ T48] ? hci_conn_timeout+0x24f/0x450 [ 183.942724][ T48] ? hci_conn_timeout+0x24f/0x450 [ 183.947782][ T48] report_bug+0x2ba/0x4f0 [ 183.952147][ T48] ? hci_conn_timeout+0x24f/0x450 [ 183.957224][ T48] handle_bug+0x3a/0x70 [ 183.961407][ T48] exc_invalid_op+0x16/0x40 [ 183.965988][ T48] asm_exc_invalid_op+0x16/0x20 [ 183.970883][ T48] RIP: 0010:hci_conn_timeout+0x24f/0x450 [ 183.976555][ T48] Code: fe 8d e8 64 be b7 f8 48 8b 35 a5 f1 e3 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 b6 80 38 f8 e8 41 48 66 f8 <0f> 0b e9 35 fe ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd [ 183.996190][ T48] RSP: 0018:ffffc90000b97c08 EFLAGS: 00010293 [ 184.002528][ T48] RAX: ffffffff891a8ecf RBX: ffff888078cf0330 RCX: ffff88801beebb80 [ 184.010514][ T48] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 184.018490][ T48] RBP: 00000000ffffffff R08: dffffc0000000000 R09: ffffed100f19e003 [ 184.026728][ T48] R10: ffffed100f19e003 R11: 1ffff1100f19e002 R12: dffffc0000000000 [ 184.034703][ T48] R13: dffffc0000000000 R14: ffff888078cf0000 R15: ffff888078cf0010 [ 184.042686][ T48] ? hci_conn_timeout+0x24f/0x450 [ 184.047732][ T48] ? hci_conn_timeout+0x24f/0x450 [ 184.052769][ T48] ? process_one_work+0x7a1/0x1160 [ 184.058422][ T48] process_one_work+0x898/0x1160 [ 184.063401][ T48] ? worker_detach_from_pool+0x240/0x240 [ 184.069064][ T48] ? _raw_spin_lock_irq+0xab/0xe0 [ 184.074105][ T48] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 184.079587][ T48] ? kthread_data+0x4b/0xc0 [ 184.084112][ T48] worker_thread+0xaa2/0x1250 [ 184.088822][ T48] kthread+0x29d/0x330 [ 184.092905][ T48] ? worker_clr_flags+0x1a0/0x1a0 [ 184.097934][ T48] ? kthread_blkcg+0xd0/0xd0 [ 184.102534][ T48] ret_from_fork+0x1f/0x30 [ 184.106975][ T48] [ 184.110288][ T48] Kernel Offset: disabled [ 184.114769][ T48] Rebooting in 86400 seconds..