last executing test programs: 8m22.109919196s ago: executing program 32 (id=125): r0 = socket$unix(0x1, 0x5, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x20008001, 0x0, 0x81, 0xfffffffb}) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000), 0x4) 7m30.462102304s ago: executing program 33 (id=570): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) 6m14.659661066s ago: executing program 5 (id=1215): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2c, 0x33, @action={{{}, {}, @broadcast}, @sp_mp_confirm={0xf, 0x2, {0x0, @default, {}, @val={0x72, 0x6}, @void}}}}]}, 0x48}}, 0x0) 6m14.492054105s ago: executing program 5 (id=1216): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001000)='numa_maps\x00') preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000000)=""/4096, 0x1000}], 0x1, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) mount(&(0x7f0000000200), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='ceph\x00', 0x0, 0x0) 6m14.150427804s ago: executing program 5 (id=1220): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) getsockopt$inet_mreqn(r0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) 6m13.747693843s ago: executing program 5 (id=1224): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x8, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}, 0x9}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180), 0x4) 6m13.383398373s ago: executing program 5 (id=1227): syz_mount_image$jfs(&(0x7f0000001cc0), &(0x7f0000001c80)='./file0\x00', 0x800000, &(0x7f00000005c0)=ANY=[], 0x1, 0x5e1d, &(0x7f00000088c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x114) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x105042, 0x1df) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) 6m12.694580201s ago: executing program 2 (id=1232): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000c5000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000fbb703000000e31f008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) fsync(0xffffffffffffffff) 6m12.4330701s ago: executing program 2 (id=1234): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000140)='./file0\x00', 0x20108c0, &(0x7f00000008c0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES32, @ANYBLOB="a783c89422e31c30d6bf831c4426922089e2b8944eda733c7bed9440aee9df8636110f251ff75794e847bbad8f5979c9d55434d5344bc268e61948fc8a8ffe2d27c14972f79c1c977c01b4a8a4e35f14d116c59482add0c31e922b29fb4c24948818edc636cced878ca31c24c6a3a31bcdca27864f7611d3163d21939c3c5afb70", @ANYBLOB="013ced044bdd1d80c6a59bca5c1f9d57c0bf983de420f461a7414616093c243234af9243259143a1df24ac0219d7c378a65b310c8b4a0a5be52831340548247ed220c3c9fbc83337fa0b63b0a54e73ff5f9b6625b0faa1fb755e1af638d96ec92d0802aa01c49d12703c6452c7b0edad1ecfdc926cf6ee88d55c25510952b43a773f9cd35d70e03d69b2af2ead1c39ef1c55be4e5afc92674e57e227951a9706cec7b734dec89e0ed0de44f23a3de29cee4de42e117c71af53f785eb2feb89"], 0xfa, 0x61ee, &(0x7f0000012cc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) unshare(0x20000400) fdatasync(r0) 6m12.117649219s ago: executing program 5 (id=1237): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000380)="889374c96ee3", 0x0, 0x0, 0x30, 0x0, 0x0}) 6m11.571686528s ago: executing program 2 (id=1239): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/clear_refs\x00', 0x1, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00') acct(0x0) 6m10.966284247s ago: executing program 2 (id=1244): syz_mount_image$squashfs(&(0x7f00000006c0), &(0x7f0000000000)='./file0\x00', 0x804c5a, &(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC, @ANYRES8=0x0, @ANYRES8, @ANYBLOB="01ce6671a3b30f673148672100038bbb4413ea284b892438cdddda3da4c78d940655fbd68a286059c5766f98f85fb413503eaf8c90a24dda1e09f68cd741168d69dae50652ca7b67c5b0a27ab80ff9afa5000443de8c748e1d5beabee7c1346b215f641ae190d56ea4ab81bacd909929deb5757040e8d5b2752ea779c30f600bd516a68d881e7fc7289826d49e35134a94e27f115c8195a0f152cbd840ffdb008356c72319cceb43ccb1280556efdf0fdf582fd3cfc830dff1787f000000b7400f5aef57b6dcbfde7af6012383adb085c40e4c295c2a3be750a42400e58523d24b8eecd75caabcee22347bdb78b72b400d080a044ebde5d39ad91ff0ef75aa244381cf00cd6fe9b9a92a9968104bf02481022af426853287e521a4e3cfe480f984efcea1359ff932ebd3bc75aefea41074799f3502a7472a6686b4011a41d7f0cfb25b3dc3077b4e8ded17cfff2b1d59bc12f637c36690f5ca91ee999ec138f6ce66522e652939a37435edb78f9ae18489f9d2b73c81609399f0d123f1721171bd72c012623f04d8965d3e5785d057c15798ab36af821c9b308731422ba3858b9895ace14068ea58f8cb6060c205caf209a73628eff5b9270a4a55c2d7fc59a4fe6e023bd424d8b010e2232d1b2e6ca603b466b2c82afff4a8cc469e8664d54769fc97df122b3ff8c34354dad46f900eaf6e72e538c0595caa056984ab8974af7cdae5bde6a12f412fe2a876aa191e78e91fbf780e2f4a20f57d41376b29f990ce63aa6edf622d2203fee37df269abf869d13b175852b775fff70491d1e5d1311b7eef954a101ddb98c5ba2b312528485ece7aff23cc6fee599daea0fca71a5970cf0fc82b49640cc3fabbc401dead4f83aa0c4072a9e98ab5afb790be17961fc073e2f8f800000000000000005089d6db5ad893ee9b22b9250d01980952d0a3e0076c877556fa43f90cb574fd6ad67398ac4d9f8ff4e3ef09f99220928602523adc2289b51328ac152bd7edc66d4e962cbc2d2b0c5f8e48384eff563a10787b0199642385e811504e7168804114842d51f42dd6937515fa64b2fd14ef427072c6556b99171bd00165a9aada7173f001679ac791ee67188c670f583f7b1f8df68b97f4dcb5652f2b13aa941b7ff56c48fb7162e91ef53c70938a92e4bf55d65319f74766a309722f767fc8f3db2a194a2f098336601be2edcbcc9b562f2fc64e2deff9a16e84f1e8bc5fb82c91f4d10e34f5a093fc4fcbdb89342274857c8e6aa8864b3214f51b9e515bf645235007cede80ff5931bff340780a3b43bc0466340c195a515f779d0333dd467bb665508d9c89e18e86d1975e273f937e3bd1", @ANYRESDEC, @ANYRES32=0x0], 0x3, 0x1f4, &(0x7f0000000f40)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x631) 6m10.740620556s ago: executing program 2 (id=1247): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 6m10.339717215s ago: executing program 2 (id=1250): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r0) read(r1, 0x0, 0x0) 6m10.083501454s ago: executing program 34 (id=1250): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r0) read(r1, 0x0, 0x0) 5m56.851077973s ago: executing program 35 (id=1237): capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)) r0 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x0, 0x0}, &(0x7f0000000380)="889374c96ee3", 0x0, 0x0, 0x30, 0x0, 0x0}) 5m32.843765157s ago: executing program 7 (id=1553): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0xf0ffffff, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x4, "00000000b8890c3700000200"}}}]}, 0x48}}, 0x0) 5m32.493169926s ago: executing program 7 (id=1556): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x5, &(0x7f0000001000)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getcwd(&(0x7f0000000000)=""/4096, 0x1000) 5m30.449738031s ago: executing program 7 (id=1571): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_MEMORY_LIMIT={0x8, 0x9, 0x1}]}}]}, 0x40}}, 0x0) 5m30.19084047s ago: executing program 7 (id=1574): syz_mount_image$squashfs(&(0x7f00000006c0), &(0x7f0000000000)='./file0\x00', 0x804c5a, &(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC, @ANYRES8=0x0, @ANYRES8, @ANYBLOB="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", @ANYRESDEC, @ANYRES32=0x0], 0x3, 0x1f4, &(0x7f0000000f40)="$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") mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x631) 5m29.715534729s ago: executing program 7 (id=1577): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'veth0_macvtap\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7cb, 0x10000, 0x2000000b, 0x0, 0x5}, 0x1, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x44054) 5m29.243706328s ago: executing program 7 (id=1579): r0 = syz_open_procfs(0x0, &(0x7f0000000f40)='fdinfo\x00') fchdir(r0) setresuid(0x0, 0xee01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) 5m28.784815207s ago: executing program 36 (id=1579): r0 = syz_open_procfs(0x0, &(0x7f0000000f40)='fdinfo\x00') fchdir(r0) setresuid(0x0, 0xee01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) 3m56.99895643s ago: executing program 6 (id=2281): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) chown(&(0x7f0000000180)='./file0\x00', 0xee00, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) creat(&(0x7f0000000480)='./file0\x00', 0x0) 3m56.714933709s ago: executing program 6 (id=2285): r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="5c00000012006b7d373be35c6e17aa31046b876c1d0000007ea60864160af36508001dc0c3000200340031009ee517d34460bc24eab556a705251e618294ff0051f60a84c9f472736f67c5e73bb9e5c446fa30be62cbd4938037e786", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 3m56.509398529s ago: executing program 6 (id=2287): r0 = io_uring_setup(0x4f8f, &(0x7f0000000000)={0x0, 0x0, 0x40}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f00000000c0), 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xc, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, 0x0, 0x0) 3m56.207614388s ago: executing program 6 (id=2292): syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000040, &(0x7f0000000700)=ANY=[@ANYBLOB='gid=forget,umask=00000000000000000000003,gid=', @ANYRESDEC=0x0, @ANYBLOB=',session=00000000000000043620,gid=ignore,iocharset=euc-jp,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c6164696e6963622c6d6f64653d30303030303030303030303030303030303030303030332c6e6f7374726963742c009b801a9990a34c426430bf3757fbcea5d9a21b29b4ae2c6d10e74873111016bc74ff654722640a72d8cc5e210fef2b359e9e61ade82c60025773de99df3af6548534bfdef68d88ae15c726"], 0xfe, 0xc2d, &(0x7f0000000f40)="$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") mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave']) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r0, &(0x7f0000003040)={0x2020}, 0x2032) 3m55.616659996s ago: executing program 6 (id=2296): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0xffffffff, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) 3m54.751623585s ago: executing program 6 (id=2297): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) accept4(r0, 0x0, 0x0, 0x0) 3m54.118357783s ago: executing program 37 (id=2297): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) accept4(r0, 0x0, 0x0, 0x0) 1m10.875030217s ago: executing program 8 (id=3490): r0 = openat$random(0xffffffffffffff9c, &(0x7f00000021c0), 0x1, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000002200), 0x80000, 0x0) r2 = dup2(r0, r1) write$binfmt_elf64(r2, 0x0, 0x70a) 1m10.590797677s ago: executing program 8 (id=3492): r0 = eventfd2(0x0, 0x0) r1 = io_uring_setup(0x527f, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1}) dup3(r0, r1, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00000000c0)="1f49b320ce08a98e", 0x8}, {&(0x7f0000000140)="eedc4277530031e7", 0x8}], 0x2) 1m10.289758176s ago: executing program 8 (id=3494): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0x10, &(0x7f0000000040)=@framed={{0x18, 0x4}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb50}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000002c0)={&(0x7f0000000100)=@caif=@dgm={0x25, 0x14}, 0x80, 0x0}, 0x0) 1m9.890568645s ago: executing program 8 (id=3499): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@nombcache}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') open$dir(&(0x7f0000000380)='./file0/file0\x00', 0x80080, 0x88) 1m8.738326832s ago: executing program 8 (id=3506): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r2, 0xc048aeca, &(0x7f0000000040)=0x3) 1m8.054283881s ago: executing program 8 (id=3508): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003800), r0) sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f0000003840)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000004) 1m7.324131939s ago: executing program 38 (id=3508): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000003800), r0) sendmsg$IEEE802154_DISASSOCIATE_REQ(r1, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f0000003840)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000004) 3.715169978s ago: executing program 9 (id=3934): r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001600)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) 3.181464177s ago: executing program 1 (id=3940): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 2.605814456s ago: executing program 4 (id=3944): r0 = syz_open_dev$loop(&(0x7f0000000380), 0x0, 0x1) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, "4874ef0904271a78949178fd825b775b5e55210c4037a557f88c97b6097ea4e9fdd1d167064e969100ff97aa6b42687995845c8c3ce42e76d6db19d5f4f5f283", "eba9d749fdc2dedff9641c2773c54efce1fa87820dae06070446988b8770438b12e6b80c265fdce83841f0f230d1f4fe7b5ba021316c17fb5112d7d0f278e48a", "c41751ca16a23f839af552fb8500010000000000003203a6c188ec22bd7c4549"}}) ioctl$LOOP_GET_STATUS(r0, 0x4c07, 0x0) 2.404291486s ago: executing program 1 (id=3946): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xd, 0x25, &(0x7f0000000fc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x100}, [@generic={0x5, 0x2, 0x7, 0x363, 0x8}, @ringbuf_query, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sock_ops=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8946, &(0x7f0000000900)={'geneve1\x00', @random='\x00\x00\x00 \x00'}) 2.401357686s ago: executing program 9 (id=3947): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000600180040"], 0x50}}, 0x0) 2.320955635s ago: executing program 4 (id=3948): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) 1.969960024s ago: executing program 3 (id=3951): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c00a3a2a4e7417e941910c27d130b55ac2d5f7a61e59ec6d5de07239091924c32eeb367d16409d6d3ec1fb755f9a7989ebc4e96918e268f0b7acebf67c07bc4731250f87d27b5e9e61000e70f0c6a4e2432073d0d3e18f864e9ef64637d14e5485f36e53c821cb5898685c055a367ea51b653eff6581710f6c3824bc667bd24219163c60803099f985567be0d978e301b4f6603628606afadb04eee58f42f1853f2e8598a5e250e0f4c9a"], 0x1, 0x14fe, &(0x7f0000002ac0)="$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") mknod(&(0x7f0000000040)='./file0\x00', 0x40, 0xfffff7ff) rename(&(0x7f0000000300)='./file0\x00', &(0x7f00000000c0)='./file1\x00') statfs(&(0x7f0000000000)='./file1\x00', &(0x7f0000000240)=""/144) 1.906945974s ago: executing program 1 (id=3952): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x80000000003, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="0200a006002a17006000000002000020d3"]) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$USBDEVFS_REAPURBNDELAY(r0, 0x4008550d, 0x0) 1.901550394s ago: executing program 4 (id=3953): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1881, 0x4) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0xd, @local, 0x2}, 0x1c, 0x0}}], 0x1, 0x24040884) 1.866800634s ago: executing program 9 (id=3955): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) 1.618887844s ago: executing program 4 (id=3956): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001500)=[{{&(0x7f0000000480)={0xa, 0x4e20, 0x2, @mcast2}, 0x1c, &(0x7f0000001440)=[{&(0x7f00000000c0)="a6c6c34238f4595563a175ec970bf439024f8ec2dd49af842ad6830044218ebde605b5112fb292cf5d480002739aed74e8bacf37c73b5cdff62e63d3205c2d63c2ae686256cacda6fccf602641752997b84b75cdfd8d156c5fa9fa3f9338f13e0bb9af65d1e645a7f7553972", 0x6c}], 0x1}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/108, 0x6c}], 0x1}}], 0x1, 0x0, 0x0) 1.610454193s ago: executing program 0 (id=3957): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="b702000002000000bfa300000000000007030000000900ff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100002000000000000000ff7f0000b52f17cee19d0001000000f60000000000cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6bfffff7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5df11cc2afb53611cc32a790bc5e64be2c9d2d29db3d36dd015c7bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67c4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e978b5b0344973e199dd81acd1c6dd62ecc645e143a60f1c6edc76609073909826151e2b42bdfed0c8cef3ba2a730a00c8fc493db845b10e9468bda6f82881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2982492abaa96665372831210e00423835e946648fcceff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c2ad85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1c7192a4251bd9d378d0616a48c7957e122665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f04b12f63be72a3d817b325d6e417b1c2cbfdcada0a16e31790e26cf19588a7e0496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b42077ca60fdecb2717e21f8f187b1866108b6e8c71e2603217606659978381f90000309c3afa716d3706e1fa89917e131f4034a8385c690b368fd04201b37cd92ca6ebf94a2d8310f7032775cfd75652f85b039d5430b3c6643e9146d2478ce31344b554aca78a2df3d16e47dc4136647ce0ecbd00356abf01bf5c26beea8dfc925c6577d8b6c279473cbb4287d8b09c1ba866e6da544f9405b576dab5495112fd093fbc8d4ea5382f6810ed68a741fc16a641d9955e154c4570556b644b37ada1171c1454fb067a4cc9e5c645a858f1c4f1f2852ff3c5422e6234b3502fc0769e73fecac8c409d0c91a6a514109f86f44a54152016c9563f0dcf702032b32f82167b006a282e61bf8161759ab1a79f3b44fed32a13da046271752b8809900e9bc02018f1c9ab8e501f1f0140f5eab3592e545a5a05a60a3c9c8c2a1bd"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xf, 0x2f, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x241, 0x1000000, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1331daa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000000), 0x0, 0x4}, 0x23) 1.509051383s ago: executing program 9 (id=3958): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0x40d, 0x80000, 0x0, {0x0, 0x0, 0x0, r2, 0xc060, 0x8}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5, 0x20, 0x1}, @IFLA_BRPORT_UNICAST_FLOOD={0x5}]}}}]}, 0x4c}}, 0x8800) 1.443846433s ago: executing program 1 (id=3959): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x169142, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) unlink(&(0x7f0000000900)='./file1\x00') 1.434125693s ago: executing program 3 (id=3960): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@local, 0x2, 0x2, 0x3, 0x0, 0x1, 0x8d}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 1.311952872s ago: executing program 4 (id=3961): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r0, &(0x7f0000000000), &(0x7f0000000140)=""/75}, 0x20) 1.260652823s ago: executing program 0 (id=3962): r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0) ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000100)=0x21) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0x22) 1.211364303s ago: executing program 9 (id=3963): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) recvfrom$inet6(r0, 0x0, 0x1000000, 0x22, 0x0, 0x64) 1.060704382s ago: executing program 3 (id=3964): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0x80}}, 0x0) 975.822392ms ago: executing program 4 (id=3965): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x0, &(0x7f0000000180)={[{@prjquota}, {}, {@bsdgroups}, {@nouuid}, {@gqnoenforce}, {@nogrpid}, {@prjquota}, {@sysvgroups}, {@quota}, {@usrquota}]}, 0xff, 0x975f, &(0x7f0000009780)="$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") syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)={0x0, 0x7, 0x2, {0x2, 0x22}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x8040587f, &(0x7f00000000c0)={0x29, 0x300000000000000}) 931.624162ms ago: executing program 0 (id=3966): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000001ff0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x55, &(0x7f00000000c0)={&(0x7f0000000040)={0x5, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x7, @can={{}, 0x0, 0x0, 0x0, 0x0, "8bc7e9385559d457"}}, 0x20000078}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x7, 0x0, 0x0, {}, {}, {}, 0x7, @can={{}, 0x0, 0x0, 0x0, 0x0, "8bc7e9385559d457"}}, 0x48}}, 0x0) 858.343792ms ago: executing program 3 (id=3967): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r1 = dup(r0) ioctl$TIOCL_SETVESABLANK(r1, 0x4b4d, &(0x7f0000000140)) 780.291172ms ago: executing program 1 (id=3968): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x180000c, &(0x7f0000000540)=ANY=[@ANYBLOB='nls=ascii,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303062622c6e6f626172726965722c6e6f626172726965722c63726561746f723d7fcfb5b72c706172743d3078303030303030303030303030303130312c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRES16, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a8503", @ANYRESDEC=0x0, @ANYBLOB="060000bd00", @ANYRES32=0x0, @ANYRES8=0x0], 0x1, 0x6ed, &(0x7f0000000dc0)="$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") setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0) 746.504971ms ago: executing program 0 (id=3969): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x18, r0, 0xb01, 0x70bd26, 0x40000, {}, [@HEADER={0x4}]}, 0x18}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 641.543481ms ago: executing program 3 (id=3970): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7816, 0x2, 0x0, 0x27835919, 0x4, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000004100)=[{{&(0x7f0000000b80)=@abs, 0x6e, &(0x7f0000000c40)=[{&(0x7f0000000c00)=""/43, 0x2b}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 524.475271ms ago: executing program 0 (id=3971): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000700)=@raw={'raw\x00', 0x3c1, 0x3, 0x4b0, 0x2e0, 0x940c, 0x3002, 0x2e0, 0x2c0, 0x3e0, 0x3d8, 0x3d8, 0x3e0, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x298, 0x2e0, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x200000, 0x0, 0x1, 0x0, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x80, 0x0}, 'virt_wifi0\x00', {0x6dbf}}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x4, 0x1}, {0xffffffffffffffff, 0x3, 0x6}, 0x5, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) 311.40736ms ago: executing program 1 (id=3972): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) set_mempolicy(0x2, &(0x7f0000000080)=0xee02, 0xa) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 256.600451ms ago: executing program 0 (id=3973): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) 179.72241ms ago: executing program 9 (id=3974): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e24}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}}, 0x0) 0s ago: executing program 3 (id=3975): r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a7, 0x8000000}) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000380)=0x2) kernel console output (not intermixed with test programs): ror: -5 [ 437.158069][ T3607] bcm5974 2-1:0.0: could not read from device [ 437.175951][ T6005] usb 2-1: USB disconnect, device number 4 [ 437.206741][ T3607] bcm5974 2-1:0.0: could not read from device [ 437.639155][T13258] loop8: detected capacity change from 0 to 32768 [ 437.744111][T13258] XFS (loop8): Mounting V5 Filesystem [ 437.925049][T13258] XFS (loop8): Ending clean mount [ 438.069862][T12871] XFS (loop8): Unmounting Filesystem [ 438.527449][T13291] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2757'. [ 439.766730][T13324] mkiss: ax0: crc mode is auto. [ 439.902105][T13328] ax25_connect(): syz.9.2771 uses autobind, please contact jreuter@yaina.de [ 440.352193][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.359170][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.238062][T13355] device netdevsim0 entered promiscuous mode [ 441.316296][T13355] device netdevsim0 left promiscuous mode [ 441.323435][T13335] loop8: detected capacity change from 0 to 32768 [ 441.389234][T13335] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.2775 (13335) [ 441.439632][T13335] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 441.456949][T13335] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 441.477896][T13335] BTRFS info (device loop8): enabling ssd optimizations [ 441.512541][T13335] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_LZO (0x8) [ 441.549212][T13335] BTRFS info (device loop8): force lzo compression, level 0 [ 441.572917][T13360] loop9: detected capacity change from 0 to 2048 [ 441.577233][T13335] BTRFS info (device loop8): allowing degraded mounts [ 441.618025][T13335] BTRFS info (device loop8): turning on sync discard [ 441.648741][T13335] BTRFS info (device loop8): enabling auto defrag [ 441.655266][T13335] BTRFS info (device loop8): disabling tree log [ 441.677013][T13360] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 441.701126][T13335] BTRFS info (device loop8): using free space tree [ 442.027043][T12664] EXT4-fs (loop9): unmounting filesystem. [ 442.126925][T13335] BTRFS info (device loop8): Snapshot src from another FS [ 442.234951][T13390] loop1: detected capacity change from 0 to 2048 [ 442.313208][T12871] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 442.332373][T13390] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 443.020632][T11570] EXT4-fs (loop1): unmounting filesystem. [ 443.485956][T13408] loop3: detected capacity change from 0 to 16 [ 443.491783][T13410] loop8: detected capacity change from 0 to 2048 [ 443.498906][ T4560] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 443.528173][T13408] erofs: (device loop3): mounted with root inode @ nid 36. [ 443.592370][T13410] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 443.617258][T13408] overlayfs: failed to get redirect (-117) [ 443.681751][T13410] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 443.718591][ T4560] usb 2-1: Using ep0 maxpacket: 8 [ 443.737054][T13404] netlink: 'syz.1.2791': attribute type 4 has an invalid length. [ 443.774351][T13410] EXT4-fs (loop8): Remounting filesystem read-only [ 443.783505][ T4560] usb 2-1: unable to get BOS descriptor or descriptor too short [ 443.803059][ T4560] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 443.822388][ T4560] usb 2-1: can't read configurations, error -71 [ 443.872955][T12871] EXT4-fs (loop8): unmounting filesystem. [ 444.142694][T13419] loop3: detected capacity change from 0 to 4096 [ 444.161436][T13398] loop9: detected capacity change from 0 to 40427 [ 444.198041][T13398] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 444.214603][T13398] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 444.229852][T13419] ntfs3: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 444.232838][T13398] F2FS-fs (loop9): invalid crc value [ 444.258467][ T7943] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 444.292375][T13398] F2FS-fs (loop9): Found nat_bits in checkpoint [ 444.495596][T13398] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 444.528411][T13398] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 444.860007][T12664] syz-executor: attempt to access beyond end of device [ 444.860007][T12664] loop9: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 445.293165][ T5011] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 445.469275][T13453] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2812'. [ 445.512888][ T5011] usb 9-1: Using ep0 maxpacket: 16 [ 445.526492][ T5011] usb 9-1: config 8 has an invalid interface number: 206 but max is 0 [ 445.555556][ T5011] usb 9-1: config 8 has no interface number 0 [ 445.597173][ T5011] usb 9-1: config 8 interface 206 has no altsetting 0 [ 445.635932][ T5011] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 445.662955][ T5011] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.709071][ T5011] usb 9-1: Product: syz [ 445.720075][ T5011] usb 9-1: Manufacturer: syz [ 445.745175][ T5011] usb 9-1: SerialNumber: syz [ 446.007693][ T5011] garmin_gps 9-1:8.206: Garmin GPS usb/tty converter detected [ 446.019213][ T5011] garmin_gps ttyUSB0: failed to submit interrupt urb: -22 [ 446.031134][ T5011] garmin_gps: probe of ttyUSB0 failed with error -22 [ 446.066752][ T5011] usb 9-1: USB disconnect, device number 6 [ 446.080397][ T5011] garmin_gps 9-1:8.206: device disconnected [ 446.455466][T13474] loop3: detected capacity change from 0 to 2048 [ 446.483069][T13474] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 446.653401][T13464] loop9: detected capacity change from 0 to 32768 [ 447.869935][T13508] cifs: Unknown parameter 'mode' [ 448.114525][T13492] loop1: detected capacity change from 0 to 32768 [ 448.134333][T13492] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.2831 (13492) [ 448.238720][T13492] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 448.307378][T13492] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 448.325244][T13498] loop9: detected capacity change from 0 to 32768 [ 448.352493][T13492] BTRFS info (device loop1): using free space tree [ 448.439474][T13498] ocfs2: Slot 0 on device (7,9) was already allocated to this node! [ 448.523424][T13498] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode. [ 448.716423][T13492] BTRFS info (device loop1): enabling ssd optimizations [ 448.938655][T12664] ocfs2: Unmounting device (7,9) on (node local) [ 448.989626][ C0] vkms_vblank_simulate: vblank timer overrun [ 449.307782][ T6165] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 449.431833][T11570] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 449.490593][ T26] audit: type=1326 audit(1736919367.111:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13561 comm="syz.9.2849" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd675d85d29 code=0x0 [ 449.748995][T13570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2857'. [ 449.788606][T13570] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2857'. [ 450.024161][T13574] loop3: detected capacity change from 0 to 4096 [ 452.118922][T13594] loop1: detected capacity change from 0 to 32768 [ 452.193490][T13614] tun1: tun_chr_ioctl cmd 1074025677 [ 452.199857][T13614] tun1: linktype set to 769 [ 452.242909][T13594] XFS (loop1): Mounting V5 Filesystem [ 452.316397][T13594] XFS (loop1): Ending clean mount [ 452.473540][T13624] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.495214][T11570] XFS (loop1): Unmounting Filesystem [ 452.571490][T13610] loop3: detected capacity change from 0 to 32768 [ 452.742646][T13610] read_mapping_page failed! [ 452.936133][T13628] loop8: detected capacity change from 0 to 4096 [ 453.416141][T12871] ntfs3: loop8: ntfs_evict_inode r=5 failed, -22. [ 453.433327][T12871] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 453.719443][T13650] Failed to get privilege flags for destination (handle=0x2:0x8) [ 454.350299][T13671] loop9: detected capacity change from 0 to 2048 [ 454.475531][T13671] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found [ 454.561817][T13671] UDF-fs: Scanning with blocksize 512 failed [ 454.573515][T13679] bridge0: port 3(syz_tun) entered blocking state [ 454.592182][T13679] bridge0: port 3(syz_tun) entered disabled state [ 454.624200][T13671] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 454.661853][T13683] loop1: detected capacity change from 0 to 16 [ 454.708135][T13683] erofs: (device loop1): mounted with root inode @ nid 36. [ 454.711133][T13679] device syz_tun entered promiscuous mode [ 454.790311][T13679] bridge0: port 3(syz_tun) entered blocking state [ 454.801154][T13679] bridge0: port 3(syz_tun) entered forwarding state [ 455.130466][ T26] audit: type=1326 audit(1736919372.751:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13694 comm="syz.3.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688b185d29 code=0x7ffc0000 [ 455.187458][ T26] audit: type=1326 audit(1736919372.751:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13694 comm="syz.3.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688b185d29 code=0x7ffc0000 [ 455.232655][ T26] audit: type=1326 audit(1736919372.781:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13694 comm="syz.3.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f688b185d29 code=0x7ffc0000 [ 455.263383][ T26] audit: type=1326 audit(1736919372.781:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13694 comm="syz.3.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688b185d29 code=0x7ffc0000 [ 455.291449][ T26] audit: type=1326 audit(1736919372.781:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13694 comm="syz.3.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688b185d29 code=0x7ffc0000 [ 455.316608][ T26] audit: type=1326 audit(1736919372.781:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13694 comm="syz.3.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f688b185d29 code=0x7ffc0000 [ 455.416134][ T26] audit: type=1326 audit(1736919372.781:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13694 comm="syz.3.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f688b185d29 code=0x7ffc0000 [ 455.518826][ T26] audit: type=1326 audit(1736919372.781:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13694 comm="syz.3.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f688b17cce7 code=0x7ffc0000 [ 455.632813][ T26] audit: type=1326 audit(1736919372.781:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13694 comm="syz.3.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f688b121f29 code=0x7ffc0000 [ 455.684502][ T26] audit: type=1326 audit(1736919372.791:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13694 comm="syz.3.2909" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f688b17cce7 code=0x7ffc0000 [ 456.006598][T13714] loop1: detected capacity change from 0 to 512 [ 456.078812][ T6005] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 456.105503][T13714] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 456.128533][T13714] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 456.146062][T13714] System zones: 0-1, 15-15, 18-18, 34-34 [ 456.172380][T13693] loop8: detected capacity change from 0 to 32768 [ 456.175108][T13714] EXT4-fs (loop1): orphan cleanup on readonly fs [ 456.199871][T13693] [ 456.199871][T13693] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 456.199871][T13693] [ 456.217141][T13693] [ 456.217141][T13693] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 456.217141][T13693] [ 456.229150][T13714] EXT4-fs warning (device loop1): ext4_enable_quotas:7029: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 456.229199][T13714] EXT4-fs (loop1): Cannot turn on quotas: error -22 [ 456.255899][T13693] [ 456.255899][T13693] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 456.255899][T13693] [ 456.258676][T13714] EXT4-fs error (device loop1): ext4_orphan_get:1426: comm syz.1.2914: bad orphan inode 16 [ 456.268115][T13693] [ 456.268115][T13693] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 456.268115][T13693] [ 456.289125][T13693] [ 456.289125][T13693] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 456.289125][T13693] [ 456.305078][T13719] [ 456.305078][T13719] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 456.305078][T13719] [ 456.327153][ T107] [ 456.327153][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 456.327153][ T107] [ 456.347827][ T6005] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 456.353021][T13719] [ 456.353021][T13719] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 456.353021][T13719] [ 456.359922][T13714] ext4_test_bit(bit=15, block=18) = 1 [ 456.379471][ T6005] usb 10-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 456.427218][T13714] is_bad_inode(inode)=0 [ 456.429533][T13693] [ 456.429533][T13693] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 456.429533][T13693] [ 456.432669][ T6005] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 456.453577][T13714] NEXT_ORPHAN(inode)=0 [ 456.474001][T13714] max_ino=32 [ 456.477410][T13693] [ 456.477410][T13693] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 456.477410][T13693] [ 456.477442][T13714] i_nlink=2 [ 456.499160][T13693] [ 456.499160][T13693] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 456.499160][T13693] [ 456.508537][ T6005] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.523718][T13693] [ 456.523718][T13693] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 456.523718][T13693] [ 456.535067][T13714] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 456.584707][T13693] [ 456.584707][T13693] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 456.584707][T13693] [ 456.667102][T13723] 9pnet: p9_errstr2errno: server reported unknown error [ 456.676271][ T107] [ 456.676271][ T107] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 456.676271][ T107] [ 456.701464][T13714] EXT4-fs (loop1): shut down requested (2) [ 456.745754][T12871] [ 456.745754][T12871] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 456.745754][T12871] [ 456.767399][T12871] [ 456.767399][T12871] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 456.767399][T12871] [ 456.849731][T11570] EXT4-fs (loop1): unmounting filesystem. [ 456.859606][T12067] usb 10-1: USB disconnect, device number 7 [ 457.176165][T13731] netlink: 'syz.8.2918': attribute type 12 has an invalid length. [ 457.753189][T12067] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 457.988498][T12067] usb 9-1: Using ep0 maxpacket: 8 [ 458.004451][T12067] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 458.029284][T12067] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 458.088899][T12067] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 458.138413][T12067] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 458.181793][T12067] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 458.206639][T12067] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 458.232322][T12067] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 458.282090][T13758] loop3: detected capacity change from 0 to 2048 [ 458.320650][T13758] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 458.347084][ T7944] udevd[7944]: incorrect nilfs2 checksum on /dev/loop3 [ 458.385514][T13760] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 458.465901][T12067] usb 9-1: GET_CAPABILITIES returned 0 [ 458.471913][T12067] usbtmc 9-1:16.0: can't read capabilities [ 458.500780][T13762] netlink: 208 bytes leftover after parsing attributes in process `syz.9.2934'. [ 458.687322][T13766] loop3: detected capacity change from 0 to 512 [ 458.720919][T13737] usb 9-1: usbtmc_ioctl_clear_in_halt returned -32 [ 458.748261][T13766] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 458.754572][ T4556] usb 9-1: USB disconnect, device number 7 [ 458.824417][T13766] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #17: comm syz.3.2936: iget: bad i_size value: -6917529027641081756 [ 458.850365][T13766] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.2936: couldn't read orphan inode 17 (err -117) [ 458.875608][T13766] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 459.012949][T13766] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.2936: bg 0: block 65: padding at end of block bitmap is not set [ 459.088785][T13766] EXT4-fs error (device loop3): ext4_acquire_dquot:6794: comm syz.3.2936: Failed to acquire dquot type 0 [ 459.217148][T13768] loop9: detected capacity change from 0 to 40427 [ 459.259962][T13768] F2FS-fs (loop9): invalid crc value [ 459.269964][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 459.309286][T13768] F2FS-fs (loop9): Found nat_bits in checkpoint [ 459.428762][T13780] loop1: detected capacity change from 0 to 2048 [ 459.465064][T13782] loop3: detected capacity change from 0 to 512 [ 459.541539][T13768] F2FS-fs (loop9): Cannot turn on quotas: -2 on 1 [ 459.550686][T13782] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 459.565684][T13782] EXT4-fs (loop3): 1 truncate cleaned up [ 459.571726][T13785] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 459.571753][T13768] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 459.583503][T13782] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 459.611943][T13768] syz.9.2937: attempt to access beyond end of device [ 459.611943][T13768] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 460.017457][T13780] NILFS (loop1): error -2 truncating bmap (ino=16) [ 460.142718][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 461.371547][ T4724] kernel write not supported for file /amidi2 (pid: 4724 comm: kworker/1:10) [ 461.400795][ T4560] hid-generic 0000:0003:0000.0014: unknown main item tag 0x0 [ 461.419683][ T4560] hid-generic 0000:0003:0000.0014: unknown main item tag 0x0 [ 461.460035][ T4560] hid-generic 0000:0003:0000.0014: hidraw0: HID v0.00 Device [syz0] on syz1 [ 461.656552][T13829] loop8: detected capacity change from 0 to 512 [ 461.735514][T13829] EXT4-fs error (device loop8): ext4_orphan_get:1400: inode #15: comm syz.8.2959: casefold flag without casefold feature [ 461.764133][T13829] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.2959: couldn't read orphan inode 15 (err -117) [ 461.792489][T13829] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 462.079705][T12871] EXT4-fs (loop8): unmounting filesystem. [ 462.238507][T13843] loop8: detected capacity change from 0 to 64 [ 462.262093][T13840] loop1: detected capacity change from 0 to 4096 [ 462.291488][T13843] hfs: bad catalog folder thread [ 462.347493][T13840] NILFS (loop1): invalid segment: Checksum error in segment payload [ 462.368421][T13840] NILFS (loop1): trying rollback from an earlier position [ 462.438272][T13840] NILFS (loop1): recovery complete [ 462.491628][T13848] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 463.017967][T13859] loop8: detected capacity change from 0 to 2048 [ 463.076515][T13859] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 464.192843][T13887] loop1: detected capacity change from 0 to 2048 [ 464.211888][T12067] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 464.291575][T13887] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 464.366425][T13886] loop8: detected capacity change from 0 to 8192 [ 464.394093][T13887] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 464.422756][T12067] usb 4-1: unable to get BOS descriptor or descriptor too short [ 464.431011][T13886] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 464.443817][T12067] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 464.455096][T12067] usb 4-1: can't read configurations, error -71 [ 464.483993][T13886] REISERFS (device loop8): found reiserfs format "3.5" with non-standard journal [ 464.497869][T13887] EXT4-fs (loop1): Remounting filesystem read-only [ 464.508632][T13886] REISERFS (device loop8): using ordered data mode [ 464.523799][T13886] reiserfs: using flush barriers [ 464.547615][T13886] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 464.583638][T13886] REISERFS (device loop8): checking transaction log (loop8) [ 464.598252][T11570] EXT4-fs (loop1): unmounting filesystem. [ 464.607948][T13886] REISERFS (device loop8): Using r5 hash to sort names [ 464.620656][T13886] REISERFS (device loop8): using 3.5.x disk format [ 464.649168][T13886] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 464.674875][T13886] REISERFS warning (device loop8): reiserfs-13077 reiserfs_fh_to_dentry: nfsd/reiserfs, fhtype=3171692, len=3 - odd [ 464.978711][T13901] bridge0: port 3(syz_tun) entered blocking state [ 464.985809][T13901] bridge0: port 3(syz_tun) entered disabled state [ 465.041763][T13901] device syz_tun entered promiscuous mode [ 465.067489][T13901] bridge0: port 3(syz_tun) entered blocking state [ 465.074180][T13901] bridge0: port 3(syz_tun) entered forwarding state [ 465.532094][T13919] loop9: detected capacity change from 0 to 1024 [ 465.880227][T13928] loop8: detected capacity change from 0 to 256 [ 466.096168][ T6165] hfsplus: b-tree write err: -5, ino 4 [ 466.998004][T13932] loop3: detected capacity change from 0 to 40427 [ 467.017753][T13932] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 467.056448][T13932] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 467.114987][T13932] F2FS-fs (loop3): invalid crc value [ 467.145109][T13932] F2FS-fs (loop3): Found nat_bits in checkpoint [ 467.359764][T13932] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 467.377186][T13932] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 467.608944][T13975] netlink: 56 bytes leftover after parsing attributes in process `syz.9.3013'. [ 468.353757][T13994] loop9: detected capacity change from 0 to 64 [ 468.962662][T14009] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 470.598853][T14023] loop1: detected capacity change from 0 to 32768 [ 470.776585][T14023] XFS (loop1): Mounting V5 Filesystem [ 470.950782][T14023] XFS (loop1): Ending clean mount [ 471.177203][T11570] XFS (loop1): Unmounting Filesystem [ 471.676296][T14077] loop9: detected capacity change from 0 to 256 [ 471.763366][T14051] loop3: detected capacity change from 0 to 32768 [ 471.875447][T14051] XFS (loop3): Mounting V5 Filesystem [ 472.055089][T14051] XFS (loop3): Starting recovery (logdev: internal) [ 472.184966][T14051] XFS (loop3): Ending recovery (logdev: internal) [ 472.258084][T14051] XFS (loop3): User initiated shutdown received. [ 472.269585][T14051] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:496). Shutting down filesystem. [ 472.351885][T14051] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 472.425819][T14102] nbd: socks must be embedded in a SOCK_ITEM attr [ 472.519594][ T4259] XFS (loop3): Unmounting Filesystem [ 472.550886][T14108] loop9: detected capacity change from 0 to 128 [ 472.619267][T14108] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 472.674651][T14108] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 472.711026][T14111] loop8: detected capacity change from 0 to 164 [ 472.744266][T14112] loop1: detected capacity change from 0 to 1024 [ 472.824584][T14111] I/O error, dev loop8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 472.873554][T14111] I/O error, dev loop8, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 472.918561][T14111] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 472.962479][T14111] I/O error, dev loop8, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 472.981963][T14111] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 473.038204][T14111] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 473.066374][T14111] UDF-fs: Scanning with blocksize 512 failed [ 473.087795][T14111] I/O error, dev loop8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 473.108862][ T4316] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 473.159251][T14111] I/O error, dev loop8, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 473.238454][T14111] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 473.280777][T14111] I/O error, dev loop8, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 473.345097][T14111] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 473.370966][T14111] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 473.385038][T14111] UDF-fs: Scanning with blocksize 1024 failed [ 473.423592][T14111] I/O error, dev loop8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 473.454003][T14111] I/O error, dev loop8, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 473.481406][T14111] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 473.512046][T14111] I/O error, dev loop8, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 473.539375][ T4560] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 473.554054][T14111] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 473.583570][T14111] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 473.620200][T14111] UDF-fs: Scanning with blocksize 2048 failed [ 473.670390][T14111] I/O error, dev loop8, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 473.715567][T14111] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256 [ 473.738393][ T4560] usb 10-1: Using ep0 maxpacket: 8 [ 473.753085][ T4560] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 473.766187][T14111] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512 [ 473.789574][ T4560] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 473.796466][T14111] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found [ 473.824740][ T4560] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 473.828404][T14111] UDF-fs: Scanning with blocksize 4096 failed [ 473.856500][ T4560] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 473.858670][T14111] UDF-fs: warning (device loop8): udf_fill_super: No partition found (1) [ 473.910735][ T4560] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 473.931760][ T4560] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.966867][T14118] loop1: detected capacity change from 0 to 40427 [ 474.012278][T14118] F2FS-fs (loop1): invalid crc value [ 474.095668][T14118] F2FS-fs (loop1): Found nat_bits in checkpoint [ 474.125706][T14132] loop8: detected capacity change from 0 to 256 [ 474.176276][T14132] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 474.204848][ T4560] usb 10-1: GET_CAPABILITIES returned 0 [ 474.218527][ T4560] usbtmc 10-1:16.0: can't read capabilities [ 474.276994][T14118] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1 [ 474.286631][T14118] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 474.401958][T14118] syz.1.3066: attempt to access beyond end of device [ 474.401958][T14118] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 474.431391][ T4724] usb 10-1: USB disconnect, device number 8 [ 474.499747][T14137] netlink: 'syz.8.3072': attribute type 1 has an invalid length. [ 474.507546][T14137] netlink: 'syz.8.3072': attribute type 2 has an invalid length. [ 474.559631][T14137] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 475.235606][T14145] tipc: Started in network mode [ 475.278417][T14145] tipc: Node identity 0000000000002d5f0000000000000001, cluster identity 4711 [ 475.297687][T14145] tipc: Enabling of bearer rejected, failed to enable media [ 475.760090][T14156] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 475.910883][T14134] loop3: detected capacity change from 0 to 32768 [ 475.981409][T14134] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop3 scanned by syz.3.3070 (14134) [ 476.116948][T14134] BTRFS info (device loop3): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 476.195814][T14134] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 476.222110][T14149] loop1: detected capacity change from 0 to 32768 [ 476.245610][T14134] BTRFS info (device loop3): using free space tree [ 476.269127][T14149] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop1 scanned by syz.1.3073 (14149) [ 476.398172][T14149] BTRFS info (device loop1): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 476.478839][T14149] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 476.558685][T14149] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 476.567968][T14149] BTRFS info (device loop1): use lzo compression, level 0 [ 476.620642][T14149] BTRFS info (device loop1): using free space tree [ 476.870614][T14134] BTRFS info (device loop3): enabling ssd optimizations [ 476.961670][T14149] BTRFS info (device loop1): enabling ssd optimizations [ 477.274248][T11570] BTRFS info (device loop1): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 477.730496][ T4259] BTRFS info (device loop3): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9 [ 478.643743][T14222] loop8: detected capacity change from 0 to 1024 [ 478.808149][T14213] loop9: detected capacity change from 0 to 40427 [ 478.861656][T14213] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12 [ 478.888457][T14213] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 478.921150][T14213] F2FS-fs (loop9): invalid crc value [ 478.994405][T14213] F2FS-fs (loop9): Found nat_bits in checkpoint [ 479.035902][T14232] loop1: detected capacity change from 0 to 128 [ 479.126891][T14232] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 479.174440][T14213] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 479.182334][T14213] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 479.194961][T14232] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 480.143283][T14233] loop8: detected capacity change from 0 to 32768 [ 480.273609][T14233] ERROR: (device loop8): diWrite: ixpxd invalid [ 480.273609][T14233] [ 480.332901][T14233] ERROR: (device loop8): remounting filesystem as read-only [ 480.382311][T14233] ERROR: (device loop8): txCommit: [ 480.382311][T14233] [ 481.175912][T14230] loop3: detected capacity change from 0 to 32768 [ 482.069343][T14288] device hsr0 entered promiscuous mode [ 482.131810][T14288] device hsr0 left promiscuous mode [ 482.303495][T14290] loop1: detected capacity change from 0 to 4096 [ 482.391766][T14296] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 482.696665][T14300] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.142528][T14298] loop3: detected capacity change from 0 to 8192 [ 483.314915][T14298] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 483.438774][T14298] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 483.448206][T14298] REISERFS (device loop3): using ordered data mode [ 483.482661][T14330] loop8: detected capacity change from 0 to 256 [ 483.529425][T14330] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 483.590780][T14298] reiserfs: using flush barriers [ 483.671786][T14298] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 483.692178][T14330] FAT-fs (loop8): Directory bread(block 64) failed [ 483.734433][T14330] FAT-fs (loop8): Directory bread(block 65) failed [ 483.766997][T14333] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 483.777016][T14330] FAT-fs (loop8): Directory bread(block 66) failed [ 483.807647][T14298] REISERFS (device loop3): checking transaction log (loop3) [ 483.815371][T14330] FAT-fs (loop8): Directory bread(block 67) failed [ 483.831584][T14333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 483.844950][T14330] FAT-fs (loop8): Directory bread(block 68) failed [ 483.854880][T14333] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 483.874730][T14330] FAT-fs (loop8): Directory bread(block 69) failed [ 483.908967][T14330] FAT-fs (loop8): Directory bread(block 70) failed [ 483.932322][T14333] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 483.958995][T14330] FAT-fs (loop8): Directory bread(block 71) failed [ 483.965708][T14330] FAT-fs (loop8): Directory bread(block 72) failed [ 483.981303][T14330] FAT-fs (loop8): Directory bread(block 73) failed [ 484.068547][ T4724] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 484.258596][ T4724] usb 2-1: Using ep0 maxpacket: 8 [ 484.265916][ T4724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 484.305744][ T4724] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 484.336903][ T4724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.345343][T14298] REISERFS (device loop3): Using tea hash to sort names [ 484.368780][T14298] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 484.404426][ T4724] usb 2-1: config 0 descriptor?? [ 484.652323][ T4724] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 484.736509][ T26] kauditd_printk_skb: 26 callbacks suppressed [ 484.736527][ T26] audit: type=1804 audit(1736919402.351:144): pid=14345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3119" name="/newroot/662/file0/file0" dev="loop3" ino=4 res=1 errno=0 [ 484.947143][ T14] usb 2-1: USB disconnect, device number 7 [ 485.510966][T14344] loop9: detected capacity change from 0 to 40427 [ 485.578804][T14344] F2FS-fs (loop9): build fault injection attr: rate: 771, type: 0x3ffff [ 485.679982][T14344] F2FS-fs (loop9): invalid crc value [ 485.703374][T14344] F2FS-fs (loop9): Found nat_bits in checkpoint [ 485.832561][T14369] loop8: detected capacity change from 0 to 2048 [ 485.878789][T14344] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 485.916253][T14369] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 486.339097][T12664] syz-executor: attempt to access beyond end of device [ 486.339097][T12664] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 486.515230][T11010] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.773565][T14390] netlink: 'syz.3.3157': attribute type 11 has an invalid length. [ 486.869128][T14390] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3157'. [ 487.114625][T11010] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.507270][T11010] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.632800][T11010] device netdevsim0 left promiscuous mode [ 487.915363][T11010] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.215592][T14437] Process accounting resumed [ 488.437205][T14443] netlink: 52 bytes leftover after parsing attributes in process `syz.9.3177'. [ 488.494256][T14443] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3177'. [ 488.628924][T14449] loop3: detected capacity change from 0 to 64 [ 489.731424][T14476] sp0: Synchronizing with TNC [ 491.415327][T11010] device hsr_slave_0 left promiscuous mode [ 491.439379][T11010] device hsr_slave_1 left promiscuous mode [ 491.475873][T11010] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 491.483690][T14495] loop8: detected capacity change from 0 to 32768 [ 491.544229][T14495] JBD2: Ignoring recovery information on journal [ 491.554409][T11010] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 491.615560][T11010] device bridge_slave_1 left promiscuous mode [ 491.662681][T11010] bridge0: port 2(bridge_slave_1) entered disabled state [ 491.699006][T11010] device bridge_slave_0 left promiscuous mode [ 491.705752][T11010] bridge0: port 1(bridge_slave_0) entered disabled state [ 491.750376][T14495] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 491.776506][T14537] program syz.9.3208 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 491.927015][T11010] device veth1_macvtap left promiscuous mode [ 491.949156][T11010] device veth0_macvtap left promiscuous mode [ 491.971298][T11010] device veth1_vlan left promiscuous mode [ 491.985653][T12871] ocfs2: Unmounting device (7,8) on (node local) [ 492.003169][T11010] device veth0_vlan left promiscuous mode [ 492.145123][T14541] loop9: detected capacity change from 0 to 4096 [ 492.247498][T14541] ntfs: (device loop9): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 492.296718][T14541] ntfs: (device loop9): ntfs_read_locked_inode(): $DATA attribute is missing. [ 492.335570][T14541] ntfs: (device loop9): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 492.358459][T14541] ntfs: (device loop9): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 492.377181][T14546] loop3: detected capacity change from 0 to 512 [ 492.441105][T14546] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 492.482935][T14541] ntfs: volume version 3.1. [ 492.524732][T14546] EXT4-fs (loop3): invalid journal inode [ 492.581808][T14546] EXT4-fs (loop3): can't get journal size [ 492.611034][T14550] IPVS: ovf: UDP 127.0.0.1:19999 - no destination available [ 492.651158][T14541] ntfs: (device loop9): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 492.683003][T14546] EXT4-fs (loop3): 1 truncate cleaned up [ 492.711782][T14541] ntfs: (device loop9): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 492.736505][T14546] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 493.001261][T14546] EXT4-fs warning (device loop3): ext4_group_add:1743: No reserved GDT blocks, can't resize [ 493.277598][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 493.759021][T14548] loop1: detected capacity change from 0 to 32768 [ 493.885917][T14548] XFS (loop1): Mounting V5 Filesystem [ 493.945074][T14548] XFS (loop1): Ending clean mount [ 493.952966][T14548] XFS (loop1): Quotacheck needed: Please wait. [ 494.067712][T14548] XFS (loop1): Quotacheck: Done. [ 494.140987][T11570] XFS (loop1): Unmounting Filesystem [ 495.265346][T11010] device team_slave_0 left promiscuous mode [ 495.286829][T11010] team0 (unregistering): Port device team_slave_0 removed [ 495.404544][ T4294] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 495.417237][T11010] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.492469][T11010] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.644278][ T4294] usb 9-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 495.654257][ T4294] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.663196][ T4294] usb 9-1: Product: syz [ 495.667665][ T4294] usb 9-1: Manufacturer: syz [ 495.672779][ T4294] usb 9-1: SerialNumber: syz [ 495.693007][ T4294] usb 9-1: config 0 descriptor?? [ 495.737270][ T4294] i2c-tiny-usb 9-1:0.0: version 6d.cc found at bus 009 address 008 [ 495.826458][T14590] loop3: detected capacity change from 0 to 40427 [ 495.846446][T14590] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff [ 495.865614][T14590] F2FS-fs (loop3): invalid crc value [ 495.902143][T14590] F2FS-fs (loop3): Found nat_bits in checkpoint [ 496.102693][T14590] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 496.178833][ T4294] (null): failure reading functionality [ 496.202190][ T4294] i2c i2c-1: connected i2c-tiny-usb device [ 496.352421][ T4259] syz-executor: attempt to access beyond end of device [ 496.352421][ T4259] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 496.424594][ T4294] usb 9-1: USB disconnect, device number 8 [ 496.973337][T11010] bond0 (unregistering): Released all slaves [ 497.465142][T14617] loop9: detected capacity change from 0 to 512 [ 497.554972][T14617] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 497.684577][T14619] loop1: detected capacity change from 0 to 1024 [ 497.772611][T14617] EXT4-fs (loop9): 1 truncate cleaned up [ 497.825013][T14623] loop3: detected capacity change from 0 to 4096 [ 497.834914][T14617] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 497.834969][T14623] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512) [ 498.025805][T14632] hfsplus: can't free extent [ 498.145581][T12664] EXT4-fs (loop9): unmounting filesystem. [ 498.495432][T14641] loop1: detected capacity change from 0 to 1024 [ 498.527642][T14641] EXT4-fs: Ignoring removed orlov option [ 498.580755][T14641] EXT4-fs: Ignoring removed nomblk_io_submit option [ 498.696837][T14641] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 498.732921][T14654] loop3: detected capacity change from 0 to 2048 [ 498.751636][T14654] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 498.787903][T14654] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 499.206688][T11570] EXT4-fs (loop1): unmounting filesystem. [ 500.509690][T14665] loop9: detected capacity change from 0 to 32768 [ 501.576221][T14705] loop1: detected capacity change from 0 to 32768 [ 501.787309][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.794105][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.854735][T14738] device macvtap1 entered promiscuous mode [ 501.895364][T14738] device wlan0 entered promiscuous mode [ 501.917057][T14738] device wlan0 left promiscuous mode [ 502.591647][T14758] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3278'. [ 502.832517][T14731] loop9: detected capacity change from 0 to 32768 [ 503.110338][T14768] loop1: detected capacity change from 0 to 4096 [ 503.147322][T14768] ntfs: (device loop1): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 503.217622][T14768] ntfs: (device loop1): ntfs_read_locked_inode(): $DATA attribute is missing. [ 503.263404][T14768] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 503.313345][T14768] ntfs: (device loop1): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 503.372472][T14768] ntfs: volume version 3.1. [ 503.478407][T14768] ntfs: (device loop1): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 503.515781][T14768] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x40 as bad. Run chkdsk. [ 503.858710][ T4263] Bluetooth: hci0: command 0x0406 tx timeout [ 503.933176][T14795] syz.1.3287 uses obsolete (PF_INET,SOCK_PACKET) [ 503.952174][T14792] loop9: detected capacity change from 0 to 1024 [ 503.985070][T14792] hfsplus: request for non-existent node 3 in B*Tree [ 504.017881][T14792] hfsplus: request for non-existent node 3 in B*Tree [ 504.077113][ T26] audit: type=1800 audit(1736919421.691:145): pid=14792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3288" name="bus" dev="loop9" ino=2 res=0 errno=0 [ 504.106452][T14792] hfsplus: bad catalog folder thread [ 504.198970][ T126] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 504.414969][ T126] usb 9-1: Using ep0 maxpacket: 8 [ 504.426184][ T126] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 504.459416][ T126] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 504.473221][ T126] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 504.487604][ T126] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 504.545010][ T126] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 504.565715][ T126] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.817037][ T126] usb 9-1: GET_CAPABILITIES returned 0 [ 504.822905][ T126] usbtmc 9-1:16.0: can't read capabilities [ 505.054519][T14819] loop1: detected capacity change from 0 to 512 [ 505.065112][ T126] usb 9-1: USB disconnect, device number 9 [ 505.161082][T14819] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 505.231937][T14819] fs-verity: sha512 using implementation "sha512-avx2" [ 505.244076][T14819] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.3295: bg 0: block 144: padding at end of block bitmap is not set [ 505.437003][T11570] EXT4-fs (loop1): unmounting filesystem. [ 506.082846][T14811] loop9: detected capacity change from 0 to 32768 [ 506.263485][T14811] XFS (loop9): Mounting V5 Filesystem [ 506.421136][T14811] XFS (loop9): Ending clean mount [ 506.676979][T12664] XFS (loop9): Unmounting Filesystem [ 507.274060][T14877] loop8: detected capacity change from 0 to 256 [ 507.309237][T14877] exfat: Deprecated parameter 'namecase' [ 507.375027][T14848] loop3: detected capacity change from 0 to 40427 [ 507.379985][T14877] exFAT-fs (loop8): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 507.431865][T14848] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 507.507036][T14848] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 507.629734][T14889] binder: 14886:14889 ioctl 400c620e 200014c0 returned -22 [ 507.654621][T14848] F2FS-fs (loop3): Found nat_bits in checkpoint [ 507.894638][T14848] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 507.904087][T14848] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 508.101666][T14893] loop9: detected capacity change from 0 to 4096 [ 508.555208][T12664] ntfs3: loop9: ntfs_evict_inode r=5 failed, -22. [ 508.588566][T12664] ntfs3: loop9: Mark volume as dirty due to NTFS errors [ 509.044594][T14930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3327'. [ 509.458343][ T4568] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 509.659742][ T4568] usb 10-1: Using ep0 maxpacket: 32 [ 509.667777][ T4568] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 509.712474][ T4568] usb 10-1: config 0 has no interface number 0 [ 509.731206][ T4568] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.762918][ T4568] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.826866][ T4568] usb 10-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 509.837786][ T4568] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.875767][ T4568] usb 10-1: config 0 descriptor?? [ 510.018714][ T126] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 510.238776][ T126] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 510.260103][ T126] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.278723][ T126] usb 2-1: Product: syz [ 510.283243][ T126] usb 2-1: Manufacturer: syz [ 510.288117][ T126] usb 2-1: SerialNumber: syz [ 510.319420][ T126] r8152-cfgselector 2-1: config 0 descriptor?? [ 510.514261][ T4568] input: HID 28bd:0094 Pen as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.1/0003:28BD:0094.0015/input/input33 [ 510.555708][ T126] r8152-cfgselector 2-1: Unknown version 0x0000 [ 510.565040][ T126] r8152-cfgselector 2-1: Unknown version 0x0000 [ 510.579742][ T126] r8152-cfgselector 2-1: bad CDC descriptors [ 510.603106][ T126] usbip-host 2-1: 2-1 is not in match_busid table... skip! [ 510.627574][ T4568] uclogic 0003:28BD:0094.0015: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.9-1/input1 [ 510.643425][ T6165] usb 2-1: config 0 descriptor?? [ 510.688435][ T4294] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 510.762356][ T4568] usb 10-1: USB disconnect, device number 9 [ 510.801757][ T6165] usb 2-1: can't set config #0, error -71 [ 510.801926][ T126] usb 2-1: USB disconnect, device number 8 [ 510.878491][ T4294] usb 4-1: Using ep0 maxpacket: 32 [ 510.886489][ T4294] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 510.925906][ T4294] usb 4-1: config 0 has no interface number 0 [ 510.940266][ T4294] usb 4-1: config 0 interface 184 has no altsetting 0 [ 510.961874][ T4294] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 510.974594][T14989] loop8: detected capacity change from 0 to 2048 [ 510.987811][ T4294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.017853][ T4294] usb 4-1: Product: syz [ 511.029766][ T4294] usb 4-1: Manufacturer: syz [ 511.037701][ T4294] usb 4-1: SerialNumber: syz [ 511.047337][ T4294] usb 4-1: config 0 descriptor?? [ 511.055124][T14989] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 511.055846][ T4294] smsc75xx v1.0.0 [ 511.087858][T14989] ext4 filesystem being mounted at /120/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 511.595234][T12871] EXT4-fs (loop8): unmounting filesystem. [ 511.907049][ T4294] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 511.938046][ T4294] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 511.985603][ T4294] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 512.007166][ T4294] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 512.078335][ T4294] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 512.138332][ T4294] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 512.180771][ T4294] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 512.188009][T15022] loop8: detected capacity change from 0 to 256 [ 512.216732][ T4294] usb 4-1: USB disconnect, device number 17 [ 512.225395][T15022] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 512.381624][T15022] exFAT-fs (loop8): error, invalid size(size(4096) > aligned(9223372036854777344) [ 512.381624][T15022] [ 512.458573][T15022] exFAT-fs (loop8): Filesystem has been set read-only [ 513.403250][T15059] loop9: detected capacity change from 0 to 256 [ 513.459999][T15059] exfat: Deprecated parameter 'utf8' [ 513.519269][T15059] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 514.271906][T15072] loop9: detected capacity change from 0 to 4096 [ 514.322762][T15072] ntfs3: loop9: Different NTFS' sector size (1024) and media sector size (512) [ 514.474407][T15072] ntfs3: loop9: Failed to load $Extend. [ 515.200446][T15041] loop8: detected capacity change from 0 to 65536 [ 515.335545][T15077] loop3: detected capacity change from 0 to 32768 [ 515.399993][T15041] XFS (loop8): Mounting V5 Filesystem [ 515.509155][T15041] XFS (loop8): Ending clean mount [ 515.519397][T15041] XFS (loop8): Quotacheck needed: Please wait. [ 515.648785][T15041] XFS (loop8): Quotacheck: Done. [ 515.896841][T12871] XFS (loop8): Unmounting Filesystem [ 516.896290][T15112] loop1: detected capacity change from 0 to 40427 [ 516.949407][T15112] F2FS-fs (loop1): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 516.957119][T15112] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 517.008908][T15112] F2FS-fs (loop1): invalid crc value [ 517.045411][T15112] F2FS-fs (loop1): Found nat_bits in checkpoint [ 517.270705][T15112] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 517.277913][T15112] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 517.391026][T15152] netem: change failed [ 517.667751][T11570] syz-executor: attempt to access beyond end of device [ 517.667751][T11570] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 517.737226][T15163] loop8: detected capacity change from 0 to 2048 [ 517.878435][T12067] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 517.892584][T15163] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 518.080797][T12067] usb 10-1: config 0 has an invalid interface number: 67 but max is 0 [ 518.102045][T12067] usb 10-1: config 0 has no interface number 0 [ 518.121804][T12067] usb 10-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 518.124878][T15175] device macsec2 entered promiscuous mode [ 518.144124][T12871] EXT4-fs (loop8): unmounting filesystem. [ 518.171622][T12067] usb 10-1: config 0 interface 67 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 518.179993][T15175] device macvlan0 entered promiscuous mode [ 518.237105][T12067] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 518.250198][T15175] device macvlan0 left promiscuous mode [ 518.269192][T12067] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.297986][T12067] usb 10-1: Product: syz [ 518.308165][T12067] usb 10-1: Manufacturer: syz [ 518.328618][T12067] usb 10-1: SerialNumber: syz [ 518.337685][T12067] usb 10-1: config 0 descriptor?? [ 518.355107][T15161] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 518.378694][T15161] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 518.407233][T12067] smsc95xx v2.0.0 [ 518.649129][T15161] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 518.658891][T15161] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 518.901735][T12067] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 518.938463][T12067] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 519.082134][T15197] loop1: detected capacity change from 0 to 128 [ 519.101070][T15201] loop3: detected capacity change from 0 to 128 [ 519.139149][T15197] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 519.185040][T12067] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 519.236030][T12067] smsc95xx: probe of 10-1:0.67 failed with error -71 [ 519.263498][T15197] syz.1.3403: attempt to access beyond end of device [ 519.263498][T15197] loop1: rw=2049, sector=2066843070, nr_sectors = 1 limit=128 [ 519.283752][T12067] usb 10-1: USB disconnect, device number 10 [ 519.334515][T15197] Buffer I/O error on dev loop1, logical block 2066843070, lost async page write [ 519.371128][ T4259] sysv_free_block: flc_count > flc_size [ 519.376758][ T4259] sysv_free_block: flc_count > flc_size [ 519.398603][T15197] syz.1.3403: attempt to access beyond end of device [ 519.398603][T15197] loop1: rw=2049, sector=8767744, nr_sectors = 1 limit=128 [ 519.438633][ T4259] sysv_free_block: flc_count > flc_size [ 519.444338][T15197] Buffer I/O error on dev loop1, logical block 8767744, lost async page write [ 519.478841][ T4259] sysv_free_block: flc_count > flc_size [ 519.484513][ T4259] sysv_free_block: flc_count > flc_size [ 519.491195][T15197] syz.1.3403: attempt to access beyond end of device [ 519.491195][T15197] loop1: rw=2049, sector=13269809, nr_sectors = 1 limit=128 [ 519.518405][ T4259] sysv_free_block: flc_count > flc_size [ 519.524017][ T4259] sysv_free_block: flc_count > flc_size [ 519.530057][T15197] Buffer I/O error on dev loop1, logical block 13269809, lost async page write [ 519.548354][ T4259] sysv_free_block: flc_count > flc_size [ 519.558107][T15197] syz.1.3403: attempt to access beyond end of device [ 519.558107][T15197] loop1: rw=2049, sector=1157, nr_sectors = 1 limit=128 [ 519.572762][ T4259] sysv_free_block: flc_count > flc_size [ 519.588488][ T4259] sysv_free_block: flc_count > flc_size [ 519.594820][ T4259] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 519.608518][T15197] Buffer I/O error on dev loop1, logical block 1157, lost async page write [ 519.627360][T15197] syz.1.3403: attempt to access beyond end of device [ 519.627360][T15197] loop1: rw=2049, sector=3211264, nr_sectors = 1 limit=128 [ 519.718393][T15197] Buffer I/O error on dev loop1, logical block 3211264, lost async page write [ 519.727354][T15197] syz.1.3403: attempt to access beyond end of device [ 519.727354][T15197] loop1: rw=2049, sector=8768635, nr_sectors = 1 limit=128 [ 519.765255][T15197] Buffer I/O error on dev loop1, logical block 8768635, lost async page write [ 519.810650][T15197] syz.1.3403: attempt to access beyond end of device [ 519.810650][T15197] loop1: rw=2049, sector=13466417, nr_sectors = 1 limit=128 [ 519.871899][T15197] Buffer I/O error on dev loop1, logical block 13466417, lost async page write [ 519.900647][T15197] syz.1.3403: attempt to access beyond end of device [ 519.900647][T15197] loop1: rw=2049, sector=209285, nr_sectors = 1 limit=128 [ 519.988399][T15197] Buffer I/O error on dev loop1, logical block 209285, lost async page write [ 520.198042][T11570] sysv_free_block: trying to free block not in datazone [ 520.226357][T11570] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 520.350916][T15226] loop3: detected capacity change from 0 to 2048 [ 520.498058][T15226] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 520.603418][T15226] EXT4-fs (loop3): shut down requested (2) [ 520.765810][T15222] loop8: detected capacity change from 0 to 32768 [ 520.785274][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 520.944701][T15222] XFS (loop8): Mounting V5 Filesystem [ 521.054589][T15252] loop3: detected capacity change from 0 to 256 [ 521.122347][T15222] XFS (loop8): Ending clean mount [ 521.145880][T15252] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 521.379680][T12871] XFS (loop8): Unmounting Filesystem [ 521.748188][T15266] loop3: detected capacity change from 0 to 4096 [ 522.146707][T15271] netlink: 'syz.3.3426': attribute type 4 has an invalid length. [ 522.285806][T15262] loop1: detected capacity change from 0 to 32768 [ 523.017590][T15291] loop9: detected capacity change from 0 to 4096 [ 523.064052][T15291] ntfs3: loop9: Different NTFS' sector size (1024) and media sector size (512) [ 523.121906][T15296] program syz.3.3439 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 523.244882][T15291] ntfs3: loop9: mft corrupted [ 524.346429][T15298] loop8: detected capacity change from 0 to 32768 [ 524.385996][T15298] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.3440 (15298) [ 524.456036][T15298] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 524.514276][T15298] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 524.558650][T15298] BTRFS info (device loop8): setting nodatacow, compression disabled [ 524.566891][T15298] BTRFS info (device loop8): max_inline at 0 [ 524.581147][T15334] loop3: detected capacity change from 0 to 64 [ 524.599220][T15298] BTRFS info (device loop8): enabling disk space caching [ 524.606324][T15298] BTRFS info (device loop8): turning off barriers [ 524.618908][ T4568] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 524.625255][T15298] BTRFS info (device loop8): turning on flush-on-commit [ 524.643943][T15298] BTRFS info (device loop8): doing ref verification [ 524.652147][T15298] BTRFS info (device loop8): force clearing of disk cache [ 524.661750][T15298] BTRFS info (device loop8): enabling ssd optimizations [ 524.679804][T15298] BTRFS info (device loop8): max_inline at 4096 [ 524.705554][T15298] BTRFS info (device loop8): disk space caching is enabled [ 524.818893][ T4568] usb 2-1: Using ep0 maxpacket: 8 [ 524.826123][ T4568] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 524.855763][ T4568] usb 2-1: config 179 has no interface number 0 [ 524.865683][ T4568] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 524.877178][ T4568] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 524.891442][ T4568] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 524.903364][ T4568] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 524.915348][ T4568] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 524.929829][ T4568] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 524.939263][ T4568] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.949135][T15298] BTRFS info (device loop8): rebuilding free space tree [ 524.958967][T15325] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 525.021237][T15298] BTRFS info (device loop8): disabling free space tree [ 525.036182][T15298] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 525.057826][T15298] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 525.312669][ T4294] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input34 [ 525.504358][T12067] usb 2-1: USB disconnect, device number 9 [ 525.504392][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 525.519073][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 525.527508][T12067] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 525.896506][T15375] loop3: detected capacity change from 0 to 4096 [ 525.945070][T15375] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 525.956738][T15381] loop9: detected capacity change from 0 to 16 [ 526.024546][T15381] erofs: (device loop9): mounted with root inode @ nid 36. [ 526.067116][T12871] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 526.554279][T15395] loop3: detected capacity change from 0 to 64 [ 526.641258][T15398] loop1: detected capacity change from 0 to 1024 [ 526.695866][T15398] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 526.767117][T15398] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 527.107561][T11570] EXT4-fs (loop1): unmounting filesystem. [ 527.816093][T15430] loop8: detected capacity change from 0 to 256 [ 527.896835][T15430] FAT-fs (loop8): Directory bread(block 64) failed [ 527.906862][T15430] FAT-fs (loop8): Directory bread(block 65) failed [ 527.933606][T15430] FAT-fs (loop8): Directory bread(block 66) failed [ 527.956947][T15431] loop1: detected capacity change from 0 to 4096 [ 527.974062][T15430] FAT-fs (loop8): Directory bread(block 67) failed [ 527.982456][T15431] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 527.998125][T15430] FAT-fs (loop8): Directory bread(block 68) failed [ 528.017944][T15430] FAT-fs (loop8): Directory bread(block 69) failed [ 528.036285][T15430] FAT-fs (loop8): Directory bread(block 70) failed [ 528.063600][T15430] FAT-fs (loop8): Directory bread(block 71) failed [ 528.084181][T15430] FAT-fs (loop8): Directory bread(block 72) failed [ 528.127743][T15430] FAT-fs (loop8): Directory bread(block 73) failed [ 528.666010][T15424] loop9: detected capacity change from 0 to 32768 [ 528.726801][T15424] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop9 scanned by syz.9.3482 (15424) [ 528.788451][T15424] BTRFS info (device loop9): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 528.835324][T15424] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm [ 528.902092][T15424] BTRFS info (device loop9): using free space tree [ 529.284510][T15424] BTRFS info (device loop9): enabling ssd optimizations [ 529.592604][T15486] loop8: detected capacity change from 0 to 512 [ 529.673532][T15486] EXT4-fs (loop8): orphan cleanup on readonly fs [ 529.737917][T15486] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13 [ 529.820664][T15486] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 529.910858][T15486] EXT4-fs error (device loop8): ext4_clear_blocks:883: inode #13: comm syz.8.3499: attempt to clear invalid blocks 2 len 1 [ 529.987208][T15486] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.3499: invalid indirect mapped block 1819239214 (level 0) [ 530.002059][T12664] BTRFS info (device loop9): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 530.066842][T15486] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.3499: invalid indirect mapped block 1819239214 (level 1) [ 530.130013][T15486] EXT4-fs (loop8): 1 truncate cleaned up [ 530.158096][T15486] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 530.165799][T15440] loop3: detected capacity change from 0 to 40427 [ 530.249668][T15440] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 530.277416][T15440] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 530.317650][T15440] F2FS-fs (loop3): invalid crc_offset: 33558524 [ 530.361451][T15440] F2FS-fs (loop3): Found nat_bits in checkpoint [ 530.410904][ T5011] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 530.496488][T15440] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 530.507423][T15440] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 530.556217][T12871] EXT4-fs error (device loop8): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: inode out of bounds - offset=24, inode=85, rec_len=20, size=1024 fake=0 [ 530.671671][ T5011] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 530.682077][ T5011] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.693260][ T5011] usb 2-1: config 0 descriptor?? [ 531.122051][T12871] EXT4-fs (loop8): unmounting filesystem. [ 531.127125][ T5011] [drm:udl_init] *ERROR* Selecting channel failed [ 531.386072][ T5011] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 531.408350][ T5011] [drm] Initialized udl on minor 2 [ 531.469557][T15526] loop9: detected capacity change from 0 to 64 [ 531.472797][ T5011] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 531.527409][ T5011] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 531.582969][ T5011] usb 2-1: USB disconnect, device number 10 [ 531.954739][ T11] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.330630][ T11] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.617964][ T11] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.680017][T15546] loop1: detected capacity change from 0 to 1764 [ 532.691087][T15543] loop9: detected capacity change from 0 to 8192 [ 532.779839][T15543] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 532.828721][T15543] REISERFS (device loop9): found reiserfs format "3.6" with non-standard journal [ 532.837990][T15543] REISERFS (device loop9): using ordered data mode [ 532.901071][ T11] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.915234][T15543] reiserfs: using flush barriers [ 532.954775][T15543] REISERFS (device loop9): journal params: device loop9, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 532.972151][T15546] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 533.012230][T15543] REISERFS (device loop9): checking transaction log (loop9) [ 533.096787][ T4263] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 533.113527][ T4263] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 533.126032][ T4263] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 533.137596][ T4263] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 533.145892][ T4263] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 533.163523][ T4263] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 533.467594][T15543] REISERFS (device loop9): Using tea hash to sort names [ 533.489271][T15543] REISERFS (device loop9): Created .reiserfs_priv - reserved for xattr storage. [ 533.931051][T15582] loop3: detected capacity change from 0 to 4096 [ 533.991241][T15582] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 534.086848][T15587] loop1: detected capacity change from 0 to 128 [ 534.216481][T15587] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 534.318813][T15587] ext4 filesystem being mounted at /236/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 534.382249][ T4259] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 534.438193][ T4259] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 534.514023][T15561] chnl_net:caif_netlink_parms(): no params data found [ 534.529281][ T4259] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 534.588438][ T4263] Bluetooth: hci1: command 0x0406 tx timeout [ 534.757732][T11570] EXT4-fs (loop1): unmounting filesystem. [ 535.046403][T15605] loop1: detected capacity change from 0 to 2048 [ 535.085525][T15605] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 535.218817][ T4263] Bluetooth: hci3: command 0x0409 tx timeout [ 535.335307][T15561] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.397466][T15561] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.418702][T15561] device bridge_slave_0 entered promiscuous mode [ 535.528081][T11570] EXT4-fs (loop1): unmounting filesystem. [ 535.600310][T15628] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 535.629375][T15561] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.636569][T15561] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.680131][T15561] device bridge_slave_1 entered promiscuous mode [ 535.839732][T15561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.901389][T15561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.115404][T15561] team0: Port device team_slave_0 added [ 536.264899][T15561] team0: Port device team_slave_1 added [ 536.307505][T15619] loop3: detected capacity change from 0 to 32768 [ 536.454129][T15619] XFS (loop3): Mounting V5 Filesystem [ 536.463305][T15652] sctp: [Deprecated]: syz.0.3544 (pid 15652) Use of struct sctp_assoc_value in delayed_ack socket option. [ 536.463305][T15652] Use struct sctp_sack_info instead [ 536.537106][T15645] loop1: detected capacity change from 0 to 4096 [ 536.624894][T15619] XFS (loop3): Ending clean mount [ 536.646685][T15619] XFS (loop3): Quotacheck needed: Please wait. [ 536.701588][T15561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.717776][T15561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.775553][T15561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.809398][T15561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.816460][T15561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.943192][T15619] XFS (loop3): Quotacheck: Done. [ 537.021060][T15561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.213762][ T4259] XFS (loop3): Unmounting Filesystem [ 537.310150][ T4263] Bluetooth: hci3: command 0x041b tx timeout [ 537.338714][T15666] sp0: Synchronizing with TNC [ 537.362030][T15669] sp0: Found TNC [ 537.545894][T15561] device hsr_slave_0 entered promiscuous mode [ 537.563677][T15561] device hsr_slave_1 entered promiscuous mode [ 537.589606][T15561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 537.607017][T15561] Cannot create hsr debugfs directory [ 537.633337][T15684] device macvtap1 entered promiscuous mode [ 537.648692][T15684] device wlan0 entered promiscuous mode [ 537.658147][T15684] device wlan0 left promiscuous mode [ 537.753369][ T11] device hsr_slave_0 left promiscuous mode [ 537.770907][ T11] device hsr_slave_1 left promiscuous mode [ 537.781316][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.804179][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.841502][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.854157][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.881190][ T11] device bridge_slave_1 left promiscuous mode [ 537.900797][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.932549][ T11] device bridge_slave_0 left promiscuous mode [ 537.949219][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.061466][ T11] device veth1_macvtap left promiscuous mode [ 538.067647][ T11] device veth0_macvtap left promiscuous mode [ 538.098907][ T11] device veth1_vlan left promiscuous mode [ 538.104844][ T11] device veth0_vlan left promiscuous mode [ 539.056705][T15716] loop3: detected capacity change from 0 to 512 [ 539.124097][T15716] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 539.152987][T15716] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 539.165478][T15716] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 539.181975][T15716] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 539.190573][T15716] System zones: 0-2, 18-18, 34-34 [ 539.303099][T15716] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 539.358997][T15716] EXT4-fs (loop3): 1 truncate cleaned up [ 539.377333][T15716] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 539.408426][ T4263] Bluetooth: hci3: command 0x040f tx timeout [ 539.502996][ T26] audit: type=1800 audit(1736919457.121:146): pid=15716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3550" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 539.635199][ T26] audit: type=1800 audit(1736919457.151:147): pid=15716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3550" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 539.711854][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 540.386148][T15733] loop9: detected capacity change from 0 to 256 [ 540.727638][ T11] team0 (unregistering): Port device team_slave_1 removed [ 540.947321][T15747] loop9: detected capacity change from 0 to 1024 [ 541.006462][ T11] team0 (unregistering): Port device team_slave_0 removed [ 541.060905][T15747] hfsplus: catalog searching failed [ 541.172327][ T32] hfsplus: b-tree write err: -5, ino 4 [ 541.356609][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 541.478596][ T4263] Bluetooth: hci3: command 0x0419 tx timeout [ 541.583454][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.494146][T15770] tmpfs: Bad value for 'size' [ 542.811072][ T11] bond0 (unregistering): Released all slaves [ 543.695456][T15793] netlink: 'syz.3.3590': attribute type 11 has an invalid length. [ 543.713758][T15793] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3590'. [ 543.893188][T15795] team0: Port device team_slave_0 removed [ 543.912900][T15795] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 543.938592][T15794] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3591'. [ 544.021904][T15806] netlink: 'syz.3.3594': attribute type 11 has an invalid length. [ 544.696986][T15824] loop9: detected capacity change from 0 to 512 [ 544.872532][T15824] EXT4-fs error (device loop9): ext4_xattr_inode_iget:404: comm syz.9.3598: inode #1: comm syz.9.3598: iget: illegal inode # [ 544.904744][T15824] EXT4-fs error (device loop9): ext4_xattr_inode_iget:409: comm syz.9.3598: error while reading EA inode 1 err=-117 [ 544.926855][T15832] loop3: detected capacity change from 0 to 1024 [ 544.939091][T15824] EXT4-fs error (device loop9): ext4_xattr_inode_iget:404: comm syz.9.3598: inode #1: comm syz.9.3598: iget: illegal inode # [ 544.988471][T15824] EXT4-fs error (device loop9): ext4_xattr_inode_iget:409: comm syz.9.3598: error while reading EA inode 1 err=-117 [ 545.039257][T15832] EXT4-fs: Ignoring removed mblk_io_submit option [ 545.065556][T15824] EXT4-fs (loop9): 1 orphan inode deleted [ 545.078467][T15824] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 545.157407][T15824] EXT4-fs error (device loop9): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.9.3598: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 545.181219][T15832] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 545.354354][T15842] syz.1.3604 sent an empty control message without MSG_MORE. [ 545.437088][T12664] EXT4-fs (loop9): unmounting filesystem. [ 545.697949][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 546.210400][T15856] loop9: detected capacity change from 0 to 4096 [ 546.248626][T15856] ntfs3: loop9: Different NTFS' sector size (4096) and media sector size (512) [ 546.282171][T15561] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 546.334051][T15561] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 546.381975][T15561] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 546.431877][T15561] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 546.622220][T15873] loop3: detected capacity change from 0 to 128 [ 546.652909][T15873] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 546.788630][ C0] vkms_vblank_simulate: vblank timer overrun [ 546.937731][T15561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 547.009985][T15561] 8021q: adding VLAN 0 to HW filter on device team0 [ 547.027479][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 547.069209][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 547.103520][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 547.152826][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 547.185231][ T4324] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.192483][ T4324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 547.237350][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 547.261484][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 547.285153][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 547.324264][ T4324] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.331512][ T4324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 547.350378][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 547.398820][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 547.456574][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 547.537748][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 547.578603][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 547.590366][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 547.619978][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 547.686915][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 547.707324][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 547.748114][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 547.792941][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 547.822140][T15561] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 548.138774][T15908] program syz.0.3626 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 548.214811][T15909] loop3: detected capacity change from 0 to 512 [ 548.334666][T15909] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 548.350757][T15909] EXT4-fs (loop3): orphan cleanup on readonly fs [ 548.414552][T15909] Quota error (device loop3): dq_insert_tree: Quota tree root isn't allocated! [ 548.453475][T15909] Quota error (device loop3): qtree_write_dquot: Error -5 occurred while creating quota [ 548.508532][T15909] EXT4-fs error (device loop3): ext4_acquire_dquot:6794: comm syz.3.3625: Failed to acquire dquot type 1 [ 548.603530][T15909] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.3625: bg 0: block 40: padding at end of block bitmap is not set [ 548.634090][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 548.649247][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 548.671755][T15561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.719317][T15909] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 548.780198][T15909] EXT4-fs (loop3): 1 truncate cleaned up [ 548.786085][T15909] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 549.512218][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 549.683498][T15958] loop3: detected capacity change from 0 to 64 [ 549.690591][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 549.719767][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 549.747682][T15958] hfs: keylen 94 too large [ 549.774117][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 549.795259][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 549.842165][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 549.890723][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 549.929940][T15561] device veth0_vlan entered promiscuous mode [ 549.995489][T15561] device veth1_vlan entered promiscuous mode [ 550.044173][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 550.059821][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 550.088204][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 550.125614][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 550.143673][T15561] device veth0_macvtap entered promiscuous mode [ 550.155195][T15561] device veth1_macvtap entered promiscuous mode [ 550.187149][T15561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.225405][T15561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.257955][T15561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.282960][ T4565] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 550.312375][T15561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.333758][T15561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.395510][T15561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.416084][T15561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.478412][ T4565] usb 2-1: Using ep0 maxpacket: 16 [ 550.491576][ T4565] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.514626][T15561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.541762][ T4565] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 550.573574][T15561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.598462][ T4565] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 550.621202][T15561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.632065][ T4565] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 550.655272][T15561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.667990][ T4565] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 550.686812][T15561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.705776][ T4565] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 550.718958][T15561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.734383][ T4565] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 550.743070][T15561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.757002][ T4565] usb 2-1: Manufacturer: syz [ 550.764576][T15561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.782370][T15561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.782413][ T4565] usb 2-1: config 0 descriptor?? [ 550.804070][T15561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.823059][T15561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.849743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 550.862586][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 550.883248][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 550.916836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 550.945675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 550.975534][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 551.003336][T15561] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.032909][T15561] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.046550][T15561] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.088388][T15561] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.278555][ T4565] rc_core: IR keymap rc-hauppauge not found [ 551.284536][ T4565] Registered IR keymap rc-empty [ 551.331236][ T4565] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 551.409049][ T4565] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 551.426637][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.455963][ T4565] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 551.468466][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.518625][ T4565] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input35 [ 551.547457][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 551.573154][ T4565] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 551.590412][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.628484][ T4565] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 551.658462][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.669262][ T4565] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 551.692226][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 551.708610][ T4565] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 551.766103][ T4565] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 551.828506][ T4565] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 551.885611][ T4565] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 551.923990][ T4565] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 551.968404][ T4565] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 552.025581][ T4565] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 552.070613][ T4565] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 552.080918][T15982] loop3: detected capacity change from 0 to 40427 [ 552.102861][T15982] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 552.119361][ T4565] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 552.134860][T15982] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 552.147186][ T4565] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 552.177759][ T4565] usb 2-1: USB disconnect, device number 11 [ 552.186345][T15982] F2FS-fs (loop3): invalid crc value [ 552.236642][T15982] F2FS-fs (loop3): Found nat_bits in checkpoint [ 552.369651][T15982] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 552.376766][T15982] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 552.614824][T16027] loop1: detected capacity change from 0 to 512 [ 552.717698][T16029] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.724918][T16029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 552.743843][ T4259] syz-executor: attempt to access beyond end of device [ 552.743843][ T4259] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 552.844723][T16027] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 552.898962][T16027] ext4 filesystem being mounted at /258/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 552.934557][T16006] loop9: detected capacity change from 0 to 32768 [ 553.034570][T16006] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 scanned by syz.9.3649 (16006) [ 553.103394][T16006] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 553.168439][T16006] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm [ 553.183940][T16006] BTRFS info (device loop9): setting nodatacow, compression disabled [ 553.205033][T16026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3652'. [ 553.271429][T16006] BTRFS info (device loop9): max_inline at 0 [ 553.309632][T16026] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3652'. [ 553.319570][T16006] BTRFS info (device loop9): enabling disk space caching [ 553.326698][T16006] BTRFS info (device loop9): turning off barriers [ 553.348629][T16006] BTRFS info (device loop9): turning on flush-on-commit [ 553.371263][T16006] BTRFS info (device loop9): doing ref verification [ 553.398772][T16026] device geneve0 entered promiscuous mode [ 553.408475][T16006] BTRFS info (device loop9): force clearing of disk cache [ 553.415695][T16006] BTRFS info (device loop9): enabling ssd optimizations [ 553.478405][T16006] BTRFS info (device loop9): max_inline at 4096 [ 553.484967][T16006] BTRFS info (device loop9): disk space caching is enabled [ 553.586637][T11570] EXT4-fs (loop1): unmounting filesystem. [ 553.994738][T16006] BTRFS info (device loop9): rebuilding free space tree [ 554.052907][T16006] BTRFS info (device loop9): disabling free space tree [ 554.121996][T16006] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 554.173260][T16006] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 554.366032][T16081] loop1: detected capacity change from 0 to 2048 [ 554.543959][T16090] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 554.719138][T12664] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 555.202847][T16099] loop1: detected capacity change from 0 to 4096 [ 555.291234][T16099] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 555.466640][T16073] loop4: detected capacity change from 0 to 32768 [ 555.615873][T16073] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 555.716580][T16073] (syz.4.3664,16073,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=0, inode=3298534883393, rec_len=0, name_len=1 [ 556.007933][T15561] ocfs2: Unmounting device (7,4) on (node local) [ 556.829091][ T6005] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 557.038675][ T6005] usb 2-1: Using ep0 maxpacket: 16 [ 557.046158][ T6005] usb 2-1: config 0 has an invalid interface number: 161 but max is 0 [ 557.077935][ T6005] usb 2-1: config 0 has no interface number 0 [ 557.106809][ T6005] usb 2-1: config 0 interface 161 has no altsetting 0 [ 557.129247][T16111] loop9: detected capacity change from 0 to 32768 [ 557.149405][ T6005] usb 2-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.01 [ 557.167333][T16141] loop3: detected capacity change from 0 to 512 [ 557.205480][T16111] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 scanned by syz.9.3670 (16111) [ 557.255195][ T6005] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.278374][ T6005] usb 2-1: Product: syz [ 557.282601][ T6005] usb 2-1: Manufacturer: syz [ 557.299180][ T6005] usb 2-1: SerialNumber: syz [ 557.307394][ T6005] usb 2-1: config 0 descriptor?? [ 557.319220][ T6005] ums-jumpshot 2-1:0.161: USB Mass Storage device detected [ 557.331299][T16111] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 557.345583][T16141] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.3679: inode #1: comm syz.3.3679: iget: illegal inode # [ 557.358508][T16111] BTRFS info (device loop9): using crc32c (crc32c-intel) checksum algorithm [ 557.367354][T16111] BTRFS info (device loop9): setting nodatacow, compression disabled [ 557.377313][T16111] BTRFS info (device loop9): max_inline at 0 [ 557.384528][T16111] BTRFS info (device loop9): enabling disk space caching [ 557.391956][T16111] BTRFS info (device loop9): turning off barriers [ 557.408101][T16141] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.3679: error while reading EA inode 1 err=-117 [ 557.420871][ T6005] ums-jumpshot 2-1:0.161: Quirks match for vid 05dc pid 0001: 2 [ 557.428431][T16111] BTRFS info (device loop9): turning on flush-on-commit [ 557.445868][T16111] BTRFS info (device loop9): doing ref verification [ 557.480598][T16141] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.3679: inode #1: comm syz.3.3679: iget: illegal inode # [ 557.504396][T16141] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.3679: error while reading EA inode 1 err=-117 [ 557.517605][T16111] BTRFS info (device loop9): force clearing of disk cache [ 557.548749][T16111] BTRFS info (device loop9): enabling ssd optimizations [ 557.555951][T16111] BTRFS info (device loop9): max_inline at 4096 [ 557.583457][T16111] BTRFS info (device loop9): disk space caching is enabled [ 557.595782][T16141] EXT4-fs (loop3): 1 orphan inode deleted [ 557.603350][ T4560] usb 2-1: USB disconnect, device number 12 [ 557.609768][T16141] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 557.727770][T16141] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.3.3679: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 557.846348][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 557.958752][T16111] BTRFS info (device loop9): rebuilding free space tree [ 557.991941][T16111] BTRFS info (device loop9): disabling free space tree [ 558.004639][T16171] loop4: detected capacity change from 0 to 512 [ 558.016449][T16111] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 558.044102][T16111] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 558.119853][T16171] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 558.178655][T16171] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 558.221210][T16170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3682'. [ 558.230438][T16170] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3682'. [ 558.243958][T16170] device geneve0 entered promiscuous mode [ 558.286780][T16178] loop3: detected capacity change from 0 to 2048 [ 558.330589][T16178] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 558.474241][T15561] EXT4-fs (loop4): unmounting filesystem. [ 558.679607][T12664] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 558.803992][T16190] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3685'. [ 559.364857][T16199] tap0: tun_chr_ioctl cmd 1074812118 [ 559.380958][T16202] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.582547][T16210] loop4: detected capacity change from 0 to 256 [ 559.662256][T16210] exfat: Deprecated parameter 'utf8' [ 559.667640][T16210] exfat: Deprecated parameter 'utf8' [ 559.701688][T16210] exfat: Deprecated parameter 'utf8' [ 559.789465][T16210] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 560.307815][T16204] loop3: detected capacity change from 0 to 32768 [ 560.824482][T16217] loop9: detected capacity change from 0 to 32768 [ 560.885106][T16217] ERROR: (device loop9): jfs_readdir: DT_GETPAGE: dtree page corrupt [ 560.885106][T16217] [ 560.942785][T16217] ERROR: (device loop9): remounting filesystem as read-only [ 562.308401][ T4260] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 562.491044][T16250] loop4: detected capacity change from 0 to 32768 [ 562.508539][ T4260] usb 2-1: Using ep0 maxpacket: 16 [ 562.515258][T16250] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.3704 (16250) [ 562.530486][ T4260] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.554600][T16250] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 562.587799][ T4260] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.593188][T16250] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 562.636410][ T4260] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 562.647666][T16250] BTRFS info (device loop4): setting nodatacow, compression disabled [ 562.670674][ T4260] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.688618][T16250] BTRFS info (device loop4): max_inline at 0 [ 562.694990][T16250] BTRFS info (device loop4): enabling disk space caching [ 562.713950][ T4260] usb 2-1: config 0 descriptor?? [ 562.748553][T16250] BTRFS info (device loop4): turning off barriers [ 562.788383][T16250] BTRFS info (device loop4): turning on flush-on-commit [ 562.798692][T16250] BTRFS info (device loop4): doing ref verification [ 562.805437][T16250] BTRFS info (device loop4): force clearing of disk cache [ 562.868650][T16250] BTRFS info (device loop4): enabling ssd optimizations [ 562.913426][T16250] BTRFS info (device loop4): max_inline at 4096 [ 562.942108][T16250] BTRFS info (device loop4): disk space caching is enabled [ 563.136301][T16250] BTRFS info (device loop4): rebuilding free space tree [ 563.182550][T16262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.228474][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.234875][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.248942][T16262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.276782][T16250] BTRFS info (device loop4): disabling free space tree [ 563.293241][ T4260] hid (null): global environment stack underflow [ 563.298180][T16250] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 563.308789][ T4260] hid (null): bogus close delimiter [ 563.339553][T16250] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 563.496968][ T4260] usb 2-1: string descriptor 0 read error: -71 [ 563.530988][ T4260] usb 2-1: Max retries (5) exceeded reading string descriptor 200 [ 563.550818][ T4260] letsketch: probe of 0003:6161:4D15.0016 failed with error -32 [ 563.605648][ T4260] usb 2-1: USB disconnect, device number 13 [ 563.919447][T15561] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 564.394388][T16288] loop3: detected capacity change from 0 to 32768 [ 565.305589][T16308] loop9: detected capacity change from 0 to 32768 [ 565.350702][T16308] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 scanned by syz.9.3712 (16308) [ 565.488464][T16308] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 565.503262][T16340] loop4: detected capacity change from 0 to 256 [ 565.549214][T16308] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 565.557917][T16308] BTRFS info (device loop9): using free space tree [ 565.632578][T16340] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 566.066245][T16308] BTRFS info (device loop9): enabling ssd optimizations [ 566.438664][T12664] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 567.285991][ C1] vkms_vblank_simulate: vblank timer overrun [ 567.297400][T16364] loop1: detected capacity change from 0 to 32768 [ 567.325365][T16364] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.3726 (16364) [ 567.416026][T16364] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 567.466598][T16364] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 567.486894][T16364] BTRFS info (device loop1): turning on sync discard [ 567.525218][T16364] BTRFS info (device loop1): doing ref verification [ 567.563577][T16364] BTRFS info (device loop1): disabling tree log [ 567.599246][T16364] BTRFS info (device loop1): enabling ssd optimizations [ 567.616595][T16364] BTRFS info (device loop1): using spread ssd allocation scheme [ 567.657189][T16364] BTRFS info (device loop1): not using ssd optimizations [ 567.687227][T16364] BTRFS info (device loop1): not using spread ssd allocation scheme [ 567.742577][T16364] BTRFS info (device loop1): using free space tree [ 568.605741][T11570] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 568.698774][T16373] loop4: detected capacity change from 0 to 65536 [ 568.968094][ C1] vkms_vblank_simulate: vblank timer overrun [ 569.147724][ C1] vkms_vblank_simulate: vblank timer overrun [ 569.304183][ C1] vkms_vblank_simulate: vblank timer overrun [ 569.381778][ C1] vkms_vblank_simulate: vblank timer overrun [ 569.452562][ C1] vkms_vblank_simulate: vblank timer overrun [ 569.828736][T16373] XFS (loop4): Mounting V5 Filesystem [ 569.885259][T16373] XFS (loop4): log mount failed [ 569.928999][T16464] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3745'. [ 570.140800][T16467] vim2m vim2m.0: vidioc_s_fmt queue busy [ 570.381372][T16474] netlink: 'syz.1.3740': attribute type 1 has an invalid length. [ 570.427740][T16474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3740'. [ 570.988513][ T22] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 571.169275][T16497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3750'. [ 571.180244][ T22] usb 2-1: New USB device found, idVendor=054c, idProduct=03d5, bcdDevice= 0.00 [ 571.208486][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.238738][T16497] netlink: 'syz.4.3750': attribute type 1 has an invalid length. [ 571.240608][ T22] usb 2-1: config 0 descriptor?? [ 571.273768][T16497] netlink: 'syz.4.3750': attribute type 2 has an invalid length. [ 571.482009][T16503] netlink: 'syz.9.3757': attribute type 21 has an invalid length. [ 571.507046][T16503] netlink: 128 bytes leftover after parsing attributes in process `syz.9.3757'. [ 571.547540][T16503] netlink: 'syz.9.3757': attribute type 5 has an invalid length. [ 571.568826][T16503] netlink: 'syz.9.3757': attribute type 6 has an invalid length. [ 571.570805][T16472] loop3: detected capacity change from 0 to 32768 [ 571.598616][T16503] netlink: 3 bytes leftover after parsing attributes in process `syz.9.3757'. [ 571.627983][T16472] XFS: ikeep mount option is deprecated. [ 571.753126][T16472] XFS (loop3): Mounting V5 Filesystem [ 571.762620][ T22] input: HID 054c:03d5 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:054C:03D5.0017/input/input37 [ 571.885748][T16472] XFS (loop3): Ending clean mount [ 571.893627][T16485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.895983][T16472] XFS (loop3): Quotacheck needed: Please wait. [ 571.909327][ T22] sony 0003:054C:03D5.0017: input,hidraw0: USB HID v1.01 Joystick [HID 054c:03d5] on usb-dummy_hcd.1-1/input0 [ 571.938773][T16485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.962649][ T22] usb 2-1: USB disconnect, device number 14 [ 572.009171][T16472] XFS (loop3): Quotacheck: Done. [ 572.164605][T16472] XFS (loop3): User initiated shutdown received. [ 572.174060][T16472] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:496). Shutting down filesystem. [ 572.192160][T16472] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 572.305037][ T4259] XFS (loop3): Unmounting Filesystem [ 574.052216][T16579] loop3: detected capacity change from 0 to 512 [ 574.074449][T16579] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 574.247282][T16579] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 574.266953][T16579] ext4 filesystem being mounted at /789/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 574.474230][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 574.813456][T16558] loop4: detected capacity change from 0 to 32768 [ 575.008435][T16558] JBD2: Ignoring recovery information on journal [ 575.118754][T16558] jbd2_journal_bmap: journal block not found at offset 64 on loop4-27 [ 575.189693][T16558] JBD2: bad block at offset 64 [ 575.249249][T16558] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 575.602312][T15561] ocfs2: Unmounting device (7,4) on (node local) [ 576.766510][T16606] loop9: detected capacity change from 0 to 32768 [ 576.789246][T16599] loop3: detected capacity change from 0 to 32768 [ 576.915398][T16606] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 scanned by syz.9.3788 (16606) [ 576.964650][T16599] XFS (loop3): Mounting V5 Filesystem [ 576.978937][T16620] tap0: tun_chr_ioctl cmd 1074025676 [ 577.018633][T16620] tap0: owner set to 0 [ 577.154820][T16601] loop1: detected capacity change from 0 to 262144 [ 577.182242][T16606] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 577.218679][T16606] BTRFS info (device loop9): using sha256 (sha256-avx2) checksum algorithm [ 577.240026][T16606] BTRFS info (device loop9): using free space tree [ 577.311412][T16599] XFS (loop3): Ending clean mount [ 577.318758][T16601] F2FS-fs (loop1): Found nat_bits in checkpoint [ 577.415428][T16601] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 577.500271][ T4259] XFS (loop3): Unmounting Filesystem [ 577.944756][T12664] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 579.316429][T16684] loop3: detected capacity change from 0 to 256 [ 579.369297][T16684] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 579.458926][T16684] 9pnet_fd: p9_fd_create_unix (16684): problem connecting socket: ./file0: -13 [ 579.870610][T16695] loop3: detected capacity change from 0 to 64 [ 580.339049][T16708] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3807'. [ 580.947982][T16730] loop4: detected capacity change from 0 to 2048 [ 581.071382][T16730] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 581.148540][ T4260] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 581.248752][T16746] Â: renamed from pim6reg1 [ 581.266225][T16730] EXT4-fs error (device loop4): __ext4_remount:6610: comm syz.4.3815: Abort forced by user [ 581.308417][T16730] EXT4-fs (loop4): re-mounted. Quota mode: none. [ 581.340471][ T4260] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 581.381909][ T4260] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 581.413304][ T4260] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 581.445597][ T4260] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.498370][ T4260] usb 1-1: Product: syz [ 581.502591][ T4260] usb 1-1: Manufacturer: syz [ 581.538098][ T4260] usb 1-1: SerialNumber: syz [ 581.574847][T15561] EXT4-fs (loop4): unmounting filesystem. [ 581.710479][T16758] loop1: detected capacity change from 0 to 128 [ 581.730065][T16758] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 581.791287][ T4260] usb 1-1: 0:2 : does not exist [ 581.822332][ T4260] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 581.846526][T16762] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3824'. [ 581.890933][T16764] loop3: detected capacity change from 0 to 512 [ 581.910964][ T4260] usb 1-1: USB disconnect, device number 24 [ 581.987552][T16764] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.3827: invalid indirect mapped block 256 (level 2) [ 582.031803][T16764] EXT4-fs (loop3): 2 truncates cleaned up [ 582.037714][T16764] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 582.169453][T16764] EXT4-fs (loop3): shut down requested (2) [ 582.187755][ T7943] udevd[7943]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 582.349115][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 583.267229][T16806] loop4: detected capacity change from 0 to 1024 [ 583.737670][T16814] loop1: detected capacity change from 0 to 4096 [ 583.755537][T16814] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 583.839293][T16814] ntfs3: loop1: Failed to load $Extend. [ 585.599068][T16887] binder: binder_mmap: 16884 20000000-20600000 bad vm_flags failed -1 [ 585.668716][ T4260] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 585.861752][ T4260] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 585.889817][ T4260] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.921465][ T4260] usb 1-1: config 0 descriptor?? [ 586.251117][T16881] loop3: detected capacity change from 0 to 32768 [ 586.304978][T16881] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.3865 (16881) [ 586.372897][T16881] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 586.416987][T16881] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 586.466415][T16881] BTRFS info (device loop3): setting nodatacow, compression disabled [ 586.486685][T16881] BTRFS info (device loop3): force clearing of disk cache [ 586.527166][T16881] BTRFS info (device loop3): enabling ssd optimizations [ 586.557603][T16881] BTRFS info (device loop3): using spread ssd allocation scheme [ 586.588878][T16881] BTRFS info (device loop3): doing ref verification [ 586.596978][ T6005] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 586.597744][T16881] BTRFS info (device loop3): disabling free space tree [ 586.638373][T16881] BTRFS info (device loop3): not using ssd optimizations [ 586.658526][T16881] BTRFS info (device loop3): not using spread ssd allocation scheme [ 586.790161][ T6005] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 586.797574][ T4260] usb 1-1: Cannot set autoneg [ 586.797702][ T4260] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 586.814197][T16912] loop4: detected capacity change from 0 to 8192 [ 586.838134][ T4260] usb 1-1: USB disconnect, device number 25 [ 586.868465][ T6005] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 586.879942][T16912] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 586.936077][T16912] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 586.938344][ T6005] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 586.955990][T16912] REISERFS (device loop4): using ordered data mode [ 587.003864][T16912] reiserfs: using flush barriers [ 587.025809][T16912] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 587.058925][ T6005] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 587.059024][T16881] BTRFS info (device loop3): rebuilding free space tree [ 587.086547][T16906] loop9: detected capacity change from 0 to 32768 [ 587.105887][T16881] BTRFS info (device loop3): disabling free space tree [ 587.106156][T16912] REISERFS (device loop4): checking transaction log (loop4) [ 587.122444][T16881] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 587.131044][ T6005] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 587.155111][ T6005] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 587.168826][T16912] REISERFS (device loop4): Using r5 hash to sort names [ 587.175888][ T26] audit: type=1800 audit(1736919504.791:148): pid=16906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3872" name="file1" dev="loop9" ino=4 res=0 errno=0 [ 587.185778][T16881] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 587.207133][ T6005] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 587.217597][T16912] REISERFS (device loop4): using 3.5.x disk format [ 587.228042][T16912] REISERFS warning (device loop4): jdm-13090 reiserfs_new_inode: ACLs aren't enabled in the fs, but vfs thinks they are! [ 587.236728][T16906] syz.9.3872: attempt to access beyond end of device [ 587.236728][T16906] loop9: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 587.248683][ T6005] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 587.274962][T16906] metapage_write_end_io: I/O error [ 587.287636][T16912] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 587.307678][ T6005] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 587.309226][T16906] blkno = 8ed2c, nblocks = 1 [ 587.341077][ T6005] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 587.361948][ T6005] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 587.395131][T16906] ERROR: (device loop9): dbUpdatePMap: blocks are outside the map [ 587.395131][T16906] [ 587.415736][ T6005] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 587.453064][T16906] ERROR: (device loop9): remounting filesystem as read-only [ 587.481280][ T6005] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 587.534456][ T6005] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 587.557808][T16906] blkno = 8ed2c, nblocks = 1 [ 587.572810][ T6005] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 587.585410][T16906] ERROR: (device loop9): dbUpdatePMap: blocks are outside the map [ 587.585410][T16906] [ 587.636389][ T6005] usb 2-1: string descriptor 0 read error: -22 [ 587.657415][T16906] UFO tlock:0xffffc9000288a0d8 [ 587.664281][ T6005] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 587.716626][ T6005] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.772043][ T6005] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 587.869217][ T4259] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 587.968712][T16906] ERROR: (device loop9): dbAllocBits: leaf page corrupt [ 587.968712][T16906] [ 588.090687][T16906] syz.9.3872: attempt to access beyond end of device [ 588.090687][T16906] loop9: rw=34817, sector=4680704, nr_sectors = 968 limit=32768 [ 588.149709][ T6005] usb 2-1: USB disconnect, device number 15 [ 588.278042][ T106] blkno = 8ed2c, nblocks = 4 [ 588.282895][ T106] ERROR: (device loop9): dbUpdatePMap: blocks are outside the map [ 588.282895][ T106] [ 588.337663][ T106] blkno = 8ed80, nblocks = 79 [ 588.348353][ T106] ERROR: (device loop9): dbFree: block to be freed is outside the map [ 588.348353][ T106] [ 588.362785][T16908] adutux: No device or device unplugged -19 [ 588.386190][T16951] binder: binder_mmap: 16950 20000000-20600000 bad vm_flags failed -1 [ 588.511218][T16953] ptrace attach of "./syz-executor exec"[15561] was attempted by "000000000030a64dfffe11cfd4 09 40 20 80 ip6tnl0\x0afe80000000000000000000000000001c 1e 78 20 80 veth1_to_bridge\x0a"[16953] [ 588.741112][T12664] syz-executor: attempt to access beyond end of device [ 588.741112][T12664] loop9: rw=1, sector=4680032, nr_sectors = 8 limit=32768 [ 588.804907][T12664] metapage_write_end_io: I/O error [ 588.813226][T12664] JFS: metapage_get_blocks failed [ 588.838527][T12664] JFS: metapage_get_blocks failed [ 588.846167][T12664] JFS: metapage_get_blocks failed [ 588.864275][T12664] JFS: metapage_get_blocks failed [ 589.373498][T16981] loop1: detected capacity change from 0 to 128 [ 589.426313][T16981] VFS: Found a Xenix FS (block size = 512) on device loop1 [ 589.644843][T11570] sysv_free_block: trying to free block not in datazone [ 589.679480][T11570] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 589.701594][T16989] loop3: detected capacity change from 0 to 128 [ 589.798359][T16989] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 589.828070][T16989] ext4 filesystem being mounted at /808/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 590.165506][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 590.428867][T17010] loop3: detected capacity change from 0 to 1024 [ 590.472386][T16983] loop4: detected capacity change from 0 to 32768 [ 590.506961][T17010] EXT4-fs: Ignoring removed orlov option [ 590.553152][T16983] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.3889 (16983) [ 590.595057][T17010] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 590.654802][T17010] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 590.716388][T17010] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 590.763827][T16983] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 590.811719][T17010] EXT4-fs (loop3): invalid journal inode [ 590.817518][T17010] EXT4-fs (loop3): can't get journal size [ 590.838566][T16983] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 590.847300][T16983] BTRFS info (device loop4): setting nodatacow, compression disabled [ 590.901460][T17010] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 590.955226][T16983] BTRFS info (device loop4): setting datacow [ 591.046741][T16983] BTRFS info (device loop4): doing ref verification [ 591.086116][T16983] BTRFS info (device loop4): force clearing of disk cache [ 591.129587][T16983] BTRFS info (device loop4): turning off barriers [ 591.136334][T16983] BTRFS info (device loop4): enabling ssd optimizations [ 591.223628][T16983] BTRFS info (device loop4): using spread ssd allocation scheme [ 591.251319][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 591.257612][T16983] BTRFS info (device loop4): not using ssd optimizations [ 591.314231][T16983] BTRFS info (device loop4): not using spread ssd allocation scheme [ 591.354998][T16983] BTRFS info (device loop4): using free space tree [ 591.394124][T16997] loop1: detected capacity change from 0 to 32768 [ 591.482022][T16997] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by syz.1.3893 (16997) [ 591.484856][T17034] loop3: detected capacity change from 0 to 2048 [ 591.530846][T17034] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 591.558892][ T7943] BTRFS warning: duplicate device /dev/loop1 devid 1 generation 8 scanned by udevd (7943) [ 591.612929][T17029] loop9: detected capacity change from 0 to 4096 [ 591.688191][T16983] BTRFS info (device loop4): rebuilding free space tree [ 591.800204][ T4259] EXT4-fs (loop3): unmounting filesystem. [ 592.076945][T15561] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 593.077062][T12664] ntfs3: loop9: ntfs_evict_inode r=5 failed, -22. [ 593.098341][T12664] ntfs3: loop9: Mark volume as dirty due to NTFS errors [ 593.458219][T17089] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3913'. [ 593.864447][T17070] loop1: detected capacity change from 0 to 32768 [ 593.903281][T17097] loop9: detected capacity change from 0 to 512 [ 593.941975][T17097] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 594.044515][T17097] EXT4-fs (loop9): 1 truncate cleaned up [ 594.051476][T17097] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 594.182413][T17097] fscrypt (loop9, inode 18): Unsupported encryption flags (0x36) [ 594.371814][T12664] EXT4-fs (loop9): unmounting filesystem. [ 594.939036][T17094] loop3: detected capacity change from 0 to 32768 [ 595.070378][T17130] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3925'. [ 595.506946][T17144] netlink: 'syz.1.3930': attribute type 25 has an invalid length. [ 595.528386][T17144] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3930'. [ 596.573947][T17159] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3936'. [ 597.186492][T17167] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 597.254337][T17179] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3947'. [ 597.461440][T17190] loop3: detected capacity change from 0 to 256 [ 597.555664][T17190] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 597.615963][T17196] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 598.178872][T17214] loop1: detected capacity change from 0 to 2048 [ 598.238960][T17214] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 598.792470][T17238] loop1: detected capacity change from 0 to 1024 [ 599.038678][ T4324] hfsplus: b-tree write err: -5, ino 4 [ 599.257755][T17249] bridge0: port 4(ipvlan2) entered blocking state [ 599.280159][T17249] bridge0: port 4(ipvlan2) entered disabled state [ 704.468208][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 704.475228][ C1] rcu: 0-...!: (0 ticks this GP) idle=5114/1/0x4000000000000000 softirq=70188/70188 fqs=1 [ 704.488113][ C1] (detected by 1, t=10502 jiffies, g=101589, q=30 ncpus=2) [ 704.495436][ C1] Sending NMI from CPU 1 to CPUs 0: [ 704.500669][ C0] NMI backtrace for cpu 0 [ 704.500691][ C0] CPU: 0 PID: 4324 Comm: kworker/u4:7 Not tainted 6.1.124-syzkaller #0 [ 704.500709][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 704.500724][ C0] Workqueue: bat_events batadv_nc_worker [ 704.500758][ C0] RIP: 0010:mark_lock+0x109/0x340 [ 704.500788][ C0] Code: 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 5e 1f 77 00 41 bc 01 00 00 00 44 85 33 74 53 44 89 e0 48 83 c4 10 5b 41 5c 41 5d <41> 5e 41 5f 5d c3 e8 4c 2c d6 02 85 c0 74 be 48 c7 c0 78 40 9b 8e [ 704.500804][ C0] RSP: 0018:ffffc900000079e0 EFLAGS: 00000082 [ 704.500819][ C0] RAX: 0000000000000001 RBX: ffffffff90bdab58 RCX: ffffffff816b126a [ 704.500832][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff9124e260 [ 704.500844][ C0] RBP: 0000000000000008 R08: dffffc0000000000 R09: fffffbfff2249c4d [ 704.500857][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff88802e374658 [ 704.500869][ C0] R13: ffff88802e373b80 R14: 0000000000000100 R15: ffff88802e3746d8 [ 704.500883][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 704.500898][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 704.500910][ C0] CR2: 00007f688bfd8f98 CR3: 000000000d08e000 CR4: 00000000003506f0 [ 704.500926][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 704.500936][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 704.500947][ C0] Call Trace: [ 704.500955][ C0] [ 704.500966][ C0] ? nmi_cpu_backtrace+0x3de/0x560 [ 704.501005][ C0] ? read_lock_is_recursive+0x10/0x10 [ 704.501042][ C0] ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0 [ 704.501092][ C0] ? nmi_cpu_backtrace_handler+0x8/0x10 [ 704.501117][ C0] ? nmi_handle+0x12e/0x440 [ 704.501155][ C0] ? nmi_handle+0x25/0x440 [ 704.501191][ C0] ? mark_lock+0x109/0x340 [ 704.501225][ C0] ? default_do_nmi+0x62/0x150 [ 704.501252][ C0] ? exc_nmi+0xa8/0x100 [ 704.501276][ C0] ? end_repeat_nmi+0x16/0x31 [ 704.501306][ C0] ? mark_lock+0x9a/0x340 [ 704.501333][ C0] ? mark_lock+0x109/0x340 [ 704.501359][ C0] ? mark_lock+0x109/0x340 [ 704.501384][ C0] ? mark_lock+0x109/0x340 [ 704.501410][ C0] [ 704.501415][ C0] [ 704.501422][ C0] __lock_acquire+0xc6a/0x1f80 [ 704.501454][ C0] lock_acquire+0x1f8/0x5a0 [ 704.501478][ C0] ? debug_object_deactivate+0x63/0x380 [ 704.501507][ C0] ? read_lock_is_recursive+0x10/0x10 [ 704.501533][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 704.501567][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 704.501586][ C0] ? do_raw_spin_lock+0x14a/0x370 [ 704.501606][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 704.501631][ C0] ? debug_object_deactivate+0x63/0x380 [ 704.501655][ C0] ? _raw_spin_lock+0x40/0x40 [ 704.501681][ C0] debug_object_deactivate+0x63/0x380 [ 704.501709][ C0] debug_deactivate+0x1d/0x280 [ 704.501732][ C0] __hrtimer_run_queues+0x334/0xe50 [ 704.501762][ C0] ? hrtimer_interrupt+0x980/0x980 [ 704.501783][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 704.501811][ C0] hrtimer_interrupt+0x392/0x980 [ 704.501842][ C0] __sysvec_apic_timer_interrupt+0x158/0x5b0 [ 704.501870][ C0] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 704.501891][ C0] [ 704.501896][ C0] [ 704.501902][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 704.501930][ C0] RIP: 0010:__local_bh_enable_ip+0x16c/0x1f0 [ 704.501960][ C0] Code: 8b e8 e8 79 5e 09 65 66 8b 05 10 5a af 7e 66 85 c0 75 57 bf 01 00 00 00 e8 61 4a 0a 00 e8 4c 17 3d 00 fb 65 8b 05 fc 29 ae 7e <85> c0 75 05 e8 ab 4d ac ff 48 c7 44 24 20 0e 36 e0 45 49 c7 04 1c [ 704.501973][ C0] RSP: 0018:ffffc90004877aa0 EFLAGS: 00000286 [ 704.501988][ C0] RAX: 0000000080000000 RBX: 1ffff9200090ef58 RCX: ffffffff816b126a [ 704.502001][ C0] RDX: dffffc0000000000 RSI: ffffffff8b0c0340 RDI: ffffffff8b5e6840 [ 704.502014][ C0] RBP: ffffc90004877b50 R08: dffffc0000000000 R09: fffffbfff2249c68 [ 704.502027][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 704.502039][ C0] R13: 1ffff9200090ef5c R14: ffffc90004877ae0 R15: 0000000000000201 [ 704.502055][ C0] ? mark_lock+0x9a/0x340 [ 704.502084][ C0] ? batadv_nc_purge_paths+0x30e/0x3b0 [ 704.502109][ C0] ? _local_bh_enable+0xa0/0xa0 [ 704.502136][ C0] ? batadv_nc_purge_paths+0xe8/0x3b0 [ 704.502161][ C0] ? batadv_nc_to_purge_nc_path_coding+0x120/0x120 [ 704.502187][ C0] batadv_nc_purge_paths+0x30e/0x3b0 [ 704.502218][ C0] batadv_nc_worker+0x361/0x610 [ 704.502244][ C0] ? process_one_work+0x7a9/0x11d0 [ 704.502265][ C0] process_one_work+0x8a9/0x11d0 [ 704.502292][ C0] ? worker_detach_from_pool+0x260/0x260 [ 704.502316][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 704.502339][ C0] ? kthread_data+0x4e/0xc0 [ 704.502366][ C0] ? wq_worker_running+0x97/0x190 [ 704.502384][ C0] worker_thread+0xa47/0x1200 [ 704.502408][ C0] ? _raw_spin_unlock+0x40/0x40 [ 704.502436][ C0] kthread+0x28d/0x320 [ 704.502452][ C0] ? worker_clr_flags+0x190/0x190 [ 704.502471][ C0] ? kthread_blkcg+0xd0/0xd0 [ 704.502487][ C0] ret_from_fork+0x1f/0x30 [ 704.502518][ C0] [ 704.502662][ C1] rcu: rcu_preempt kthread starved for 10500 jiffies! g101589 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 705.007592][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 705.017668][ C1] rcu: RCU grace-period kthread stack dump: [ 705.023568][ C1] task:rcu_preempt state:R running task stack:26144 pid:16 ppid:2 flags:0x00004000 [ 705.034377][ C1] Call Trace: [ 705.037672][ C1] [ 705.040621][ C1] __schedule+0x143f/0x4570 [ 705.045158][ C1] ? _raw_spin_unlock+0x40/0x40 [ 705.050048][ C1] ? __mod_timer+0x956/0xee0 [ 705.054671][ C1] ? release_firmware_map_entry+0x186/0x186 [ 705.060679][ C1] ? lockdep_softirqs_off+0x420/0x420 [ 705.066079][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 705.072092][ C1] ? _raw_spin_unlock+0x40/0x40 [ 705.076986][ C1] schedule+0xbf/0x180 [ 705.081087][ C1] schedule_timeout+0x1b9/0x300 [ 705.085970][ C1] ? console_conditional_schedule+0x40/0x40 [ 705.091893][ C1] ? update_process_times+0x1b0/0x1b0 [ 705.097295][ C1] ? prepare_to_swait_event+0x329/0x350 [ 705.102875][ C1] rcu_gp_fqs_loop+0x2d2/0x1150 [ 705.108020][ C1] ? dump_blkd_tasks+0x810/0x810 [ 705.112988][ C1] ? lockdep_hardirqs_on+0x94/0x130 [ 705.118211][ C1] ? rcu_gp_init+0x15f0/0x15f0 [ 705.122998][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 705.128928][ C1] ? finish_swait+0xcf/0x1e0 [ 705.133640][ C1] rcu_gp_kthread+0xa3/0x3b0 [ 705.138259][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 705.143394][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 705.149322][ C1] ? __kthread_parkme+0x168/0x1c0 [ 705.154401][ C1] kthread+0x28d/0x320 [ 705.158577][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 705.163709][ C1] ? kthread_blkcg+0xd0/0xd0 [ 705.168336][ C1] ret_from_fork+0x1f/0x30 [ 705.172803][ C1] [ 705.175842][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 705.182192][ C1] CPU: 1 PID: 9 Comm: kworker/u4:0 Not tainted 6.1.124-syzkaller #0 [ 705.190197][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 705.200357][ C1] Workqueue: events_unbound toggle_allocation_gate [ 705.206892][ C1] RIP: 0010:smp_call_function_many_cond+0x1fae/0x3460 [ 705.213690][ C1] Code: 2f 44 89 ee 83 e6 01 31 ff e8 0e 44 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 0a e8 99 40 0b 00 e9 1b ff ff ff f3 90 <42> 0f b6 04 2b 84 c0 75 14 41 f7 07 01 00 00 00 0f 84 fe fe ff ff [ 705.233317][ C1] RSP: 0000:ffffc900000e75a0 EFLAGS: 00000293 [ 705.239518][ C1] RAX: ffffffff817f5b89 RBX: 1ffff110171c8595 RCX: ffff888017f48000 [ 705.247510][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 705.255527][ C1] RBP: ffffc900000e7980 R08: ffffffff817f5b52 R09: fffffbfff2249c4d [ 705.263534][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000800000000 [ 705.271531][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880b8e42ca8 [ 705.279556][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 705.288717][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 705.295447][ C1] CR2: 0000001b2d81eff8 CR3: 000000000d08e000 CR4: 00000000003506e0 [ 705.303460][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 705.311483][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 705.319521][ C1] Call Trace: [ 705.322829][ C1] [ 705.325783][ C1] ? rcu_check_gp_kthread_starvation+0x1b8/0x220 [ 705.332158][ C1] ? print_other_cpu_stall+0x150c/0x1640 [ 705.337837][ C1] ? print_cpu_stall+0x5f0/0x5f0 [ 705.342820][ C1] ? rcu_sched_clock_irq+0xaf6/0x1200 [ 705.348225][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 705.353100][ C1] ? hrtimer_run_queues+0x163/0x450 [ 705.358335][ C1] ? acct_account_cputime+0x26e/0x270 [ 705.363759][ C1] ? update_process_times+0x147/0x1b0 [ 705.369171][ C1] ? tick_sched_timer+0x386/0x550 [ 705.374222][ C1] ? tick_setup_sched_timer+0x2f0/0x2f0 [ 705.379788][ C1] ? __hrtimer_run_queues+0x5a7/0xe50 [ 705.385220][ C1] ? hrtimer_interrupt+0x980/0x980 [ 705.390372][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 705.396590][ C1] ? hrtimer_interrupt+0x392/0x980 [ 705.401774][ C1] ? __sysvec_apic_timer_interrupt+0x158/0x5b0 [ 705.407965][ C1] ? sysvec_apic_timer_interrupt+0x9b/0xc0 [ 705.413801][ C1] [ 705.416750][ C1] [ 705.419699][ C1] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 705.425895][ C1] ? smp_call_function_many_cond+0x1f92/0x3460 [ 705.432074][ C1] ? smp_call_function_many_cond+0x1fc9/0x3460 [ 705.438304][ C1] ? smp_call_function_many_cond+0x1fae/0x3460 [ 705.444613][ C1] ? text_poke_sync+0x20/0x20 [ 705.449358][ C1] ? __text_poke+0x81a/0x9a0 [ 705.453996][ C1] ? mark_lock+0x9a/0x340 [ 705.458369][ C1] ? smp_call_function_many+0x30/0x30 [ 705.463781][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 705.470086][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 705.475338][ C1] ? _raw_spin_unlock+0x24/0x40 [ 705.480223][ C1] ? kmem_cache_alloc_bulk+0x11a/0x4d0 [ 705.485713][ C1] ? __text_poke+0x81a/0x9a0 [ 705.490336][ C1] ? kmem_cache_alloc_bulk+0x11a/0x4d0 [ 705.495827][ C1] ? __text_poke+0x9a0/0x9a0 [ 705.500450][ C1] ? text_poke+0x90/0x90 [ 705.504721][ C1] ? read_lock_is_recursive+0x10/0x10 [ 705.510145][ C1] ? __mutex_trylock_common+0x17e/0x2e0 [ 705.515724][ C1] ? __might_sleep+0xb0/0xb0 [ 705.520350][ C1] ? trace_raw_output_contention_end+0xd0/0xd0 [ 705.526539][ C1] ? text_poke_sync+0x20/0x20 [ 705.531244][ C1] on_each_cpu_cond_mask+0x3b/0x80 [ 705.536450][ C1] ? kmem_cache_alloc_bulk+0x11a/0x4d0 [ 705.541937][ C1] text_poke_bp_batch+0x2bb/0x940 [ 705.546994][ C1] ? arch_jump_label_transform_apply+0xe/0x20 [ 705.553087][ C1] ? text_poke_loc_init+0x680/0x680 [ 705.558320][ C1] ? arch_jump_label_transform_queue+0x7d/0xd0 [ 705.564681][ C1] text_poke_finish+0x16/0x30 [ 705.569382][ C1] arch_jump_label_transform_apply+0x13/0x20 [ 705.575906][ C1] static_key_disable_cpuslocked+0xce/0x1b0 [ 705.581832][ C1] static_key_disable+0x16/0x20 [ 705.586759][ C1] toggle_allocation_gate+0x3e0/0x480 [ 705.592199][ C1] ? show_object+0xa0/0xa0 [ 705.596681][ C1] ? wake_bit_function+0x210/0x210 [ 705.601878][ C1] ? print_irqtrace_events+0x210/0x210 [ 705.607402][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 705.613332][ C1] ? do_raw_spin_unlock+0x137/0x8a0 [ 705.618559][ C1] ? process_one_work+0x7a9/0x11d0 [ 705.623696][ C1] process_one_work+0x8a9/0x11d0 [ 705.628679][ C1] ? worker_detach_from_pool+0x260/0x260 [ 705.634372][ C1] ? _raw_spin_lock_irqsave+0x120/0x120 [ 705.639947][ C1] ? kthread_data+0x4e/0xc0 [ 705.644491][ C1] ? wq_worker_running+0x97/0x190 [ 705.649571][ C1] worker_thread+0xa47/0x1200 [ 705.654339][ C1] kthread+0x28d/0x320 [ 705.658476][ C1] ? worker_clr_flags+0x190/0x190 [ 705.663553][ C1] ? kthread_blkcg+0xd0/0xd0 [ 705.668270][ C1] ret_from_fork+0x1f/0x30 [ 705.672737][ C1]