last executing test programs: 5.011792839s ago: executing program 3 (id=572): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r2, 0x301, 0x0, 0x0, {{0x11}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}}, 0x0) 4.432014839s ago: executing program 4 (id=574): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f00000005002d000000000005002e000100000008000300", @ANYRES32=r2], 0x2c}}, 0x0) 4.353961658s ago: executing program 3 (id=575): r0 = socket$inet6(0xa, 0x1, 0x6) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, 0x0, 0x0) 3.984253393s ago: executing program 0 (id=578): r0 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) read(r0, &(0x7f00000002c0)=""/121, 0xfffffeda) r1 = syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) readv(r1, &(0x7f0000000280)=[{&(0x7f0000000000)=""/183, 0xb7}], 0x1) 3.905150432s ago: executing program 4 (id=579): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 3.631756952s ago: executing program 2 (id=580): unshare(0x6020400) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x703d6000) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp\x00', 0x6) 3.506217915s ago: executing program 0 (id=581): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x7}) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x8, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c07, 0xffffffffffffffff) 3.41499083s ago: executing program 1 (id=582): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast1, 0x0, 0x0, 0x0, 0x5}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r0, 0x8b32, &(0x7f0000000040)) 3.161281696s ago: executing program 2 (id=583): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 3.157479347s ago: executing program 3 (id=584): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfffb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x2, 0x3, 0x0, 0x16, 0x5, 0x17, 0x6}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}]}}]}, 0x154}}, 0x0) 2.940141217s ago: executing program 0 (id=585): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) 2.811157659s ago: executing program 1 (id=586): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) removexattr(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00') 2.633636821s ago: executing program 2 (id=587): syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x2008802, &(0x7f0000000280)={[{@dmask={'dmask', 0x3d, 0x1}}, {@namecase}, {@uid={'uid', 0x3d, 0xee00}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@gid={'gid', 0x3d, 0xee01}}, {@gid}, {@errors_continue}, {@discard}, {@errors_continue}, {@errors_continue}]}, 0x1, 0x152f, &(0x7f00000037c0)="$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") r0 = landlock_create_ruleset(&(0x7f0000000040)={0x4300, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 2.574853404s ago: executing program 3 (id=588): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 2.515838229s ago: executing program 4 (id=589): syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x204440, &(0x7f0000000100)=ANY=[], 0x23, 0x7e2, &(0x7f0000001000)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffc, 0x2) getdents(r0, 0x0, 0x54) 2.449157349s ago: executing program 0 (id=590): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = fanotify_init(0x40, 0x400) writev(r0, &(0x7f00000005c0)=[{0x0}], 0x1) 2.161285008s ago: executing program 1 (id=591): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r0 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000180)=0x0) io_submit(r1, 0x1, &(0x7f0000002900)=[&(0x7f0000000200)={0x0, 0x0, 0x30, 0x7, 0x3511, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}]) 1.860064738s ago: executing program 3 (id=592): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x9, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0xfffffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x5, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x8, 0x200a620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0xe, 0x6, 0xffffffff, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) openat$random(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1.778526364s ago: executing program 2 (id=593): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@multicast1=0xe0000002, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x87}, {0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x2c000010) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="b80000001500010000000000fddbdf25fe88000000000000000000000000010100000000000000000000000000000000000000004e23fffc0a00100033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b\x00'], 0xb8}, 0x1, 0x0, 0x0, 0x2000c810}, 0x4) 1.74150804s ago: executing program 4 (id=594): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000001540)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xa00}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x5, 0x0, 0xb, 0x2}, {}, {0x4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 1.528056068s ago: executing program 0 (id=595): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x2000, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) pread64(r1, &(0x7f0000000000)=""/14, 0xe, 0xfffffffc) 1.52774255s ago: executing program 1 (id=596): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x10012, &(0x7f00000004c0)=ANY=[@ANYBLOB='codepage=cp775,umask=00000000007777,iocharset=koi8-ru,\x00'/64, @ANYBLOB="7b467be6d2ffd5dbc39d475a3efbcc1a8227f7877fce1eaf2d016780277d325666f07a12652e81e75be5e881b521fcda9e61566e2b548201f553091a16ad9bb6888f170e5d63f7a84c585f22f2397bf6c9fe0ad346d27e428fa6322e2a05eddacbf8af7162ea449789312db3927438", @ANYRES8], 0x4, 0x339, &(0x7f0000000140)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) write$UHID_INPUT(r0, &(0x7f0000000d80)={0x8, {"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", 0x1000}}, 0x1006) 1.309044658s ago: executing program 3 (id=597): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000700)={0x20, 0x11, 0x1, "ce"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000040)={0x1, 0x7, 0x4, &(0x7f0000000100)={0x8, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) 1.063792713s ago: executing program 4 (id=598): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00') io_setup(0x9, &(0x7f0000000080)=0x0) io_submit(r1, 0x1, &(0x7f0000000580)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x101, r0, 0x0, 0x0, 0x400000000000004}]) io_getevents(r1, 0x0, 0x1, &(0x7f0000000380)=[{}], 0x0) 972.63299ms ago: executing program 2 (id=599): r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x0, 0x20200) ioctl$RTC_UIE_ON(r0, 0x7003) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r1, 0xffffffffffffffff, 0x0) 703.589713ms ago: executing program 1 (id=600): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FREEZING\x00', 0x9) 657.872487ms ago: executing program 0 (id=601): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x108, 0x100, 0x100, 0x1, 0x4000}}) 563.478783ms ago: executing program 4 (id=602): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0xf01, &(0x7f0000002d40)="$eJzs3U9oHNf9APA3q3+2pVirJL9flKSx1aSpE7eVXdmH9FQHTAshhFx6T3CsxFRJTZ0eEmIs9+RCDykhl5QeUpJbwT0UmlAooVDonxx67im0l5bigiGXGqwtkt9brZ413dVImtVqPx/46unNG833O16xnjfafRuAodVY+3r69GwRwrsfv3P221dWfr267Wh7j7m1r0XsNUMIYx39IjveZ3HD7ZtvnVttV7K2CAtrX9N4eO5G+2cnQwjLYS58Eprh6PHm59dGnl388L1Pj12++Mwru3T6AAAwVK7/aemvT/7jj1+duXX9yJkw0d6ers+bsT8Zr/tPxuv7dN3fCBv7RUd0Gs/2G4nRyPYbyfYbzfKMluQby44zVrLfeJd8Ix3bNjtPAAAAGESNOMdthqIx3zHPbYZGY37+zrx/1WfT48X8axeWFi/1sVgAAACgks+vrL3oVgghhBBiiONWq9Xqdw1CCCHE7kZrut93IAAAAIBhk9YdaK8PllvOVxbYnvbRmr3lv/F0Y/Ofhx1Q9++//IOV/4OrnnEAAKhuv15NpvNK19FpHYN8HcGR7Oe2ev3fyI4zusU6y9YVHJT1BsvqzP9d96qy+rf6OPZLWf35eph7VVn9+Tqde1VZ/RM111FVWf0Haq6jqrL6D9ZcR1Vl9R+quY6qyuqfrLmOqsrqn6q5jqrK6r+n5jqqKqv/cM11VFVW/6C8rLas/mbNdVRVVv9MzXVUVVb/vTXXUVVZ/ffVXEdVZfXfX3Md/fJIbNO/w5FsvHP+nM/pBmWOBwAAAMPuP31b/++bfV/7YNhi7W/Ce6AOIYTY9Vg1twfqEEIIsUnEFcj6XofYwbi6B2oQPcSVft58AAAAAPaE9L6A9K73VpTGR7qMj3YZH+syPt5lfKLLOAAAABDCb64tPvh2sf4+/+2uh5fWjUrrL211HaN8PcKt5t/uumfbzT8o65YBAAAwXIpvfbJy/Oz7r8/cun7kTMfsdyXOd9M6oKPx3sBHsZ9eFzCV9Ys0hz6zMU+jZL/8/sA9Zcd7fpsnCgAAAEMszd+boWjMd8y7m6HRmJ9fn4/PhrFi8cLS+ZOxnz6f5Q/TYxOr279ec90AAABA79bn+5vP/9Pn+M6G8WL+tQtLi5fu9Kfa28canfcFpte3F533BZrZ9oWS7adiP31+5yvTB9e2z5/73tJLO33yAAAAMCQuvfHmd19cWjr/fd/4xje+aX/T72cmAABgp33493f+/INTU7+98/7/9fXv0vv/52K/Gdf2+0vcIb1OIL0P4K7367+wMc902X4XN+7XzPYbiTGR1X2g4zihY73B9HMzG/oj6/s2Nx5nvCTfZJZvKsuXr1Mwmu2fzu9wtj1fnzDtN51tz9dhHM1yFFn+RwMAAACUO/H6qxdPXHrjza9dePXFl8+/fP61UycXvrHw1MLC6YUTa6/rP9H56n4AAABgEK2/6LfflQAAAAAAAAAAAAAAAAAAAMDwquPjxPp9jgAAADDs/n0lhLAshBBC1Bdrn3G6B+oQQgghxODHhOuKnqPVyj9pHgAAAGB33b751rnYXt10h+ViR/O1j9YM4UDH9pVYx+8f/9njq5G233h64/2SQztaDcOu4/f/3KY77PDvv/yDlf+Dqzubv/2c17zTpOe98ue/xsYDnKmW98s/+ecTnfkfGu0xf37+z1fLfyzLfyz0lr/1fpb/hWr5n8jyH+ox/13nf7Fa/idj/tlUz2O95t/4+E/ENp3HwR7zH8/O/6XQa/7s/Js9Jsx8JeYHgGHU6HcBuyRdJaTr6MnYT+cbLzdD/uqHrV7/N7LjjG678o3HTddBD8R+ul6ayvImW61/MjvePRXrzA3Kq0rK6t+px3G3ldU/VnMdVZXVP15zHVWV1T9Rcx1VldV/oOY6qiqrv9d5aL+V1T8o95XL6p+suY6qyuqfqrmOqsrq3+r/4/1SVv/hmuuoqqz+6ZrrqKqs/oq31WpXVv9MzXVUVVb/vTXXUVVZ/ffVXEdVZfXff/emQbkk2pKHY1s2H07zz+k4lvrNrD+xyb/lfr23AAAAAIPmX9b/E0IIIYQQQggh9n20Wv2+A0E/7e67mQHYqzz/DzeP/3Dz+A83jz//S3oNf5H1k5Eu46Ndxse6jI9n4/nv60SX8fuy47aiNH5/l/H/6zJ+uMv4A13GZ7uMP9hl/KEu4w93GQcAAGA4/H9szQ8BAABg/7r8i49+/KtjL9ycuXX9yJkwfte68ydjfyL+bf1a7Ofr3idj8W/+P4z9n8f2d7H9W7a/158AAADA7kufE+Pv/wAAALB/pc8pNf8HAACA/Wsmtub/AAAAsH/dG1vzfwAAANjHigObb45tui/waGx7XdcPANj7vhDbR2J7JLZHY/vF2KbrgMdi+6Wa6gMAds5Pv/Ojp94u1tf7P5WN347bU3uX5Tt3CorGxpX8D8b2UGwf77Ge/PMAes2fHO4xz27ln95mfgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg/2isfT19erYI4d2P3zk7ffnsy6vbjrb3mFv7WsReM4Qw1v65NLre/2Xc8fbNt86ttiuxbcW2CAuhCEV7PDx3o51pMoSwHObCJ6EZjh5vfn5t5NnFD9/79Njli8+8sov/BAAAALDv/TcAAP//vcAp6A==") setuid(0xee00) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40786e88, 0x0) 361.186486ms ago: executing program 2 (id=603): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x2e, 0x28, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010102, @remote}, {{0x4e27, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0xfffd, 0x0, 0x57}}}}}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) symlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='.\x00') 0s ago: executing program 1 (id=604): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000300)={@link_local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fe0700", 0xc, 0x11, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x36}}, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x1, 0x2, 0x8, 0x0, @void}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.160' (ED25519) to the list of known hosts. [ 199.256066][ T5800] cgroup: Unknown subsys name 'net' [ 199.407793][ T5800] cgroup: Unknown subsys name 'cpuset' [ 199.423518][ T5800] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 206.450335][ T5800] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 212.034174][ T5820] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.043346][ T5820] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.052304][ T5820] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.057756][ T5822] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 212.064171][ T5820] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.068634][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 212.076853][ T5820] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.082658][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.099899][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.118578][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.189944][ T49] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 212.199748][ T49] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 212.217405][ T5113] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 212.232793][ T5113] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 212.258664][ T5820] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 212.287529][ T5822] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 212.297555][ T5822] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 212.307483][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.316396][ T5822] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 212.317978][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.330283][ T5822] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 212.333574][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 212.356997][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 212.363314][ T5822] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.374534][ T5822] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 214.166528][ T49] Bluetooth: hci0: command tx timeout [ 214.216436][ T49] Bluetooth: hci1: command tx timeout [ 214.223605][ T5817] chnl_net:caif_netlink_parms(): no params data found [ 214.354432][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 214.400693][ T49] Bluetooth: hci2: command tx timeout [ 214.448632][ T5816] chnl_net:caif_netlink_parms(): no params data found [ 214.536246][ T49] Bluetooth: hci4: command tx timeout [ 214.541898][ T49] Bluetooth: hci3: command tx timeout [ 214.703718][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 214.761587][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 215.825158][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.833061][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.842861][ T5826] bridge_slave_0: entered allmulticast mode [ 215.852903][ T5826] bridge_slave_0: entered promiscuous mode [ 216.100499][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.108726][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.119900][ T5817] bridge_slave_0: entered allmulticast mode [ 216.129891][ T5817] bridge_slave_0: entered promiscuous mode [ 216.218078][ T49] Bluetooth: hci0: command tx timeout [ 216.263695][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.271491][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.279693][ T5826] bridge_slave_1: entered allmulticast mode [ 216.289767][ T5826] bridge_slave_1: entered promiscuous mode [ 216.307414][ T49] Bluetooth: hci1: command tx timeout [ 216.346248][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.353843][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.364339][ T5817] bridge_slave_1: entered allmulticast mode [ 216.373206][ T5817] bridge_slave_1: entered promiscuous mode [ 216.462786][ T49] Bluetooth: hci2: command tx timeout [ 216.517027][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.524627][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.532653][ T5827] bridge_slave_0: entered allmulticast mode [ 216.542526][ T5827] bridge_slave_0: entered promiscuous mode [ 216.629901][ T49] Bluetooth: hci3: command tx timeout [ 216.630476][ T5822] Bluetooth: hci4: command tx timeout [ 216.650796][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.658762][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.666632][ T5816] bridge_slave_0: entered allmulticast mode [ 216.675302][ T5816] bridge_slave_0: entered promiscuous mode [ 216.735450][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.760553][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.770441][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.778237][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.785925][ T5827] bridge_slave_1: entered allmulticast mode [ 216.794459][ T5827] bridge_slave_1: entered promiscuous mode [ 216.817027][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.827269][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.834823][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.842900][ T5816] bridge_slave_1: entered allmulticast mode [ 216.852394][ T5816] bridge_slave_1: entered promiscuous mode [ 217.026632][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.079279][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.087174][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.094648][ T5824] bridge_slave_0: entered allmulticast mode [ 217.104669][ T5824] bridge_slave_0: entered promiscuous mode [ 217.124265][ T5826] team0: Port device team_slave_0 added [ 217.292271][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.300157][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.308034][ T5824] bridge_slave_1: entered allmulticast mode [ 217.317320][ T5824] bridge_slave_1: entered promiscuous mode [ 217.339382][ T5826] team0: Port device team_slave_1 added [ 217.359817][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.378100][ T5817] team0: Port device team_slave_0 added [ 217.397825][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.491513][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.511252][ T5817] team0: Port device team_slave_1 added [ 217.529249][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.751426][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.812206][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.819760][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.847506][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.946662][ T5816] team0: Port device team_slave_0 added [ 217.964328][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.987607][ T5816] team0: Port device team_slave_1 added [ 218.024225][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.031407][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.057751][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.075870][ T5827] team0: Port device team_slave_0 added [ 218.086956][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.094082][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.120634][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.140488][ T5827] team0: Port device team_slave_1 added [ 218.289162][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.297375][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.306000][ T5822] Bluetooth: hci0: command tx timeout [ 218.324517][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.386121][ T5822] Bluetooth: hci1: command tx timeout [ 218.386180][ T5824] team0: Port device team_slave_0 added [ 218.443870][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.451272][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.477783][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.516790][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.523936][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.550560][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.556331][ T5822] Bluetooth: hci2: command tx timeout [ 218.610987][ T5824] team0: Port device team_slave_1 added [ 218.697495][ T5822] Bluetooth: hci3: command tx timeout [ 218.700299][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.703136][ T49] Bluetooth: hci4: command tx timeout [ 218.710259][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.710428][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.842950][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.850328][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.876710][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.954605][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.961954][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.988344][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.068254][ T5817] hsr_slave_0: entered promiscuous mode [ 219.079372][ T5817] hsr_slave_1: entered promiscuous mode [ 219.114939][ T5826] hsr_slave_0: entered promiscuous mode [ 219.126032][ T5826] hsr_slave_1: entered promiscuous mode [ 219.134989][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 219.141061][ T5826] Cannot create hsr debugfs directory [ 219.154689][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.162157][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.188778][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.314277][ T5816] hsr_slave_0: entered promiscuous mode [ 219.324919][ T5816] hsr_slave_1: entered promiscuous mode [ 219.334078][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 219.340117][ T5816] Cannot create hsr debugfs directory [ 219.855002][ T5827] hsr_slave_0: entered promiscuous mode [ 219.868959][ T5827] hsr_slave_1: entered promiscuous mode [ 219.877570][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 219.883481][ T5827] Cannot create hsr debugfs directory [ 220.041160][ T5824] hsr_slave_0: entered promiscuous mode [ 220.051728][ T5824] hsr_slave_1: entered promiscuous mode [ 220.060948][ T5824] debugfs: 'hsr0' already exists in 'hsr' [ 220.066969][ T5824] Cannot create hsr debugfs directory [ 220.375986][ T49] Bluetooth: hci0: command tx timeout [ 220.464388][ T49] Bluetooth: hci1: command tx timeout [ 220.616120][ T49] Bluetooth: hci2: command tx timeout [ 220.776072][ T49] Bluetooth: hci4: command tx timeout [ 220.781698][ T49] Bluetooth: hci3: command tx timeout [ 221.423519][ T5826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 221.477449][ T5826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 221.511585][ T5826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 221.541081][ T5826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 221.699515][ T5817] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 221.771688][ T5817] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 221.813356][ T5817] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 221.874550][ T5817] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 222.081385][ T5816] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 222.142959][ T5816] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 222.229236][ T5816] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 222.348412][ T5816] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 222.465494][ T5827] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 222.502280][ T5827] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 222.579036][ T5827] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 222.671556][ T5827] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 222.858582][ T5824] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 222.908732][ T5824] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 222.989777][ T5824] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 223.018774][ T5824] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 223.200016][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.465039][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.552050][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.632338][ T2940] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.640065][ T2940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.790044][ T2940] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.797743][ T2940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.081680][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.168706][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.195019][ T2940] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.202788][ T2940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.317671][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.325241][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.452866][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.530619][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.650334][ T3855] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.658181][ T3855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.823362][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.858279][ T3855] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.866121][ T3855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.072567][ T3855] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.080309][ T3855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.097970][ T3855] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.105541][ T3855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.154880][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.302550][ T5816] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 225.313680][ T5816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.570531][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.731311][ T2940] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.739016][ T2940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.886420][ T2940] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.894008][ T2940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.038407][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.534095][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.682681][ T5826] veth0_vlan: entered promiscuous mode [ 227.839673][ T5826] veth1_vlan: entered promiscuous mode [ 227.961164][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.188477][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.390225][ T5817] veth0_vlan: entered promiscuous mode [ 228.418319][ T5826] veth0_macvtap: entered promiscuous mode [ 228.523587][ T5826] veth1_macvtap: entered promiscuous mode [ 228.555043][ T5817] veth1_vlan: entered promiscuous mode [ 228.691586][ T5816] veth0_vlan: entered promiscuous mode [ 228.839160][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.886380][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.911165][ T5816] veth1_vlan: entered promiscuous mode [ 229.024725][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.171172][ T5817] veth0_macvtap: entered promiscuous mode [ 229.190014][ T3754] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.217356][ T3754] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.253848][ T61] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.386195][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.410622][ T5817] veth1_macvtap: entered promiscuous mode [ 229.538022][ T5816] veth0_macvtap: entered promiscuous mode [ 229.606459][ T5824] veth0_vlan: entered promiscuous mode [ 229.644224][ T5816] veth1_macvtap: entered promiscuous mode [ 229.687151][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.729232][ T5824] veth1_vlan: entered promiscuous mode [ 229.772013][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.903732][ T4322] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.958568][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.982141][ T4322] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.027341][ T4322] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.069572][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.095409][ T4322] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.212519][ T61] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.262481][ T61] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.292455][ T5824] veth0_macvtap: entered promiscuous mode [ 230.330318][ T61] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.364162][ T61] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.416908][ T5824] veth1_macvtap: entered promiscuous mode [ 230.638149][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.745175][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.874349][ T14] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.918618][ T14] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.966745][ T14] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.020813][ T14] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.813885][ T5827] veth0_vlan: entered promiscuous mode [ 231.953882][ T5827] veth1_vlan: entered promiscuous mode [ 232.313799][ T5827] veth0_macvtap: entered promiscuous mode [ 232.400137][ T5827] veth1_macvtap: entered promiscuous mode [ 232.597333][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.713167][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.844409][ T61] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.888623][ T61] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.937259][ T61] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.018978][ T3729] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.939204][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 234.946034][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 237.847250][ T3855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.855328][ T3855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.060398][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.068508][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.402691][ T2940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.411597][ T2940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.604912][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 238.886241][ T3855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.894309][ T3855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.087462][ T3855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.095513][ T3855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.403150][ T176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.411403][ T176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.517526][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.529926][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.981968][ T3754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.990282][ T3754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.993330][ T6015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8'. [ 241.108866][ T3855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.117281][ T3855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.498230][ T3754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.506503][ T3754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.016006][ T6024] loop2: detected capacity change from 0 to 1024 [ 242.455324][ T6029] loop3: detected capacity change from 0 to 128 [ 242.637001][ T6029] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 242.766074][ T6029] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 242.840558][ T61] hfsplus: b-tree write err: -5, ino 4 [ 243.968230][ T6045] Context (ID=0x0) not attached to queue pair (handle=0x4d9:0x0) [ 245.121844][ T6056] loop4: detected capacity change from 0 to 512 [ 245.436606][ T6061] loop1: detected capacity change from 0 to 512 [ 246.723401][ T6071] loop1: detected capacity change from 0 to 256 [ 246.914751][ T6071] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d) [ 248.615223][ T6090] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 248.930783][ T6087] loop1: detected capacity change from 0 to 32768 [ 249.017199][ T6096] capability: warning: `syz.3.41' uses deprecated v2 capabilities in a way that may be insecure [ 249.219491][ T6096] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 250.141307][ T6104] loop0: detected capacity change from 0 to 512 [ 250.415327][ T6104] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 250.676492][ T11] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 250.913451][ T11] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 250.922321][ T11] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.932960][ T11] usb 4-1: config 0 has no interface number 0 [ 250.939434][ T11] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 250.949745][ T11] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 251.068706][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.231821][ T11] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 251.241514][ T11] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.251719][ T11] usb 4-1: Product: syz [ 251.256730][ T11] usb 4-1: Manufacturer: syz [ 251.261551][ T11] usb 4-1: SerialNumber: syz [ 251.485412][ T11] usb 4-1: config 0 descriptor?? [ 252.433968][ T5872] usb 4-1: USB disconnect, device number 2 [ 252.723069][ T6118] loop0: detected capacity change from 0 to 32768 [ 252.732954][ T6118] XFS: noikeep mount option is deprecated. [ 252.823203][ T6118] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 253.208396][ T5989] udevd[5989]: failed to send result of seq 11015 to main daemon: Connection refused [ 253.372272][ T6118] XFS (loop0): Ending clean mount [ 253.401096][ T6118] XFS (loop0): Quotacheck needed: Please wait. [ 253.483823][ T6118] XFS (loop0): Quotacheck: Done. [ 253.689461][ T5817] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 254.446665][ T6145] loop1: detected capacity change from 0 to 512 [ 254.461767][ T6145] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 254.481928][ T6145] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 254.521972][ T6141] loop2: detected capacity change from 0 to 2048 [ 254.621264][ T6145] EXT4-fs (loop1): 1 orphan inode deleted [ 254.627633][ T6145] EXT4-fs (loop1): 1 truncate cleaned up [ 254.636489][ T6145] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.713001][ T6141] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 254.723903][ T5870] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 254.742334][ T6145] EXT4-fs error (device loop1): ext4_check_all_de:659: inode #12: block 7: comm syz.1.60: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=124 fake=0 [ 254.814649][ T6145] EXT4-fs (loop1): Remounting filesystem read-only [ 254.936808][ T5870] usb 4-1: Using ep0 maxpacket: 16 [ 254.974703][ T5870] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 254.990780][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 255.120428][ T5870] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 255.130286][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.139299][ T5870] usb 4-1: Product: syz [ 255.143690][ T5870] usb 4-1: Manufacturer: syz [ 255.148819][ T5870] usb 4-1: SerialNumber: syz [ 255.231783][ T5816] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.256701][ T5870] usb 4-1: config 0 descriptor?? [ 255.311024][ T5870] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 255.320772][ T5870] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 255.868630][ T6159] loop2: detected capacity change from 0 to 1024 [ 255.943212][ T5870] em28xx 4-1:0.0: chip ID is em2765 [ 255.964906][ T6161] loop0: detected capacity change from 0 to 256 [ 256.174635][ T5870] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 256.207685][ T5870] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 256.214891][ T5870] em28xx 4-1:0.0: No AC97 audio processor [ 256.268569][ T5870] usb 4-1: USB disconnect, device number 3 [ 256.277456][ T5870] em28xx 4-1:0.0: Disconnecting em28xx [ 256.337826][ T5870] em28xx 4-1:0.0: Freeing device [ 256.762194][ T6167] program syz.2.69 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 256.970430][ T6170] bond1: entered allmulticast mode [ 256.979857][ T6170] 8021q: adding VLAN 0 to HW filter on device bond1 [ 256.991701][ T6170] bridge0: port 3(bond1) entered blocking state [ 256.998766][ T6170] bridge0: port 3(bond1) entered disabled state [ 257.013258][ T6170] bond1: entered promiscuous mode [ 257.022424][ T6170] bridge0: port 3(bond1) entered blocking state [ 257.029418][ T6170] bridge0: port 3(bond1) entered forwarding state [ 257.078739][ T3729] bridge0: port 3(bond1) entered disabled state [ 257.520211][ T6180] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 257.632004][ T6183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'. [ 257.697912][ T6183] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'. [ 258.228292][ T6192] overlayfs: upper fs does not support file handles, falling back to index=off. [ 258.237935][ T6192] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 258.398474][ T6198] Zero length message leads to an empty skb [ 259.370195][ T6194] loop0: detected capacity change from 0 to 32768 [ 259.379446][ T6194] ======================================================= [ 259.379446][ T6194] WARNING: The mand mount option has been deprecated and [ 259.379446][ T6194] and is ignored by this kernel. Remove the mand [ 259.379446][ T6194] option from the mount to silence this warning. [ 259.379446][ T6194] ======================================================= [ 259.486579][ T6194] XFS (loop0): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 259.917129][ T6194] XFS (loop0): Ending clean mount [ 259.925042][ T6194] XFS (loop0): Metadata CRC error detected at xfs_inobt_read_verify+0xaf/0x2d0, xfs_finobt block 0x20 [ 259.936884][ T6194] XFS (loop0): Unmount and run xfs_repair [ 259.942803][ T6194] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 259.951012][ T6194] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 259.960369][ T6194] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 259.969725][ T6194] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 259.980093][ T6194] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 259.989276][ T6194] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 259.998483][ T6194] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 260.014906][ T6194] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 260.024136][ T6194] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 260.033348][ T6194] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x20 len 8 error 74 [ 260.046006][ T6194] XFS (loop0): Failed to initialize disk quotas, err -117. [ 260.229021][ T6194] XFS (loop0): Metadata CRC error detected at xfs_inobt_read_verify+0xaf/0x2d0, xfs_finobt block 0x20 [ 260.241768][ T6194] XFS (loop0): Unmount and run xfs_repair [ 260.247919][ T6194] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 260.255531][ T6194] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 260.264899][ T6194] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 260.274199][ T6194] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 260.283467][ T6194] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 260.292762][ T6194] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 260.302016][ T6194] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 260.316388][ T6194] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 260.325484][ T6194] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 260.336603][ T6194] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x33d/0x5f0" at daddr 0x20 len 8 error 74 [ 260.576912][ T5817] XFS (loop0): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 260.635978][ T5817] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair. [ 260.897365][ T6219] loop2: detected capacity change from 0 to 32768 [ 260.974827][ T6219] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 261.716354][ T6219] XFS (loop2): Ending clean mount [ 261.923487][ T5824] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 263.332939][ T6256] loop0: detected capacity change from 0 to 2048 [ 263.499947][ T6256] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 264.276638][ T5870] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 264.463514][ T6271] netlink: 44 bytes leftover after parsing attributes in process `syz.3.106'. [ 264.491844][ T5870] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 264.500392][ T5870] usb 3-1: config 0 has no interface number 0 [ 264.564299][ T5870] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 264.574020][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.587260][ T5870] usb 3-1: Product: syz [ 264.591658][ T5870] usb 3-1: Manufacturer: syz [ 264.597132][ T5870] usb 3-1: SerialNumber: syz [ 264.669441][ T5870] usb 3-1: config 0 descriptor?? [ 264.929895][ T5870] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 264.933608][ T6276] loop0: detected capacity change from 0 to 1024 [ 264.988088][ T5870] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 264.999803][ T5870] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 265.008323][ T5870] usb 3-1: media controller created [ 265.110670][ T5870] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 265.174003][ T6273] loop4: detected capacity change from 0 to 4096 [ 265.225125][ T6273] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512). [ 265.487907][ T5870] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 265.509369][ T6276] hfsplus: b-tree write err: -5, ino 3 [ 265.861862][ T6284] netlink: 36 bytes leftover after parsing attributes in process `syz.1.112'. [ 265.892565][ T57] hfsplus: bad catalog file entry [ 266.199598][ T5870] usb 3-1: USB disconnect, device number 2 [ 267.016834][ T6300] netlink: 'syz.3.120': attribute type 5 has an invalid length. [ 267.024717][ T6300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.120'. [ 267.058772][ T6300] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 267.557898][ T6301] loop0: detected capacity change from 0 to 4096 [ 267.577341][ T6301] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512). [ 267.899551][ T6310] loop4: detected capacity change from 0 to 128 [ 268.088164][ T6301] ntfs3(loop0): ino=1d, mi_enum_attr [ 268.101081][ T6301] ntfs3(loop0): Mark volume as dirty due to NTFS errors [ 268.115433][ T6312] loop3: detected capacity change from 0 to 1024 [ 268.184706][ T6313] loop1: detected capacity change from 0 to 2048 [ 268.208000][ T6301] ntfs3(loop0): ino=1d, mi_enum_attr [ 268.214830][ T6301] ntfs3(loop0): ino=1d, mi_enum_attr [ 268.317835][ T6313] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.521250][ T6313] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:169: inode #12: comm syz.1.125: inline data xattr refers to an external xattr inode [ 268.560802][ T6313] EXT4-fs (loop1): Remounting filesystem read-only [ 268.832843][ T61] hfsplus: b-tree write err: -5, ino 4 [ 268.898387][ T5816] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.389537][ T6333] loop1: detected capacity change from 0 to 128 [ 269.461386][ T6333] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 269.522895][ T6336] program syz.2.133 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 269.912688][ T6341] bond_slave_0: entered promiscuous mode [ 269.918858][ T6341] bond_slave_1: entered promiscuous mode [ 269.926760][ T6341] macsec1: entered promiscuous mode [ 269.932162][ T6341] bond0: entered promiscuous mode [ 269.948895][ T6341] macsec1: entered allmulticast mode [ 269.954400][ T6341] bond0: entered allmulticast mode [ 269.960050][ T6341] bond_slave_0: entered allmulticast mode [ 269.966156][ T6341] bond_slave_1: entered allmulticast mode [ 270.167238][ T6344] loop1: detected capacity change from 0 to 512 [ 270.228297][ T6344] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 270.241642][ T6344] ext4 filesystem being mounted at /29/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.305271][ T6347] loop2: detected capacity change from 0 to 1764 [ 270.334206][ T6344] EXT4-fs error (device loop1): ext4_empty_dir:3077: inode #12: comm syz.1.136: invalid size [ 270.432003][ T6344] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 270.588893][ T6353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.139'. [ 270.829208][ T5816] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.024985][ T6376] netlink: 52 bytes leftover after parsing attributes in process `syz.0.150'. [ 273.229316][ T6394] loop4: detected capacity change from 0 to 1024 [ 273.429400][ T6394] hfsplus: bad catalog entry type [ 273.600817][ T6402] vivid-001: ================= START STATUS ================= [ 273.609200][ T6402] vivid-001: Radio HW Seek Mode: Bounded [ 273.615185][ T6402] vivid-001: Radio Programmable HW Seek: false [ 273.622271][ T6402] vivid-001: RDS Rx I/O Mode: Block I/O [ 273.633719][ T6402] vivid-001: Generate RBDS Instead of RDS: false [ 273.640570][ T6402] vivid-001: RDS Reception: true [ 273.646201][ T6402] vivid-001: RDS Program Type: 0 inactive [ 273.652316][ T6402] vivid-001: RDS PS Name: inactive [ 273.658751][ T6402] vivid-001: RDS Radio Text: inactive [ 273.664597][ T6402] vivid-001: RDS Traffic Announcement: false inactive [ 273.671913][ T6402] vivid-001: RDS Traffic Program: false inactive [ 273.678771][ T6402] vivid-001: RDS Music: false inactive [ 273.684639][ T6402] vivid-001: ================== END STATUS ================== [ 273.711147][ T3754] hfsplus: b-tree write err: -5, ino 4 [ 274.082562][ T6398] loop1: detected capacity change from 0 to 4096 [ 274.261218][ T6407] loop3: detected capacity change from 0 to 2364 [ 274.978467][ T5870] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 275.196195][ T5870] usb 3-1: Using ep0 maxpacket: 32 [ 275.231678][ T5870] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 275.241367][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.260176][ T5870] usb 3-1: config 0 descriptor?? [ 275.497164][ T5870] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 275.537797][ T5870] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 275.610258][ T5870] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 275.618072][ T5870] usb 3-1: media controller created [ 275.731205][ T5870] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 276.072973][ T6429] loop4: detected capacity change from 0 to 2048 [ 276.098919][ T5870] az6027: usb out operation failed. (-71) [ 276.116932][ T5870] az6027: usb out operation failed. (-71) [ 276.122859][ T5870] stb0899_attach: Driver disabled by Kconfig [ 276.129381][ T5870] az6027: no front-end attached [ 276.129381][ T5870] [ 276.168206][ T6429] UDF-fs: warning (device loop4): udf_verify_domain_identifier: Not OSTA UDF compliant logical volume descriptor. [ 276.181069][ T6429] UDF-fs: warning (device loop4): udf_fill_super: No fileset found [ 276.209950][ T5870] az6027: usb out operation failed. (-71) [ 276.216361][ T5870] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 276.226930][ T5870] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 276.323751][ T5870] dvb-usb: schedule remote query interval to 400 msecs. [ 276.331154][ T5870] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 276.409222][ T5870] usb 3-1: USB disconnect, device number 3 [ 276.844130][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.179'. [ 276.855385][ T6442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.179'. [ 276.898562][ T5870] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 278.001915][ T6458] loop3: detected capacity change from 0 to 128 [ 278.149689][ T6454] loop4: detected capacity change from 0 to 2048 [ 278.177656][ T6458] EXT4-fs (loop3): Test dummy encryption mode enabled [ 278.190236][ T6460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.187'. [ 278.199613][ T6460] netlink: 32 bytes leftover after parsing attributes in process `syz.0.187'. [ 278.427685][ T6462] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 278.463244][ T6450] loop1: detected capacity change from 0 to 32768 [ 278.472825][ T6450] XFS: ikeep mount option is deprecated. [ 278.532801][ T6458] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 278.563468][ T6458] ext4 filesystem being mounted at /40/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 278.599627][ T6450] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 278.636344][ T30] audit: type=1800 audit(1756859648.800:2): pid=6454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.185" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 278.996434][ T6450] XFS (loop1): Ending clean mount [ 279.022909][ T6450] XFS (loop1): Quotacheck needed: Please wait. [ 279.033152][ T6476] warning: `syz.0.189' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 279.097575][ T6450] XFS (loop1): Quotacheck: Done. [ 279.276625][ T5816] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 279.650875][ T6458] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))" [ 280.086492][ T5826] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 281.144348][ T6490] loop4: detected capacity change from 0 to 4096 [ 281.174162][ T6501] loop1: detected capacity change from 0 to 128 [ 281.338394][ T6501] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 281.361479][ T6501] System zones: 1-3, 19-19, 35-36 [ 281.373559][ T6501] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 281.446713][ T6501] ext4 filesystem being mounted at /38/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 281.598839][ T6490] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 281.933365][ T5816] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 282.238564][ T6513] loop1: detected capacity change from 0 to 128 [ 282.355996][ T5870] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 282.471218][ T6518] loop3: detected capacity change from 0 to 764 [ 282.518441][ T6518] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 282.563666][ T5870] usb 1-1: Using ep0 maxpacket: 16 [ 282.607652][ T5870] usb 1-1: config 0 interface 0 has no altsetting 0 [ 282.660132][ T5870] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 282.669826][ T5870] usb 1-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 282.678935][ T5870] usb 1-1: Product: syz [ 282.683347][ T5870] usb 1-1: Manufacturer: syz [ 282.688535][ T5870] usb 1-1: SerialNumber: syz [ 282.770556][ T5870] usb 1-1: config 0 descriptor?? [ 282.827575][ T6521] program syz.4.210 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 283.547492][ T6526] vivid-001: disconnect [ 283.589839][ T6525] vivid-001: reconnect [ 283.945517][ T6524] loop1: detected capacity change from 0 to 32768 [ 284.004925][ T5870] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 284.019161][ T5870] usb 1-1: USB disconnect, device number 2 [ 284.103342][ T6524] jfs_strtoUCS: char2uni returned -22. [ 284.116464][ T6524] charset = cp950, char = 0xd4 [ 284.236021][ T6529] nbd0: detected capacity change from 0 to 127 [ 284.303117][ T49] block nbd0: Receive control failed (result -32) [ 284.303150][ T5822] block nbd0: Receive control failed (result -32) [ 284.631789][ T6538] Mount JFS Failure: -22 [ 284.637587][ T6538] jfs_mount failed w/return code = -22 [ 285.742851][ T6551] loop4: detected capacity change from 0 to 512 [ 285.882931][ T6551] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.224: casefold flag without casefold feature [ 285.940414][ T6551] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.224: couldn't read orphan inode 15 (err -117) [ 286.002421][ T6551] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.387456][ T6559] loop2: detected capacity change from 0 to 2048 [ 286.509376][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.590073][ T6559] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.603045][ T6559] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 286.856129][ T6559] overlayfs: failed to verify upper (/file0, ino=12, err=-28) [ 286.863931][ T6559] overlayfs: failed to verify index dir 'upper' xattr [ 286.871251][ T6559] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 287.253882][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.786391][ T6587] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 287.804033][ T6587] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.814274][ T6587] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.134184][ T6606] loop3: detected capacity change from 0 to 512 [ 289.253610][ T6606] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 289.355455][ T6606] EXT4-fs (loop3): 1 truncate cleaned up [ 289.364053][ T6606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 289.535588][ T6618] fscrypt (loop3, inode 18): Mutually exclusive encryption flags (0x18) [ 289.874125][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.893458][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.249'. [ 290.116955][ T6624] loop4: detected capacity change from 0 to 1024 [ 290.206920][ T6624] EXT4-fs: Ignoring removed orlov option [ 290.297508][ T6624] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.854060][ T6636] loop2: detected capacity change from 0 to 512 [ 291.383274][ T6640] loop3: detected capacity change from 0 to 256 [ 291.412730][ T6634] loop1: detected capacity change from 0 to 32768 [ 291.476220][ T6634] (syz.1.253,6634,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 291.490696][ T6634] (syz.1.253,6634,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 291.510151][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.566849][ T6634] JBD2: Ignoring recovery information on journal [ 291.627751][ T6636] FAT-fs (loop2): error, corrupted directory (invalid entries) [ 291.654135][ T6634] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 291.874754][ T6640] FAT-fs (loop3): Directory bread(block 64) failed [ 291.882013][ T6640] FAT-fs (loop3): Directory bread(block 65) failed [ 291.889216][ T6640] FAT-fs (loop3): Directory bread(block 66) failed [ 291.897002][ T6640] FAT-fs (loop3): Directory bread(block 67) failed [ 291.903913][ T6640] FAT-fs (loop3): Directory bread(block 68) failed [ 291.910925][ T6640] FAT-fs (loop3): Directory bread(block 69) failed [ 291.918040][ T6640] FAT-fs (loop3): Directory bread(block 70) failed [ 291.924790][ T6640] FAT-fs (loop3): Directory bread(block 71) failed [ 291.931962][ T6640] FAT-fs (loop3): Directory bread(block 72) failed [ 291.938900][ T6640] FAT-fs (loop3): Directory bread(block 73) failed [ 292.144111][ T5816] ocfs2: Unmounting device (7,1) on (node local) [ 294.023870][ T6659] loop4: detected capacity change from 0 to 8 [ 294.473928][ T6653] loop2: detected capacity change from 0 to 65536 [ 294.483421][ T6653] XFS: noikeep mount option is deprecated. [ 294.779217][ T6653] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 295.136780][ T6653] XFS (loop2): Ending clean mount [ 295.150533][ T6653] XFS (loop2): Quotacheck needed: Please wait. [ 295.196298][ T6653] XFS (loop2): Quotacheck: Done. [ 295.358436][ T5824] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 296.327426][ T6676] loop1: detected capacity change from 0 to 32768 [ 296.329101][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.340862][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 296.407583][ T6676] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.261 (6676) [ 296.479920][ T6676] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 296.490730][ T6676] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm [ 296.614370][ T6684] mmap: syz.0.273 (6684) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 296.860417][ T6676] BTRFS info (device loop1): enabling ssd optimizations [ 296.873901][ T6676] BTRFS info (device loop1): enabling free space tree [ 297.037780][ T5816] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 297.186308][ T6703] netlink: 8 bytes leftover after parsing attributes in process `syz.0.275'. [ 297.646643][ T6707] loop4: detected capacity change from 0 to 64 [ 297.985022][ T6711] loop3: detected capacity change from 0 to 512 [ 298.092987][ T5827] hfs: node 4:3 still has 1 user(s)! [ 298.240971][ T6711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.254349][ T6711] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 298.286416][ C1] vkms_vblank_simulate: vblank timer overrun [ 298.367675][ T6711] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #2: block 18: comm syz.3.279: lblock 23 mapped to illegal pblock 18 (length 1) [ 298.471442][ T6711] EXT4-fs (loop3): Remounting filesystem read-only [ 298.938840][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.240311][ T6727] loop3: detected capacity change from 0 to 32768 [ 300.461628][ T6727] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io [ 300.461800][ T6727] allowing incompatible features above 0.0: (unknown version) [ 300.461908][ T6727] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 300.506980][ T6727] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0 [ 300.516648][ T6727] bcachefs (loop3): recovering from clean shutdown, journal seq 10 [ 300.526684][ T6727] bcachefs (loop3): Version upgrade required: [ 300.526684][ T6727] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 300.526684][ T6727] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive [ 300.526684][ T6727] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance [ 300.600035][ C1] vkms_vblank_simulate: vblank timer overrun [ 300.676110][ T6727] bcachefs (loop3): dropping and reconstructing all alloc info [ 300.805428][ T6727] bcachefs (loop3): accounting_read... done [ 300.820414][ T6727] bcachefs (loop3): alloc_read... done [ 300.832558][ T6727] bcachefs (loop3): snapshots_read... done [ 300.853108][ T6727] bcachefs (loop3): check_allocations... [ 300.899100][ T6746] netlink: 1022 bytes leftover after parsing attributes in process `syz.1.289'. [ 301.099424][ T6727] done [ 301.147594][ T6727] bcachefs (loop3): going read-write [ 301.153458][ T6727] bcachefs (loop3): insufficient writeable journal devices available: have 0, need 1 [ 301.153458][ T6727] rw journal devs: [ 301.243739][ T6727] bcachefs (loop3): done starting filesystem [ 301.430540][ T5826] bcachefs (loop3): shutting down [ 301.436011][ T5826] bcachefs (loop3): going read-only [ 301.441536][ T5826] bcachefs (loop3): finished waiting for writes to stop [ 301.536542][ T5826] bcachefs (loop3): flushing journal and stopping allocators, journal seq 10 [ 301.584534][ T5826] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 10 [ 301.616024][ T5826] bcachefs (loop3): unclean shutdown complete, journal seq 10 [ 301.675541][ T5826] bcachefs (loop3): done going read-only, filesystem not clean [ 301.714886][ T6756] loop4: detected capacity change from 0 to 512 [ 301.768421][ T6756] EXT4-fs (loop4): Invalid log cluster size: 255 [ 301.838167][ T5826] bcachefs (loop3): shutdown complete [ 301.851062][ T6759] loop2: detected capacity change from 0 to 512 [ 301.921451][ T6759] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 301.934422][ T49] Bluetooth: hci4: Unknown advertising packet type: 0x3d [ 301.934578][ T49] Bluetooth: hci4: Malformed LE Event: 0x0d [ 302.052164][ T6759] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 302.166381][ T6759] EXT4-fs (loop2): 1 truncate cleaned up [ 302.174610][ T6759] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 302.341514][ T30] audit: type=1800 audit(1756859672.500:3): pid=6759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.296" name="file2" dev="loop2" ino=16 res=0 errno=0 [ 302.407432][ T6759] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 302.909229][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 303.501416][ T6778] loop1: detected capacity change from 0 to 1024 [ 304.051706][ T5872] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 304.257222][ T5872] usb 1-1: Using ep0 maxpacket: 16 [ 304.326504][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.338061][ T5872] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.354303][ T5872] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice=1a.00 [ 304.365590][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.401630][ T6788] netlink: 1 bytes leftover after parsing attributes in process `syz.2.308'. [ 304.478599][ T5872] usb 1-1: config 0 descriptor?? [ 305.263399][ T5872] lua 0003:1E7D:2C2E.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.0-1/input0 [ 305.464375][ T5872] usb 1-1: USB disconnect, device number 3 [ 306.366170][ T5872] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 306.566471][ T6803] geneve2: entered promiscuous mode [ 306.571993][ T6803] geneve2: entered allmulticast mode [ 306.634682][ T5872] usb 3-1: unable to get BOS descriptor or descriptor too short [ 306.679087][ T5872] usb 3-1: no configurations [ 306.684053][ T5872] usb 3-1: can't read configurations, error -22 [ 307.807660][ T6818] openvswitch: netlink: Actions may not be safe on all matching packets [ 307.880841][ T6820] syz.0.322 uses obsolete (PF_INET,SOCK_PACKET) [ 309.046694][ T6822] loop2: detected capacity change from 0 to 32768 [ 309.068292][ T6822] (syz.2.323,6822,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 309.082795][ T6822] (syz.2.323,6822,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 309.131144][ T6822] JBD2: Ignoring recovery information on journal [ 309.325545][ T6822] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 309.655146][ T6834] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 309.721334][ T5824] ocfs2: Unmounting device (7,2) on (node local) [ 309.749824][ T6836] loop0: detected capacity change from 0 to 1024 [ 309.972058][ T6836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 310.013918][ T6840] loop4: detected capacity change from 0 to 64 [ 310.430189][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.038479][ T6852] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 311.045074][ T6852] syzkaller1: linktype set to 776 [ 311.566092][ T6861] netlink: 8 bytes leftover after parsing attributes in process `syz.0.340'. [ 311.930392][ T5872] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 311.938373][ T5872] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 311.946577][ T5872] hid-generic 0003:0004:0000.0002: unknown main item tag 0x0 [ 312.051141][ T5872] hid-generic 0003:0004:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 312.084195][ T6870] loop4: detected capacity change from 0 to 64 [ 312.463665][ T6873] loop0: detected capacity change from 0 to 764 [ 314.786190][ T5878] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 315.058103][ T5878] usb 1-1: Using ep0 maxpacket: 16 [ 315.187194][ T5878] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.203830][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 315.217110][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 315.227173][ T5878] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 315.237439][ T5878] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 315.486426][ T6906] loop1: detected capacity change from 0 to 4096 [ 315.496084][ T6905] loop3: detected capacity change from 0 to 32768 [ 315.531392][ T6905] (syz.3.359,6905,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 315.549956][ T5878] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 315.559821][ T5878] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 315.568211][ T5878] usb 1-1: Manufacturer: syz [ 315.578550][ T6905] (syz.3.359,6905,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 315.622606][ T6905] (syz.3.359,6905,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xcfdff595, computed 0xefed4a20. Applying ECC. [ 315.646541][ T6905] JBD2: Ignoring recovery information on journal [ 315.727129][ T6908] loop2: detected capacity change from 0 to 1024 [ 315.741062][ T5878] usb 1-1: config 0 descriptor?? [ 315.761129][ T6906] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 315.770159][ T6905] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 315.946922][ T6908] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 316.085543][ T5826] ocfs2: Unmounting device (7,3) on (node local) [ 316.416045][ T5878] rc_core: IR keymap rc-hauppauge not found [ 316.422428][ T5878] Registered IR keymap rc-empty [ 316.443468][ T5878] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 316.508945][ T5816] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.513590][ T5878] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 316.581504][ T5878] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 316.596656][ T5878] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7 [ 316.730445][ T5878] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 316.850093][ T5878] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 316.879049][ T5878] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 316.911829][ T5878] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 316.968498][ T5878] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 317.010469][ T5878] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 317.054717][ T5878] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 317.088532][ T5878] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 317.127792][ T5878] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 317.176361][ T5878] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 317.209503][ T5878] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 317.218259][ T5878] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 317.297363][ T5878] usb 1-1: USB disconnect, device number 4 [ 318.219721][ T6935] loop0: detected capacity change from 0 to 1024 [ 318.380125][ T6941] loop3: detected capacity change from 0 to 64 [ 318.506804][ T6943] loop1: detected capacity change from 0 to 512 [ 318.553440][ T6943] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 318.574564][ T6941] syz.3.363: attempt to access beyond end of device [ 318.574564][ T6941] loop3: rw=2049, sector=78, nr_sectors = 88 limit=64 [ 318.678939][ T6943] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.699312][ T6943] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.124071][ T30] audit: type=1326 audit(1756859689.290:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.0.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245678ebe9 code=0x7ffc0000 [ 319.147069][ T30] audit: type=1326 audit(1756859689.290:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.0.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245678ebe9 code=0x7ffc0000 [ 319.275852][ T30] audit: type=1326 audit(1756859689.360:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.0.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f245678ebe9 code=0x7ffc0000 [ 319.303215][ T30] audit: type=1326 audit(1756859689.360:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.0.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245678ebe9 code=0x7ffc0000 [ 319.328139][ T30] audit: type=1326 audit(1756859689.370:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.0.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245678ebe9 code=0x7ffc0000 [ 319.351163][ T30] audit: type=1326 audit(1756859689.370:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.0.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f245678ebe9 code=0x7ffc0000 [ 319.373842][ T30] audit: type=1326 audit(1756859689.370:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.0.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245678ebe9 code=0x7ffc0000 [ 319.400465][ T30] audit: type=1326 audit(1756859689.370:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.0.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245678ebe9 code=0x7ffc0000 [ 319.424912][ T30] audit: type=1326 audit(1756859689.390:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.0.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f245678ebe9 code=0x7ffc0000 [ 319.447571][ T30] audit: type=1326 audit(1756859689.390:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6952 comm="syz.0.376" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245678ebe9 code=0x7ffc0000 [ 319.660158][ T5816] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.490037][ T6976] Set syz0 is full, maxelem 0 reached [ 320.624715][ T6982] loop4: detected capacity change from 0 to 128 [ 320.718573][ T6982] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 320.762528][ T6982] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 320.798503][ T6982] fscrypt (loop4, inode 12): Mutually exclusive encryption flags (0x17) [ 321.366241][ T5827] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 321.983419][ T6989] loop1: detected capacity change from 0 to 32768 [ 322.103367][ T6989] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fix_errors=ask,norecovery,nojournal_transaction_names,read_only [ 322.103524][ T6989] allowing incompatible features above 0.0: (unknown version) [ 322.103630][ T6989] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 322.144669][ T6989] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 322.154139][ T6989] bcachefs (loop1): recovering from clean shutdown, journal seq 10 [ 322.169243][ T6989] bcachefs (loop1): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive [ 322.169243][ T6989] running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes [ 322.327373][ T6997] netlink: 8 bytes leftover after parsing attributes in process `syz.0.397'. [ 322.377939][ T6989] bcachefs (loop1): btree node read error at btree lru level 0/0 [ 322.378054][ T6989] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key 0:196608:0 durability: 1 ptr: 0:28:0 gen 0 [ 322.378179][ T6989] loop1 node offset 0/16: incorrect min_key: got POS_MIN should be 0:196608:0 [ 322.378276][ T6989] loop1 btree validate error [ 322.378352][ T6989] flagging btree lru lost data [ 322.378435][ T6989] running recovery pass check_topology (2), currently at recovery_pass_empty (0) [ 322.378539][ T6989] running recovery pass check_lrus (14), currently at recovery_pass_empty (0) [ 322.378643][ T6989] running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0) [ 322.378754][ T6989] running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0) [ 322.378861][ T6989] ret btree_node_read_err_bad_node [ 322.477571][ T6989] bcachefs (loop1): error reading btree root btree=lru level=0: btree_node_read_error, fixing [ 322.513423][ T6989] bcachefs (loop1): btree node read error at btree freespace level 0/0 [ 322.513535][ T6989] u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0 [ 322.513659][ T6989] loop1 node offset 0/32 bset u64s 0: invalid bkey format: field 4 too large: 0 + 4294967296 > 4294967295 [ 322.513764][ T6989] u64s 3 fields 64:0, 64:0, 32:0, 0:0, 0:4294967296, 0:0 [ 322.513859][ T6989] loop1 btree validate error [ 322.513933][ T6989] flagging btree freespace lost data [ 322.514014][ T6989] ret btree_node_read_err_bad_node [ 322.588645][ T6989] bcachefs (loop1): error reading btree root btree=freespace level=0: btree_node_read_error, fixing [ 322.660415][ T6989] bcachefs (loop1): check_topology... done [ 322.680340][ T6989] bcachefs (loop1): accounting_read... done [ 322.696576][ T6989] bcachefs (loop1): alloc_read... done [ 322.714094][ T6989] bcachefs (loop1): snapshots_read... done [ 322.723938][ T6989] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean [ 322.736479][ T6989] bcachefs (loop1): done starting filesystem [ 322.877183][ T7001] loop3: detected capacity change from 0 to 1024 [ 322.921859][ T7003] loop2: detected capacity change from 0 to 1024 [ 322.937383][ T5816] bcachefs (loop1): shutting down [ 323.004351][ T5816] bcachefs (loop1): shutdown complete [ 323.091278][ T7001] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 323.107011][ T7001] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 323.219372][ T7003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.282669][ T7001] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.398: lblock 0 mapped to illegal pblock 0 (length 1) [ 323.367266][ T7001] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 323.380151][ T7001] EXT4-fs (loop3): This should not happen!! Data will be lost [ 323.380151][ T7001] [ 323.440057][ T7011] loop4: detected capacity change from 0 to 512 [ 323.482165][ T7011] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 323.539316][ T7011] EXT4-fs (loop4): invalid journal inode [ 323.545439][ T7011] EXT4-fs (loop4): can't get journal size [ 323.592108][ T7011] EXT4-fs (loop4): 1 truncate cleaned up [ 323.609405][ T7011] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.679381][ T5824] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.794650][ T5826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 324.093058][ T7016] loop2: detected capacity change from 0 to 128 [ 324.114358][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.716351][ T5878] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 325.957511][ T5878] usb 4-1: config 0 has an invalid interface number: 128 but max is 0 [ 325.966344][ T5878] usb 4-1: config 0 has no interface number 0 [ 326.024392][ T5878] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 326.034703][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.043254][ T5878] usb 4-1: Product: syz [ 326.047882][ T5878] usb 4-1: Manufacturer: syz [ 326.058500][ T5878] usb 4-1: SerialNumber: syz [ 326.146633][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 326.383262][ T24] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 326.393602][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.510272][ T24] usb 2-1: config 0 descriptor?? [ 326.806928][ T7052] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 326.818814][ T7052] bridge1: entered promiscuous mode [ 327.057273][ T5878] usb 4-1: config 0 descriptor?? [ 327.066839][ T7050] loop4: detected capacity change from 0 to 32768 [ 327.637821][ T5878] usb 4-1: Firmware: major: 0, minor: 0, hardware type: UNKNOWN (236) [ 327.646809][ T5878] usb 4-1: Firmware version (0.0) predates our first public release. [ 327.655114][ T5878] usb 4-1: Please update to version 0.2 or newer [ 327.760866][ T24] usb 2-1: Cannot set autoneg [ 327.766971][ T24] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 327.832636][ T24] usb 2-1: USB disconnect, device number 2 [ 327.874696][ T5878] usb 4-1: atusb_probe: initialization failed, error = -524 [ 327.883840][ T5878] atusb 4-1:0.128: probe with driver atusb failed with error -524 [ 327.957267][ T5878] usb 4-1: USB disconnect, device number 4 [ 329.035936][ T7068] loop1: detected capacity change from 0 to 1024 [ 329.320680][ T7068] syz.1.425: attempt to access beyond end of device [ 329.320680][ T7068] loop1: rw=34817, sector=996, nr_sectors = 40 limit=1024 [ 329.840598][ T176] hfsplus: b-tree write err: -5, ino 4 [ 331.323013][ T7107] netlink: 8 bytes leftover after parsing attributes in process `syz.2.442'. [ 331.594492][ T7110] loop0: detected capacity change from 0 to 8 [ 331.827392][ T7114] Bluetooth: MGMT ver 1.23 [ 332.171580][ T7118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.448'. [ 333.493123][ T7137] sctp: [Deprecated]: syz.1.457 (pid 7137) Use of int in max_burst socket option. [ 333.493123][ T7137] Use struct sctp_assoc_value instead [ 333.962596][ T7144] loop4: detected capacity change from 0 to 256 [ 334.233625][ T49] Bluetooth: hci0: command 0x0406 tx timeout [ 335.124121][ T7142] loop0: detected capacity change from 0 to 32768 [ 335.155357][ T7142] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 335.163902][ T7142] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 335.218746][ T7142] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 335.327337][ T7155] loop4: detected capacity change from 0 to 8 [ 335.569648][ T7142] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 336.829153][ T7166] loop3: detected capacity change from 0 to 64 [ 336.864002][ T7166] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing [ 338.204279][ T7186] loop4: detected capacity change from 0 to 1024 [ 338.436153][ T7186] hfsplus: can't free extent [ 338.522133][ T7191] netlink: 'syz.3.481': attribute type 4 has an invalid length. [ 339.336480][ T5823] Bluetooth: hci1: command 0x0406 tx timeout [ 339.336766][ T5831] Bluetooth: hci2: command 0x0406 tx timeout [ 339.343292][ T5823] Bluetooth: hci3: command 0x0406 tx timeout [ 339.952848][ T7212] loop0: detected capacity change from 0 to 1024 [ 340.030352][ T7212] EXT4-fs: Ignoring removed mblk_io_submit option [ 340.156849][ T7212] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.233473][ T7219] netlink: 28 bytes leftover after parsing attributes in process `syz.4.493'. [ 340.243794][ T7219] netem: change failed [ 340.737194][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.179792][ T7232] netlink: 100 bytes leftover after parsing attributes in process `syz.2.499'. [ 342.050378][ T7236] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.283620][ T7234] loop3: detected capacity change from 0 to 32768 [ 342.295359][ T7234] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.500 (7234) [ 342.347454][ T7234] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 342.358101][ T7234] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm [ 342.767920][ T7234] BTRFS info (device loop3): enabling ssd optimizations [ 342.775239][ T7234] BTRFS info (device loop3): enabling free space tree [ 342.957183][ T5826] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 342.998168][ T7264] netem: incorrect ge model size [ 343.003385][ T7264] netem: change failed [ 343.980574][ T5878] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 344.207143][ T5878] usb 1-1: Using ep0 maxpacket: 8 [ 344.216164][ T7266] loop4: detected capacity change from 0 to 40427 [ 344.230294][ T7266] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 344.238396][ T7266] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 344.254990][ T7266] F2FS-fs (loop4): invalid crc value [ 344.366332][ T5878] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 344.375808][ T5878] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 344.390394][ T5878] usb 1-1: Product: syz [ 344.394780][ T5878] usb 1-1: Manufacturer: syz [ 344.403692][ T5878] usb 1-1: SerialNumber: syz [ 344.624157][ T7266] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 344.642320][ T5878] usb 1-1: config 0 descriptor?? [ 344.654946][ T7266] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 344.662484][ T7266] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 344.716022][ T5878] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 345.382702][ T5878] input: gspca_zc3xx as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 345.656499][ T24] usb 1-1: USB disconnect, device number 5 [ 346.038565][ T7289] loop2: detected capacity change from 0 to 256 [ 346.368708][ T7289] FAT-fs (loop2): Directory bread(block 64) failed [ 346.375497][ T7289] FAT-fs (loop2): Directory bread(block 65) failed [ 346.382899][ T7289] FAT-fs (loop2): Directory bread(block 66) failed [ 346.389947][ T7289] FAT-fs (loop2): Directory bread(block 67) failed [ 346.399520][ T7289] FAT-fs (loop2): Directory bread(block 68) failed [ 346.406531][ T7289] FAT-fs (loop2): Directory bread(block 69) failed [ 346.413448][ T7289] FAT-fs (loop2): Directory bread(block 70) failed [ 346.420510][ T7289] FAT-fs (loop2): Directory bread(block 71) failed [ 346.427614][ T7289] FAT-fs (loop2): Directory bread(block 72) failed [ 346.441244][ T7289] FAT-fs (loop2): Directory bread(block 73) failed [ 346.514993][ T7293] netlink: 72 bytes leftover after parsing attributes in process `syz.3.508'. [ 346.997855][ T7297] serio: Serial port ptm0 [ 347.082344][ T5878] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 347.315083][ T5878] usb 1-1: Using ep0 maxpacket: 32 [ 347.345168][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 347.362555][ T5878] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 347.374775][ T5878] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 347.384483][ T5878] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.489200][ T5878] usb 1-1: config 0 descriptor?? [ 347.611054][ T5878] hub 1-1:0.0: USB hub found [ 347.836324][ T5878] hub 1-1:0.0: 1 port detected [ 348.056458][ T5878] hub 1-1:0.0: hub_hub_status failed (err = -71) [ 348.063366][ T5878] hub 1-1:0.0: config failed, can't get hub status (err -71) [ 348.142523][ T5878] usbhid 1-1:0.0: can't add hid device: -71 [ 348.149647][ T5878] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 348.292341][ T5878] usb 1-1: USB disconnect, device number 6 [ 349.358949][ T7328] loop4: detected capacity change from 0 to 512 [ 349.473120][ T7331] loop1: detected capacity change from 0 to 128 [ 349.493460][ T7333] loop2: detected capacity change from 0 to 256 [ 349.584147][ T7328] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 349.597384][ T7328] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 349.786064][ T7333] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e0d861, utbl_chksum : 0xe619d30d) [ 350.313563][ T5827] EXT4-fs error (device loop4): ext4_empty_dir:3077: inode #12: comm syz-executor: invalid size [ 350.392192][ T5827] EXT4-fs (loop4): Remounting filesystem read-only [ 350.480351][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.498119][ T3704] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 350.509172][ T3704] Quota error (device loop4): write_blk: dquota write failed [ 350.516977][ T3704] Quota error (device loop4): free_dqentry: Can't write quota data block 5 [ 350.533509][ T3704] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 350.546573][ T3704] Quota error (device loop4): write_blk: dquota write failed [ 350.554158][ T3704] Quota error (device loop4): free_dqentry: Can't write quota data block 5 [ 351.308099][ T7362] netlink: 28 bytes leftover after parsing attributes in process `syz.0.548'. [ 351.317762][ T7362] netlink: 28 bytes leftover after parsing attributes in process `syz.0.548'. [ 351.367623][ T7362] netlink: 28 bytes leftover after parsing attributes in process `syz.0.548'. [ 351.377209][ T7362] netlink: 28 bytes leftover after parsing attributes in process `syz.0.548'. [ 351.722436][ T7359] loop2: detected capacity change from 0 to 4096 [ 351.784564][ T7359] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512). [ 352.222048][ T7359] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 352.329072][ T7375] loop3: detected capacity change from 0 to 256 [ 352.399566][ T7373] loop4: detected capacity change from 0 to 1024 [ 352.531879][ T7373] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 352.545161][ T7373] ext4 filesystem being mounted at /113/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 352.604907][ T3855] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 352.650018][ T5824] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 352.657365][ T5824] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 352.664547][ T5824] ntfs3(loop2): ino=3, ntfs_set_state failed, -22. [ 352.680382][ T3729] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22. [ 352.731940][ T7375] exFAT-fs (loop3): start_clu is invalid cluster(0x400) [ 352.743520][ T7373] EXT4-fs warning (device loop4): ext4_empty_dir:3099: inode #12: comm syz.4.553: directory missing '..' [ 352.857510][ T5827] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 353.506548][ T7390] nbd1: detected capacity change from 0 to 63 [ 353.544481][ T5113] block nbd1: Receive control failed (result -32) [ 353.886801][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 354.108970][ T24] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.169365][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 354.178881][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.187590][ T24] usb 1-1: Product: syz [ 354.191957][ T24] usb 1-1: Manufacturer: syz [ 354.196921][ T24] usb 1-1: SerialNumber: syz [ 354.236345][ T7402] loop2: detected capacity change from 0 to 2048 [ 354.305218][ T7402] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 354.416611][ T7407] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 355.217692][ T24] cdc_ncm 1-1:1.0: SET_CRC_MODE failed [ 355.249509][ T24] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed [ 355.286386][ T24] cdc_ncm 1-1:1.0: bind() failure [ 355.308477][ T24] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 355.316535][ T24] cdc_ncm 1-1:1.1: bind() failure [ 355.401656][ T24] usb 1-1: USB disconnect, device number 7 [ 355.527197][ T7420] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 356.095938][ T5113] Bluetooth: hci0: unexpected event for opcode 0x080f [ 356.173351][ T7429] loop1: detected capacity change from 0 to 64 [ 356.241715][ T7429] hfs: invalid btree extent records (0 size) [ 356.248794][ T7429] hfs: unable to open catalog tree [ 356.279147][ T7429] hfs: can't find a HFS filesystem on dev loop1 [ 357.641024][ T7450] loop2: detected capacity change from 0 to 256 [ 357.689585][ T7450] exfat: Deprecated parameter 'namecase' [ 357.776907][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 357.783591][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 357.853964][ T7454] loop4: detected capacity change from 0 to 764 [ 357.933975][ T7450] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 358.638628][ T7464] netlink: 104 bytes leftover after parsing attributes in process `syz.2.593'. [ 358.683988][ T7468] loop1: detected capacity change from 0 to 64 [ 358.740820][ T7467] loop6: detected capacity change from 0 to 524287999 [ 358.780768][ T7467] Buffer I/O error on dev loop6, logical block 0, async page read [ 358.789299][ T7467] Buffer I/O error on dev loop6, logical block 0, async page read [ 358.798407][ T7467] Buffer I/O error on dev loop6, logical block 0, async page read [ 358.806965][ T7467] Buffer I/O error on dev loop6, logical block 0, async page read [ 358.815047][ T7467] Buffer I/O error on dev loop6, logical block 0, async page read [ 358.829110][ T7467] Buffer I/O error on dev loop6, logical block 0, async page read [ 358.839051][ T7467] Buffer I/O error on dev loop6, logical block 0, async page read [ 358.847310][ T7467] Buffer I/O error on dev loop6, logical block 0, async page read [ 358.855334][ T7467] ldm_validate_partition_table(): Disk read failed. [ 358.862458][ T7467] Buffer I/O error on dev loop6, logical block 0, async page read [ 358.870739][ T7467] Buffer I/O error on dev loop6, logical block 0, async page read [ 358.879104][ T7467] Dev loop6: unable to read RDB block 0 [ 358.885423][ T7467] loop6: unable to read partition table [ 358.909940][ T7467] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾x³˜CÖ) failed (rc=-5) [ 359.034119][ T30] audit: type=1800 audit(1756859985.184:14): pid=7468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.596" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 359.055179][ T30] audit: type=1800 audit(1756859985.194:15): pid=7468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.596" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 359.245987][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 359.426359][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 359.468591][ T24] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 359.478300][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.518748][ T24] usb 4-1: config 0 descriptor?? [ 359.816929][ T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 359.837543][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 359.869295][ T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 359.876852][ T24] usb 4-1: media controller created [ 360.004459][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 360.070938][ T7470] ===================================================== [ 360.078431][ T7470] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 360.086073][ T7470] _copy_to_user+0xcc/0x120 [ 360.090770][ T7470] i2cdev_ioctl_smbus+0x586/0x660 [ 360.096204][ T7470] i2cdev_ioctl+0xa14/0xf40 [ 360.100910][ T7470] __se_sys_ioctl+0x239/0x400 [ 360.105949][ T7470] __x64_sys_ioctl+0x97/0xe0 [ 360.110730][ T7470] x64_sys_call+0x1cbc/0x3e20 [ 360.115914][ T7470] do_syscall_64+0xd9/0x210 [ 360.120727][ T7470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.127180][ T7470] [ 360.129595][ T7470] Uninit was stored to memory at: [ 360.134835][ T7470] __i2c_smbus_xfer+0x254d/0x2f60 [ 360.140238][ T7470] i2c_smbus_xfer+0x31d/0x4d0 [ 360.145090][ T7470] i2cdev_ioctl_smbus+0x4a1/0x660 [ 360.150494][ T7470] i2cdev_ioctl+0xa14/0xf40 [ 360.159602][ T7470] __se_sys_ioctl+0x239/0x400 [ 360.164470][ T7470] __x64_sys_ioctl+0x97/0xe0 [ 360.170818][ T7470] x64_sys_call+0x1cbc/0x3e20 [ 360.175904][ T7470] do_syscall_64+0xd9/0x210 [ 360.180638][ T7470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.187056][ T7470] [ 360.189482][ T7470] Local variable msgbuf1.i created at: [ 360.195047][ T7470] __i2c_smbus_xfer+0x86a/0x2f60 [ 360.200343][ T7470] i2c_smbus_xfer+0x31d/0x4d0 [ 360.205196][ T7470] [ 360.207803][ T7470] Bytes 0-1 of 2 are uninitialized [ 360.213037][ T7470] Memory access of size 2 starts at ffff88811851fd06 [ 360.220048][ T7470] Data copied to user address 0000200000000100 [ 360.226532][ T7470] [ 360.228983][ T7470] CPU: 1 UID: 0 PID: 7470 Comm: syz.3.597 Not tainted syzkaller #0 PREEMPT(none) [ 360.238613][ T7470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 360.249166][ T7470] ===================================================== [ 360.260318][ T7470] Disabling lock debugging due to kernel taint [ 360.268034][ T7470] Kernel panic - not syncing: kmsan.panic set ... [ 360.274613][ T7470] CPU: 1 UID: 0 PID: 7470 Comm: syz.3.597 Tainted: G B syzkaller #0 PREEMPT(none) [ 360.285615][ T7470] Tainted: [B]=BAD_PAGE [ 360.289881][ T7470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 360.300092][ T7470] Call Trace: [ 360.303497][ T7470] [ 360.306560][ T7470] __dump_stack+0x26/0x30 [ 360.311120][ T7470] dump_stack_lvl+0x53/0x270 [ 360.315935][ T7470] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 360.321991][ T7470] dump_stack+0x1e/0x25 [ 360.326373][ T7470] vpanic+0x361/0xc50 [ 360.330601][ T7470] panic+0x15d/0x160 [ 360.334774][ T7470] kmsan_report+0x31c/0x320 [ 360.339505][ T7470] ? kmsan_internal_check_memory+0x1e1/0x230 [ 360.345713][ T7470] ? kmsan_copy_to_user+0xf1/0x190 [ 360.351035][ T7470] ? _copy_to_user+0xcc/0x120 [ 360.355914][ T7470] ? i2cdev_ioctl_smbus+0x586/0x660 [ 360.361364][ T7470] ? i2cdev_ioctl+0xa14/0xf40 [ 360.366272][ T7470] ? __se_sys_ioctl+0x239/0x400 [ 360.371341][ T7470] ? __x64_sys_ioctl+0x97/0xe0 [ 360.376290][ T7470] ? x64_sys_call+0x1cbc/0x3e20 [ 360.381369][ T7470] ? do_syscall_64+0xd9/0x210 [ 360.386268][ T7470] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.392544][ T7470] ? __pfx_az6027_i2c_xfer+0x10/0x10 [ 360.398078][ T7470] ? __i2c_transfer+0x11cd/0x3110 [ 360.403309][ T7470] ? kmsan_get_metadata+0xfb/0x160 [ 360.408628][ T7470] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 360.415166][ T7470] ? kmsan_get_metadata+0xfb/0x160 [ 360.420477][ T7470] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 360.426503][ T7470] ? __i2c_smbus_xfer+0x1e93/0x2f60 [ 360.431896][ T7470] ? kmsan_get_metadata+0xfb/0x160 [ 360.437207][ T7470] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 360.443242][ T7470] kmsan_internal_check_memory+0x1e1/0x230 [ 360.449267][ T7470] kmsan_copy_to_user+0xf1/0x190 [ 360.454402][ T7470] _copy_to_user+0xcc/0x120 [ 360.459099][ T7470] i2cdev_ioctl_smbus+0x586/0x660 [ 360.464387][ T7470] i2cdev_ioctl+0xa14/0xf40 [ 360.469103][ T7470] ? __pfx_kmsan_get_shadow_origin_ptr+0x7/0x10 [ 360.475567][ T7470] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 360.480814][ T7470] __se_sys_ioctl+0x239/0x400 [ 360.485704][ T7470] __x64_sys_ioctl+0x97/0xe0 [ 360.490500][ T7470] x64_sys_call+0x1cbc/0x3e20 [ 360.495411][ T7470] do_syscall_64+0xd9/0x210 [ 360.500149][ T7470] ? irqentry_exit+0x16/0x60 [ 360.504944][ T7470] ? clear_bhb_loop+0x40/0x90 [ 360.509823][ T7470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.515902][ T7470] RIP: 0033:0x7fdfe818ebe9 [ 360.520452][ T7470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.540246][ T7470] RSP: 002b:00007fdfe8ff4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 360.548853][ T7470] RAX: ffffffffffffffda RBX: 00007fdfe83c5fa0 RCX: 00007fdfe818ebe9 [ 360.556975][ T7470] RDX: 0000200000000040 RSI: 0000000000000720 RDI: 0000000000000004 [ 360.565095][ T7470] RBP: 00007fdfe8211e19 R08: 0000000000000000 R09: 0000000000000000 [ 360.573210][ T7470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.581325][ T7470] R13: 00007fdfe83c6038 R14: 00007fdfe83c5fa0 R15: 00007ffef3d4df08 [ 360.589496][ T7470] [ 360.592798][ T7470] Kernel Offset: disabled [ 360.597180][ T7470] Rebooting in 86400 seconds..