last executing test programs: 4.447434168s ago: executing program 0 (id=2719): r0 = syz_io_uring_setup(0x1244, &(0x7f00000004c0)={0x0, 0xd5a5, 0x1, 0x1, 0x147}, &(0x7f0000000400)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xdfffffffffffffff, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 4.250136721s ago: executing program 0 (id=2721): r0 = syz_open_dev$video4linux(0x0, 0x3, 0x88000) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040564a, &(0x7f0000000340)={0x0, 0x1, 0x100a, 0xffffffffffffffff, 0x0, 0x0}) 4.155612173s ago: executing program 0 (id=2723): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 2.402164351s ago: executing program 2 (id=2734): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1, 0x4, &(0x7f00000001c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x75}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000140)=r1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = io_uring_setup(0x4f04, &(0x7f00000002c0)={0x0, 0x48c7, 0x400, 0x0, 0xffffffff}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 2.401691491s ago: executing program 3 (id=2735): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, r1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001800010000000000000000000a000000fe0000000000000014000500fc02"], 0x30}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r3}) 2.271754683s ago: executing program 2 (id=2736): symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0'}, 0xb) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.235249684s ago: executing program 3 (id=2737): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) 2.094026526s ago: executing program 3 (id=2739): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xd000000, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) sendfile(r0, r1, 0x0, 0x8000002b) 2.078935096s ago: executing program 2 (id=2740): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file0/file1\x00', 0x828f2, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3813009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x20, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x200) 1.968886178s ago: executing program 0 (id=2741): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./bus\x00', 0x1800840, &(0x7f0000000600)=ANY=[@ANYBLOB='utf8=1,shortname=winnt,shortname=win95,iocharset=cp860,iocharset=cp855,nonumtail=0,iocharset=cp950,uni_xlate=1,iocharset=iso8859-14,codepage=950,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c757466383d302c73686f72746e616d653d77696e39352c002526acd1e7092a99b8ec057f873b7688f8475b6588daa43c9397321ebc48aea2cb8e64b8d85ceaaced405be1f0857356924b904235edcc7b83160722b3c1c7dca21a000a642749c7e2eae16fd8b5f330"], 0x1, 0x362, &(0x7f0000000900)="$eJzs3U9oXFUXAPAzfUkmKfRLFh8UBeHpTtDQP7jQVUpJoTgblaHqQhxsqpKJhQwOpotO40ZcCi515UZc6MJF1yIo4s6FWytIVVxodwWLV2bmTeZNZpKmwrQWf7/FcHLuPe/eO3nJvLxkbl5eifXzs3Hhxo3rMT9fiZmV0ytxsxJLkcXAlRg3NyEHANwfbqYUf6S+A5ZUpjwlAGDKeq//rx4pZd7+ar/+yas/ANz3ip//F/brM79Xw8WpTAkAmLKx+/+PjDTPjf6qf6b0VwEAwP3quRdefPpULeLZPJ+P2HinXW/X46lh+6kL8Xo0Yy2OxWLciuhfKHQfKr3HM2drq8fyPO/Ez0tR71a06xEbnXa9f6VwKuvVV+N4LMZSUV9cbaSUsjOf11aP5z0RcaXTGz82Ku36bBwuxv/hcKzFicjj/2P1EWdrqyfy4gD1jUF9J2J7eN+iO//lWIzvXomL0YzzC+cipcFlTW318vE8P51qI/XtejXO7zwLe94BAQAAAAAAAAAAAAAAAAAAAACAf2Q537G0s/9NGu7fs7w8ob23P06/vtgfaLu/P1Cqpkjp97cer7+bxcj+QLv352nXZ+LQvV06AAAAAAAAAAAAAAAAAAAA/Gu0tuai0Wyubba2Lq2Xg85ma+tQRHQzb3zz6ZcLMd7nNsFMMUapKS9Sl9YbKRt0TtlInyLIuoMPMp9c3ZlxuU91ZxUTp1Hdu6nZPPLwTx8MMw9lgyP/NeyTxeQFZrumUQ42/tef0p08UZdOFsGJ23S+llLa6ziXXxqvikrEzJ1/4vYPUjf4+vprD5xsHX2il/ki9T362OK5a+9/9Ot6o9kduav58dxm61ZabxQfTz7Z9g6y0vlTiX5QKZ8JM/uVb49mGtn3vz3/4HvfHmz0VM68OaFP1l/OZ5utrUrxldJrmusH3dyuqoXm2Sxi13FmJ5z8UwiOfrjSuHr5x18OWlX6JmGjDgAAAAAAAAAAAAAAAAAAuCtK7xUvFG/2nd2v6slnpj8zAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALh7hv//vxRsj2UOEvzZifGm6tpmK2LuXi8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/uL8DAAD//2Kpa7U=") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 1.692871572s ago: executing program 2 (id=2743): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet(0x2, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, 0x0, 0x0) shutdown(r0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000140)='./file2\x00', 0x8, &(0x7f00000003c0)=ANY=[], 0x1, 0x1cd, &(0x7f0000001940)="$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") open(&(0x7f0000000200)='./file2\x00', 0x100, 0x123) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, 0x0) setregid(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x147, &(0x7f0000000380)=ANY=[], 0x0) 1.652979993s ago: executing program 1 (id=2744): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x2251b000) r0 = syz_open_dev$video4linux(0x0, 0x3, 0x88000) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x94) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r1}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) remap_file_pages(&(0x7f0000983000/0x2000)=nil, 0x2000, 0x1, 0x5, 0x0) 1.286071379s ago: executing program 0 (id=2745): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8041, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x0, 0x0, 0x9, "00629a7d82090100000000000000f7fffffb00"}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x402c542c, &(0x7f0000000000)) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000e00)=""/4096, 0x1000}], 0x1) read$FUSE(r2, &(0x7f0000001e00)={0x2020}, 0x2020) 1.042287443s ago: executing program 3 (id=2746): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000000)=""/104) 823.249716ms ago: executing program 3 (id=2747): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100002f0c81087f180002ad6b0102030109021b00010000000009040000013c7f9800090503"], 0x0) 738.128778ms ago: executing program 2 (id=2748): unshare(0x400) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000001240)={0x1, 0x64}, 0xc) 633.402199ms ago: executing program 2 (id=2749): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f0000000600)={[{@grpid}]}, 0x1, 0x521, &(0x7f0000000640)="$eJzs3d9rZFcdAPDvvcmkyW5qpiqyFmyLrewW3ZmksRpF2gqiTwW1vq8xmYSQSSZkJnUTiqb4BwgiKvgH+CL44KMg/RNEWNB3UVFEd/VR98qdudH8mEnGZJJZJ58PnMw598f5nnPJ3Lk/DvcGcG29EBFvRMRYRLwcETPF9LRIsd9J+XKPHr6zlKcksuytvyaRFNMO6srL4xFxs1htMiK++qWIbyQn4zZ399YX6/XadlGutja2qs3dvbtrG4urtdXa5vz83M8j4tWF2axwoX6WI+K1L/zxB9/9yRdf++Unvvm7e3++8628WZ/7UKfdEbF0oQA9dOoutbfFgXwbbV9GsCHJ+1MaG3YrAADoR36M//6I+Gj7+H8mxtpHcwAAAMAoyV6fjn8mERkAAAAwstKImI4krRRjAaYjTSuVzhjeD8aNtN5otj6+0tjZXM7nRZSjlK6s1WuzxVjhcpSSvDxXjLE9KL9yrDwfEc9ExPdnptrlylKjvjzsix8AAABwTdx8/uj5/z9m0nYeAAAAGDHlngUAAABgVDjlBwAAgNHn/B8AAABG2pfffDNP2cF7vJff3t1Zb7x9d7nWXK9s7CxVlhrbW5XVRmO1/cy+jbPqqzcaW5+MzZ371Vat2ao2d/fubTR2Nlv31o68AhsAAAC4Qs88/95vk4jY/+xUO0XxHECAI/4w7AYAgzQ27AYAQzM+7AYAQ1M6cwl7CBh1yRnzTw7e6VwrjF9dTnsAAIDBu/3hk/f/J4p5Z18bAP6fGesDANfP0bt7U0NrB3D1SucdAXhr0C0BhuV9nY+nes3v+fCOPu7/d64xZNm5GgYAAAzMdDslaaU4Tp+ONK1UIp6Ox1k5SsnKWr02W5wf/Gam9FRenmuvmZw5ZhgAAAAAAAAAAAAAAAAAAAAAAAAA6MiyJDIAAABgpEWkf0raT/OPuD3z0vTRqwPH3vr147d+eH+x1dqei5hI/jaTT5qIiNaPiumvZF4JAAAAAMM1lf/pnKcXn3PDbhIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAo+bRw3eWDtJVxv3L5yOi3C3+eEy2PyejFBE3/p7E+KH1kogYG0D8/Xcj4la3+Ek8zrKsXLSiW/ypS45fbm+a7vHTiLg5gPhwnb2X73/e6Pb9S+OF9mf37994kS6q9/4v/c/+b6zH/ufpY+Venn3ws2rP+O9GPDveff9zED/pxD8SIi+82Gcfv/61vb2uMw5V2S3+4VjV1sZWtbm7d3dtY3G1tlrbnJ+f+9TCpxdeXZitrqzVa8XfrmG+95FfPD6t/zd6xC8f7f+J7f9SX73P4l8P7j/8QKdQ6hb/zovdf39v9YifFr99Hyvy+fzbB/n9Tv6w53766+dO6/9yj/5PntH/O331Pz7z8le+8/uuc05sDQDgKjR399YX6/Xa9imZyT6W+Z8yERet5/WBtudJyMTZy0w+IU29jEz27c7/48XqueDqJzLZRVYfjwE0Y+LE93QszlthErGf19XnPyQAADBi/nvQf9odJAAAAAAAAAAAAAAAAAAAAOAynfOxZJMR0ffCx2PuD6erAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACn+ncAAAD//+8b0g8=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0xa000) 623.73019ms ago: executing program 1 (id=2750): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) 482.014042ms ago: executing program 1 (id=2751): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = userfaultfd(0x80801) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x5}) 420.472643ms ago: executing program 1 (id=2752): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x3, 0x88000) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040564a, 0x0) 351.112084ms ago: executing program 1 (id=2753): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000007c0)={&(0x7f0000002940)=@hci={0x1f, 0x4, 0x2}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000800)="6203a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732faf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48b462428087", 0xd7}, {&(0x7f00000014c0)="294f28dfe56d898ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0105869a804dd2a44cb2e32e2bf367e9d01a5e7380cc4fc8e7c9044cc4750b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a36a8b449955e83e91b379c179017f8f4657d1b22eca6bca33036d33e1a684059c53cea91c8f637ac780ab2bcf85f774b0d4e5876fe9aee4724b7cb59731c97e70ebd706003994eb07de2f3c6a9448c3", 0xb2}, {&(0x7f0000000100)="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", 0x2c7}, {&(0x7f0000000480)="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", 0x15b}], 0x4}, 0x0) 122.197898ms ago: executing program 0 (id=2754): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x808, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4000006}, 0x94) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x700, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x44}}, 0x8000) 122.008588ms ago: executing program 3 (id=2755): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000b40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[], 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x20000040) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}]}}) 0s ago: executing program 1 (id=2756): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000000a0605000000000000000000010000050900020073797a30000000000500010007000000080009400000000114000880100007800a001100"], 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x44000) kernel console output (not intermixed with test programs): use=failed(directio) comm="syz.2.2023" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 1362.125345][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.131708][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.166539][T14224] loop0: detected capacity change from 0 to 64 [ 1362.487850][T14229] loop2: detected capacity change from 0 to 128 [ 1362.570152][T14229] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1362.612921][T14229] ext4 filesystem being mounted at /528/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1362.720323][ T5785] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1362.798707][ T7699] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1362.804725][ T28] audit: type=1800 audit(1753687828.351:220): pid=14233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2039" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 1363.156313][ T7699] usb 2-1: Using ep0 maxpacket: 32 [ 1363.181274][T14238] netlink: 'syz.2.2033': attribute type 10 has an invalid length. [ 1363.183568][ T7699] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1363.199996][ T7699] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1363.208365][T14238] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2033'. [ 1363.277147][ T7699] usb 2-1: config 0 descriptor?? [ 1363.405138][ T7699] as10x_usb: device has been detected [ 1363.440355][ T7699] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1363.513466][ T7699] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1363.582557][ T7699] as10x_usb: error during firmware upload part1 [ 1363.613489][ T7699] Registered device nBox DVB-T Dongle [ 1363.619860][ T7699] usb 2-1: USB disconnect, device number 10 [ 1363.671729][ T7699] Unregistered device nBox DVB-T Dongle [ 1363.676461][ T7699] as10x_usb: device has been disconnected [ 1365.971018][T14256] loop1: detected capacity change from 0 to 128 [ 1366.069816][T14256] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1367.313313][T14252] ALSA: mixer_oss: invalid OSS volume '' [ 1367.476117][T14256] ext4 filesystem being mounted at /483/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1367.816586][ T5789] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1370.302558][T14275] ALSA: mixer_oss: invalid OSS volume '' [ 1370.702334][T14285] loop1: detected capacity change from 0 to 64 [ 1371.740029][T14290] loop3: detected capacity change from 0 to 64 [ 1374.039573][T14298] loop2: detected capacity change from 0 to 64 [ 1374.501901][ T28] audit: type=1800 audit(1753687840.041:221): pid=14302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2049" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 1374.986365][T14305] loop1: detected capacity change from 0 to 64 [ 1375.308530][T14308] loop0: detected capacity change from 0 to 128 [ 1375.994133][ T28] audit: type=1800 audit(1753687841.341:222): pid=14313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2052" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 1376.520640][ T12] kworker/u4:1: attempt to access beyond end of device [ 1376.520640][ T12] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1376.643109][T14321] ALSA: mixer_oss: invalid OSS volume '' [ 1378.669081][T14324] netlink: 'syz.2.2058': attribute type 10 has an invalid length. [ 1378.677064][T14324] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2058'. [ 1379.110518][T14331] loop2: detected capacity change from 0 to 16 [ 1379.146086][T14331] erofs: (device loop2): mounted with root inode @ nid 36. [ 1380.394022][T14336] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1380.438832][T14336] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[1851] [ 1380.483645][T14336] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1380.510237][T14338] loop0: detected capacity change from 0 to 64 [ 1380.536712][T14336] erofs: (device loop2): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1380.548624][T14336] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[1851] [ 1380.561091][T14336] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1382.381823][ T28] audit: type=1800 audit(1753687847.811:223): pid=14343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2069" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 1382.865023][T14348] loop0: detected capacity change from 0 to 64 [ 1383.077210][T14346] loop1: detected capacity change from 0 to 2048 [ 1383.202100][ T28] audit: type=1800 audit(1753687848.741:224): pid=14350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2071" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 1383.835667][T14346] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1384.184204][T14354] loop0: detected capacity change from 0 to 64 [ 1384.587386][T14356] loop1: detected capacity change from 0 to 64 [ 1385.273079][T14362] loop3: detected capacity change from 0 to 128 [ 1386.349179][ T1076] kworker/u4:5: attempt to access beyond end of device [ 1386.349179][ T1076] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1386.443508][T14370] loop2: detected capacity change from 0 to 64 [ 1386.909208][T14376] ALSA: mixer_oss: invalid OSS volume '' [ 1387.672804][ T28] audit: type=1800 audit(1753687852.891:225): pid=14378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2070" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 1387.851812][T14381] loop1: detected capacity change from 0 to 64 [ 1388.844723][ T28] audit: type=1800 audit(1753687853.811:226): pid=14385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2073" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 1389.337218][T14377] loop3: detected capacity change from 0 to 32768 [ 1389.350146][T14377] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.2078 (14377) [ 1389.392818][T14377] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1389.410305][T14377] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 1389.424258][T14377] BTRFS info (device loop3): allowing degraded mounts [ 1389.433030][T14377] BTRFS info (device loop3): using free space tree [ 1389.586009][T14377] BTRFS info (device loop3): enabling ssd optimizations [ 1389.611809][T14377] BTRFS info (device loop3): auto enabling async discard [ 1390.053677][T14406] loop1: detected capacity change from 0 to 64 [ 1390.561863][T14411] loop0: detected capacity change from 0 to 128 [ 1391.806358][ T5792] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1391.941464][ T28] audit: type=1800 audit(1753687857.491:227): pid=14417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2083" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 1392.608236][ T48] kworker/u4:3: attempt to access beyond end of device [ 1392.608236][ T48] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1394.207281][T14433] loop2: detected capacity change from 0 to 128 [ 1394.985998][T14437] loop1: detected capacity change from 0 to 64 [ 1395.018659][T14439] loop3: detected capacity change from 0 to 64 [ 1395.503078][ T28] audit: type=1800 audit(1753687861.001:228): pid=14442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2076" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 1396.017536][T14446] loop2: detected capacity change from 0 to 64 [ 1397.245587][ T28] audit: type=1800 audit(1753687862.111:229): pid=14452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2084" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 1397.437473][T14455] loop1: detected capacity change from 0 to 64 [ 1397.778916][T14463] loop0: detected capacity change from 0 to 64 [ 1398.013222][ T28] audit: type=1800 audit(1753687863.551:230): pid=14464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2094" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 1398.644801][ T28] audit: type=1800 audit(1753687864.191:231): pid=14469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2088" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 1398.980435][T14458] loop2: detected capacity change from 0 to 32768 [ 1399.004979][T14458] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.2086 (14458) [ 1399.874403][T14458] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1399.917696][T14458] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 1399.947980][T14458] BTRFS info (device loop2): allowing degraded mounts [ 1399.955142][T14458] BTRFS info (device loop2): using free space tree [ 1400.120059][T14490] loop3: detected capacity change from 0 to 64 [ 1400.144860][T14458] BTRFS info (device loop2): enabling ssd optimizations [ 1400.151928][T14458] BTRFS info (device loop2): auto enabling async discard [ 1400.784441][ T28] audit: type=1800 audit(1753687866.331:232): pid=14497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2091" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 1401.176590][T14502] loop1: detected capacity change from 0 to 64 [ 1401.524063][ T5785] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1401.733879][T14507] loop3: detected capacity change from 0 to 8 [ 1401.814878][ T28] audit: type=1800 audit(1753687867.361:233): pid=14508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2092" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 1402.218594][T14507] SQUASHFS error: Failed to read block 0xdfa: -5 [ 1402.265692][T14507] SQUASHFS error: Unable to read metadata cache entry [dfa] [ 1402.323657][T14507] SQUASHFS error: Failed to read block 0x4e8: -5 [ 1402.360522][T14507] SQUASHFS error: Failed to read block 0xed04f1: -5 [ 1402.427349][T14507] SQUASHFS error: Failed to read block 0x4de: -5 [ 1402.478670][T14511] loop2: detected capacity change from 0 to 64 [ 1402.485639][T14507] SQUASHFS error: Failed to read block 0x4de: -5 [ 1402.521376][T14513] loop0: detected capacity change from 0 to 64 [ 1402.533667][T14507] SQUASHFS error: Failed to read block 0x4de: -5 [ 1402.553485][T14507] SQUASHFS error: Failed to read block 0x4de: -5 [ 1402.584225][T14507] SQUASHFS error: Failed to read block 0x4de: -5 [ 1402.622285][T14507] SQUASHFS error: Failed to read block 0x4de: -5 [ 1402.835177][T14507] SQUASHFS error: Failed to read block 0x4e8: -5 [ 1402.846543][ T28] audit: type=1800 audit(1753687868.391:234): pid=14507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2093" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 1404.151653][T14526] loop3: detected capacity change from 0 to 64 [ 1404.161032][T14527] loop2: detected capacity change from 0 to 64 [ 1404.204769][ T28] audit: type=1800 audit(1753687869.731:235): pid=14528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2104" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 1404.757870][ T28] audit: type=1800 audit(1753687870.301:236): pid=14530 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2099" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 1405.331556][ T28] audit: type=1800 audit(1753687870.511:237): pid=14533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2097" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 1408.733619][T14561] loop1: detected capacity change from 0 to 64 [ 1409.588114][T14566] loop2: detected capacity change from 0 to 64 [ 1410.534811][ T28] audit: type=1800 audit(1753687875.611:238): pid=14570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2107" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 1410.692884][T14574] loop1: detected capacity change from 0 to 64 [ 1411.454745][ T28] audit: type=1800 audit(1753687876.741:239): pid=14579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2109" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 1411.601502][T14577] netlink: 'syz.2.2110': attribute type 10 has an invalid length. [ 1411.715342][T14577] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2110'. [ 1412.349563][T14583] loop1: detected capacity change from 0 to 128 [ 1412.393419][T14568] loop0: detected capacity change from 0 to 32768 [ 1415.865030][ T5791] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by udevd (5791) [ 1417.932959][T14591] ALSA: mixer_oss: invalid OSS volume 'DIGITAL' [ 1418.189201][T14604] loop3: detected capacity change from 0 to 16 [ 1418.489698][T14604] erofs: (device loop3): mounted with root inode @ nid 36. [ 1419.715523][T14611] loop2: detected capacity change from 0 to 32768 [ 1419.942009][T14611] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1420.071514][T14611] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 1420.108025][T14611] XFS (loop2): Starting recovery (logdev: internal) [ 1420.137123][T14611] XFS (loop2): Ending recovery (logdev: internal) [ 1420.407440][ T5785] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1420.466679][T14622] loop1: detected capacity change from 0 to 64 [ 1420.495095][T14620] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1420.513193][T14620] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[1851] [ 1420.697974][T14620] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1420.740363][T14624] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1420.809796][T14624] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[1851] [ 1420.862961][T14624] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1422.604784][T14634] ALSA: mixer_oss: invalid OSS volume 'DIGITAL' [ 1423.520179][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.526638][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1425.285218][T14647] netlink: 'syz.1.2123': attribute type 10 has an invalid length. [ 1425.293119][T14647] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2123'. [ 1426.255350][T14645] loop2: detected capacity change from 0 to 32768 [ 1426.499031][T14645] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1426.530612][T14645] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 1427.114779][T12420] Bluetooth: hci3: command 0x0406 tx timeout [ 1427.729456][T14645] BTRFS info (device loop2): allowing degraded mounts [ 1427.737344][T14645] BTRFS info (device loop2): using free space tree [ 1428.148336][T14645] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 1428.172300][T14645] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 1428.406697][T14645] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 1428.498169][T14645] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 1428.538980][T14645] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 1428.895631][T14645] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 1428.981489][T14645] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 1429.010911][T14645] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 1429.041058][T14645] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1429.239386][T14645] BTRFS error (device loop2): open_ctree failed: -12 [ 1429.418835][ T5791] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by udevd (5791) [ 1429.576547][T14685] loop3: detected capacity change from 0 to 128 [ 1431.501604][ T42] kworker/u4:2: attempt to access beyond end of device [ 1431.501604][ T42] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1431.905320][T14693] loop3: detected capacity change from 0 to 64 [ 1432.478764][ T28] audit: type=1800 audit(1753687898.021:240): pid=14698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2134" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 1435.927265][T14710] loop0: detected capacity change from 0 to 128 [ 1435.975207][T14712] loop1: detected capacity change from 0 to 64 [ 1437.235135][ T28] audit: type=1800 audit(1753687902.761:241): pid=14716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2138" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 1437.622131][ T11] kworker/u4:0: attempt to access beyond end of device [ 1437.622131][ T11] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1439.307757][T14735] loop0: detected capacity change from 0 to 128 [ 1440.191689][ T42] kworker/u4:2: attempt to access beyond end of device [ 1440.191689][ T42] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1440.506581][T14743] loop0: detected capacity change from 0 to 64 [ 1441.559418][ T28] audit: type=1800 audit(1753687906.441:242): pid=14747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2144" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 1446.409232][T14773] loop0: detected capacity change from 0 to 64 [ 1447.194818][T14775] ALSA: mixer_oss: invalid OSS volume 'DIGITAL' [ 1448.431586][T14779] loop2: detected capacity change from 0 to 128 [ 1451.839588][ T12] kworker/u4:1: attempt to access beyond end of device [ 1451.839588][ T12] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1452.016514][T14786] loop3: detected capacity change from 0 to 128 [ 1452.966072][T14791] loop0: detected capacity change from 0 to 64 [ 1453.030961][T14793] loop2: detected capacity change from 0 to 128 [ 1453.329718][ T28] audit: type=1800 audit(1753687918.871:243): pid=14795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2155" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 1453.733611][ T1096] kworker/u4:6: attempt to access beyond end of device [ 1453.733611][ T1096] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1453.795293][T14793] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1453.914835][T14793] ext4 filesystem being mounted at /562/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1454.043060][ T5785] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1454.065890][T14799] loop0: detected capacity change from 0 to 64 [ 1454.138003][T14801] loop3: detected capacity change from 0 to 64 [ 1455.904821][ T28] audit: type=1800 audit(1753687921.131:244): pid=14809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2156" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 1458.368798][T14826] ALSA: mixer_oss: invalid OSS volume 'DIGITAL' [ 1459.105825][ T5836] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1459.316113][T14829] loop2: detected capacity change from 0 to 128 [ 1459.378172][ T5836] usb 4-1: Using ep0 maxpacket: 32 [ 1459.431229][ T5836] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1459.533105][ T5836] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1459.689495][ T5836] usb 4-1: config 0 descriptor?? [ 1460.024472][ T5836] as10x_usb: device has been detected [ 1460.121026][ T5836] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1460.281788][ T1096] kworker/u4:6: attempt to access beyond end of device [ 1460.281788][ T1096] loop2: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1460.310353][ T5836] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1460.366791][ T5836] as10x_usb: error during firmware upload part1 [ 1460.389718][ T5836] Registered device nBox DVB-T Dongle [ 1460.395329][ T5836] usb 4-1: USB disconnect, device number 12 [ 1460.515850][ T5836] Unregistered device nBox DVB-T Dongle [ 1460.517261][T14834] loop2: detected capacity change from 0 to 64 [ 1460.535207][ T5836] as10x_usb: device has been disconnected [ 1460.549296][T14825] loop1: detected capacity change from 0 to 32768 [ 1460.597832][T14825] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1460.621818][T14825] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 1460.673914][T14825] BTRFS info (device loop1): allowing degraded mounts [ 1460.684020][T14825] BTRFS info (device loop1): using free space tree [ 1461.060208][ T28] audit: type=1800 audit(1753687926.561:245): pid=14850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2167" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 1461.617361][T14825] BTRFS error (device loop1): open_ctree failed: -4 [ 1461.945984][T14856] loop2: detected capacity change from 0 to 64 [ 1462.417274][T14859] loop1: detected capacity change from 0 to 128 [ 1462.452930][T14859] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1462.560985][T14859] ext4 filesystem being mounted at /519/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1462.746922][ T5789] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1462.951928][T14868] loop1: detected capacity change from 0 to 128 [ 1464.015945][ T42] kworker/u4:2: attempt to access beyond end of device [ 1464.015945][ T42] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1464.347501][T14874] loop1: detected capacity change from 0 to 64 [ 1464.417247][T14876] loop0: detected capacity change from 0 to 64 [ 1464.979190][ T28] audit: type=1800 audit(1753687930.451:246): pid=14879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2173" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 1466.727192][ T28] audit: type=1800 audit(1753687932.281:247): pid=14889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2172" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 1468.243423][T14902] loop3: detected capacity change from 0 to 128 [ 1469.195448][ T12] kworker/u4:1: attempt to access beyond end of device [ 1469.195448][ T12] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1469.247400][T14906] loop2: detected capacity change from 0 to 64 [ 1470.761239][T14914] netlink: 272 bytes leftover after parsing attributes in process `syz.1.2181'. [ 1471.677748][T14914] loop1: detected capacity change from 0 to 32768 [ 1471.766030][T14914] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1471.912767][T14914] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 1471.955833][T14914] XFS (loop1): Starting recovery (logdev: internal) [ 1471.989846][T14914] XFS (loop1): Ending recovery (logdev: internal) [ 1472.495927][ T5789] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1473.822127][T14938] netlink: 272 bytes leftover after parsing attributes in process `syz.0.2185'. [ 1474.279933][T14938] loop0: detected capacity change from 0 to 32768 [ 1475.014245][T14938] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1475.125436][T14938] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 1475.159651][T14938] XFS (loop0): Starting recovery (logdev: internal) [ 1475.182002][T14938] XFS (loop0): Ending recovery (logdev: internal) [ 1475.544357][ T5790] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1475.850033][T14953] loop3: detected capacity change from 0 to 128 [ 1478.786970][T14967] loop1: detected capacity change from 0 to 128 [ 1479.059794][T14971] loop0: detected capacity change from 0 to 128 [ 1479.126734][ T48] kworker/u4:3: attempt to access beyond end of device [ 1479.126734][ T48] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1482.707054][ T11] kworker/u4:0: attempt to access beyond end of device [ 1482.707054][ T11] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1483.077145][T14982] netlink: 272 bytes leftover after parsing attributes in process `syz.2.2193'. [ 1483.972640][T14982] loop2: detected capacity change from 0 to 32768 [ 1484.015709][T14986] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1484.081646][T14982] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1484.960838][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.967438][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.163227][T14996] netlink: 'syz.3.2192': attribute type 10 has an invalid length. [ 1485.171333][T14996] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2192'. [ 1485.538068][T14982] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 1485.793404][T14982] XFS (loop2): Starting recovery (logdev: internal) [ 1487.476434][T14982] XFS (loop2): Ending recovery (logdev: internal) [ 1487.607340][ T5785] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1488.674495][T15011] loop3: detected capacity change from 0 to 128 [ 1490.857050][ T1076] kworker/u4:5: attempt to access beyond end of device [ 1490.857050][ T1076] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1490.904229][T15014] loop2: detected capacity change from 0 to 128 [ 1491.011291][T15014] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1491.041214][T15014] ext4 filesystem being mounted at /573/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1491.206862][ T5785] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1493.153585][T15024] netlink: 'syz.2.2201': attribute type 10 has an invalid length. [ 1493.161652][T15024] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2201'. [ 1497.272754][T15051] loop2: detected capacity change from 0 to 64 [ 1497.355053][T15052] loop3: detected capacity change from 0 to 64 [ 1498.208063][ T28] audit: type=1800 audit(1753687963.201:248): pid=15054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2209" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 1499.013263][ T28] audit: type=1800 audit(1753687964.121:249): pid=15058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2208" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 1500.615466][T15067] loop3: detected capacity change from 0 to 128 [ 1501.136638][T15074] loop2: detected capacity change from 0 to 512 [ 1501.147074][T15074] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1501.258208][ T1096] kworker/u4:6: attempt to access beyond end of device [ 1501.258208][ T1096] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1501.301968][T15074] EXT4-fs (loop2): 1 truncate cleaned up [ 1501.346088][T15074] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1501.591323][T15083] loop3: detected capacity change from 0 to 512 [ 1501.690897][T15083] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1502.017730][T15086] xt_HMARK: proto mask must be zero with L3 mode [ 1502.297582][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1502.572160][T15083] EXT4-fs (loop3): 1 truncate cleaned up [ 1502.589659][T15083] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1504.020471][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1504.163228][T15103] loop3: detected capacity change from 0 to 64 [ 1505.747971][ T28] audit: type=1800 audit(1753687970.071:250): pid=15107 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2219" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 1507.297748][T15118] loop2: detected capacity change from 0 to 64 [ 1508.386920][T15120] loop1: detected capacity change from 0 to 128 [ 1508.404863][T15122] loop3: detected capacity change from 0 to 64 [ 1508.614995][T15125] netlink: 'syz.0.2225': attribute type 10 has an invalid length. [ 1508.622953][T15125] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2225'. [ 1509.219716][ T28] audit: type=1800 audit(1753687974.751:251): pid=15129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2220" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 1510.608092][ T42] kworker/u4:2: attempt to access beyond end of device [ 1510.608092][ T42] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1510.632114][T15133] loop0: detected capacity change from 0 to 2048 [ 1510.721679][T15133] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1510.868442][T15140] loop1: detected capacity change from 0 to 64 [ 1510.877631][T15141] loop3: detected capacity change from 0 to 64 [ 1511.699317][ T28] audit: type=1800 audit(1753687977.251:252): pid=15146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2226" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 1511.868649][ T23] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1512.233194][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 1512.268969][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1512.281763][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1512.291939][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1512.301710][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.735901][ T23] usb 1-1: config 0 descriptor?? [ 1513.931234][ T23] usb 1-1: can't set config #0, error -71 [ 1513.960805][ T23] usb 1-1: USB disconnect, device number 12 [ 1514.244982][T15161] loop3: detected capacity change from 0 to 64 [ 1514.920779][ T28] audit: type=1800 audit(1753687980.471:253): pid=15165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2233" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 1515.281437][T15170] loop3: detected capacity change from 0 to 128 [ 1515.407696][T15171] loop1: detected capacity change from 0 to 64 [ 1516.621335][ T1096] kworker/u4:6: attempt to access beyond end of device [ 1516.621335][ T1096] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1517.110201][ T28] audit: type=1800 audit(1753687982.261:254): pid=15175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2234" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 1517.498619][T15181] loop3: detected capacity change from 0 to 64 [ 1517.751875][T15167] loop0: detected capacity change from 0 to 32768 [ 1517.766305][T15167] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by syz.0.2242 (15167) [ 1517.799575][T15167] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1517.810204][T15167] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 1517.820762][T15167] BTRFS info (device loop0): allowing degraded mounts [ 1517.828362][T15167] BTRFS info (device loop0): using free space tree [ 1517.917700][ T28] audit: type=1800 audit(1753687983.441:255): pid=15183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2236" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 1518.242415][T15167] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 1518.555984][T15167] BTRFS error (device loop0): open_ctree failed: -12 [ 1518.561577][ T5791] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 scanned by udevd (5791) [ 1518.663200][T15200] loop1: detected capacity change from 0 to 64 [ 1519.014885][T15201] netlink: 'syz.3.2238': attribute type 10 has an invalid length. [ 1519.025084][T15201] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2238'. [ 1519.632316][T15209] loop2: detected capacity change from 0 to 512 [ 1519.704710][T15209] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1519.890478][T15209] EXT4-fs (loop2): 1 truncate cleaned up [ 1519.953113][T15209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1520.077037][T15214] loop1: detected capacity change from 0 to 64 [ 1521.420036][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1523.411653][T15230] loop3: detected capacity change from 0 to 64 [ 1523.768566][T15235] loop1: detected capacity change from 0 to 128 [ 1524.824660][ T28] audit: type=1800 audit(1753687989.881:256): pid=15238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2245" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 1526.083961][T10135] kworker/u4:4: attempt to access beyond end of device [ 1526.083961][T10135] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1526.148566][T15246] loop3: detected capacity change from 0 to 16 [ 1526.187148][T15246] erofs: (device loop3): mounted with root inode @ nid 36. [ 1526.564089][T15247] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1527.364396][T15247] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[1851] [ 1527.376441][T15247] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1527.622358][T15252] erofs: (device loop3): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1527.638149][T15252] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[1851] [ 1527.649197][T15252] erofs: (device loop3): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1528.535269][T15262] loop2: detected capacity change from 0 to 64 [ 1529.099522][T15268] loop0: detected capacity change from 0 to 512 [ 1529.131033][T15268] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1529.299721][T15268] EXT4-fs (loop0): 1 truncate cleaned up [ 1529.309704][T15268] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1529.427488][T15274] loop1: detected capacity change from 0 to 64 [ 1530.223553][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1531.396219][T15289] loop0: detected capacity change from 0 to 64 [ 1533.577860][T15298] loop1: detected capacity change from 0 to 512 [ 1533.622755][T15298] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1533.709842][T15301] loop0: detected capacity change from 0 to 128 [ 1533.731234][T15298] EXT4-fs (loop1): 1 truncate cleaned up [ 1533.746174][T15298] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1534.345927][T15307] xt_HMARK: proto mask must be zero with L3 mode [ 1534.661257][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1534.855433][ T48] kworker/u4:3: attempt to access beyond end of device [ 1534.855433][ T48] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1535.967780][T15320] loop1: detected capacity change from 0 to 64 [ 1536.982917][T15331] loop2: detected capacity change from 0 to 128 [ 1537.226428][T15333] loop1: detected capacity change from 0 to 64 [ 1537.245917][T15331] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1537.615006][T15331] ext4 filesystem being mounted at /591/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1538.449812][ T5785] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1540.870116][T15352] loop3: detected capacity change from 0 to 128 [ 1542.617833][T15361] loop0: detected capacity change from 0 to 16 [ 1542.712026][T15361] erofs: (device loop0): mounted with root inode @ nid 36. [ 1542.786859][T11578] kworker/u4:7: attempt to access beyond end of device [ 1542.786859][T11578] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1542.832124][T15362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2278'. [ 1542.984698][T15363] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1543.045515][T15363] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[1851] [ 1543.065704][T15363] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1543.080102][T15364] erofs: (device loop0): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1543.141538][T15364] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[1851] [ 1543.308108][T15364] erofs: (device loop0): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1543.756560][T15369] loop1: detected capacity change from 0 to 64 [ 1546.726793][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.744850][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1548.212859][T15391] loop0: detected capacity change from 0 to 64 [ 1549.680527][T15404] loop0: detected capacity change from 0 to 2048 [ 1549.824062][T15409] loop1: detected capacity change from 0 to 64 [ 1549.891993][T15404] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1553.637569][T15443] loop1: detected capacity change from 0 to 128 [ 1556.265865][ T48] kworker/u4:3: attempt to access beyond end of device [ 1556.265865][ T48] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1557.419332][T15458] loop1: detected capacity change from 0 to 64 [ 1557.429570][T15460] loop0: detected capacity change from 0 to 128 [ 1557.490272][T15462] loop3: detected capacity change from 0 to 64 [ 1559.903370][ T1096] kworker/u4:6: attempt to access beyond end of device [ 1559.903370][ T1096] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1560.832639][ T28] audit: type=1800 audit(1753688026.081:257): pid=15471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2303" name="file1" dev="loop3" ino=18 res=0 errno=0 [ 1564.276580][T15499] loop2: detected capacity change from 0 to 64 [ 1565.765495][T15510] loop2: detected capacity change from 0 to 64 [ 1566.855215][ T28] audit: type=1800 audit(1753688032.081:258): pid=15520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2315" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 1570.207297][T15541] loop1: detected capacity change from 0 to 64 [ 1570.236525][T15543] loop3: detected capacity change from 0 to 512 [ 1570.287109][T15543] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1570.432045][T15543] EXT4-fs (loop3): 1 truncate cleaned up [ 1570.466992][T15543] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1570.810612][T15543] xt_HMARK: proto mask must be zero with L3 mode [ 1571.354130][T15554] loop0: detected capacity change from 0 to 512 [ 1571.366967][ T5792] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1571.384725][T15554] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 1571.456626][T15554] EXT4-fs (loop0): 1 truncate cleaned up [ 1571.463660][T15554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1571.923459][T15563] xt_HMARK: proto mask must be zero with L3 mode [ 1572.013938][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1572.040727][ T50] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1572.050587][ T50] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1572.060361][ T50] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1572.754892][ T50] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1572.764428][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1572.846201][ T5790] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1572.994505][ T48] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.198264][ T48] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1573.855556][ T48] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.013639][ T48] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1574.875076][ T50] Bluetooth: hci0: command tx timeout [ 1575.317140][T15568] loop3: detected capacity change from 0 to 32768 [ 1575.436694][T15568] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1575.510238][T15568] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 1575.580679][T15568] BTRFS info (device loop3): allowing degraded mounts [ 1575.653769][T15568] BTRFS info (device loop3): using free space tree [ 1575.704207][T15558] chnl_net:caif_netlink_parms(): no params data found [ 1575.883980][T15568] BTRFS info (device loop3): enabling ssd optimizations [ 1575.915967][T15568] BTRFS info (device loop3): auto enabling async discard [ 1576.064940][T15610] loop0: detected capacity change from 0 to 64 [ 1576.461269][ T5792] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1576.781873][ T28] audit: type=1800 audit(1753688042.241:259): pid=15615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2336" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 1576.971086][ T50] Bluetooth: hci0: command tx timeout [ 1577.477643][ T5791] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 9 /dev/loop3 scanned by udevd (5791) [ 1579.044735][ T50] Bluetooth: hci0: command tx timeout [ 1579.737678][T15558] bridge0: port 1(bridge_slave_0) entered blocking state [ 1579.775090][T15558] bridge0: port 1(bridge_slave_0) entered disabled state [ 1579.825706][T15558] bridge_slave_0: entered allmulticast mode [ 1579.837606][T15558] bridge_slave_0: entered promiscuous mode [ 1579.973525][T15558] bridge0: port 2(bridge_slave_1) entered blocking state [ 1579.999210][T15558] bridge0: port 2(bridge_slave_1) entered disabled state [ 1580.020888][T15558] bridge_slave_1: entered allmulticast mode [ 1580.296873][T15558] bridge_slave_1: entered promiscuous mode [ 1581.434761][ T50] Bluetooth: hci0: command tx timeout [ 1581.620096][T15558] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1581.654422][T15558] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1582.337862][T15662] netlink: 272 bytes leftover after parsing attributes in process `syz.0.2344'. [ 1583.250534][T15662] loop0: detected capacity change from 0 to 32768 [ 1583.310437][T15662] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1583.362244][T15558] team0: Port device team_slave_0 added [ 1583.478141][T15558] team0: Port device team_slave_1 added [ 1583.585567][T15662] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 1583.784160][T15662] XFS (loop0): Starting recovery (logdev: internal) [ 1583.845330][T15662] XFS (loop0): Ending recovery (logdev: internal) [ 1584.030555][T15558] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1584.116911][T15558] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1584.131207][ T5790] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1584.174687][T15558] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1584.455606][T15558] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1584.496394][T15558] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1585.297715][T15558] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1585.607329][T15683] loop3: detected capacity change from 0 to 64 [ 1585.782502][T15686] loop1: detected capacity change from 0 to 128 [ 1586.839536][T15686] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1586.891222][T15686] ext4 filesystem being mounted at /569/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1586.949722][T15697] loop3: detected capacity change from 0 to 128 [ 1586.979987][T15697] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 1587.134353][T15558] hsr_slave_0: entered promiscuous mode [ 1587.156787][ T5789] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1587.176147][T15558] hsr_slave_1: entered promiscuous mode [ 1587.188864][T15558] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1587.189501][T15697] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1587.198708][T15558] Cannot create hsr debugfs directory [ 1587.385069][T15702] loop0: detected capacity change from 0 to 64 [ 1587.811534][ T48] hsr_slave_0: left promiscuous mode [ 1587.835856][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1587.878411][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1587.898472][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1587.907505][ T48] batman_adv: batadv0: Interface deactivated: macsec1 [ 1587.919026][ T48] batman_adv: batadv0: Removing interface: macsec1 [ 1587.928706][ T48] dummy0: left allmulticast mode [ 1587.936562][ T48] bridge0: port 3(dummy0) entered disabled state [ 1588.394493][ T48] bridge_slave_1: left allmulticast mode [ 1588.604895][ T48] bridge_slave_1: left promiscuous mode [ 1588.620759][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 1588.665292][ T48] bridge_slave_0: left allmulticast mode [ 1588.671034][ T48] bridge_slave_0: left promiscuous mode [ 1588.693347][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 1588.785678][T15716] loop1: detected capacity change from 0 to 512 [ 1588.787927][ T48] bridge0: left promiscuous mode [ 1588.801994][T15716] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1588.816960][ T48] veth1_macvtap: left promiscuous mode [ 1588.823131][ T48] veth0_macvtap: left promiscuous mode [ 1588.830447][ T48] veth1_vlan: left promiscuous mode [ 1588.836218][ T48] veth0_vlan: left promiscuous mode [ 1588.862168][ T28] audit: type=1800 audit(1753688054.411:260): pid=15717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2352" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 1589.006602][T15716] EXT4-fs (loop1): 1 truncate cleaned up [ 1589.042657][T15716] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1589.953822][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1593.259939][ T48] team0 (unregistering): Port device team_slave_1 removed [ 1593.319765][ T48] team0 (unregistering): Port device team_slave_0 removed [ 1593.375950][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1593.429129][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1593.989419][ T48] bond0 (unregistering): Released all slaves [ 1595.720701][T15744] loop1: detected capacity change from 0 to 128 [ 1596.508115][T15744] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1596.574353][T15744] ext4 filesystem being mounted at /574/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1597.706977][ T5789] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1601.718408][T15558] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1601.753740][T15558] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1601.801842][T15558] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1601.839871][T15558] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1602.908303][T15558] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1603.329374][T15558] 8021q: adding VLAN 0 to HW filter on device team0 [ 1603.373558][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1603.380844][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1603.395988][T15806] loop0: detected capacity change from 0 to 64 [ 1603.658198][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1603.665444][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1603.777740][T15558] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1605.327101][T15825] loop0: detected capacity change from 0 to 64 [ 1606.321789][ T28] audit: type=1800 audit(1753688071.621:261): pid=15833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2370" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 1606.862002][T15558] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1607.839889][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.962834][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.156332][T15558] veth0_vlan: entered promiscuous mode [ 1608.218294][T15558] veth1_vlan: entered promiscuous mode [ 1608.298841][T15852] loop0: detected capacity change from 0 to 128 [ 1608.450745][T15558] veth0_macvtap: entered promiscuous mode [ 1608.929730][T15852] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1608.956090][T15558] veth1_macvtap: entered promiscuous mode [ 1609.012124][T15852] ext4 filesystem being mounted at /585/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1609.038796][T15558] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1609.080563][T15558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1609.239122][T15558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1609.284847][T15558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1609.296604][T15558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1609.306603][T15558] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1609.390374][T15558] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1609.421560][T15558] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1609.485633][T15558] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.496090][T15558] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.512428][ T5790] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1609.537703][T15558] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.546757][T15558] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1609.861059][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1609.885894][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1609.937187][T10135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1609.971496][T10135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1610.342487][T15883] loop0: detected capacity change from 0 to 128 [ 1610.655180][T15883] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1610.656210][T15890] loop1: detected capacity change from 0 to 16 [ 1610.722088][T15890] erofs: (device loop1): mounted with root inode @ nid 36. [ 1610.814800][T15883] ext4 filesystem being mounted at /586/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1611.058878][T15890] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1611.100489][T15890] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[1851] [ 1611.124353][T15890] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1611.153721][T15894] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1611.196486][T15894] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[1851] [ 1611.226427][T15894] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1611.228293][ T5790] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1611.777514][T15905] loop0: detected capacity change from 0 to 64 [ 1614.204705][ T28] audit: type=1800 audit(1753688079.131:262): pid=15912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2380" name="file1" dev="loop0" ino=18 res=0 errno=0 [ 1616.503045][T12420] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1616.513504][T12420] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1616.523281][T12420] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1616.532826][T12420] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1616.629093][T15933] loop1: detected capacity change from 0 to 64 [ 1616.640326][T12420] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1616.648406][T12420] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1616.932607][ T3456] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1617.530657][ T28] audit: type=1800 audit(1753688082.751:263): pid=15938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2387" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 1618.078255][ T3456] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1618.677572][ T3456] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1618.715383][T12420] Bluetooth: hci3: command tx timeout [ 1619.918325][ T3456] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1620.447662][T15969] loop2: detected capacity change from 0 to 64 [ 1620.553337][T15972] loop1: detected capacity change from 0 to 64 [ 1620.797487][T12420] Bluetooth: hci3: command tx timeout [ 1621.167944][ T28] audit: type=1800 audit(1753688086.701:264): pid=15980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2391" name="file1" dev="loop2" ino=18 res=0 errno=0 [ 1621.314958][ T28] audit: type=1800 audit(1753688086.761:265): pid=15981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2392" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 1621.929734][T15928] chnl_net:caif_netlink_parms(): no params data found [ 1623.836780][T12420] Bluetooth: hci3: command tx timeout [ 1626.324720][T12420] Bluetooth: hci3: command tx timeout [ 1626.942944][T15928] bridge0: port 1(bridge_slave_0) entered blocking state [ 1626.985434][T15928] bridge0: port 1(bridge_slave_0) entered disabled state [ 1626.992787][T15928] bridge_slave_0: entered allmulticast mode [ 1627.086383][T15928] bridge_slave_0: entered promiscuous mode [ 1627.160726][T15928] bridge0: port 2(bridge_slave_1) entered blocking state [ 1627.183357][T15928] bridge0: port 2(bridge_slave_1) entered disabled state [ 1627.193715][T15928] bridge_slave_1: entered allmulticast mode [ 1627.201454][T15928] bridge_slave_1: entered promiscuous mode [ 1627.408550][T15928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1627.527465][T15928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1627.852722][T15928] team0: Port device team_slave_0 added [ 1629.305126][T15928] team0: Port device team_slave_1 added [ 1630.156923][T16045] loop1: detected capacity change from 0 to 128 [ 1630.223335][T15928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1631.114800][T15928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1631.141481][T15928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1631.199424][ T1076] kworker/u4:5: attempt to access beyond end of device [ 1631.199424][ T1076] loop1: rw=1, sector=145, nr_sectors = 896 limit=128 [ 1631.387437][T15928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1631.394415][T15928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1631.482890][T15928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1631.570609][T16060] loop1: detected capacity change from 0 to 16 [ 1631.602740][T16060] erofs: (device loop1): mounted with root inode @ nid 36. [ 1631.672006][T16061] loop2: detected capacity change from 0 to 2048 [ 1631.734316][T16061] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1631.750883][T15928] hsr_slave_0: entered promiscuous mode [ 1631.777622][T15928] hsr_slave_1: entered promiscuous mode [ 1632.179404][T16065] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1632.238416][T16065] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[1851] [ 1632.249679][T16065] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1632.266571][T16068] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1632.277587][T16068] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -3 in[47, 4049] out[1851] [ 1632.288685][T16068] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1632.454135][ T3456] hsr_slave_0: left promiscuous mode [ 1632.462406][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1632.470822][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1632.484014][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1632.492313][ T3456] dummy0: left allmulticast mode [ 1632.504313][ T3456] bridge0: port 3(dummy0) entered disabled state [ 1632.532678][ T787] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 1632.572832][ T3456] bridge_slave_1: left allmulticast mode [ 1632.597520][ T3456] bridge_slave_1: left promiscuous mode [ 1632.611104][ T3456] bridge0: port 2(bridge_slave_1) entered disabled state [ 1632.643328][ T3456] bridge_slave_0: left allmulticast mode [ 1632.650511][ T3456] bridge_slave_0: left promiscuous mode [ 1632.659143][ T3456] bridge0: port 1(bridge_slave_0) entered disabled state [ 1632.711859][ T3456] veth1_macvtap: left promiscuous mode [ 1632.720701][ T3456] veth0_macvtap: left promiscuous mode [ 1632.734313][ T3456] veth1_vlan: left promiscuous mode [ 1632.740007][ T3456] veth0_vlan: left promiscuous mode [ 1632.760132][ T787] usb 1-1: config 0 has no interfaces? [ 1632.776685][ T787] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1632.789716][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.815698][ T787] usb 1-1: config 0 descriptor?? [ 1633.040868][ T787] usb 1-1: USB disconnect, device number 13 [ 1636.843691][ T3456] team0 (unregistering): Port device team_slave_1 removed [ 1636.897977][ T3456] team0 (unregistering): Port device team_slave_0 removed [ 1636.950151][ T3456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1637.002967][ T3456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1637.568975][ T3456] bond0 (unregistering): Released all slaves [ 1638.049247][T16089] loop1: detected capacity change from 0 to 512 [ 1638.089731][T16089] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1638.142185][T16089] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1638.216871][T16086] loop2: detected capacity change from 0 to 4096 [ 1638.236469][T16089] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2413: invalid indirect mapped block 4294967295 (level 1) [ 1638.259456][T16086] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512). [ 1638.314730][T16089] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2413: invalid indirect mapped block 4294967295 (level 1) [ 1638.389108][T16089] EXT4-fs (loop1): 2 truncates cleaned up [ 1638.438363][T16089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1638.742279][ T5789] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1639.075918][ T28] audit: type=1326 audit(1753688104.621:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16108 comm="syz.0.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc1db8e9a9 code=0x7ffc0000 [ 1639.150204][ T28] audit: type=1326 audit(1753688104.661:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16108 comm="syz.0.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc1db8e9a9 code=0x7ffc0000 [ 1639.228407][ T28] audit: type=1326 audit(1753688104.691:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16108 comm="syz.0.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fbc1db8e9a9 code=0x7ffc0000 [ 1639.282268][ T28] audit: type=1326 audit(1753688104.691:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16108 comm="syz.0.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc1db8e9a9 code=0x7ffc0000 [ 1639.314014][T16115] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2420'. [ 1639.372631][T16115] bond0: entered promiscuous mode [ 1639.380149][ T28] audit: type=1326 audit(1753688104.691:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16108 comm="syz.0.2418" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbc1db8e9a9 code=0x7ffc0000 [ 1639.413310][T16115] bond_slave_0: entered promiscuous mode [ 1639.423739][T16115] bond_slave_1: entered promiscuous mode [ 1639.437638][T16115] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1639.457990][T16115] bond0: left promiscuous mode [ 1639.462958][T16115] bond_slave_0: left promiscuous mode [ 1639.469374][T16115] bond_slave_1: left promiscuous mode [ 1639.697648][T15928] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1639.722169][T15928] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1639.752020][T15928] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1639.763922][T12420] Bluetooth: hci1: unexpected event for opcode 0x040d [ 1639.787646][T15928] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1640.071533][T15928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1640.129937][T15928] 8021q: adding VLAN 0 to HW filter on device team0 [ 1640.245496][ T3456] bridge0: port 1(bridge_slave_0) entered blocking state [ 1640.252701][ T3456] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1640.277917][T16146] loop0: detected capacity change from 0 to 256 [ 1640.289065][ T3456] bridge0: port 2(bridge_slave_1) entered blocking state [ 1640.296308][ T3456] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1640.767164][T16156] loop1: detected capacity change from 0 to 4096 [ 1641.150324][T15928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1641.272782][T16172] loop0: detected capacity change from 0 to 4096 [ 1641.314454][T16172] ntfs3: loop0: Different NTFS sector size (1024) and media sector size (512). [ 1641.440403][T16178] loop1: detected capacity change from 0 to 64 [ 1641.481324][T15928] veth0_vlan: entered promiscuous mode [ 1641.548692][T16172] ntfs3: loop0: ino=0, attr_set_size [ 1641.593258][T16172] ntfs3: loop0: ino=0, attr_set_size [ 1641.602543][T15928] veth1_vlan: entered promiscuous mode [ 1641.617335][T16172] ntfs3: loop0: ino=0, attr_set_size [ 1641.647020][T16172] ntfs3: loop0: no free space to extend mft [ 1641.917391][T15928] veth0_macvtap: entered promiscuous mode [ 1642.028287][T15928] veth1_macvtap: entered promiscuous mode [ 1642.110008][T15928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1642.134626][T15928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.164014][T15928] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1642.200184][T15928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.224354][T15928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.253318][T15928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.278513][T15928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.292529][T16192] loop1: detected capacity change from 0 to 4096 [ 1642.301743][T15928] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1642.340467][T15928] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1642.369752][T15928] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1642.437683][T15928] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1642.471208][T15928] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1642.492795][T15928] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1642.513758][T15928] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1642.584048][T16192] overlayfs: upper fs does not support tmpfile. [ 1642.649136][T16192] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1642.977111][ T5789] ntfs3: loop1: failed to convert name for inode 1e. [ 1643.012272][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1643.039376][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1643.115576][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1643.123478][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1644.641591][ T3456] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1644.901788][ T3456] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.006359][ T3456] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.140923][ T3456] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1645.281129][T16238] bond_slave_0: entered promiscuous mode [ 1645.287422][T16238] bond_slave_1: entered promiscuous mode [ 1645.324239][T16238] vlan2: entered promiscuous mode [ 1645.386632][T16238] bond0: entered promiscuous mode [ 1645.916468][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1645.928753][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1645.942960][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1645.965254][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1645.974624][ T50] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1645.982996][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1646.464574][ T28] audit: type=1326 audit(1753688112.001:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16257 comm="syz.2.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45f8b8e9a9 code=0x7ffc0000 [ 1646.544916][ T28] audit: type=1326 audit(1753688112.001:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16257 comm="syz.2.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45f8b8e9a9 code=0x7ffc0000 [ 1646.575940][T16258] netlink: set zone limit has 8 unknown bytes [ 1646.653062][ T28] audit: type=1326 audit(1753688112.021:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16257 comm="syz.2.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f45f8b8e9a9 code=0x7ffc0000 [ 1646.710063][T16262] loop3: detected capacity change from 0 to 1024 [ 1646.745141][T16258] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2454'. [ 1646.773282][ T28] audit: type=1326 audit(1753688112.021:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16257 comm="syz.2.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45f8b8e9a9 code=0x7ffc0000 [ 1646.815786][T16262] EXT4-fs: Ignoring removed orlov option [ 1646.923390][T16262] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1646.946818][ T28] audit: type=1326 audit(1753688112.021:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16257 comm="syz.2.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45f8b8e9a9 code=0x7ffc0000 [ 1646.974813][ T7699] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1647.064267][ T28] audit: type=1326 audit(1753688112.031:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16257 comm="syz.2.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f45f8b8e9a9 code=0x7ffc0000 [ 1647.109418][ T28] audit: type=1326 audit(1753688112.031:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16257 comm="syz.2.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45f8b8e9a9 code=0x7ffc0000 [ 1647.132506][ T28] audit: type=1326 audit(1753688112.031:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16257 comm="syz.2.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f45f8b8e9a9 code=0x7ffc0000 [ 1647.174675][ T28] audit: type=1326 audit(1753688112.031:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16257 comm="syz.2.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45f8b8e9a9 code=0x7ffc0000 [ 1647.216626][ T7699] usb 3-1: Using ep0 maxpacket: 8 [ 1647.229573][T15928] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1647.238627][ T28] audit: type=1326 audit(1753688112.031:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16257 comm="syz.2.2454" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f45f8b8e9a9 code=0x7ffc0000 [ 1647.285432][ T7699] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1647.295018][ T7699] usb 3-1: too many endpoints for config 4 interface 0 altsetting 102: 65, using maximum allowed: 30 [ 1647.322215][ T7699] usb 3-1: config 4 interface 0 altsetting 102 has 0 endpoint descriptors, different from the interface descriptor's value: 65 [ 1647.347195][ T7699] usb 3-1: config 4 interface 0 has no altsetting 0 [ 1647.380330][ T7699] usb 3-1: string descriptor 0 read error: -22 [ 1647.391071][ T7699] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1647.410680][ T7699] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1647.481552][ T7699] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1647.572592][ T7699] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1647.617931][ T7699] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1647.625247][ T7699] usb 3-1: media controller created [ 1647.660009][ T7699] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1647.691811][T16258] usb 3-1: dvb_usb_au6610: wlen=0, aborting [ 1647.721153][T16243] chnl_net:caif_netlink_parms(): no params data found [ 1647.804011][ T7699] zl10353_read_register: readreg error (reg=127, ret==0) [ 1647.868486][ T7699] usb 3-1: USB disconnect, device number 13 [ 1647.990440][T16243] bridge0: port 1(bridge_slave_0) entered blocking state [ 1647.999849][T16243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1648.007257][T16243] bridge_slave_0: entered allmulticast mode [ 1648.014776][T15914] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1648.023716][T16243] bridge_slave_0: entered promiscuous mode [ 1648.035438][T16243] bridge0: port 2(bridge_slave_1) entered blocking state [ 1648.042658][T16243] bridge0: port 2(bridge_slave_1) entered disabled state [ 1648.050203][T16243] bridge_slave_1: entered allmulticast mode [ 1648.057562][T16243] bridge_slave_1: entered promiscuous mode [ 1648.074982][ T50] Bluetooth: hci2: command tx timeout [ 1648.123266][T16243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1648.138285][T16243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1648.208153][T15914] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 1648.224074][T15914] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1648.236313][T15914] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 1648.239277][T16243] team0: Port device team_slave_0 added [ 1648.269977][T15914] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 1648.289827][T16243] team0: Port device team_slave_1 added [ 1648.295457][T15914] usb 4-1: Manufacturer: syz [ 1648.326617][T15914] usb 4-1: config 0 descriptor?? [ 1648.517585][T15914] rc_core: IR keymap rc-hauppauge not found [ 1648.523566][T15914] Registered IR keymap rc-empty [ 1648.588556][T15914] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1648.642409][T15914] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 1648.740129][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 1648.762983][ T3456] hsr_slave_0: left promiscuous mode [ 1648.777189][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1648.795950][T15914] usb 4-1: USB disconnect, device number 13 [ 1648.826189][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1648.851752][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1648.880113][ T3456] dummy0: left allmulticast mode [ 1648.898417][ T3456] bridge0: port 3(dummy0) entered disabled state [ 1648.925568][ T3456] bridge_slave_1: left allmulticast mode [ 1648.937319][ T3456] bridge_slave_1: left promiscuous mode [ 1648.952219][ T3456] bridge0: port 2(bridge_slave_1) entered disabled state [ 1648.990753][ T3456] bridge_slave_0: left allmulticast mode [ 1649.000744][ T3456] bridge_slave_0: left promiscuous mode [ 1649.010483][ T3456] bridge0: port 1(bridge_slave_0) entered disabled state [ 1649.056281][ T3456] veth1_macvtap: left promiscuous mode [ 1649.062024][ T3456] veth0_macvtap: left promiscuous mode [ 1649.073207][ T3456] veth1_vlan: left promiscuous mode [ 1649.083601][ T3456] veth0_vlan: left promiscuous mode [ 1649.674881][T15914] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1649.874773][T15914] usb 4-1: Using ep0 maxpacket: 16 [ 1649.884412][T16315] loop2: detected capacity change from 0 to 16 [ 1649.886472][T15914] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1649.902606][T16315] erofs: (device loop2): mounted with root inode @ nid 36. [ 1649.926309][T15914] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1649.933018][T15914] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 1649.950592][T15914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.963776][T15914] usb 4-1: config 0 descriptor?? [ 1650.154935][ T50] Bluetooth: hci2: command tx timeout [ 1650.383156][T15914] usbhid 4-1:0.0: can't add hid device: -71 [ 1650.399017][T15914] usbhid: probe of 4-1:0.0 failed with error -71 [ 1650.410827][T15914] usb 4-1: USB disconnect, device number 14 [ 1650.979457][T16330] loop2: detected capacity change from 0 to 512 [ 1650.990985][T16330] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 1651.011525][T16330] EXT4-fs (loop2): 1 truncate cleaned up [ 1651.020795][T16330] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1651.087865][T15558] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1651.150967][T16335] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2469'. [ 1651.982553][T16355] loop3: detected capacity change from 0 to 256 [ 1651.995118][T16355] exfat: Deprecated parameter 'namecase' [ 1652.004804][T16355] exfat: Deprecated parameter 'namecase' [ 1652.010538][T16355] exfat: Deprecated parameter 'utf8' [ 1652.050596][T16355] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012366, chksum : 0xd06b6363, utbl_chksum : 0xe619d30d) [ 1652.236846][ T50] Bluetooth: hci2: command tx timeout [ 1652.639353][T16364] loop3: detected capacity change from 0 to 1024 [ 1652.654340][T16364] hfsplus: unable to parse mount options [ 1652.989435][ T3456] team0 (unregistering): Port device team_slave_1 removed [ 1653.052497][ T3456] team0 (unregistering): Port device team_slave_0 removed [ 1653.106532][ T3456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1653.167676][ T3456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1653.835976][ T3456] bond0 (unregistering): Released all slaves [ 1653.965179][T16243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1653.972225][T16243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1654.001338][T16243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1654.041471][T16243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1654.054793][T16243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1654.095227][T16243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1654.315389][ T50] Bluetooth: hci2: command tx timeout [ 1654.329606][T16243] hsr_slave_0: entered promiscuous mode [ 1654.337288][T16243] hsr_slave_1: entered promiscuous mode [ 1654.355080][T16243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1654.363160][T16243] Cannot create hsr debugfs directory [ 1654.525027][T14064] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1654.533116][T16384] sctp: [Deprecated]: syz.3.2489 (pid 16384) Use of int in maxseg socket option. [ 1654.533116][T16384] Use struct sctp_assoc_value instead [ 1654.554456][T16384] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2489'. [ 1654.721163][T14064] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1654.736216][T14064] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1654.763181][T14064] usb 1-1: Product: syz [ 1654.774617][T14064] usb 1-1: Manufacturer: syz [ 1654.787673][T14064] usb 1-1: SerialNumber: syz [ 1654.807173][T14064] usb 1-1: config 0 descriptor?? [ 1655.029140][T14064] hso 1-1:0.0: Failed to find BULK IN ep [ 1655.048962][T14064] usb-storage 1-1:0.0: USB Mass Storage device detected [ 1655.261977][T14064] usb 1-1: USB disconnect, device number 14 [ 1655.471846][T16243] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1655.490093][T16243] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1655.555766][T16243] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1655.567915][T16243] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1655.640373][T16412] overlayfs: failed to clone upperpath [ 1655.955375][T16424] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 1656.017896][T16243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1656.090523][T16243] 8021q: adding VLAN 0 to HW filter on device team0 [ 1656.176282][ T1096] bridge0: port 1(bridge_slave_0) entered blocking state [ 1656.183507][ T1096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1656.214801][T16428] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 1656.221892][T16428] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1656.232302][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 1656.239576][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1656.344452][T16428] vhci_hcd vhci_hcd.0: Device attached [ 1656.391133][T16430] vhci_hcd: connection closed [ 1656.400319][ T48] vhci_hcd: stop threads [ 1656.432755][ T48] vhci_hcd: release socket [ 1656.439735][ T48] vhci_hcd: disconnect device [ 1657.131239][T16243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1657.289225][T16243] veth0_vlan: entered promiscuous mode [ 1657.322045][T16243] veth1_vlan: entered promiscuous mode [ 1657.420280][T16243] veth0_macvtap: entered promiscuous mode [ 1657.459499][T16243] veth1_macvtap: entered promiscuous mode [ 1657.515792][T16243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1657.540393][T16243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.564643][T14064] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1657.572524][T16243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1657.593956][T16243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.616721][T16243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1657.661454][T16243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1657.685850][T16243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.724619][T16243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1657.756441][T16243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.780956][T16243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1657.795473][T14064] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1657.814638][T14064] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1657.821466][T16243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1657.854927][T14064] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1657.876236][T16243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1657.894804][T14064] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1657.913337][T14064] usb 3-1: Product: syz [ 1657.918680][T14064] usb 3-1: Manufacturer: syz [ 1657.923558][T14064] usb 3-1: SerialNumber: syz [ 1657.950214][T14064] usb 3-1: config 0 descriptor?? [ 1657.961886][T16243] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1658.009494][T14064] usb 3-1: selecting invalid altsetting 0 [ 1658.015931][T16243] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1658.041082][T16243] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1658.071669][T16243] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1658.377525][ T8631] usb 3-1: USB disconnect, device number 14 [ 1658.576419][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1658.584309][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1658.707079][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1658.742144][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1658.772780][T16488] fuse: Bad value for 'rootmode' [ 1659.718830][T16507] loop1: detected capacity change from 0 to 128 [ 1659.830619][T16507] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1659.926810][T16507] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1660.076930][T12420] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1660.089899][T12420] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1660.100139][T12420] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1660.109472][T12420] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1660.123045][T12420] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1660.134686][T12420] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1660.217712][T16521] mmap: syz.1.2516 (16521) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1660.693869][T16527] fuse: Bad value for 'fd' [ 1660.789563][ T3456] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.008608][ T3456] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.279798][ T3456] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.477255][T16243] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1661.578925][T16553] overlayfs: failed to clone upperpath [ 1661.583562][ T3456] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1661.758097][T16557] tipc: Started in network mode [ 1661.775954][T16557] tipc: Node identity ac14140f, cluster identity 4711 [ 1661.783803][T16557] tipc: New replicast peer: 255.255.255.255 [ 1661.815570][T16557] tipc: Enabled bearer , priority 10 [ 1662.069774][T16516] chnl_net:caif_netlink_parms(): no params data found [ 1662.236135][T12420] Bluetooth: hci4: command tx timeout [ 1662.800006][T16516] bridge0: port 1(bridge_slave_0) entered blocking state [ 1662.843039][T16516] bridge0: port 1(bridge_slave_0) entered disabled state [ 1662.866711][T16516] bridge_slave_0: entered allmulticast mode [ 1662.907306][T16516] bridge_slave_0: entered promiscuous mode [ 1662.932350][ T55] tipc: Node number set to 2886997007 [ 1663.045010][T16516] bridge0: port 2(bridge_slave_1) entered blocking state [ 1663.075437][T16516] bridge0: port 2(bridge_slave_1) entered disabled state [ 1663.082794][T16516] bridge_slave_1: entered allmulticast mode [ 1663.119974][T16516] bridge_slave_1: entered promiscuous mode [ 1663.168262][T15914] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1663.366705][T16516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1663.380681][T16516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1663.390851][T15914] usb 3-1: Using ep0 maxpacket: 16 [ 1663.403273][T15914] usb 3-1: config 8 has an invalid interface number: 109 but max is 1 [ 1663.421315][T15914] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1663.431985][T15914] usb 3-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 1663.459921][T15914] usb 3-1: config 8 has no interface number 0 [ 1663.474639][T15914] usb 3-1: config 8 interface 109 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1663.534638][T15914] usb 3-1: config 8 interface 109 has no altsetting 0 [ 1663.616613][T15914] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=b3.c4 [ 1663.624305][T16516] team0: Port device team_slave_0 added [ 1663.638033][T15914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.653395][T16516] team0: Port device team_slave_1 added [ 1663.654674][T15914] usb 3-1: Product: syz [ 1663.663217][T15914] usb 3-1: Manufacturer: syz [ 1663.684626][T15914] usb 3-1: SerialNumber: syz [ 1663.729725][T15914] ssu100 3-1:8.109: Quatech SSU-100 USB to Serial Driver converter detected [ 1663.818159][T16604] sctp: [Deprecated]: syz.1.2534 (pid 16604) Use of int in maxseg socket option. [ 1663.818159][T16604] Use struct sctp_assoc_value instead [ 1663.867620][T16604] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2534'. [ 1663.941540][T16516] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1663.960203][T15914] ssu100: probe of 3-1:8.109 failed with error -71 [ 1663.964681][T16516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1663.981428][T15914] usb 3-1: USB disconnect, device number 15 [ 1664.016738][T16516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1664.038792][T16516] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1664.055632][T16516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1664.093883][T16516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1664.212814][ T5836] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1664.242211][T16610] 9pnet_fd: Insufficient options for proto=fd [ 1664.319965][T12420] Bluetooth: hci4: command tx timeout [ 1664.343652][T16516] hsr_slave_0: entered promiscuous mode [ 1664.355783][T16516] hsr_slave_1: entered promiscuous mode [ 1664.362279][T16516] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1664.371558][T16516] Cannot create hsr debugfs directory [ 1664.432571][ T5836] usb 2-1: config 0 has an invalid interface number: 117 but max is 0 [ 1664.452254][ T5836] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1664.483593][ T5836] usb 2-1: config 0 has no interface number 0 [ 1664.511361][ T5836] usb 2-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1664.532693][ T5836] usb 2-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1664.588881][ T5836] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 1664.603400][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1664.626732][ T5836] usb 2-1: Product: syz [ 1664.639685][ T5836] usb 2-1: Manufacturer: syz [ 1664.645828][ T5836] usb 2-1: SerialNumber: syz [ 1664.685808][ T5836] usb 2-1: config 0 descriptor?? [ 1665.204475][ T3456] hsr_slave_0: left promiscuous mode [ 1665.288010][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1665.323311][ T3456] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1665.334666][ T3456] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1665.358993][ T3456] dummy0: left allmulticast mode [ 1665.364352][ T3456] bridge0: port 3(dummy0) entered disabled state [ 1665.387229][ T3456] bridge_slave_1: left allmulticast mode [ 1665.392959][ T3456] bridge_slave_1: left promiscuous mode [ 1665.405017][ T3456] bridge0: port 2(bridge_slave_1) entered disabled state [ 1665.420357][ T3456] bridge_slave_0: left allmulticast mode [ 1665.427009][ T3456] bridge_slave_0: left promiscuous mode [ 1665.432880][ T3456] bridge0: port 1(bridge_slave_0) entered disabled state [ 1665.512334][ T3456] veth1_macvtap: left promiscuous mode [ 1665.526665][ T3456] veth0_macvtap: left promiscuous mode [ 1665.540348][ T3456] veth1_vlan: left promiscuous mode [ 1665.565090][ T3456] veth0_vlan: left promiscuous mode [ 1665.694342][ T23] usb 2-1: USB disconnect, device number 11 [ 1665.997560][T16644] loop1: detected capacity change from 0 to 4096 [ 1666.072604][T16645] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1666.394849][T12420] Bluetooth: hci4: command tx timeout [ 1666.439077][T16649] loop1: detected capacity change from 0 to 2048 [ 1666.467162][T16649] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1666.510079][T16649] EXT4-fs error (device loop1): ext4_lookup:1858: inode #16: comm syz.1.2549: iget: bad i_size value: 8796093031208 [ 1666.654241][T16649] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1666.674633][T16649] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 958 with error 28 [ 1666.689228][T16649] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1666.689228][T16649] [ 1666.699116][T16649] EXT4-fs (loop1): Total free blocks count 0 [ 1666.706795][T16649] EXT4-fs (loop1): Free/Dirty block details [ 1666.712829][T16649] EXT4-fs (loop1): free_blocks=2415919104 [ 1666.720879][T16649] EXT4-fs (loop1): dirty_blocks=960 [ 1666.726231][T16649] EXT4-fs (loop1): Block reservation details [ 1666.732263][T16649] EXT4-fs (loop1): i_reserved_data_blocks=60 [ 1666.879639][T16243] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1668.474793][T12420] Bluetooth: hci4: command tx timeout [ 1669.188943][ T3456] team0 (unregistering): Port device team_slave_1 removed [ 1669.249981][ T3456] team0 (unregistering): Port device team_slave_0 removed [ 1669.285910][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.292517][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.320646][ T3456] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1669.377137][ T3456] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1669.994142][ T3456] bond0 (unregistering): Released all slaves [ 1670.173627][T16634] tipc: Started in network mode [ 1670.178863][T16634] tipc: Node identity ac14140f, cluster identity 4711 [ 1670.192103][T16634] tipc: New replicast peer: 255.255.255.255 [ 1670.199312][T16634] tipc: Enabled bearer , priority 10 [ 1670.480661][T16666] tipc: Enabling of bearer rejected, already enabled [ 1670.653727][T16671] loop2: detected capacity change from 0 to 128 [ 1670.745365][T16675] batadv_slave_0: entered promiscuous mode [ 1670.818420][T16671] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1670.964588][T16674] batadv_slave_0: left promiscuous mode [ 1670.971715][T16671] ext4 filesystem being mounted at /49/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1671.324714][ T55] tipc: Node number set to 2886997007 [ 1671.365522][T16516] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1671.373761][T16690] loop1: detected capacity change from 0 to 1024 [ 1671.392910][T16516] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1671.400955][T16690] EXT4-fs: Ignoring removed nobh option [ 1671.429482][T16690] EXT4-fs: Ignoring removed bh option [ 1671.455001][T16516] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1671.475572][T16690] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1671.495246][T16516] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1671.556259][T16690] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1671.841458][T16243] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1672.007090][T16516] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1672.050678][T16516] 8021q: adding VLAN 0 to HW filter on device team0 [ 1672.105471][ T1076] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.112720][ T1076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1672.206260][ T1076] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.213455][ T1076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1672.636545][T15558] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1673.059693][T16516] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1673.135045][T15914] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1673.173667][T16516] veth0_vlan: entered promiscuous mode [ 1673.207796][T16516] veth1_vlan: entered promiscuous mode [ 1673.297096][T16516] veth0_macvtap: entered promiscuous mode [ 1673.318908][T16516] veth1_macvtap: entered promiscuous mode [ 1673.345108][T15914] usb 2-1: Using ep0 maxpacket: 8 [ 1673.357625][T15914] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 1673.379190][T15914] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 1673.395711][T16516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1673.409333][T15914] usb 2-1: New USB device strings: Mfr=241, Product=1, SerialNumber=3 [ 1673.428407][T16516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.439001][T15914] usb 2-1: Product: syz [ 1673.443222][T15914] usb 2-1: Manufacturer: syz [ 1673.449391][T16516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1673.460055][T15914] usb 2-1: SerialNumber: syz [ 1673.467635][T15914] usb 2-1: config 0 descriptor?? [ 1673.473460][T16516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.502463][T15914] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 1673.514401][T16516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1673.545089][T16516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.582635][T16516] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1673.621011][T16750] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2567'. [ 1673.699436][T16516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1673.754569][T16516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.794751][T16516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1673.824840][T16516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.854589][T16516] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1673.884615][T16516] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1673.907986][T16516] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1673.924623][ T55] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1673.948006][T16516] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1673.977752][T16516] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1674.018492][T16516] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1674.039080][T16516] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1674.146085][ T55] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 1674.175012][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.213771][ T55] usb 3-1: config 0 descriptor?? [ 1674.226220][ T55] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 1674.324194][ T3456] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1674.348726][ T3456] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1674.462105][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1674.484806][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1674.549062][T15914] gspca_zc3xx: reg_w_i err -71 [ 1674.968240][T16773] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2571'. [ 1675.183687][T15914] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 1675.204151][T15914] gspca_zc3xx: probe of 2-1:0.0 failed with error -71 [ 1675.224442][T15914] usb 2-1: USB disconnect, device number 12 [ 1675.482932][ T55] gspca_stv06xx: I2C: Read error writing address: -71 [ 1675.502743][ T55] usb 3-1: USB disconnect, device number 16 [ 1675.562074][T16785] loop0: detected capacity change from 0 to 256 [ 1675.630145][T16785] FAT-fs (loop0): Directory bread(block 64) failed [ 1675.645217][T16785] FAT-fs (loop0): Directory bread(block 65) failed [ 1675.673983][T16785] FAT-fs (loop0): Directory bread(block 66) failed [ 1675.689484][T16785] FAT-fs (loop0): Directory bread(block 67) failed [ 1675.701334][T16783] block device autoloading is deprecated and will be removed. [ 1675.709317][T16785] FAT-fs (loop0): Directory bread(block 68) failed [ 1675.716620][T16788] block device autoloading is deprecated and will be removed. [ 1675.724266][T16785] FAT-fs (loop0): Directory bread(block 69) failed [ 1675.733906][T16785] FAT-fs (loop0): Directory bread(block 70) failed [ 1675.750057][T16785] FAT-fs (loop0): Directory bread(block 71) failed [ 1675.764774][T16785] FAT-fs (loop0): Directory bread(block 72) failed [ 1675.784894][T16785] FAT-fs (loop0): Directory bread(block 73) failed [ 1676.248870][T16801] loop0: detected capacity change from 0 to 512 [ 1676.357175][T16801] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1676.375416][T16801] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1676.614690][ T8] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1676.801855][T16516] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1676.816737][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 1676.824134][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1676.824167][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1676.824206][ T8] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1676.824230][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1676.826806][ T8] usb 3-1: config 0 descriptor?? [ 1677.198730][T16824] veth1_macvtap: left promiscuous mode [ 1677.208039][T16824] macsec0: entered promiscuous mode [ 1677.264652][ T55] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 1677.287522][ T8] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 1677.477048][ T55] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1677.494949][ T55] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1677.516853][ T55] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1677.534122][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.551533][ T8] usb 3-1: USB disconnect, device number 17 [ 1677.652517][T16835] random: crng reseeded on system resumption [ 1677.752099][ T55] usb 1-1: usb_control_msg returned -32 [ 1677.763423][ T55] usbtmc 1-1:16.0: can't read capabilities [ 1678.159333][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 1678.159350][ T28] audit: type=1326 audit(1753688143.711:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16841 comm="syz.1.2600" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9fedb8e9a9 code=0x0 [ 1678.480378][T16858] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2606'. [ 1678.845975][T16864] loop2: detected capacity change from 0 to 16 [ 1678.858438][T16864] erofs: (device loop2): mounted with root inode @ nid 36. [ 1678.902657][T16864] erofs: (device loop2): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46 [ 1678.942965][T16864] erofs: (device loop2): erofs_map_blocks_flatmode: inline data cross block boundary @ nid 46 [ 1678.976637][T16864] erofs: (device loop2): erofs_readdir: fail to readdir of logical block 0 of nid 46 [ 1680.033707][ T55] usb 1-1: USB disconnect, device number 15 [ 1680.416748][T16910] loop2: detected capacity change from 0 to 8 [ 1681.124941][ T55] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1681.314634][ T55] usb 2-1: Using ep0 maxpacket: 32 [ 1681.335268][ T55] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 1681.360526][ T55] usb 2-1: config 0 has no interface number 0 [ 1681.376623][ T55] usb 2-1: config 0 interface 29 has no altsetting 0 [ 1681.397770][ T55] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 1681.424640][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1681.441338][ T55] usb 2-1: Product: syz [ 1681.454677][ T55] usb 2-1: Manufacturer: syz [ 1681.459344][ T55] usb 2-1: SerialNumber: syz [ 1681.505084][ T55] usb 2-1: config 0 descriptor?? [ 1681.717295][ T55] peak_usb 2-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 1681.920891][ T55] peak_usb 2-1:0.29 can0: sending command failure: -8 [ 1681.935889][ T55] peak_usb 2-1:0.29 can0: sending command failure: -8 [ 1681.942999][ T55] peak_usb 2-1:0.29 can0: sending command failure: -8 [ 1682.042852][ T55] peak_usb: probe of 2-1:0.29 failed with error -8 [ 1682.157764][ T787] usb 2-1: USB disconnect, device number 13 [ 1682.964671][T16968] loop2: detected capacity change from 0 to 256 [ 1683.564671][T16983] nbd2: detected capacity change from 0 to 1024 [ 1683.591732][ T7881] block nbd2: Send control failed (result -89) [ 1683.600346][ T7881] block nbd2: Request send failed, requeueing [ 1683.609648][T12420] block nbd2: Receive control failed (result -32) [ 1683.620449][T12378] block nbd2: Dead connection, failed to find a fallback [ 1683.628821][T12378] block nbd2: shutting down sockets [ 1683.635115][T12378] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1683.646055][T12378] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1683.664060][ T24] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1683.676312][ T24] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1683.686497][ T24] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1683.695740][ T24] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1683.703732][ T24] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1683.712992][ T24] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1683.721972][ T24] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1683.731355][ T24] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1683.740398][ T24] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1683.749588][ T24] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1683.763307][T12378] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1683.772797][T12378] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1683.780974][T12378] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1683.790273][T12378] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1683.798329][T16658] ldm_validate_partition_table(): Disk read failed. [ 1683.805378][T12378] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1683.814586][T12378] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1683.848350][ T24] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1683.857762][ T24] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1683.866171][T16658] Dev nbd2: unable to read RDB block 0 [ 1683.875584][T16658] nbd2: unable to read partition table [ 1683.887108][T16658] ldm_validate_partition_table(): Disk read failed. [ 1683.898954][T16658] Dev nbd2: unable to read RDB block 0 [ 1683.906491][T16658] nbd2: unable to read partition table [ 1683.948384][T16986] ldm_validate_partition_table(): Disk read failed. [ 1683.983329][T16986] Dev nbd2: unable to read RDB block 0 [ 1683.991316][T16986] nbd2: unable to read partition table [ 1684.285889][T16995] loop2: detected capacity change from 0 to 128 [ 1684.380831][T16995] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1684.402738][T16995] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1684.423255][ T28] audit: type=1326 audit(1753688149.971:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16998 comm="syz.1.2666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fedb8e9a9 code=0x7ffc0000 [ 1684.494737][ T28] audit: type=1326 audit(1753688149.971:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16998 comm="syz.1.2666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fedb8e9a9 code=0x7ffc0000 [ 1684.532769][ T28] audit: type=1326 audit(1753688150.001:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16998 comm="syz.1.2666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f9fedb8e9a9 code=0x7ffc0000 [ 1684.563126][ T28] audit: type=1326 audit(1753688150.001:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16998 comm="syz.1.2666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fedb8e9a9 code=0x7ffc0000 [ 1684.592618][ T28] audit: type=1326 audit(1753688150.001:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16998 comm="syz.1.2666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f9fedb8e9a9 code=0x7ffc0000 [ 1684.652448][ T28] audit: type=1326 audit(1753688150.011:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16998 comm="syz.1.2666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fedb8e9a9 code=0x7ffc0000 [ 1684.695027][ T28] audit: type=1326 audit(1753688150.011:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16998 comm="syz.1.2666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fedb8e9a9 code=0x7ffc0000 [ 1684.718079][ T28] audit: type=1326 audit(1753688150.011:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16998 comm="syz.1.2666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=29 compat=0 ip=0x7f9fedb8e9a9 code=0x7ffc0000 [ 1684.740965][ T28] audit: type=1326 audit(1753688150.011:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16998 comm="syz.1.2666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fedb8e9a9 code=0x7ffc0000 [ 1684.777993][T15558] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1684.779053][ T28] audit: type=1326 audit(1753688150.011:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16998 comm="syz.1.2666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fedb8e9a9 code=0x7ffc0000 [ 1684.945246][ T7699] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1685.129678][ T7699] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1685.144571][ T7699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1685.152630][ T7699] usb 2-1: Product: syz [ 1685.174579][ T7699] usb 2-1: Manufacturer: syz [ 1685.179231][ T7699] usb 2-1: SerialNumber: syz [ 1685.196630][ T7699] usb 2-1: config 0 descriptor?? [ 1685.216264][ T7699] ch341 2-1:0.0: ch341-uart converter detected [ 1685.407910][ T7699] usb 2-1: failed to receive control message: -121 [ 1685.414858][ T7699] ch341-uart: probe of ttyUSB0 failed with error -121 [ 1685.613187][T15914] usb 2-1: USB disconnect, device number 14 [ 1685.622583][T15914] ch341 2-1:0.0: device disconnected [ 1686.302379][T17025] kvm: kvm [17024]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x11e) = 0x3 [ 1686.314174][T17025] kvm: kvm [17024]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x186) = 0x3 [ 1686.323635][T17025] kvm: kvm [17024]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x187) = 0x3 [ 1686.335054][T17025] kvm_intel: kvm [17024]: vcpu0, guest rIP: 0x28e Unhandled WRMSR(0x1d9) = 0x3 [ 1686.762450][T17043] loop0: detected capacity change from 0 to 1024 [ 1686.780469][T17043] EXT4-fs: Ignoring removed bh option [ 1686.826637][T17043] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1686.894737][ T787] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 1686.991622][T16516] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1687.088543][ T787] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1687.103787][ T787] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1687.127168][ T787] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1687.141763][ T787] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1687.151626][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1687.161713][ T787] usb 2-1: Product: syz [ 1687.174612][ T787] usb 2-1: Manufacturer: syz [ 1687.179264][ T787] usb 2-1: SerialNumber: syz [ 1687.200115][T17037] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1687.216550][ T787] usb 2-1: selecting invalid altsetting 1 [ 1687.241869][T17060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2691'. [ 1687.433577][ T787] cdc_ncm 2-1:1.0: bind() failure [ 1687.489167][ T787] usb 2-1: USB disconnect, device number 15 [ 1688.490317][T17090] bridge0: entered promiscuous mode [ 1688.495820][T17090] vlan2: entered promiscuous mode [ 1688.530238][ T55] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1688.724646][ T55] usb 2-1: Using ep0 maxpacket: 32 [ 1688.734721][ T55] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1688.777931][ T55] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 1688.791351][ T55] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1688.802902][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.811974][ T55] usb 2-1: Product: syz [ 1688.818553][ T55] usb 2-1: Manufacturer: syz [ 1688.823375][ T55] usb 2-1: SerialNumber: syz [ 1689.017701][T17099] loop2: detected capacity change from 0 to 512 [ 1689.051771][T17088] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1689.070510][T17099] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 1689.100832][T17099] EXT4-fs (loop2): orphan cleanup on readonly fs [ 1689.136876][T17099] EXT4-fs warning (device loop2): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1689.158509][T17099] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 1689.176214][T17099] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.2709: bg 0: block 40: padding at end of block bitmap is not set [ 1689.202934][T17099] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 1689.215036][T17099] EXT4-fs (loop2): 1 truncate cleaned up [ 1689.222706][T17099] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1689.237843][T17099] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1689.672985][T17088] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1689.883112][ T55] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1689.889822][ T55] cdc_ncm 2-1:1.0: dwNtbInMaxSize=8 is too small. Using 2048 [ 1689.902365][ T55] cdc_ncm 2-1:1.0: setting rx_max = 2048 [ 1690.085977][ T55] cdc_ncm 2-1:1.0: setting tx_max = 88 [ 1690.102102][ T55] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1690.319594][ T55] usb 2-1: USB disconnect, device number 16 [ 1690.340685][ T55] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP) [ 1690.917393][T14064] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1691.013678][T17147] loop1: detected capacity change from 0 to 256 [ 1691.035511][T17147] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1691.063865][T17147] exFAT-fs (loop1): Medium has reported failures. Some data may be lost. [ 1691.104398][T17147] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1691.125085][T12420] Bluetooth: hci3: command tx timeout [ 1691.128218][T14064] usb 3-1: Using ep0 maxpacket: 16 [ 1691.168746][T14064] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 190, changing to 7 [ 1691.186467][ T55] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1691.208353][T14064] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1691.228994][T14064] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1691.245396][T14064] usb 3-1: Product: syz [ 1691.259969][T14064] usb 3-1: Manufacturer: syz [ 1691.275308][T14064] usb 3-1: SerialNumber: syz [ 1691.291605][T14064] usb 3-1: config 0 descriptor?? [ 1691.337644][T14064] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1691.367902][T14064] em28xx 3-1:0.0: DVB interface 0 found: isoc [ 1691.388329][ T55] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1691.411734][ T55] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1691.423179][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1691.455032][ T55] usb 1-1: config 0 descriptor?? [ 1691.476131][ T55] pwc: Askey VC010 type 2 USB webcam detected. [ 1691.616760][T14064] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1691.713998][T14064] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1691.738626][T14064] em28xx 3-1:0.0: board has no eeprom [ 1691.816323][T14064] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1691.834715][T14064] em28xx 3-1:0.0: dvb set to isoc mode. [ 1691.841157][ T7699] em28xx 3-1:0.0: Binding DVB extension [ 1691.860494][T14064] usb 3-1: USB disconnect, device number 18 [ 1691.870252][ T55] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1691.890108][ T55] pwc: recv_control_msg error -32 req 02 val 2700 [ 1691.897902][T14064] em28xx 3-1:0.0: Disconnecting em28xx [ 1691.906837][ T55] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1691.925207][ T55] pwc: recv_control_msg error -32 req 04 val 1000 [ 1691.956432][ T55] pwc: recv_control_msg error -32 req 04 val 1300 [ 1691.990601][ T55] pwc: recv_control_msg error -32 req 04 val 1400 [ 1692.011072][ T55] pwc: recv_control_msg error -32 req 02 val 2000 [ 1692.036475][ T55] pwc: recv_control_msg error -32 req 02 val 2100 [ 1692.054809][ T55] pwc: recv_control_msg error -32 req 04 val 1500 [ 1692.075441][ T55] pwc: recv_control_msg error -32 req 02 val 2500 [ 1692.096107][ T7699] em28xx 3-1:0.0: Registering input extension [ 1692.102455][ T55] pwc: recv_control_msg error -32 req 02 val 2400 [ 1692.117158][ T55] pwc: recv_control_msg error -32 req 02 val 2600 [ 1692.126625][T14064] em28xx 3-1:0.0: Closing input extension [ 1692.151043][ T55] pwc: recv_control_msg error -32 req 02 val 2900 [ 1692.166465][ T55] pwc: recv_control_msg error -32 req 02 val 2800 [ 1692.179070][ T55] pwc: recv_control_msg error -32 req 04 val 1100 [ 1692.206051][ T55] pwc: Registered as video103. [ 1692.222885][T14064] em28xx 3-1:0.0: Freeing device [ 1692.233640][ T55] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 1692.413315][ T55] usb 1-1: USB disconnect, device number 16 [ 1692.668914][T17188] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1692.676957][T17188] IPv6: NLM_F_CREATE should be set when creating new route [ 1692.793024][T17190] process 'syz.2.2736' launched '/dev/fd/3' with NULL argv: empty string added [ 1693.009338][T17198] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1693.045974][T17198] overlayfs: failed to set xattr on upper [ 1693.051773][T17198] overlayfs: ...falling back to redirect_dir=nofollow. [ 1693.088800][T17198] overlayfs: ...falling back to index=off. [ 1693.113255][T17198] overlayfs: ...falling back to uuid=null. [ 1693.124313][T17202] loop0: detected capacity change from 0 to 256 [ 1693.169686][T17202] FAT-fs (loop0): Directory bread(block 64) failed [ 1693.197866][T17202] FAT-fs (loop0): Directory bread(block 65) failed [ 1693.230156][T17202] FAT-fs (loop0): Directory bread(block 66) failed [ 1693.240179][T17202] FAT-fs (loop0): Directory bread(block 67) failed [ 1693.285515][T17202] FAT-fs (loop0): Directory bread(block 68) failed [ 1693.292264][T17202] FAT-fs (loop0): Directory bread(block 69) failed [ 1693.305465][T17202] FAT-fs (loop0): Directory bread(block 70) failed [ 1693.313647][T17202] FAT-fs (loop0): Directory bread(block 71) failed [ 1693.326387][T17202] FAT-fs (loop0): Directory bread(block 72) failed [ 1693.332996][T17202] FAT-fs (loop0): Directory bread(block 73) failed [ 1693.548449][T17208] loop2: detected capacity change from 0 to 16 [ 1693.615898][T17208] erofs: (device loop2): mounted with root inode @ nid 36. [ 1693.651370][T17208] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 1693.697887][T17208] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 1693.734898][T17208] erofs: (device loop2): z_erofs_readahead: readahead error at folio 3 @ nid 89 [ 1693.784076][T17208] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 1693.816316][T17208] erofs: (device loop2): z_erofs_readahead: readahead error at folio 2 @ nid 89 [ 1693.855421][T17208] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 1693.878725][T17208] erofs: (device loop2): z_erofs_readahead: readahead error at folio 1 @ nid 89 [ 1693.917676][T17208] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 1693.954753][T17208] erofs: (device loop2): z_erofs_readahead: readahead error at folio 0 @ nid 89 [ 1693.993730][T17208] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 1694.056623][T17208] erofs: (device loop2): z_erofs_fill_inode_lazy: invalid tail-packing pclustersize 0 [ 1694.096445][T17208] erofs: (device loop2): z_erofs_read_folio: read error -117 @ 0 of nid 89 [ 1694.124818][ T28] kauditd_printk_skb: 103 callbacks suppressed [ 1694.124832][ T28] audit: type=1800 audit(1753688159.681:455): pid=17208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2743" name="file2" dev="loop2" ino=89 res=0 errno=0 [ 1694.440417][T17226] loop2: detected capacity change from 0 to 512 [ 1694.506089][ T28] audit: type=1326 audit(1753688160.061:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17230 comm="syz.1.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fedb8e9a9 code=0x7ffc0000 [ 1694.641686][ T1096] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 1694.644654][ T28] audit: type=1326 audit(1753688160.061:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17230 comm="syz.1.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fedb8e9a9 code=0x7ffc0000 [ 1694.663207][ T1096] EXT4-fs error (device loop2): ext4_release_dquot:6974: comm kworker/u4:6: Failed to release dquot type 1 [ 1694.674728][T17226] EXT4-fs (loop2): 1 orphan inode deleted [ 1694.717426][T17226] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1694.738406][ T28] audit: type=1326 audit(1753688160.061:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17230 comm="syz.1.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f9fedb8e9a9 code=0x7ffc0000 [ 1694.762538][T17226] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1694.785198][ T28] audit: type=1326 audit(1753688160.061:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17230 comm="syz.1.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fedb8e9a9 code=0x7ffc0000 [ 1694.890944][ T28] audit: type=1326 audit(1753688160.061:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17230 comm="syz.1.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fedb8e9a9 code=0x7ffc0000 [ 1694.916316][ T28] audit: type=1326 audit(1753688160.061:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17230 comm="syz.1.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f9fedb8e9a9 code=0x7ffc0000 [ 1694.939673][ T28] audit: type=1326 audit(1753688160.061:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17230 comm="syz.1.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9fedb8e9a9 code=0x7ffc0000 [ 1694.969285][T17239] batadv0: entered promiscuous mode [ 1694.993343][ T28] audit: type=1326 audit(1753688160.061:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17230 comm="syz.1.2751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9fedb8e9a9 code=0x7ffc0000 [ 1694.998674][T17238] ------------[ cut here ]------------ [ 1695.022490][T17238] WARNING: CPU: 1 PID: 17238 at mm/page_alloc.c:4433 __alloc_pages+0x2de/0x460 [ 1695.025861][T17239] macsec1: entered promiscuous mode [ 1695.032173][T17238] Modules linked in: [ 1695.041601][T17238] CPU: 1 PID: 17238 Comm: syz.3.2755 Not tainted 6.6.100-syzkaller #0 [ 1695.050385][T17238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1695.058930][T17239] macsec1: entered allmulticast mode [ 1695.060850][T17238] RIP: 0010:__alloc_pages+0x2de/0x460 [ 1695.071318][T17238] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 05 20 64 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff [ 1695.082634][T17239] batadv0: entered allmulticast mode [ 1695.091119][T17238] RSP: 0018:ffffc90003c47a80 EFLAGS: 00010246 [ 1695.091151][T17238] RAX: ffffc90003c47a00 RBX: 1ffff92000788f54 RCX: 0000000000000000 [ 1695.091168][T17238] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003c47ae8 [ 1695.091183][T17238] RBP: ffffc90003c47b80 R08: ffffc90003c47ae7 R09: 0000000000000000 [ 1695.091198][T17238] R10: ffffc90003c47ac0 R11: fffff52000788f5d R12: 000000000000002a [ 1695.091213][T17238] R13: 0000000000000000 R14: 0000000000040d40 R15: dffffc0000000000 [ 1695.091235][T17238] FS: 00007f1c1a47b6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1695.091253][T17238] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1695.091268][T17238] CR2: 00002000000000c0 CR3: 00000000569bf000 CR4: 00000000003506e0 [ 1695.091288][T17238] Call Trace: [ 1695.091297][T17238] [ 1695.091312][T17238] ? zone_statistics+0x170/0x170 [ 1695.091356][T17238] ? v9fs_fid_find+0x270/0x270 [ 1695.091396][T17238] __kmalloc_large_node+0x8c/0x1e0 [ 1695.091431][T17238] ? v9fs_fid_get_acl+0x4f/0xf0 [ 1695.091462][T17238] __kmalloc+0x111/0x240 [ 1695.091495][T17238] v9fs_fid_get_acl+0x4f/0xf0 [ 1695.091528][T17238] v9fs_get_acl+0x9a/0x350 [ 1695.091562][T17238] v9fs_mount+0x862/0xb40 [ 1695.091592][T17238] ? xfs_fs_commit_blocks+0x6c0/0x6c0 [ 1695.091628][T17238] legacy_get_tree+0xea/0x180 [ 1695.091654][T17238] ? xfs_fs_commit_blocks+0x6c0/0x6c0 [ 1695.228753][T17238] vfs_get_tree+0x8c/0x280 [ 1695.233317][T17238] do_new_mount+0x24b/0xa40 [ 1695.238111][T17238] __se_sys_mount+0x2da/0x3c0 [ 1695.242876][T17238] ? __x64_sys_mount+0xc0/0xc0 [ 1695.247743][T17238] ? lockdep_hardirqs_on+0x98/0x150 [ 1695.252990][T17238] ? __x64_sys_mount+0x20/0xc0 [ 1695.257881][T17238] do_syscall_64+0x55/0xb0 [ 1695.262350][T17238] ? clear_bhb_loop+0x40/0x90 [ 1695.267141][T17238] ? clear_bhb_loop+0x40/0x90 [ 1695.271888][T17238] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1695.278083][T17238] RIP: 0033:0x7f1c1958e9a9 [ 1695.282545][T17238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1695.302383][T17238] RSP: 002b:00007f1c1a47b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1695.311814][T17238] RAX: ffffffffffffffda RBX: 00007f1c197b5fa0 RCX: 00007f1c1958e9a9 [ 1695.320369][T17238] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 1695.328894][T17238] RBP: 00007f1c19610d69 R08: 0000200000000500 R09: 0000000000000000 [ 1695.337339][T17238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1695.345534][T17238] R13: 0000000000000000 R14: 00007f1c197b5fa0 R15: 00007ffdcbe6c898 [ 1695.353599][T17238] [ 1695.356894][T17238] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1695.364222][T17238] CPU: 1 PID: 17238 Comm: syz.3.2755 Not tainted 6.6.100-syzkaller #0 [ 1695.372391][T17238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1695.382462][T17238] Call Trace: [ 1695.385757][T17238] [ 1695.388720][T17238] dump_stack_lvl+0x16c/0x230 [ 1695.393416][T17238] ? show_regs_print_info+0x20/0x20 [ 1695.398630][T17238] ? load_image+0x3b0/0x3b0 [ 1695.403180][T17238] panic+0x2c0/0x710 [ 1695.407109][T17238] ? bpf_jit_dump+0xd0/0xd0 [ 1695.411652][T17238] __warn+0x2e0/0x470 [ 1695.415659][T17238] ? __alloc_pages+0x2de/0x460 [ 1695.420448][T17238] ? __alloc_pages+0x2de/0x460 [ 1695.425234][T17238] report_bug+0x2be/0x4f0 [ 1695.429579][T17238] ? __alloc_pages+0x2de/0x460 [ 1695.434362][T17238] ? __alloc_pages+0x2de/0x460 [ 1695.439142][T17238] ? __alloc_pages+0x2e0/0x460 [ 1695.444104][T17238] handle_bug+0xcf/0x120 [ 1695.448365][T17238] exc_invalid_op+0x1a/0x50 [ 1695.452895][T17238] asm_exc_invalid_op+0x1a/0x20 [ 1695.457772][T17238] RIP: 0010:__alloc_pages+0x2de/0x460 [ 1695.463340][T17238] Code: 0c 25 28 00 00 00 48 3b 8c 24 a0 00 00 00 0f 85 a0 00 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 c6 05 05 20 64 0c 01 <0f> 0b eb a5 a9 00 00 08 00 8b 74 24 0c 75 3e 44 89 f1 81 e1 7f ff [ 1695.482965][T17238] RSP: 0018:ffffc90003c47a80 EFLAGS: 00010246 [ 1695.489051][T17238] RAX: ffffc90003c47a00 RBX: 1ffff92000788f54 RCX: 0000000000000000 [ 1695.497039][T17238] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffc90003c47ae8 [ 1695.505021][T17238] RBP: ffffc90003c47b80 R08: ffffc90003c47ae7 R09: 0000000000000000 [ 1695.513009][T17238] R10: ffffc90003c47ac0 R11: fffff52000788f5d R12: 000000000000002a [ 1695.520997][T17238] R13: 0000000000000000 R14: 0000000000040d40 R15: dffffc0000000000 [ 1695.529006][T17238] ? zone_statistics+0x170/0x170 [ 1695.534065][T17238] ? v9fs_fid_find+0x270/0x270 [ 1695.538953][T17238] __kmalloc_large_node+0x8c/0x1e0 [ 1695.544096][T17238] ? v9fs_fid_get_acl+0x4f/0xf0 [ 1695.548985][T17238] __kmalloc+0x111/0x240 [ 1695.553251][T17238] v9fs_fid_get_acl+0x4f/0xf0 [ 1695.557954][T17238] v9fs_get_acl+0x9a/0x350 [ 1695.562392][T17238] v9fs_mount+0x862/0xb40 [ 1695.566748][T17238] ? xfs_fs_commit_blocks+0x6c0/0x6c0 [ 1695.572170][T17238] legacy_get_tree+0xea/0x180 [ 1695.576864][T17238] ? xfs_fs_commit_blocks+0x6c0/0x6c0 [ 1695.582264][T17238] vfs_get_tree+0x8c/0x280 [ 1695.586784][T17238] do_new_mount+0x24b/0xa40 [ 1695.591328][T17238] __se_sys_mount+0x2da/0x3c0 [ 1695.596045][T17238] ? __x64_sys_mount+0xc0/0xc0 [ 1695.600841][T17238] ? lockdep_hardirqs_on+0x98/0x150 [ 1695.606073][T17238] ? __x64_sys_mount+0x20/0xc0 [ 1695.610868][T17238] do_syscall_64+0x55/0xb0 [ 1695.615312][T17238] ? clear_bhb_loop+0x40/0x90 [ 1695.620002][T17238] ? clear_bhb_loop+0x40/0x90 [ 1695.624702][T17238] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1695.630622][T17238] RIP: 0033:0x7f1c1958e9a9 [ 1695.635054][T17238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1695.654674][T17238] RSP: 002b:00007f1c1a47b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1695.663142][T17238] RAX: ffffffffffffffda RBX: 00007f1c197b5fa0 RCX: 00007f1c1958e9a9 [ 1695.671133][T17238] RDX: 0000200000000b80 RSI: 00002000000003c0 RDI: 0000000000000000 [ 1695.679119][T17238] RBP: 00007f1c19610d69 R08: 0000200000000500 R09: 0000000000000000 [ 1695.687103][T17238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1695.695087][T17238] R13: 0000000000000000 R14: 00007f1c197b5fa0 R15: 00007ffdcbe6c898 [ 1695.703089][T17238] [ 1695.706478][T17238] Kernel Offset: disabled [ 1695.710915][T17238] Rebooting in 86400 seconds..