last executing test programs: 46.776821081s ago: executing program 1 (id=19): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 46.242991281s ago: executing program 1 (id=22): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000000180)="d2", 0x1}], 0x1}}], 0x1, 0x4000001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000fef000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x40) 46.063212405s ago: executing program 1 (id=24): r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000002080)={0x200f, {"1ae30a30ed0d09f91b5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f363063030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c526db51b1b5b31070d0773090acd3b78130daa61d8e8040001000000b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19300305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f6709000000a141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a027d5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf050000008000000000f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b3f3f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7af1d0e54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c01008e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2f5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d21488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e1a63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e09d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a603336c00000077cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046ca5b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe6531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e6586df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59555e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0d8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb601203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000930dedf800", 0x1000}}, 0x1006) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$sndseq(r0, &(0x7f0000001a80)=[{0x9, 0xc8, 0xd, 0xd2, @time={0x7, 0x1}, {0x9, 0xe}, {0x10, 0x8}, @note={0x7f, 0x2, 0x1, 0x6, 0x80000}}], 0x1c) 45.625507773s ago: executing program 1 (id=30): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x557, &(0x7f0000000280)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000080)=""/109, 0x6d) lseek(r0, 0x3, 0x1) 45.383032348s ago: executing program 1 (id=32): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) 44.626727383s ago: executing program 1 (id=36): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 44.389336887s ago: executing program 32 (id=36): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r3, 0x325, 0x0, 0x0, {0x8}}, 0x14}}, 0x0) 4.938538085s ago: executing program 0 (id=237): socket$nl_generic(0x10, 0x3, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000240)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 4.787594088s ago: executing program 3 (id=238): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r1, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r1, 0x1) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780), 0x0, &(0x7f00000008c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 4.69377565s ago: executing program 0 (id=239): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) fstatfs(r0, 0x0) 4.564311012s ago: executing program 0 (id=240): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000008c0)={r1, 0x10, "83cd73d913625563f3877450d9e218b0"}, &(0x7f0000000340)=0x18) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000580)={r2}, &(0x7f0000000000)=0x8) 4.380315906s ago: executing program 4 (id=241): r0 = fsopen(&(0x7f0000000180)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r2, 0x0, 0x0) 4.20392267s ago: executing program 4 (id=242): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000340), 0x129202, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000000)=0xd) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f00000000c0)=0x2000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x12, r0, 0xcc8c8000) write$binfmt_elf32(r0, 0x0, 0x4cd) 4.130162651s ago: executing program 2 (id=243): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x111, &(0x7f00000002c0)={0x0, 0x20, 0x100, 0x1, 0x260}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x20}) io_uring_enter(r2, 0x8aa, 0x0, 0x0, 0x0, 0x0) 3.995214223s ago: executing program 4 (id=244): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.931059775s ago: executing program 2 (id=245): prlimit64(0x0, 0xe, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@metadata_ratio={'metadata_ratio', 0x3d, 0x2}}, {}, {@compress_force}, {@nodiscard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@compress}, {@usebackuproot}]}, 0x1, 0x50f3, &(0x7f000000f3c0)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) rename(&(0x7f00000000c0)='./file5\x00', &(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r0, &(0x7f0000000040), 0xe09) 3.858881046s ago: executing program 4 (id=246): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) 3.748351488s ago: executing program 4 (id=247): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/73, 0x49) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 3.6447172s ago: executing program 3 (id=248): mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000b72000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19) 3.549516962s ago: executing program 0 (id=249): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0x4, 0x0, 0xffffffff, 0x1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 3.353623626s ago: executing program 0 (id=250): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000a40)={[{@nodiscard}, {@compress_cache}, {@discard_unit_section}, {@alloc_mode_reuse}, {@checkpoint_diasble}, {@background_gc_on}, {@background_gc_on}, {@four_active_logs}, {@fsync_mode_posix}, {@block_mode}, {@data_flush}, {@heap}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x550f, &(0x7f000000cf00)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r1, 0x0) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000e40)={0x30, 0x5, 0x0, {0x0, 0x6, 0x5, 0x38a2}}, 0x30) 2.792292777s ago: executing program 3 (id=251): sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000001701000003000000010000000000000018"], 0x30, 0x20000004}], 0x1, 0x40080) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b1", 0x1) sendmmsg$alg(r1, &(0x7f0000001580), 0x49249249249256f, 0x40484) 2.345093445s ago: executing program 3 (id=252): pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x21c91c, &(0x7f0000000900)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@noblock_validity}, {@jqfmt_vfsv1}, {@nodelalloc}, {@errors_remount}, {@nomblk_io_submit}, {@usrjquota}, {@minixdf}, {@resgid, 0x32}]}, 0x1e, 0x4e0, &(0x7f0000001a40)="$eJzs3d9rW9cdAPDvla0sP5zZYXvIAsvCkmGHLZIdL4nZQ7bB2J4C27L3zLNlYyxbxpKT2ITNYX/AYIy10Kc+9aXQP6BQ8ieUQqB9L21pKW3SPhTaRkVXUuI4UuwQWUqtzweOdO7Rvfqeo4uO7rn3cBVA3zoVEacj4kG1Wj0bEcON8kwjxWY91da7f+/WTC0lUa1e/SyJSOpltdXGtrznkcZmByPir3+K+EfyZNzy+sbidLFYWG0s5ytLK/ny+sa5haXp+cJ8YXlycuLi1KWpC1PjHWnnUERc/sNH///Pa3+8/Navbrx/7ZOxfyaN8ohH7ei0etOz6WfRNBgRq3sRrEcG0xYCAPB90DzO/3lEnI3hGEiP5gAAAID9pPrbofgmiagCAAAA+1YmnQObZHKNeQBDkcnkcvU5vD+Ow5liqVz55VxpbXm2Pld2JLKZuYViYbwxV3gksklteSLNP1o+v215MiKORcT/hg+ly7mZUnG21yc/AAAAoE8c2Tb+/3K4Pv7f4uueVQ4AAADonJFeVwAAAADYc8b/AAAAsP8Z/wMAAMC+9ucrV2qp2vz/69nr62uLpevnZgvlxdzS2kxuprS6kpsvlebTe/Yt7fR+xVJp5dexvHYzXymUK/ny+sa1pdLacuXawmN/gQ0AAAB00bGf3XkviYjN3xxKU82BXlcK6IrBZ1n5w72rB9B9A72uANAzz/T7D+wr2V5XAOi5ZIfX207eebvzdQEAAPbG6E9aX/8f2PHcwGamS1UE9ojzf9C/XP+H/uX6P/SvbAyEgTz0t51uAfr81/+r1WeqEAAA0HFDaUoyuYj0PMBQZDK5XMTRdEyQTeYWioXxiPhhRLw7nP1BbXki3TLZcc4wAAAAAAAAAAAAAAAAAAAAAAAAAFBXrSZRBQAAAPa1iMzHSXo3/4jR4TND288PHEi+Gk6fI+LGK1dfujldqaxO1Mo/f1heeblRfr4XZzAAAACA7Zrj9OY4HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA66f69WzPN1M24n/4+IkZaxR+Mg+nzwchGxOEvkhjcsl0SEQMdiL95OyKOt4qf1KoVI41atIp/qMfxj3QgPvSzO7X+53etvn+ZOJU+t/7+XUx7qOfXvv/LPOz/BlrEr5Ud3WWME3ffyLeNfzvixGDr/qcZP2nT/5zeZfy//21jo91r1VcjRlv+/iSPxcpXllby5fWNcwtL0/OF+cLy5OTExalLUxemxvNzC8VC47FljP/+9M0HT2v/4TbxR3Zo/5ldtv/buzfv/aiezT7cPHkUf+x06/1/vE38TGP//6KRr70+2sxv1vNbnXz9nZNPa/9sm/bvtP/Hdtn+s3/59we7XBUA6ILy+sbidLFYWO3rzHN9GrXDoheiFS9mpva5vgDVaJn51x68c+3IvNft6kSmp90SAACwB54cAwMAAAAAAAAAAAAAAAAAAADd1o3biWW3xdxMHztx93wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgM75LgAA///6fNJN") bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x30) 1.716850647s ago: executing program 2 (id=253): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x80, 0x3, 0x1b}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0xc, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x842a}}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r0, 0x18, &(0x7f0000000040)={0x0, r0, 0x31, {0x5, 0x10001}, 0x6}, 0x1) 1.394407524s ago: executing program 0 (id=254): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000000000000014d564bf02f13acaf"]) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000680), 0x40000, 0x19) 1.393969403s ago: executing program 4 (id=255): syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000340)='./file1\x00', 0x8488, &(0x7f00000002c0), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x100) pwrite64(r0, &(0x7f00000005c0)="f11f47e4ee", 0x5, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x3a6000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x0) write(r0, &(0x7f0000000180)="ab", 0x1) 1.228382597s ago: executing program 3 (id=256): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f0000000a00)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000940)=""/3, 0x3, 0x0, 0x4, 0x0, 0x0, 0xc08}}, 0x120) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000080)=""/144, 0x90}], 0x1) 869.001253ms ago: executing program 3 (id=257): syz_usb_connect(0x3, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x200, 0x29, 0x63, 0x90, 0x10, 0x1a86, 0x752d, 0x2d4d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xe9, 0x11, 0xbd}}]}}]}}, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2802, 0x0) 647.274388ms ago: executing program 2 (id=258): syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') r0 = syz_io_uring_setup(0x186, &(0x7f0000000080)={0x0, 0x0, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x2def, 0x0, 0x0, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000240)='./file1\x00', 0x80c406, &(0x7f0000000540)=ANY=[@ANYBLOB='dots,dots,dmask=000000000200000,nodots,discard,nfs=nostale_ro,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff303030303031373737373737373756c0f39fdb37372c004c0f1208ec0c34b7df4ba1c1e6b76697434db8574db9bcaef6a61a12c3f260bebc7ac5b1b11361119b83f1cf9f686b715b8e58fd37cea6623dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7"], 0x1, 0x291, &(0x7f0000000280)="$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") umount2(&(0x7f0000000040)='.\x00', 0x2) 265.465485ms ago: executing program 2 (id=259): creat(&(0x7f0000000100)='./bus\x00', 0x8c) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000006000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000850000005000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='\x00\x00\x00\x00\x00') mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 0s ago: executing program 2 (id=260): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.25' (ED25519) to the list of known hosts. [ 81.708479][ T5777] cgroup: Unknown subsys name 'net' [ 81.881679][ T5777] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.604835][ T5777] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.212958][ T50] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.228847][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.236808][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.246986][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.255963][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.263674][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.271101][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.279852][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.287376][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.296297][ T5792] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.304428][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.311975][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.346344][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.360562][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.379700][ T5802] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.387440][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.397114][ T5800] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 85.397124][ T5802] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.414032][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.416568][ T5800] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.428691][ T5802] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 85.437376][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.445370][ T5802] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 85.456348][ T5800] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.967020][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 86.007344][ T5791] chnl_net:caif_netlink_parms(): no params data found [ 86.103304][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 86.153569][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 86.236354][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.244574][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.252068][ T5787] bridge_slave_0: entered allmulticast mode [ 86.259351][ T5787] bridge_slave_0: entered promiscuous mode [ 86.293429][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.300681][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.307985][ T5787] bridge_slave_1: entered allmulticast mode [ 86.315296][ T5787] bridge_slave_1: entered promiscuous mode [ 86.347795][ T5791] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.355209][ T5791] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.362828][ T5791] bridge_slave_0: entered allmulticast mode [ 86.369884][ T5791] bridge_slave_0: entered promiscuous mode [ 86.422264][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.429985][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.437161][ T5796] bridge_slave_0: entered allmulticast mode [ 86.445123][ T5796] bridge_slave_0: entered promiscuous mode [ 86.452789][ T5791] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.460569][ T5791] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.467741][ T5791] bridge_slave_1: entered allmulticast mode [ 86.475482][ T5791] bridge_slave_1: entered promiscuous mode [ 86.496362][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.527480][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.534883][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.542806][ T5796] bridge_slave_1: entered allmulticast mode [ 86.550172][ T5796] bridge_slave_1: entered promiscuous mode [ 86.573922][ T5791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.585512][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.646896][ T5791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.660379][ T5787] team0: Port device team_slave_0 added [ 86.666713][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.674063][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.683260][ T5790] bridge_slave_0: entered allmulticast mode [ 86.691343][ T5790] bridge_slave_0: entered promiscuous mode [ 86.699653][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.706910][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.714677][ T5790] bridge_slave_1: entered allmulticast mode [ 86.722149][ T5790] bridge_slave_1: entered promiscuous mode [ 86.744529][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.778520][ T5787] team0: Port device team_slave_1 added [ 86.812471][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.837517][ T5791] team0: Port device team_slave_0 added [ 86.847574][ T5791] team0: Port device team_slave_1 added [ 86.910260][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.917248][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.943503][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.958509][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.971011][ T5796] team0: Port device team_slave_0 added [ 86.991338][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.998314][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.024768][ T5791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.036761][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.043889][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.070096][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.091119][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.120101][ T5796] team0: Port device team_slave_1 added [ 87.140938][ T5791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.147921][ T5791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.178920][ T5791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.236026][ T5790] team0: Port device team_slave_0 added [ 87.246346][ T5790] team0: Port device team_slave_1 added [ 87.258213][ T5787] hsr_slave_0: entered promiscuous mode [ 87.265118][ T5787] hsr_slave_1: entered promiscuous mode [ 87.325014][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.332821][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.359721][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.377245][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.384673][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.411911][ T5802] Bluetooth: hci0: command tx timeout [ 87.418407][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.432390][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.439600][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.465625][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.469012][ T5802] Bluetooth: hci2: command tx timeout [ 87.482156][ T5793] Bluetooth: hci1: command tx timeout [ 87.496524][ T5791] hsr_slave_0: entered promiscuous mode [ 87.503061][ T5791] hsr_slave_1: entered promiscuous mode [ 87.509535][ T5791] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.517406][ T5791] Cannot create hsr debugfs directory [ 87.537883][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.544912][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.548827][ T5802] Bluetooth: hci3: command tx timeout [ 87.576963][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.732390][ T5796] hsr_slave_0: entered promiscuous mode [ 87.739328][ T5796] hsr_slave_1: entered promiscuous mode [ 87.745548][ T5796] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.753766][ T5796] Cannot create hsr debugfs directory [ 87.775963][ T5790] hsr_slave_0: entered promiscuous mode [ 87.782938][ T5790] hsr_slave_1: entered promiscuous mode [ 87.789292][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.796861][ T5790] Cannot create hsr debugfs directory [ 88.149794][ T5787] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.167585][ T5787] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.177623][ T5787] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.190626][ T5787] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.259402][ T5796] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.271618][ T5796] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.283993][ T5796] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.295294][ T5796] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.377883][ T5791] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.398344][ T5791] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.431069][ T5791] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.441991][ T5791] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.501026][ T5790] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.520431][ T5790] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.531939][ T5790] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.545791][ T5790] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.627803][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.681716][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.711393][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.718792][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.735390][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.758045][ T985] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.765266][ T985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.828131][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.872840][ T5791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.892343][ T985] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.899553][ T985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.929675][ T985] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.936878][ T985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.015970][ T5791] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.041135][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.068074][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.075308][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.134115][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.141298][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.167300][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.223097][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.230404][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.258508][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.265804][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.432310][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.470395][ T5802] Bluetooth: hci0: command tx timeout [ 89.549008][ T5793] Bluetooth: hci1: command tx timeout [ 89.554541][ T5802] Bluetooth: hci2: command tx timeout [ 89.583885][ T5787] veth0_vlan: entered promiscuous mode [ 89.600705][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.622126][ T5787] veth1_vlan: entered promiscuous mode [ 89.628893][ T5802] Bluetooth: hci3: command tx timeout [ 89.768191][ T5787] veth0_macvtap: entered promiscuous mode [ 89.800730][ T5787] veth1_macvtap: entered promiscuous mode [ 89.812293][ T5791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.838263][ T5796] veth0_vlan: entered promiscuous mode [ 89.863176][ T5796] veth1_vlan: entered promiscuous mode [ 89.889367][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.916680][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.942936][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.954732][ T5787] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.964650][ T5787] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.973631][ T5787] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.983576][ T5787] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.005929][ T5796] veth0_macvtap: entered promiscuous mode [ 90.050680][ T5796] veth1_macvtap: entered promiscuous mode [ 90.087693][ T5791] veth0_vlan: entered promiscuous mode [ 90.135353][ T5791] veth1_vlan: entered promiscuous mode [ 90.184159][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.196210][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.208506][ T5790] veth0_vlan: entered promiscuous mode [ 90.225895][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.237251][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.250626][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.305762][ T5790] veth1_vlan: entered promiscuous mode [ 90.313568][ T217] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.329557][ T217] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.331165][ T5796] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.348449][ T5796] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.361566][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.377217][ T5791] veth0_macvtap: entered promiscuous mode [ 90.399129][ T5796] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.407869][ T5796] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.417284][ T5796] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.427112][ T5796] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.456061][ T5791] veth1_macvtap: entered promiscuous mode [ 90.484604][ T5790] veth0_macvtap: entered promiscuous mode [ 90.536652][ T5790] veth1_macvtap: entered promiscuous mode [ 90.636260][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.647618][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.657585][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.671538][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.683435][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.707321][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.718394][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.728482][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.739500][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.749986][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.760996][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.772729][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.792204][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.802955][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.813538][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.824048][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.837934][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.853672][ T5790] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.862753][ T5790] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.872302][ T5790] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.881929][ T5790] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.896201][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.907186][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.919431][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.930150][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.940631][ T5791] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.951331][ T5791] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.963426][ T5791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.983513][ T1131] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.003098][ T1131] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.015524][ T5791] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.025940][ T5791] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.035587][ T5791] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.045111][ T5791] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.123735][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.144181][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.223404][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.247212][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.275362][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.294854][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.387889][ T5883] syz.3.4[5883]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 91.396712][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.412027][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.466631][ T1102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.504147][ T1102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.553941][ T5802] Bluetooth: hci0: command tx timeout [ 91.629820][ T5802] Bluetooth: hci2: command tx timeout [ 91.630068][ T5793] Bluetooth: hci1: command tx timeout [ 91.719480][ T5793] Bluetooth: hci3: command tx timeout [ 91.906561][ T5889] syz.0.1[5889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.906715][ T5889] syz.0.1[5889] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 91.999623][ T5889] process 'syz.0.1' launched './file0' with NULL argv: empty string added [ 92.099223][ T5883] loop3: detected capacity change from 0 to 32768 [ 92.130586][ T9] cfg80211: failed to load regulatory.db [ 92.136645][ T5883] ======================================================= [ 92.136645][ T5883] WARNING: The mand mount option has been deprecated and [ 92.136645][ T5883] and is ignored by this kernel. Remove the mand [ 92.136645][ T5883] option from the mount to silence this warning. [ 92.136645][ T5883] ======================================================= [ 92.380232][ T5883] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 92.519090][ T5885] loop1: detected capacity change from 0 to 32768 [ 92.536113][ T5885] XFS: ikeep mount option is deprecated. [ 92.542294][ T5885] XFS: ikeep mount option is deprecated. [ 92.548016][ T5885] XFS: noikeep mount option is deprecated. [ 92.569110][ T5799] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.639176][ T5885] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 92.692240][ T5905] loop2: detected capacity change from 0 to 4096 [ 92.787479][ T5905] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 92.810022][ T5799] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.857927][ T5799] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 92.900569][ T5799] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 92.947798][ T5885] XFS (loop1): Ending clean mount [ 92.955704][ T5799] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 92.997858][ T5799] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.039248][ T5799] usb 1-1: config 0 descriptor?? [ 93.051636][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.073634][ T5796] ocfs2: Unmounting device (7,3) on (node local) [ 93.239195][ T27] audit: type=1800 audit(1758927818.627:2): pid=5912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5" name="file1" dev="loop1" ino=9286 res=0 errno=0 [ 93.261222][ T5912] XFS (loop1): User initiated shutdown received. [ 93.297696][ T5912] XFS (loop1): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497). Shutting down filesystem. [ 93.363189][ T5912] XFS (loop1): Please unmount the filesystem and rectify the problem(s) [ 93.487125][ T5787] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 93.513697][ T5799] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 93.592502][ T5799] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 93.630290][ T5793] Bluetooth: hci0: command tx timeout [ 93.709261][ T5793] Bluetooth: hci2: command tx timeout [ 93.709824][ T5802] Bluetooth: hci1: command tx timeout [ 93.789477][ T5802] Bluetooth: hci3: command tx timeout [ 93.867470][ T9] usb 1-1: USB disconnect, device number 2 [ 94.217448][ T5931] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18'. [ 94.223892][ T5929] loop2: detected capacity change from 0 to 512 [ 94.239712][ T5931] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.279443][ T5929] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 94.304155][ T5929] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 94.332974][ T5929] EXT4-fs (loop2): 1 truncate cleaned up [ 94.355352][ T5929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.410658][ T5931] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.428940][ T5929] syz.2.17 (pid 5929) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 94.520878][ T5936] loop0: detected capacity change from 0 to 512 [ 94.563661][ T5790] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.644952][ T5936] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.652017][ T5940] netlink: 68 bytes leftover after parsing attributes in process `syz.2.21'. [ 94.703535][ T5936] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 95.022503][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.436354][ T5962] loop1: detected capacity change from 0 to 1024 [ 95.451277][ T5779] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 95.494041][ T5962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.602545][ T5787] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 95.615392][ T5787] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 95.627970][ T5787] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 95.643392][ T5787] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 95.656289][ T5787] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 95.670348][ T5779] usb 1-1: Using ep0 maxpacket: 8 [ 95.679759][ T5787] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 95.703012][ T5779] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 95.704799][ T5787] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 95.731542][ T5787] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 95.732873][ T5779] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 95.751999][ T5787] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 95.767285][ T5779] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 95.785680][ T5787] EXT4-fs warning (device loop1): ext4_empty_dir:3156: inode #11: comm syz-executor: directory missing '..' [ 95.788268][ T5779] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 95.838207][ T5779] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.889514][ T5779] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 95.914990][ T5779] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.154124][ T5779] usb 1-1: usb_control_msg returned -32 [ 96.161843][ T5779] usbtmc 1-1:16.0: can't read capabilities [ 96.236937][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.317063][ T1111] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.403813][ T1111] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.482611][ T1111] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.558948][ T28] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.571561][ T1111] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.758717][ T28] usb 3-1: Using ep0 maxpacket: 32 [ 96.784270][ T28] usb 3-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 96.822414][ T5980] loop3: detected capacity change from 0 to 64 [ 96.826376][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.849617][ T28] usb 3-1: Product: syz [ 96.853842][ T28] usb 3-1: Manufacturer: syz [ 96.858479][ T28] usb 3-1: SerialNumber: syz [ 96.929979][ T28] usb 3-1: config 0 descriptor?? [ 96.951472][ T28] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 96.993419][ T5984] usbtmc 1-1:16.0: usb_control_msg returned -32 [ 97.199044][ T5779] usb 1-1: USB disconnect, device number 3 [ 97.460919][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.479134][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.489345][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.548211][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.556237][ T5793] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.563913][ T5793] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.918729][ T5779] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 98.119118][ T5779] usb 4-1: Using ep0 maxpacket: 32 [ 98.130491][ T5779] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.141666][ T5779] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.152569][ T5779] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 98.162450][ T5779] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.179776][ T5779] usb 4-1: config 0 descriptor?? [ 98.190424][ T28] gspca_topro: reg_w err -71 [ 98.239640][ T28] gspca_topro: Sensor soi763a [ 98.247759][ T6009] overlayfs: refusing to follow metacopy origin for (/file1) [ 98.273076][ T28] usb 3-1: USB disconnect, device number 2 [ 98.561244][ T5991] chnl_net:caif_netlink_parms(): no params data found [ 98.687335][ T5779] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 98.782279][ T1111] hsr_slave_0: left promiscuous mode [ 98.823535][ T1111] hsr_slave_1: left promiscuous mode [ 98.874002][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.918402][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.943777][ T9] usb 4-1: USB disconnect, device number 2 [ 98.961325][ T1111] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.008876][ T1111] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.051190][ T1111] bridge_slave_1: left allmulticast mode [ 99.078688][ T1111] bridge_slave_1: left promiscuous mode [ 99.090940][ T1111] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.141848][ T1111] bridge_slave_0: left allmulticast mode [ 99.147594][ T1111] bridge_slave_0: left promiscuous mode [ 99.172116][ T1111] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.322925][ T1111] veth1_macvtap: left promiscuous mode [ 99.333272][ T1111] veth0_macvtap: left promiscuous mode [ 99.343328][ T1111] veth1_vlan: left promiscuous mode [ 99.353554][ T1111] veth0_vlan: left promiscuous mode [ 99.630967][ T5793] Bluetooth: hci0: command tx timeout [ 100.163709][ T6052] loop2: detected capacity change from 0 to 4096 [ 100.269943][ T6037] loop0: detected capacity change from 0 to 40427 [ 100.279927][ T6053] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.293343][ T6052] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 100.311525][ T6037] F2FS-fs (loop0): Wrong NAT boundary, start(2560) end(3584) blocks(512) [ 100.342022][ T6052] NILFS (loop2): mounting fs with errors [ 100.346858][ T6037] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 100.374482][ T6037] F2FS-fs (loop0): invalid crc value [ 100.406382][ T6037] F2FS-fs (loop0): Found nat_bits in checkpoint [ 100.480887][ T27] audit: type=1800 audit(1758927825.887:3): pid=6052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.53" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 100.579558][ T6037] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 100.587031][ T6037] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 100.698769][ T27] audit: type=1800 audit(1758927826.097:4): pid=6037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.48" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 100.831561][ T5791] syz-executor: attempt to access beyond end of device [ 100.831561][ T5791] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 100.862797][ T5791] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 101.040001][ T1111] team0 (unregistering): Port device team_slave_1 removed [ 101.104674][ T1111] team0 (unregistering): Port device team_slave_0 removed [ 101.180936][ T1111] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.263815][ T1111] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.550620][ T6065] syz.0.55 uses obsolete (PF_INET,SOCK_PACKET) [ 101.713698][ T5793] Bluetooth: hci0: command tx timeout [ 101.854873][ T1111] bond0 (unregistering): Released all slaves [ 102.208809][ T5991] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.226355][ T5991] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.241983][ T6074] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 102.260548][ T5991] bridge_slave_0: entered allmulticast mode [ 102.268023][ T5991] bridge_slave_0: entered promiscuous mode [ 102.280046][ T5991] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.295477][ T5991] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.302818][ T5991] bridge_slave_1: entered allmulticast mode [ 102.316569][ T5991] bridge_slave_1: entered promiscuous mode [ 102.485491][ T5991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.527603][ T5991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.697850][ T5991] team0: Port device team_slave_0 added [ 102.738315][ T5991] team0: Port device team_slave_1 added [ 102.824631][ T5991] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.839443][ T5991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.875189][ T5991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.899965][ T5991] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.914573][ T5991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.965176][ T5991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.099642][ T786] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.204214][ T5991] hsr_slave_0: entered promiscuous mode [ 103.223310][ T5991] hsr_slave_1: entered promiscuous mode [ 103.318701][ T786] usb 3-1: Using ep0 maxpacket: 8 [ 103.358998][ T786] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.398678][ T786] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 103.407673][ T786] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 103.452786][ T786] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 103.474553][ T786] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 103.496846][ T786] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.550245][ T786] hub 3-1:1.0: bad descriptor, ignoring hub [ 103.573864][ T786] hub: probe of 3-1:1.0 failed with error -5 [ 103.602708][ T786] cdc_wdm 3-1:1.0: skipping garbage [ 103.607981][ T786] cdc_wdm 3-1:1.0: skipping garbage [ 103.647642][ T786] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 103.667389][ T786] cdc_wdm 3-1:1.0: Unknown control protocol [ 103.738716][ T5859] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 103.776662][ T5991] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.788723][ T5793] Bluetooth: hci0: command tx timeout [ 103.816245][ T5991] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.826994][ T5991] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.845822][ T5991] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.861723][ T6118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.898167][ T6118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.939399][ T5859] usb 4-1: Using ep0 maxpacket: 32 [ 103.953752][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.978653][ T5859] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.000928][ T5799] usb 3-1: USB disconnect, device number 3 [ 104.018210][ T5859] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 104.038967][ T5859] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.050221][ T5859] usb 4-1: config 0 descriptor?? [ 104.079091][ T5859] hub 4-1:0.0: USB hub found [ 104.183021][ T5991] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.233977][ T5991] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.252257][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.259509][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.292676][ T5859] hub 4-1:0.0: 1 port detected [ 104.370813][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.378002][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.523193][ T5991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 104.988090][ T8] hub 4-1:0.0: activate --> -90 [ 105.123111][ T5991] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.396249][ T5859] usb 4-1: USB disconnect, device number 3 [ 105.753140][ T6165] loop0: detected capacity change from 0 to 8192 [ 105.815335][ T6165] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 105.832276][ T6165] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 105.862058][ T6165] REISERFS (device loop0): using ordered data mode [ 105.878938][ T5793] Bluetooth: hci0: command tx timeout [ 105.906473][ T6165] reiserfs: using flush barriers [ 105.958733][ T6165] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 106.095755][ T6165] REISERFS (device loop0): checking transaction log (loop0) [ 106.133894][ T5991] veth0_vlan: entered promiscuous mode [ 106.165528][ T6165] REISERFS (device loop0): Using r5 hash to sort names [ 106.203702][ T5991] veth1_vlan: entered promiscuous mode [ 106.226756][ T6165] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 106.310720][ T6165] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 106.353716][ T5991] veth0_macvtap: entered promiscuous mode [ 106.394591][ T5991] veth1_macvtap: entered promiscuous mode [ 106.488506][ T5991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.534050][ T5991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.568628][ T5991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.594118][ T5991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.614317][ T5991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.641258][ T5991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.672004][ T5991] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.698229][ T5991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.723764][ T5991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.738637][ T5991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.763012][ T5991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.798363][ T5991] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.823938][ T5991] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.864274][ T5991] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.908842][ T5991] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.917609][ T5991] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.140808][ T6193] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.150133][ T6193] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.159419][ T6193] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.169103][ T6193] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.226250][ T6193] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.235722][ T6193] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.244797][ T6193] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.253773][ T6193] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 107.359629][ T6193] Zero length message leads to an empty skb [ 107.423567][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.452131][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.469000][ T5799] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 107.523157][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.543391][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.678644][ T5799] usb 1-1: Using ep0 maxpacket: 32 [ 107.713672][ T5799] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 107.743361][ T5799] usb 1-1: config 0 has no interface number 0 [ 107.762882][ T5799] usb 1-1: config 0 interface 184 has no altsetting 0 [ 107.796039][ T5799] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 107.815120][ T5799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.835316][ T5799] usb 1-1: Product: syz [ 107.840055][ T5799] usb 1-1: Manufacturer: syz [ 107.857788][ T5799] usb 1-1: SerialNumber: syz [ 107.884469][ T5799] usb 1-1: config 0 descriptor?? [ 107.914763][ T5799] smsc75xx v1.0.0 [ 108.006691][ T6196] loop2: detected capacity change from 0 to 32768 [ 108.066335][ T6196] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 108.118743][ T23] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 108.187396][ T6196] XFS (loop2): Ending clean mount [ 108.199046][ T966] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 108.285006][ T6196] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 108.331472][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.348860][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 108.376764][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.399105][ T966] usb 4-1: Using ep0 maxpacket: 16 [ 108.408966][ T23] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.430540][ T966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.451997][ T966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.461938][ T23] usb 5-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice= 0.00 [ 108.489500][ T966] usb 4-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00 [ 108.500681][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.512983][ T6196] syz.2.85 (6196) used greatest stack depth: 19728 bytes left [ 108.518731][ T966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.535559][ T5790] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 108.539762][ T23] usb 5-1: config 0 descriptor?? [ 108.567809][ T966] usb 4-1: config 0 descriptor?? [ 108.583186][ T5799] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 108.658778][ T5799] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 109.015712][ T23] apple 0003:05AC:0225.0003: unknown main item tag 0x0 [ 109.033197][ T23] apple 0003:05AC:0225.0003: item fetching failed at offset 3/5 [ 109.059748][ T23] apple 0003:05AC:0225.0003: parse failed [ 109.075232][ T966] playstation 0003:054C:05C4.0004: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.3-1/input0 [ 109.087116][ T23] apple: probe of 0003:05AC:0225.0003 failed with error -22 [ 109.099692][ T5799] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 109.140929][ T5799] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 109.180136][ T5799] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 109.205691][ T5799] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 109.259522][ T5799] usb 1-1: USB disconnect, device number 4 [ 109.489873][ T6245] input: syz1 as /devices/virtual/input/input6 [ 109.655285][ T966] playstation 0003:054C:05C4.0004: Failed to retrieve feature with reportID 2: -71 [ 109.690438][ T966] playstation 0003:054C:05C4.0004: Retrying DualShock 4 get calibration report (0x02) request [ 109.728440][ T966] playstation 0003:054C:05C4.0004: Failed to retrieve feature with reportID 2: -71 [ 109.778682][ T966] playstation 0003:054C:05C4.0004: Retrying DualShock 4 get calibration report (0x02) request [ 109.818752][ T966] playstation 0003:054C:05C4.0004: Failed to retrieve feature with reportID 2: -71 [ 109.841535][ T966] playstation 0003:054C:05C4.0004: Failed to retrieve DualShock4 calibration info: -71 [ 109.862350][ T966] playstation 0003:054C:05C4.0004: Failed to get calibration data from DualShock4 [ 109.888767][ T966] playstation 0003:054C:05C4.0004: Failed to create dualshock4. [ 109.909414][ T966] playstation: probe of 0003:054C:05C4.0004 failed with error -84 [ 109.980815][ T966] usb 4-1: USB disconnect, device number 4 [ 110.001697][ T5779] usb 5-1: USB disconnect, device number 2 [ 110.500298][ T6266] loop2: detected capacity change from 0 to 1024 [ 111.217749][ T6260] loop0: detected capacity change from 0 to 32768 [ 111.329008][ T6260] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 111.414995][ T6286] loop4: detected capacity change from 0 to 8192 [ 111.590935][ T6260] XFS (loop0): Ending clean mount [ 111.643298][ T6260] XFS (loop0): Quotacheck needed: Please wait. [ 111.806086][ T6260] XFS (loop0): Quotacheck: Done. [ 112.024301][ T6302] loop3: detected capacity change from 0 to 128 [ 112.058065][ T6302] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 112.120738][ T6302] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 112.227593][ T5791] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 112.237107][ T6307] IPv4: Oversized IP packet from 127.202.26.0 [ 112.478369][ T12] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 114.167680][ T6327] loop0: detected capacity change from 0 to 64 [ 114.186661][ T6328] Bluetooth: MGMT ver 1.22 [ 114.206929][ T6328] Bluetooth: hci0: invalid length 1, exp 2 for type 2 [ 114.319883][ T6327] Trying to free block not in datazone [ 114.329067][ T6327] Trying to free block not in datazone [ 114.334573][ T6327] Trying to free block not in datazone [ 114.351824][ T6310] loop2: detected capacity change from 0 to 32768 [ 114.383949][ T6327] Trying to free block not in datazone [ 114.423164][ T6310] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.107 (6310) [ 114.450567][ T6327] Trying to free block not in datazone [ 114.467865][ T6327] Trying to free block not in datazone [ 114.486733][ T6327] Trying to free block not in datazone [ 114.509402][ T6327] Trying to free block not in datazone [ 114.531080][ T6327] Trying to free block not in datazone [ 114.551587][ T6327] Trying to free block not in datazone [ 114.566120][ T6327] Trying to free block not in datazone [ 114.583134][ T6310] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 114.592577][ T6327] Trying to free block not in datazone [ 114.613144][ T6327] Trying to free block not in datazone [ 114.617019][ T6310] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 114.636150][ T6310] BTRFS info (device loop2): setting nodatacow, compression disabled [ 114.645439][ T6327] Trying to free block not in datazone [ 114.661605][ T6310] BTRFS info (device loop2): max_inline at 0 [ 114.675932][ T6310] BTRFS info (device loop2): enabling disk space caching [ 114.678657][ T6327] Trying to free block not in datazone [ 114.695512][ T6310] BTRFS info (device loop2): turning off barriers [ 114.702310][ T6327] Trying to free block not in datazone [ 114.718759][ T6327] Trying to free block not in datazone [ 114.724284][ T6327] Trying to free block not in datazone [ 114.738616][ T6310] BTRFS info (device loop2): turning on flush-on-commit [ 114.745621][ T6310] BTRFS info (device loop2): doing ref verification [ 114.759291][ T6327] Trying to free block not in datazone [ 114.765094][ T6327] Trying to free block not in datazone [ 114.773176][ T6310] BTRFS info (device loop2): force clearing of disk cache [ 114.787682][ T6327] Trying to free block not in datazone [ 114.799460][ T6310] BTRFS info (device loop2): enabling ssd optimizations [ 114.806513][ T6310] BTRFS info (device loop2): max_inline at 4096 [ 114.812443][ T6327] Trying to free block not in datazone [ 114.819391][ T6310] BTRFS info (device loop2): disk space caching is enabled [ 114.847427][ T6327] Trying to free block not in datazone [ 114.860076][ T6327] Trying to free block not in datazone [ 114.866169][ T6327] Trying to free block not in datazone [ 114.887636][ T6327] Trying to free block not in datazone [ 114.910000][ T6327] Trying to free block not in datazone [ 114.917355][ T6327] Trying to free block not in datazone [ 114.924822][ T6327] Trying to free block not in datazone [ 114.931563][ T6327] Trying to free block not in datazone [ 114.937511][ T6327] Trying to free block not in datazone [ 114.945325][ T6327] Trying to free block not in datazone [ 114.951864][ T6327] Trying to free block not in datazone [ 114.957594][ T6327] Trying to free block not in datazone [ 114.964237][ T6327] Trying to free block not in datazone [ 114.971236][ T6327] Trying to free block not in datazone [ 114.976837][ T6327] Trying to free block not in datazone [ 114.982822][ T6327] Trying to free block not in datazone [ 114.988347][ T6327] Trying to free block not in datazone [ 114.998522][ T6327] Trying to free block not in datazone [ 115.004384][ T6327] Trying to free block not in datazone [ 115.010246][ T6327] Trying to free block not in datazone [ 115.015894][ T6327] Trying to free block not in datazone [ 115.021817][ T6327] Trying to free block not in datazone [ 115.027462][ T6327] Trying to free block not in datazone [ 115.033387][ T6327] Trying to free block not in datazone [ 115.039806][ T6327] Trying to free block not in datazone [ 115.046712][ T6327] Trying to free block not in datazone [ 115.046750][ T6310] BTRFS info (device loop2): auto enabling async discard [ 115.054668][ T6327] Trying to free block not in datazone [ 115.065446][ T6327] Trying to free block not in datazone [ 115.071320][ T6327] Trying to free block not in datazone [ 115.077114][ T6327] Trying to free block not in datazone [ 115.083086][ T6327] Trying to free block not in datazone [ 115.088979][ T6327] Trying to free block not in datazone [ 115.094478][ T6327] Trying to free block not in datazone [ 115.100430][ T6327] Trying to free block not in datazone [ 115.105930][ T6327] Trying to free block not in datazone [ 115.118634][ T6327] Trying to free block not in datazone [ 115.124952][ T6310] BTRFS info (device loop2): rebuilding free space tree [ 115.155594][ T6327] Trying to free block not in datazone [ 115.172559][ T6327] Trying to free block not in datazone [ 115.199106][ T6327] Trying to free block not in datazone [ 115.204628][ T6327] Trying to free block not in datazone [ 115.228912][ T6327] Trying to free block not in datazone [ 115.234427][ T6327] Trying to free block not in datazone [ 115.259148][ T6310] BTRFS info (device loop2): disabling free space tree [ 115.266167][ T6327] Trying to free block not in datazone [ 115.276407][ T6310] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 115.288193][ T6327] Trying to free block not in datazone [ 115.308127][ T6327] Trying to free block not in datazone [ 115.314046][ T6310] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 115.324405][ T6327] Trying to free block not in datazone [ 115.334947][ T6327] Trying to free block not in datazone [ 115.355237][ T6327] Trying to free block not in datazone [ 115.388600][ T6327] Trying to free block not in datazone [ 115.394169][ T6327] Trying to free block not in datazone [ 115.427808][ T6327] Trying to free block not in datazone [ 115.452072][ T6327] Trying to free block not in datazone [ 115.458406][ T6327] Trying to free block not in datazone [ 115.498968][ T6327] Trying to free block not in datazone [ 115.504490][ T6327] Trying to free block not in datazone [ 115.528142][ T6327] Trying to free block not in datazone [ 115.534552][ T6327] Trying to free block not in datazone [ 115.535815][ T5790] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 115.544382][ T6324] loop3: detected capacity change from 0 to 40427 [ 115.558515][ T6327] Trying to free block not in datazone [ 115.564886][ T6327] Trying to free block not in datazone [ 115.575051][ T6327] Trying to free block not in datazone [ 115.590678][ T6327] Trying to free block not in datazone [ 115.607055][ T6327] Trying to free block not in datazone [ 115.612684][ T6324] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 115.626963][ T6327] Trying to free block not in datazone [ 115.633012][ T6324] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 115.641375][ T6327] Trying to free block not in datazone [ 115.663378][ T6327] Trying to free block not in datazone [ 115.691011][ T6327] Trying to free block not in datazone [ 115.705951][ T6327] Trying to free block not in datazone [ 115.730428][ T6327] Trying to free block not in datazone [ 115.744979][ T6327] Trying to free block not in datazone [ 115.754616][ T6324] F2FS-fs (loop3): Found nat_bits in checkpoint [ 115.761151][ T6327] Trying to free block not in datazone [ 115.767546][ T6327] Trying to free block not in datazone [ 115.797238][ T6327] Trying to free block not in datazone [ 115.819134][ T6327] Trying to free block not in datazone [ 115.824654][ T6327] Trying to free block not in datazone [ 115.862843][ T6327] Trying to free block not in datazone [ 115.879968][ T6327] Trying to free block not in datazone [ 115.885494][ T6327] Trying to free block not in datazone [ 115.930983][ T6327] Trying to free block not in datazone [ 115.956725][ T6327] Trying to free block not in datazone [ 115.999762][ T6324] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 116.006976][ T6324] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 116.014931][ T6327] Trying to free block not in datazone [ 116.033679][ T6327] Trying to free block not in datazone [ 116.058724][ T6327] Trying to free block not in datazone [ 116.064244][ T6327] Trying to free block not in datazone [ 116.094401][ T6327] Trying to free block not in datazone [ 116.121775][ T6327] Trying to free block not in datazone [ 116.127298][ T6327] Trying to free block not in datazone [ 116.151848][ T6327] Trying to free block not in datazone [ 116.157366][ T6327] Trying to free block not in datazone [ 116.191924][ T6327] Trying to free block not in datazone [ 116.197453][ T6327] Trying to free block not in datazone [ 116.259496][ T6327] Trying to free block not in datazone [ 116.272000][ T6327] Trying to free block not in datazone [ 116.296550][ T6327] Trying to free block not in datazone [ 116.302591][ T6327] Trying to free block not in datazone [ 116.308228][ T6327] Trying to free block not in datazone [ 116.314364][ T6327] Trying to free block not in datazone [ 116.322820][ T6327] Trying to free block not in datazone [ 116.328337][ T6327] Trying to free block not in datazone [ 116.345229][ T6327] Trying to free block not in datazone [ 116.355574][ T6327] Trying to free block not in datazone [ 116.368732][ T6327] Trying to free block not in datazone [ 116.384816][ T6327] Trying to free block not in datazone [ 116.392160][ T6327] Trying to free block not in datazone [ 116.397745][ T6327] Trying to free block not in datazone [ 116.405834][ T6327] Trying to free block not in datazone [ 116.411950][ T6327] Trying to free block not in datazone [ 116.417630][ T6327] Trying to free block not in datazone [ 116.423734][ T6327] Trying to free block not in datazone [ 116.437450][ T6327] Trying to free block not in datazone [ 116.446843][ T6327] Trying to free block not in datazone [ 116.457183][ T6327] Trying to free block not in datazone [ 116.497501][ T6327] Trying to free block not in datazone [ 116.507688][ T6327] Trying to free block not in datazone [ 116.516361][ T6327] Trying to free block not in datazone [ 116.532351][ T6327] Trying to free block not in datazone [ 116.537868][ T6327] Trying to free block not in datazone [ 116.543630][ T966] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 116.569697][ T6327] Trying to free block not in datazone [ 116.575217][ T6327] Trying to free block not in datazone [ 116.610010][ T6327] Trying to free block not in datazone [ 116.615623][ T6327] Trying to free block not in datazone [ 116.621965][ T6327] Trying to free block not in datazone [ 116.627593][ T6327] Trying to free block not in datazone [ 116.634042][ T6327] Trying to free block not in datazone [ 116.640083][ T6327] Trying to free block not in datazone [ 116.645602][ T6327] Trying to free block not in datazone [ 116.651525][ T6327] Trying to free block not in datazone [ 116.657132][ T6327] Trying to free block not in datazone [ 116.663908][ T6327] Trying to free block not in datazone [ 116.669972][ T6327] Trying to free block not in datazone [ 116.675643][ T6327] Trying to free block not in datazone [ 116.681528][ T6327] Trying to free block not in datazone [ 116.688099][ T6327] Trying to free block not in datazone [ 116.701310][ T6327] Trying to free block not in datazone [ 116.706892][ T6327] Trying to free block not in datazone [ 116.714074][ T6327] Trying to free block not in datazone [ 116.722997][ T6327] Trying to free block not in datazone [ 116.730024][ T6327] Trying to free block not in datazone [ 116.735589][ T6327] Trying to free block not in datazone [ 116.744756][ T6327] Trying to free block not in datazone [ 116.753919][ T6327] Trying to free block not in datazone [ 116.760807][ T966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.772026][ T6327] Trying to free block not in datazone [ 116.777592][ T966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.787816][ T6327] Trying to free block not in datazone [ 116.787827][ T6327] Trying to free block not in datazone [ 116.787835][ T6327] Trying to free block not in datazone [ 116.787843][ T6327] Trying to free block not in datazone [ 116.787850][ T6327] Trying to free block not in datazone [ 116.787858][ T6327] Trying to free block not in datazone [ 116.787865][ T6327] Trying to free block not in datazone [ 116.787873][ T6327] Trying to free block not in datazone [ 116.787880][ T6327] Trying to free block not in datazone [ 116.787888][ T6327] Trying to free block not in datazone [ 116.787896][ T6327] Trying to free block not in datazone [ 116.787903][ T6327] Trying to free block not in datazone [ 116.787911][ T6327] Trying to free block not in datazone [ 116.787918][ T6327] Trying to free block not in datazone [ 116.787926][ T6327] Trying to free block not in datazone [ 116.787933][ T6327] Trying to free block not in datazone [ 116.787941][ T6327] Trying to free block not in datazone [ 116.787948][ T6327] Trying to free block not in datazone [ 116.787956][ T6327] Trying to free block not in datazone [ 116.787963][ T6327] Trying to free block not in datazone [ 116.787971][ T6327] Trying to free block not in datazone [ 116.787978][ T6327] Trying to free block not in datazone [ 116.787986][ T6327] Trying to free block not in datazone [ 116.787993][ T6327] Trying to free block not in datazone [ 116.788001][ T6327] Trying to free block not in datazone [ 116.788009][ T6327] Trying to free block not in datazone [ 116.788016][ T6327] Trying to free block not in datazone [ 116.788024][ T6327] Trying to free block not in datazone [ 116.788031][ T6327] Trying to free block not in datazone [ 116.788039][ T6327] Trying to free block not in datazone [ 116.788046][ T6327] Trying to free block not in datazone [ 116.788054][ T6327] Trying to free block not in datazone [ 116.788061][ T6327] Trying to free block not in datazone [ 116.788069][ T6327] Trying to free block not in datazone [ 116.788076][ T6327] Trying to free block not in datazone [ 116.788083][ T6327] Trying to free block not in datazone [ 116.788091][ T6327] Trying to free block not in datazone [ 116.788098][ T6327] Trying to free block not in datazone [ 116.788105][ T6327] Trying to free block not in datazone [ 116.788112][ T6327] Trying to free block not in datazone [ 116.788119][ T6327] Trying to free block not in datazone [ 116.788127][ T6327] Trying to free block not in datazone [ 116.799699][ T966] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 116.799729][ T966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.876686][ T966] usb 5-1: config 0 descriptor?? [ 116.876970][ T6327] Trying to free block not in datazone [ 117.054325][ T6327] Trying to free block not in datazone [ 117.066685][ T6327] Trying to free block not in datazone [ 117.078767][ T6327] Trying to free block not in datazone [ 117.099472][ T6327] Trying to free block not in datazone [ 117.114701][ T6327] Trying to free block not in datazone [ 117.139324][ T6327] Trying to free block not in datazone [ 117.147889][ T6327] Trying to free block not in datazone [ 117.161515][ T6327] Trying to free block not in datazone [ 117.167227][ T6327] Trying to free block not in datazone [ 117.175029][ T6327] Trying to free block not in datazone [ 117.204915][ T6327] Trying to free block not in datazone [ 117.216283][ T6327] Trying to free block not in datazone [ 117.224509][ T6327] Trying to free block not in datazone [ 117.231934][ T6327] Trying to free block not in datazone [ 117.237521][ T6327] Trying to free block not in datazone [ 117.247772][ T6327] Trying to free block not in datazone [ 117.254346][ T6327] Trying to free block not in datazone [ 117.261662][ T6327] Trying to free block not in datazone [ 117.267367][ T6327] Trying to free block not in datazone [ 117.275021][ T6327] Trying to free block not in datazone [ 117.305045][ T6327] Trying to free block not in datazone [ 117.318973][ T6327] Trying to free block not in datazone [ 117.330394][ T6327] Trying to free block not in datazone [ 117.336916][ T6327] Trying to free block not in datazone [ 117.354445][ T966] cm6533_jd 0003:0D8C:0022.0005: No inputs registered, leaving [ 117.381179][ T966] cm6533_jd 0003:0D8C:0022.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 117.395773][ T6327] Trying to free block not in datazone [ 117.403223][ T6327] Trying to free block not in datazone [ 117.414522][ T6327] Trying to free block not in datazone [ 117.439928][ T6327] Trying to free block not in datazone [ 117.445533][ T6327] Trying to free block not in datazone [ 117.451431][ T6327] Trying to free block not in datazone [ 117.458688][ T6327] Trying to free block not in datazone [ 117.469357][ T6327] Trying to free block not in datazone [ 117.474871][ T6327] Trying to free block not in datazone [ 117.507506][ T6327] Trying to free block not in datazone [ 117.523795][ T6327] Trying to free block not in datazone [ 117.531156][ T6327] Trying to free block not in datazone [ 117.537117][ T6327] Trying to free block not in datazone [ 117.547978][ T6327] Trying to free block not in datazone [ 117.555224][ T6327] Trying to free block not in datazone [ 117.566059][ T6327] Trying to free block not in datazone [ 117.592529][ T6327] Trying to free block not in datazone [ 117.598062][ T6327] Trying to free block not in datazone [ 117.613905][ T6327] Trying to free block not in datazone [ 117.625306][ T6327] Trying to free block not in datazone [ 117.635264][ T6327] Trying to free block not in datazone [ 117.642976][ T6327] Trying to free block not in datazone [ 117.669597][ T6327] Trying to free block not in datazone [ 117.695176][ T6327] Trying to free block not in datazone [ 117.713497][ T6327] Trying to free block not in datazone [ 117.730119][ T6327] Trying to free block not in datazone [ 117.740014][ T6327] Trying to free block not in datazone [ 118.114638][ T6400] binder: 6399:6400 ioctl c018620c 200000000000 returned -22 [ 118.140511][ T6402] loop0: detected capacity change from 0 to 512 [ 118.187748][ T6402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.225360][ T6402] ext4 filesystem being mounted at /28/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.257735][ T786] usb 5-1: USB disconnect, device number 3 [ 118.309545][ T27] audit: type=1800 audit(1758927843.717:5): pid=6402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.129" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 118.357306][ T27] audit: type=1800 audit(1758927843.747:6): pid=6402 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.129" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 118.455698][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.744714][ T5859] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 118.806483][ T5859] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 119.069163][ T6420] loop4: detected capacity change from 0 to 1024 [ 119.083851][ T6409] loop2: detected capacity change from 0 to 32768 [ 119.131137][ T6420] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.208845][ T6409] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 119.208863][ T6420] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 119.305303][ T6413] loop0: detected capacity change from 0 to 32768 [ 119.393569][ T6413] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 119.575577][ T5991] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.605656][ T6413] XFS (loop0): Ending clean mount [ 119.627225][ T6409] XFS (loop2): Ending clean mount [ 119.684174][ T6409] XFS (loop2): Quotacheck needed: Please wait. [ 119.739209][ T6413] XFS (loop0): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 119.782540][ T6409] XFS (loop2): Quotacheck: Done. [ 119.981821][ T6451] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 120.029080][ T27] audit: type=1800 audit(1758927845.417:7): pid=6409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.130" name="file1" dev="loop2" ino=9286 res=0 errno=0 [ 120.183757][ T5791] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 120.206912][ T5790] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 120.742323][ T6466] loop2: detected capacity change from 0 to 64 [ 120.853240][ T6466] Trying to free block not in datazone [ 121.175544][ T6473] loop2: detected capacity change from 0 to 2048 [ 121.223763][ T6473] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 121.268779][ T6473] UDF-fs: Scanning with blocksize 512 failed [ 121.297139][ T6473] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 121.409373][ T6479] loop3: detected capacity change from 0 to 1024 [ 121.484491][ T6479] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 121.631471][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 122.256862][ T6506] netlink: 'syz.4.154': attribute type 10 has an invalid length. [ 122.268184][ T6508] mmap: syz.0.155 (6508) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 122.292082][ T6506] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.301587][ T6506] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.336014][ T6506] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.343293][ T6506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.350909][ T6506] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.358098][ T6506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.369356][ T786] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 122.381266][ T6506] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 122.578907][ T786] usb 3-1: Using ep0 maxpacket: 32 [ 122.590121][ T786] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 122.599786][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.612382][ T786] usb 3-1: Product: syz [ 122.622251][ T786] usb 3-1: Manufacturer: syz [ 122.636554][ T786] usb 3-1: SerialNumber: syz [ 122.647052][ T786] usb 3-1: config 0 descriptor?? [ 122.661294][ T786] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 122.807731][ T6518] bond_slave_0: entered promiscuous mode [ 122.813817][ T6518] bond_slave_1: entered promiscuous mode [ 122.819604][ T6518] bridge0: entered promiscuous mode [ 122.837869][ T6518] macvlan2: entered allmulticast mode [ 122.844600][ T6518] bond0: entered allmulticast mode [ 122.852324][ T6518] bond_slave_0: entered allmulticast mode [ 122.863094][ T6518] bond_slave_1: entered allmulticast mode [ 122.869115][ T6518] bridge0: entered allmulticast mode [ 122.881432][ T6518] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 122.891678][ T6518] bridge0: port 3(macvlan2) entered blocking state [ 122.911189][ T6518] bridge0: port 3(macvlan2) entered disabled state [ 122.937189][ T6518] bond0: left allmulticast mode [ 122.942813][ T6518] bond_slave_0: left allmulticast mode [ 122.951448][ T6518] bond_slave_1: left allmulticast mode [ 122.959943][ T6518] bridge0: left allmulticast mode [ 122.965191][ T6518] bond_slave_0: left promiscuous mode [ 122.970700][ T6518] bond_slave_1: left promiscuous mode [ 122.976377][ T6518] bridge0: left promiscuous mode [ 123.218729][ T966] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 123.291867][ T6525] loop4: detected capacity change from 0 to 1024 [ 123.301055][ T6525] EXT4-fs: inline encryption not supported [ 123.307014][ T6525] EXT4-fs: Ignoring removed i_version option [ 123.332309][ T6525] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 123.363264][ T6525] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.408649][ T966] usb 1-1: Using ep0 maxpacket: 8 [ 123.429290][ T966] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.446014][ T6525] EXT4-fs error (device loop4): mb_free_blocks:1938: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 123.463613][ T966] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 123.477507][ T966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.489175][ T966] usb 1-1: config 0 descriptor?? [ 123.509702][ T966] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 123.571318][ T5991] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.935425][ T786] gspca_stk1135: reg_w 0xd err -71 [ 123.946407][ T786] gspca_stk1135: serial bus timeout: status=0x00 [ 123.962759][ T786] gspca_stk1135: Sensor write failed [ 123.968294][ T786] gspca_stk1135: serial bus timeout: status=0x00 [ 123.979859][ T5799] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 123.989766][ T786] gspca_stk1135: Sensor write failed [ 123.995206][ T786] gspca_stk1135: serial bus timeout: status=0x00 [ 124.012076][ T786] gspca_stk1135: Sensor read failed [ 124.017344][ T786] gspca_stk1135: serial bus timeout: status=0x00 [ 124.034001][ T786] gspca_stk1135: Sensor read failed [ 124.048710][ T786] gspca_stk1135: Detected sensor type unknown (0x0) [ 124.065714][ T786] gspca_stk1135: serial bus timeout: status=0x00 [ 124.075840][ T786] gspca_stk1135: Sensor read failed [ 124.089296][ T786] gspca_stk1135: serial bus timeout: status=0x00 [ 124.095746][ T786] gspca_stk1135: Sensor read failed [ 124.121589][ T786] gspca_stk1135: serial bus timeout: status=0x00 [ 124.127967][ T786] gspca_stk1135: Sensor write failed [ 124.149267][ T786] gspca_stk1135: serial bus timeout: status=0x00 [ 124.165982][ T786] gspca_stk1135: Sensor write failed [ 124.176170][ T786] stk1135: probe of 3-1:0.0 failed with error -71 [ 124.185402][ T6544] loop3: detected capacity change from 0 to 2048 [ 124.195566][ T5799] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 124.209847][ T5799] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 124.220034][ T5799] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 124.220101][ T786] usb 3-1: USB disconnect, device number 4 [ 124.229602][ T5799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.276604][ T6546] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 124.304401][ T6535] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 124.377554][ T5799] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 124.520620][ T6546] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 124.578725][ T6546] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 124.653752][ T6546] Remounting filesystem read-only [ 124.735723][ T966] gspca_vc032x: reg_w err -71 [ 124.740782][ T966] vc032x: probe of 1-1:0.0 failed with error -71 [ 124.769595][ T966] usb 1-1: USB disconnect, device number 5 [ 124.790019][ T5779] usb 5-1: USB disconnect, device number 4 [ 125.039248][ T5796] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 125.052927][ T5796] NILFS (loop3): discard dirty page: offset=0, ino=18 [ 125.060121][ T5796] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 125.067504][ T5796] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.089161][ T5796] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.099307][ T5796] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.108491][ T5796] NILFS (loop3): discard dirty page: offset=0, ino=2 [ 125.115397][ T5796] NILFS (loop3): discard dirty block: blocknr=18, size=1024 [ 125.122854][ T5796] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.132170][ T5796] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.141411][ T5796] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.150920][ T5796] NILFS (loop3): discard dirty page: offset=0, ino=6 [ 125.157645][ T5796] NILFS (loop3): discard dirty block: blocknr=35, size=1024 [ 125.165088][ T5796] NILFS (loop3): discard dirty block: blocknr=36, size=1024 [ 125.172581][ T5796] NILFS (loop3): discard dirty block: blocknr=37, size=1024 [ 125.198685][ T5796] NILFS (loop3): discard dirty block: blocknr=38, size=1024 [ 125.208633][ T5796] NILFS (loop3): discard dirty page: offset=4096, ino=6 [ 125.215665][ T5796] NILFS (loop3): discard dirty block: blocknr=39, size=1024 [ 125.233059][ T5796] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.268428][ T5796] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.301324][ T5796] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.331658][ T5796] NILFS (loop3): discard dirty page: offset=0, ino=5 [ 125.353034][ T5796] NILFS (loop3): discard dirty block: blocknr=41, size=1024 [ 125.378957][ T5796] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.398687][ T5796] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.407693][ T5796] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.425994][ T5796] NILFS (loop3): discard dirty page: offset=0, ino=4 [ 125.432814][ T5796] NILFS (loop3): discard dirty block: blocknr=40, size=1024 [ 125.458929][ T5796] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.481346][ T5796] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.499165][ T6573] loop0: detected capacity change from 0 to 512 [ 125.505526][ T5796] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.525831][ T5796] NILFS (loop3): discard dirty page: offset=0, ino=3 [ 125.533630][ T5796] NILFS (loop3): discard dirty block: blocknr=42, size=1024 [ 125.541888][ T5796] NILFS (loop3): discard dirty block: blocknr=43, size=1024 [ 125.562214][ T5796] NILFS (loop3): discard dirty block: blocknr=44, size=1024 [ 125.572124][ T5796] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.584654][ T6573] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.615151][ T5796] NILFS (loop3): discard dirty page: offset=65536, ino=3 [ 125.623435][ T5796] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.632520][ T5796] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.641552][ T5796] NILFS (loop3): discard dirty block: blocknr=0, size=1024 [ 125.648899][ T5796] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.657860][ T5796] NILFS (loop3): discard dirty page: offset=196608, ino=3 [ 125.665294][ T5796] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.670216][ T6573] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.674242][ T5796] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 125.693732][ T5796] NILFS (loop3): discard dirty block: blocknr=49, size=1024 [ 125.702116][ T5796] NILFS (loop3): discard dirty block: blocknr=18446744073709551615, size=1024 [ 126.168511][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 126.469784][ T6597] loop3: detected capacity change from 0 to 4096 [ 126.528643][ T966] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 126.754897][ T966] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.776312][ T966] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.828232][ T966] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 126.844332][ T966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 126.868651][ T966] usb 5-1: SerialNumber: syz [ 127.097199][ T6592] loop2: detected capacity change from 0 to 32768 [ 127.131591][ T966] usb 5-1: 0:2 : does not exist [ 127.142091][ T6592] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.173 (6592) [ 127.227696][ T966] usb 5-1: USB disconnect, device number 5 [ 127.236012][ T6592] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 127.292803][ T6592] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 127.326175][ T6618] loop0: detected capacity change from 0 to 128 [ 127.359384][ T6618] FAT-fs (loop0): bogus number of FAT structure [ 127.365694][ T6618] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 127.378374][ T6592] BTRFS info (device loop2): using free space tree [ 127.398504][ T6618] FAT-fs (loop0): Can't find a valid FAT filesystem [ 127.412175][ T5780] udevd[5780]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.446754][ T6620] netlink: 24 bytes leftover after parsing attributes in process `syz.3.181'. [ 127.472861][ T5983] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 127.649365][ T6592] BTRFS info (device loop2): enabling ssd optimizations [ 127.688924][ T6592] BTRFS info (device loop2): auto enabling async discard [ 128.048738][ T27] audit: type=1800 audit(1758927853.447:8): pid=6649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.173" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 128.353476][ T5790] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 128.408735][ T786] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 128.621509][ T786] usb 1-1: Using ep0 maxpacket: 8 [ 128.644182][ T786] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 128.687890][ T786] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 128.715055][ T786] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.742402][ T786] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.798632][ T786] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 128.813727][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.861248][ T6670] Illegal XDP return value 148 on prog (id 27) dev syz_tun, expect packet loss! [ 129.074759][ T786] usb 1-1: GET_CAPABILITIES returned 0 [ 129.087542][ T786] usbtmc 1-1:16.0: can't read capabilities [ 129.317868][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 129.358339][ T786] usb 1-1: USB disconnect, device number 6 [ 129.436205][ T6688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.194'. [ 129.459053][ T6688] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.467961][ T6688] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.775269][ T6698] loop4: detected capacity change from 0 to 32768 [ 130.813969][ T6698] XFS: ikeep mount option is deprecated. [ 130.879069][ T6698] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 131.204477][ T6698] XFS (loop4): Ending clean mount [ 131.242561][ T6698] XFS (loop4): Quotacheck needed: Please wait. [ 131.271759][ T6744] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 131.298312][ T6744] syzkaller1: Linktype set failed because interface is up [ 131.301152][ T966] syzkaller1: tun_net_xmit 90 [ 131.375749][ T6698] XFS (loop4): Quotacheck: Done. [ 131.441076][ T6710] loop2: detected capacity change from 0 to 32768 [ 131.798352][ T5991] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 132.457121][ T6770] loop3: detected capacity change from 0 to 1 [ 132.463578][ T6772] loop4: detected capacity change from 0 to 512 [ 132.516326][ T6772] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2244: inode #15: comm syz.4.208: corrupted in-inode xattr: invalid ea_ino [ 132.523184][ T6770] Dev loop3: unable to read RDB block 1 [ 132.549807][ T6772] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.208: couldn't read orphan inode 15 (err -117) [ 132.564930][ T966] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 132.585981][ T6770] loop3: unable to read partition table [ 132.609911][ T6772] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.628892][ T6770] loop3: partition table beyond EOD, truncated [ 132.643612][ T6770] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 132.775251][ T966] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.803160][ T966] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.857211][ T966] usb 1-1: New USB device found, idVendor=6253, idProduct=0100, bcdDevice= 0.00 [ 132.884104][ T5991] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.893660][ T966] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.919829][ T966] usb 1-1: config 0 descriptor?? [ 133.076620][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.098244][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.121964][ T6788] loop4: detected capacity change from 0 to 512 [ 133.159712][ T6788] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 133.230868][ T6788] EXT4-fs (loop4): 1 truncate cleaned up [ 133.256465][ T6788] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.367321][ T966] twinhan 0003:6253:0100.0007: hidraw0: USB HID v0.07 Device [HID 6253:0100] on usb-dummy_hcd.0-1/input0 [ 133.629064][ T5991] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.631797][ T786] usb 1-1: USB disconnect, device number 7 [ 134.819214][ T6838] loop0: detected capacity change from 0 to 1024 [ 134.835812][ T6838] EXT4-fs: Ignoring removed nomblk_io_submit option [ 134.859497][ T6838] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 134.889899][ T6838] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 134.903012][ T6838] System zones: 0-1, 3-36 [ 134.923030][ T6825] loop3: detected capacity change from 0 to 32768 [ 134.939965][ T6838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.040199][ T27] audit: type=1800 audit(1758927860.447:9): pid=6825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.221" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 135.147882][ T6844] capability: warning: `syz.0.227' uses deprecated v2 capabilities in a way that may be insecure [ 135.369815][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.576863][ T6855] loop0: detected capacity change from 0 to 1024 [ 135.634705][ T6855] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 135.731071][ T6855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.860759][ T6862] loop3: detected capacity change from 0 to 4096 [ 135.915204][ T6863] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 136.044310][ T6867] loop4: detected capacity change from 0 to 512 [ 136.048048][ T5791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.073559][ T6867] EXT4-fs: Ignoring removed nobh option [ 136.102137][ T6867] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 136.190934][ T6862] syz.3.233 (6862) used greatest stack depth: 19664 bytes left [ 136.220017][ T6867] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 136.343768][ T6867] EXT4-fs (loop4): 1 truncate cleaned up [ 136.389938][ T6867] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.607436][ T5991] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.588909][ T966] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 137.801859][ T966] usb 5-1: Using ep0 maxpacket: 8 [ 137.810590][ T966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 137.848621][ T966] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 137.857723][ T966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.891984][ T966] usb 5-1: config 0 descriptor?? [ 137.943179][ T6887] loop2: detected capacity change from 0 to 32768 [ 137.978334][ T6887] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.245 (6887) [ 138.048944][ T6887] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 138.077775][ T6887] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 138.113046][ T6887] BTRFS info (device loop2): metadata ratio 2 [ 138.136128][ T6887] BTRFS info (device loop2): allowing degraded mounts [ 138.168624][ T6887] BTRFS info (device loop2): force zlib compression, level 3 [ 138.176160][ T6887] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 138.219510][ T966] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 138.248888][ T6887] BTRFS info (device loop2): use zstd compression, level 3 [ 138.258666][ T6887] BTRFS info (device loop2): force clearing of disk cache [ 138.270653][ T6887] BTRFS info (device loop2): use zlib compression, level 3 [ 138.305583][ T6887] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 138.338592][ T6887] BTRFS info (device loop2): trying to use backup root at mount time [ 138.346737][ T6887] BTRFS info (device loop2): using free space tree [ 138.353873][ T6901] "syz.3.251" (6901) uses obsolete ecb(arc4) skcipher [ 138.377902][ T6901] trusted_key: syz.3.251 sent an empty control message without MSG_MORE. [ 138.524489][ T6887] BTRFS info (device loop2): enabling ssd optimizations [ 138.566448][ T6887] BTRFS info (device loop2): rebuilding free space tree [ 138.732250][ T6897] loop0: detected capacity change from 0 to 40427 [ 138.767884][ T6919] loop3: detected capacity change from 0 to 512 [ 138.780879][ T6897] F2FS-fs (loop0): Image doesn't support compression [ 138.808184][ T6897] F2FS-fs (loop0): heap/no_heap options were deprecated [ 138.840773][ T6897] F2FS-fs (loop0): invalid crc value [ 138.851804][ T6919] EXT4-fs: Ignoring removed nomblk_io_submit option [ 138.878738][ T6897] F2FS-fs (loop0): Found nat_bits in checkpoint [ 138.936902][ T6919] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 138.960753][ T5859] usb 5-1: USB disconnect, device number 6 [ 138.991529][ T6919] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 139.154146][ T6897] F2FS-fs (loop0): Start checkpoint disabled! [ 139.165221][ T6919] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4031: comm syz.3.252: Allocating blocks 41-42 which overlap fs metadata [ 139.218657][ T6897] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 139.238654][ T6919] EXT4-fs (loop3): Remounting filesystem read-only [ 139.248973][ T6919] Quota error (device loop3): write_blk: dquota write failed [ 139.278321][ T6919] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 139.316216][ T6919] Quota error (device loop3): write_blk: dquota write failed [ 139.349003][ T6919] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 139.369446][ T6919] EXT4-fs (loop3): 1 truncate cleaned up [ 139.371622][ T5790] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 139.376535][ T6919] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.431497][ T27] audit: type=1800 audit(1758927864.837:10): pid=6897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.250" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 139.756869][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.862667][ T1084] kworker/u4:7: attempt to access beyond end of device [ 139.862667][ T1084] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 139.937879][ T1084] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 139.959781][ T1084] kworker/u4:7: attempt to access beyond end of device [ 139.959781][ T1084] loop0: rw=2049, sector=41000, nr_sectors = 8 limit=40427 [ 139.963441][ T966] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 139.992475][ T966] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 140.000124][ T966] hid-generic 0000:0004:0000.0008: unknown main item tag 0x0 [ 140.013130][ T966] hid-generic 0000:0004:0000.0008: hidraw0: HID v0.00 Device [syz0] on syz0 [ 140.056587][ T1084] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 140.272101][ T6936] fido_id[6936]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 140.297684][ T6933] loop4: detected capacity change from 0 to 8192 [ 140.415970][ T6941] loop2: detected capacity change from 0 to 128 [ 140.424374][ T6933] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 140.489548][ T5779] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 140.572174][ T6933] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 140.587222][ T6933] REISERFS (device loop4): using ordered data mode [ 140.631195][ T6933] reiserfs: using flush barriers [ 140.662353][ T6933] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 140.729273][ T5779] usb 4-1: Using ep0 maxpacket: 16 [ 140.738275][ T5779] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 140.754376][ T5779] usb 4-1: config 0 has no interface number 0 [ 140.759410][ T6933] REISERFS (device loop4): checking transaction log (loop4) [ 140.779983][ T5779] usb 4-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 140.795900][ T5779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.808417][ T6933] REISERFS (device loop4): Using r5 hash to sort names [ 140.818817][ T5779] usb 4-1: Product: syz [ 140.823019][ T5779] usb 4-1: Manufacturer: syz [ 140.839763][ T6933] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 140.849458][ T5779] usb 4-1: SerialNumber: syz [ 140.869787][ T5779] usb 4-1: config 0 descriptor?? [ 140.892565][ T5779] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 140.963548][ T5779] snd-usb-audio: probe of 4-1:0.1 failed with error -2 [ 141.115220][ T5780] udevd[5780]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.172345][ T6949] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 289, free_space(entry_count) 2 [ 141.198468][ T5779] usb 4-1: USB disconnect, device number 5 [ 141.220377][ T6949] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 549. Fsck? [ 141.231254][ T6949] REISERFS (device loop4): Remounting filesystem read-only [ 141.238500][ T6949] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data [ 141.255314][ T6946] ------------[ cut here ]------------ [ 141.262198][ T6946] WARNING: CPU: 1 PID: 6946 at fs/reiserfs/journal.c:3400 journal_end+0x1f1/0x2b0 [ 141.271798][ T6946] Modules linked in: [ 141.275760][ T6946] CPU: 1 PID: 6946 Comm: syz.4.255 Not tainted syzkaller #0 [ 141.283176][ T6946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 141.293452][ T6946] RIP: 0010:journal_end+0x1f1/0x2b0 [ 141.298779][ T6946] Code: 38 00 00 00 48 89 de e8 3d 59 b6 ff 43 0f b6 04 27 84 c0 0f 85 a7 00 00 00 48 8b 04 24 c7 00 00 00 00 00 eb 30 e8 4f 0b 5f ff <0f> 0b b8 fb ff ff ff eb 24 e8 41 0b 5f ff 48 89 df 31 f6 48 83 c4 [ 141.318614][ T6946] RSP: 0018:ffffc900052ff998 EFLAGS: 00010287 [ 141.324738][ T6946] RAX: ffffffff82268c51 RBX: ffffc900052ffa60 RCX: 0000000000080000 [ 141.332849][ T6946] RDX: ffffc9001901c000 RSI: 0000000000017371 RDI: 0000000000017372 [ 141.340925][ T6946] RBP: 0000000000000000 R08: ffffc900052ffa97 R09: 0000000000000000 [ 141.349061][ T6946] R10: ffffc900052ffa60 R11: fffff52000a5ff53 R12: ffffc900052ffa74 [ 141.357077][ T6946] R13: 1ffff11005f9824d R14: ffff88802fcc1268 R15: 1ffff92000a5ff4e [ 141.366031][ T6946] FS: 00007fe8fd1886c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 141.375265][ T6946] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 141.381999][ T6946] CR2: 0000001b32c11ff8 CR3: 00000000786f4000 CR4: 00000000003526e0 [ 141.390144][ T6946] Call Trace: [ 141.393470][ T6946] [ 141.396463][ T6946] reiserfs_truncate_file+0x385/0x7c0 [ 141.402324][ T6946] ? reiserfs_new_symlink+0x560/0x560 [ 141.407749][ T6946] ? unmap_mapping_range+0xdf/0x170 [ 141.413410][ T6946] reiserfs_setattr+0xc0c/0x11a0 [ 141.418421][ T6946] ? reiserfs_commit_write+0x590/0x590 [ 141.424146][ T6946] ? current_time+0x1b9/0x270 [ 141.428941][ T6946] ? inode_set_ctime_current+0x2d0/0x2d0 [ 141.434641][ T6946] ? evm_inode_setattr+0x94/0x6a0 [ 141.439839][ T6946] ? bpf_lsm_inode_setattr+0x9/0x10 [ 141.445095][ T6946] ? try_break_deleg+0x79/0x120 [ 141.450147][ T6946] ? reiserfs_commit_write+0x590/0x590 [ 141.455661][ T6946] notify_change+0xb0d/0xe10 [ 141.460398][ T6946] do_truncate+0x19b/0x220 [ 141.465682][ T6946] ? put_page_bootmem+0x2c0/0x2c0 [ 141.471262][ T6946] ? bpf_lsm_path_truncate+0x9/0x10 [ 141.476581][ T6946] vfs_truncate+0x266/0x300 [ 141.481281][ T6946] do_sys_truncate+0xe0/0x1a0 [ 141.486057][ T6946] ? break_lease+0xd0/0xd0 [ 141.490585][ T6946] ? lockdep_hardirqs_on+0x98/0x150 [ 141.495849][ T6946] do_syscall_64+0x55/0xb0 [ 141.500440][ T6946] ? clear_bhb_loop+0x40/0x90 [ 141.505167][ T6946] ? clear_bhb_loop+0x40/0x90 [ 141.509972][ T6946] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 141.515946][ T6946] RIP: 0033:0x7fe8fc38eec9 [ 141.520495][ T6946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.540230][ T6946] RSP: 002b:00007fe8fd188038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 141.548889][ T6946] RAX: ffffffffffffffda RBX: 00007fe8fc5e6090 RCX: 00007fe8fc38eec9 [ 141.556917][ T6946] RDX: 0000000000000000 RSI: 00000000003a6000 RDI: 0000200000000080 [ 141.565135][ T6946] RBP: 00007fe8fc411f91 R08: 0000000000000000 R09: 0000000000000000 [ 141.574093][ T6946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.582424][ T6946] R13: 00007fe8fc5e6128 R14: 00007fe8fc5e6090 R15: 00007fff93226f38 [ 141.590514][ T6946] [ 141.593582][ T6946] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 141.600887][ T6946] CPU: 1 PID: 6946 Comm: syz.4.255 Not tainted syzkaller #0 [ 141.608203][ T6946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 141.618307][ T6946] Call Trace: [ 141.621611][ T6946] [ 141.624579][ T6946] dump_stack_lvl+0x16c/0x230 [ 141.629303][ T6946] ? show_regs_print_info+0x20/0x20 [ 141.634557][ T6946] ? load_image+0x3b0/0x3b0 [ 141.639130][ T6946] panic+0x2c0/0x710 [ 141.643082][ T6946] ? bpf_jit_dump+0xd0/0xd0 [ 141.647678][ T6946] __warn+0x2e0/0x470 [ 141.651736][ T6946] ? journal_end+0x1f1/0x2b0 [ 141.656377][ T6946] ? journal_end+0x1f1/0x2b0 [ 141.661011][ T6946] report_bug+0x2be/0x4f0 [ 141.665386][ T6946] ? journal_end+0x1f1/0x2b0 [ 141.670030][ T6946] ? journal_end+0x1f1/0x2b0 [ 141.674673][ T6946] ? journal_end+0x1f3/0x2b0 [ 141.679321][ T6946] handle_bug+0xcf/0x120 [ 141.683619][ T6946] exc_invalid_op+0x1a/0x50 [ 141.688178][ T6946] asm_exc_invalid_op+0x1a/0x20 [ 141.693058][ T6946] RIP: 0010:journal_end+0x1f1/0x2b0 [ 141.698298][ T6946] Code: 38 00 00 00 48 89 de e8 3d 59 b6 ff 43 0f b6 04 27 84 c0 0f 85 a7 00 00 00 48 8b 04 24 c7 00 00 00 00 00 eb 30 e8 4f 0b 5f ff <0f> 0b b8 fb ff ff ff eb 24 e8 41 0b 5f ff 48 89 df 31 f6 48 83 c4 [ 141.717935][ T6946] RSP: 0018:ffffc900052ff998 EFLAGS: 00010287 [ 141.724880][ T6946] RAX: ffffffff82268c51 RBX: ffffc900052ffa60 RCX: 0000000000080000 [ 141.732889][ T6946] RDX: ffffc9001901c000 RSI: 0000000000017371 RDI: 0000000000017372 [ 141.740870][ T6946] RBP: 0000000000000000 R08: ffffc900052ffa97 R09: 0000000000000000 [ 141.748864][ T6946] R10: ffffc900052ffa60 R11: fffff52000a5ff53 R12: ffffc900052ffa74 [ 141.756846][ T6946] R13: 1ffff11005f9824d R14: ffff88802fcc1268 R15: 1ffff92000a5ff4e [ 141.764834][ T6946] ? journal_end+0x1f1/0x2b0 [ 141.769477][ T6946] ? journal_end+0x1f1/0x2b0 [ 141.774096][ T6946] reiserfs_truncate_file+0x385/0x7c0 [ 141.779495][ T6946] ? reiserfs_new_symlink+0x560/0x560 [ 141.784874][ T6946] ? unmap_mapping_range+0xdf/0x170 [ 141.790142][ T6946] reiserfs_setattr+0xc0c/0x11a0 [ 141.795099][ T6946] ? reiserfs_commit_write+0x590/0x590 [ 141.800659][ T6946] ? current_time+0x1b9/0x270 [ 141.805348][ T6946] ? inode_set_ctime_current+0x2d0/0x2d0 [ 141.810994][ T6946] ? evm_inode_setattr+0x94/0x6a0 [ 141.816037][ T6946] ? bpf_lsm_inode_setattr+0x9/0x10 [ 141.821245][ T6946] ? try_break_deleg+0x79/0x120 [ 141.826113][ T6946] ? reiserfs_commit_write+0x590/0x590 [ 141.831591][ T6946] notify_change+0xb0d/0xe10 [ 141.836211][ T6946] do_truncate+0x19b/0x220 [ 141.840639][ T6946] ? put_page_bootmem+0x2c0/0x2c0 [ 141.845682][ T6946] ? bpf_lsm_path_truncate+0x9/0x10 [ 141.850903][ T6946] vfs_truncate+0x266/0x300 [ 141.855423][ T6946] do_sys_truncate+0xe0/0x1a0 [ 141.860104][ T6946] ? break_lease+0xd0/0xd0 [ 141.864530][ T6946] ? lockdep_hardirqs_on+0x98/0x150 [ 141.869757][ T6946] do_syscall_64+0x55/0xb0 [ 141.874191][ T6946] ? clear_bhb_loop+0x40/0x90 [ 141.878894][ T6946] ? clear_bhb_loop+0x40/0x90 [ 141.883592][ T6946] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 141.889504][ T6946] RIP: 0033:0x7fe8fc38eec9 [ 141.893934][ T6946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.913570][ T6946] RSP: 002b:00007fe8fd188038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 141.921995][ T6946] RAX: ffffffffffffffda RBX: 00007fe8fc5e6090 RCX: 00007fe8fc38eec9 [ 141.929977][ T6946] RDX: 0000000000000000 RSI: 00000000003a6000 RDI: 0000200000000080 [ 141.937952][ T6946] RBP: 00007fe8fc411f91 R08: 0000000000000000 R09: 0000000000000000 [ 141.945936][ T6946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.953920][ T6946] R13: 00007fe8fc5e6128 R14: 00007fe8fc5e6090 R15: 00007fff93226f38 [ 141.962005][ T6946] [ 141.965330][ T6946] Kernel Offset: disabled [ 141.969741][ T6946] Rebooting in 86400 seconds..