last executing test programs: 6.670011122s ago: executing program 3 (id=123): unshare(0x22020600) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x24) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x0) 6.430776694s ago: executing program 3 (id=125): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="12010000000000402509668000000000000109022400010000100309040000010300020009210000080122070009058103"], 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002207000000a09457"], 0x0}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4810}, 0x4000040) 5.589629448s ago: executing program 2 (id=133): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x88ce359bdb00143c, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_usb_connect$uac1(0x0, 0x9e, 0x0, 0x0) 4.642177237s ago: executing program 3 (id=135): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000140)={[{@barrier}, {@min_batch_time={'min_batch_time', 0x3d, 0x407}}, {@noquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@errors_remount}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) 4.2240219s ago: executing program 3 (id=138): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000003340)=[0x0]}) 4.182812341s ago: executing program 1 (id=139): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x68, r2, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}], @NL80211_ATTR_FRAME={0x32, 0x33, @reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x3}, @device_a, @device_a, @from_mac, {0x6, 0x1}, @value=@ver_80211n={0x0, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x406, 0x7ff, @broadcast, {0x0, 0x6, @default_ap_ssid}, @void, @void}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000000) 3.970975532s ago: executing program 1 (id=141): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={0x60, r2, 0x1, 0x70bd27, 0x25dfdc06, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}, {0x8, 0x6, r1}}}]}}]}, 0x60}, 0x1, 0x400000000000000}, 0x0) 3.914524546s ago: executing program 3 (id=142): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x1, 0x3, 0x4}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) 3.83648185s ago: executing program 1 (id=143): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) r2 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r2, 0x40084146, &(0x7f0000000300)) 3.715610056s ago: executing program 1 (id=144): syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x0, &(0x7f0000005240), 0x1, 0x51aa, &(0x7f0000005280)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) 2.805021233s ago: executing program 2 (id=145): sendto$unix(0xffffffffffffffff, &(0x7f0000000140)="26a7", 0x2, 0x24040000, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000096ca077900"/20, @ANYRES32=0x0, @ANYBLOB="0000000008290400240012800b000100697036746e6c0000140002800600120000000000060012"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) 2.565607996s ago: executing program 3 (id=146): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) kexec_load(0xd0ffbf, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x3e0000, 0x40000000}], 0x0) 2.413353224s ago: executing program 2 (id=148): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000380)={0x28, r2, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008084}, 0x80) 2.141482349s ago: executing program 2 (id=149): r0 = socket$can_raw(0x1d, 0x3, 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="8a0a63cdec59", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @remote, @dev, @remote}}}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) 2.10265768s ago: executing program 1 (id=150): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x42, 0x1fe) fallocate(r0, 0x10, 0x3, 0x7ffd) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0xfffffffc, 0x0, 0x2000000000000}, {0xffffffff, 0x0, 0x0, 0x1, 0x0, 0x1}]}) 1.91245865s ago: executing program 0 (id=151): r0 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa5786dd6c370c8900082b0000000000000000000023000000000000fe8000000000000000000000000000aaff"], 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000080)=0xffffffff, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x401}], 0x1, 0x40000102, 0x0) 1.91214481s ago: executing program 2 (id=152): syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000002a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x41, 0xaf6, &(0x7f0000002b80)="$eJzs3V2IXFcdAPBzd3c2u2lrNjXRNY1tYrWt2m6azRqrQZOSIBiaIL4Uii8h3dZgjNAKaimY5Mk3W0oKPvmBT30pVQQLIqFPvhRsoAh5qoI+NEQs+FCjycjO3DNz78lM7s5md2Zn5/eDu2fuPefO/9zZO3fu17knACNrrPF3YWE2C+HCm68cef+Bf0wvTTnYKjHT+DtRGKuFELJ8fCJ5v/fGm+n1D1482SnNwnzjbxwPx6+25r0jhHA27AoXw0zYceHSy2/PP3Hs3NHzu9957cCVtVl6AAAYLd+4eGBh+1//fM/Wa6/feyhsak2P++czccJUc7//UL7jH/f/x0J5fCndejkJ0n7b0nHD0jA2XS463qFcMU4tKTfRIf7SMJlUodal3KZw6/jjhWmdlhuGWVyPZ0I2NhdC2NwaHxubm2sek4fGcf1kNnfm1Olnnh9QRYFV9+/7Qgi7CsPh8+Xx9TYcXAd1WOFQXwd1GMrhUP9iXas3DXyZ+zTUtwx6CwTQlF4vvMnZbFXjtd5tYnnxrz4+1nl+WAX9Xv97ij95U/zpvsYPA17+dRD/1+dscVg9G3VtissVv0d35uPpdYT0/qVX/1Cery290lGeml6PqC2znt2uIwzL9YVu9Rzvcz1Wqlv90/Vio/pKnsbP4aul3PtK35/0fzos/2Ogsw/T8/8GwxoOj70/+DoM/RBK47Xbea/6gLc/wPqV3jdXj9dHc5MV+Zsq8qcq8qcr8jdX5N9RkQ+j7Lff/2l4KWuf70qP6Xs9Hx7Ps92Vpx/psT7p+che46f3/fbqduOn9xPDevb7E08uPvb0U5ea9/9nrfX/Rr6+x8ONmfy7dTEvEM8XpufV43317YYD5fy03N1Jfe7qUL7xelu5XLat/T6hsJ25qR6z5fm2dCu3s1xuJik3nQ9TSX3T/ZPNyXxx/yNuV+PnNZEsby1ZjsmkHnG7sjVP03rASsT1sXH/f+GiVbz/P66fs6GWPXPq9OKj+XhcT/80Xtu0NH1vPysNrIq0/U97vNz+ZzaU2//c2ZpeGytuF7a0p2fN7cIb+fuVp8+34hSmF37U4u/ct8enG+XnTn7v9NOrvOww6p7/0QvfOXH69OJzXqz4xdfWRzV6eREPW9ZLfbzo9cWutQ4x4A0TsOb2/Li5E/DIqe+eeHbx2cUz+/bv3zc/v/9L+xZCY79+T3HvvujsAGoLrKbmb/2mxec81wMAAAAAAAAAAACGxg+OHrn07ltfvNxs/99u/xfb/8c7f2P7/58k7f/TdvKxHXxsB7i1Q36jTPKA1cmkXC0fPprUd1sSZ3sy38fytNWPX97+P4ZLn+sa6/PxZHqty2jyOIGbnpcymTyDJO0v8FN5ej5PfxVggLLOj/BP19sOz7fOPiys6/H5FIUmvHXPBx4e8f/WWBsKjzSK7b87PtepQ3tthks/WiwOehmBzv45Us///ld7wXuY7+GB13vUhon+xvtZ7+vERhnqXffSl9uDDcDqGHT/n38Pzbjx/OeZP359ammIxa4+Xt5eps8vhV785d3y+Hrvf3Kt46f99vU7/qCXv9/9f7b6v8u3f3G71337l/SYN7OyuP/5+ZXLhbBhx3Ljp8sfnwO9rbf41/L4cWkeDMuLX/9lEj+9ILRM/03ib15m/JuWf+fK4v8vjx8/tofuX278Zo2zsXI9ppPliNf/0vPG0fVk+eOzPW8R/5svdFr+FXbUeCOPD6NsWPqZ7VWyH9Haaa/q/7fX3//b7f+3VdmsXJn0Powv5ONxQxzvc0j7O+m1/vH+ivg7sD15/6zi903/v8Pty3la9X2I/f/G9XEm/8kvjDc+yzhe6/DZbtRtDQyr90bq+l+/hivNw6CVzT81+Pobehjq48sue7z1utVP3IDrX6/X1/aEVoWBBmfgn/+gjxMGHX/Qn3+VtP/fdB8+7f83zU/7/03z0/5/0/zp/D/ULT/t/zf9PNP+f7O04sn7pv0Dz1bkf6Iif0fn/Fb0eyrm31mR/8mK/N2t/IOlEjH/3lvO3y7X7f3vrsi/vyL/0xX5n6nIf6Ai/6FCfrEP6Jj/2WT+LMnf6GJ7lG6fH7Bxpe3zfP9hdMTrP92+/9va+ZPFIv2tJbAWXn197+GnfvOtmWb7/8nW+ZB4He9QPl7Lj41+mI+n171DYXwp7618/G9J/no/3wGjJH1+Rvr7/2BFPjC84n1evt8wgrKpzpPztOq5Vd328xkun8vTz+fpw3n6SJ7O5emePN2bp/N9qh9r4/AbvzvwUtY+3t+S5C/3fvK0PVDpOVEhhH3LrE96fqDX+9nT5/j16nbjr7A5GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMCMNf4uLMxmIVx485UjTx47tWdpysFWiZnG34nCWK01XwiP5ul4nv4if3H9gxdPFtMbeZqF+ZCFrDU9HL/ainRHCOFs2BUuhpmw48Kll9+ef+LYuaPnd7/z2oEra/cJAAAAwMb3/wAAAP//bhYJfg==") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9f6c67, 0x0, 0x5, 0x0, &(0x7f00000001c0)) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x2800002, 0x0, 0x1, 0x0, 0x0) open(0x0, 0x145142, 0x0) 1.650219504s ago: executing program 0 (id=153): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) 1.611053416s ago: executing program 1 (id=154): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) io_setup(0x7, &(0x7f00000000c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 1.293564173s ago: executing program 0 (id=155): rt_sigprocmask(0x2, &(0x7f0000000b40)={[0x6d285c19]}, 0x0, 0x8) r0 = gettid() tkill(r0, 0x1b) tkill(r0, 0x1f) ppoll(0x0, 0x0, &(0x7f0000000480), &(0x7f00000004c0)={[0x8]}, 0x8) 897.023443ms ago: executing program 0 (id=156): add_key$fscrypt_provisioning(0x0, 0x0, &(0x7f00000000c0)={0x0, 0x0, @a}, 0x48, 0x0) r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) 487.253084ms ago: executing program 0 (id=157): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r2, r1, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) close(r3) 271.781416ms ago: executing program 0 (id=158): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000180)=@other={'lock', ' ', 'mem'}, 0x9) write$vga_arbiter(r0, &(0x7f0000000500)=ANY=[@ANYBLOB='decodes none'], 0xd) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=159): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000000c0)={0x1}, 0x8) sendmmsg$inet6(r0, &(0x7f0000006100)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x1, @loopback, 0x3e6e77f0}, 0x1c, 0x0}}], 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.238' (ED25519) to the list of known hosts. [ 80.485607][ T5757] cgroup: Unknown subsys name 'net' [ 80.623963][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.342171][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.901328][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.922923][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.930936][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.940016][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.948376][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.967606][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.021999][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.045126][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.053303][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.061942][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.069933][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.095626][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.135852][ T5774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.143831][ T5085] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.153977][ T5085] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.163942][ T5085] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.171812][ T5774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.179832][ T5774] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.180342][ T5085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.195359][ T5774] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.203024][ T5085] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.203030][ T5774] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.219340][ T5774] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.229344][ T5774] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.571106][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 84.751342][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 84.763884][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.771792][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.779446][ T5769] bridge_slave_0: entered allmulticast mode [ 84.786692][ T5769] bridge_slave_0: entered promiscuous mode [ 84.796295][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.803457][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.810815][ T5769] bridge_slave_1: entered allmulticast mode [ 84.818037][ T5769] bridge_slave_1: entered promiscuous mode [ 84.851188][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 84.934489][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.955518][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.031598][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 85.043848][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.051956][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.059536][ T5772] bridge_slave_0: entered allmulticast mode [ 85.067160][ T5772] bridge_slave_0: entered promiscuous mode [ 85.084042][ T5769] team0: Port device team_slave_0 added [ 85.095611][ T5769] team0: Port device team_slave_1 added [ 85.120167][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.129661][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.137365][ T5772] bridge_slave_1: entered allmulticast mode [ 85.144437][ T5772] bridge_slave_1: entered promiscuous mode [ 85.210348][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.217636][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.243669][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.257218][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.264223][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.290614][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.329679][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.337179][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.344396][ T5777] bridge_slave_0: entered allmulticast mode [ 85.352100][ T5777] bridge_slave_0: entered promiscuous mode [ 85.361000][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.368295][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.375741][ T5777] bridge_slave_1: entered allmulticast mode [ 85.382837][ T5777] bridge_slave_1: entered promiscuous mode [ 85.406033][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.419387][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.508212][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.518039][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.526082][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.533350][ T5776] bridge_slave_0: entered allmulticast mode [ 85.540853][ T5776] bridge_slave_0: entered promiscuous mode [ 85.551676][ T5772] team0: Port device team_slave_0 added [ 85.562086][ T5772] team0: Port device team_slave_1 added [ 85.585887][ T5769] hsr_slave_0: entered promiscuous mode [ 85.592794][ T5769] hsr_slave_1: entered promiscuous mode [ 85.603539][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.623167][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.630529][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.638122][ T5776] bridge_slave_1: entered allmulticast mode [ 85.645855][ T5776] bridge_slave_1: entered promiscuous mode [ 85.709225][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.716284][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.742589][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.757449][ T5777] team0: Port device team_slave_0 added [ 85.764642][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.771825][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.797869][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.833813][ T5777] team0: Port device team_slave_1 added [ 85.849907][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.891142][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.898434][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.924671][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.939038][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.979454][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.986573][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.013949][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.014108][ T51] Bluetooth: hci0: command tx timeout [ 86.050985][ T5776] team0: Port device team_slave_0 added [ 86.089852][ T5772] hsr_slave_0: entered promiscuous mode [ 86.097115][ T5772] hsr_slave_1: entered promiscuous mode [ 86.103473][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.111608][ T5772] Cannot create hsr debugfs directory [ 86.133792][ T5776] team0: Port device team_slave_1 added [ 86.155097][ T51] Bluetooth: hci1: command tx timeout [ 86.224010][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.231143][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.257523][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.275881][ T5777] hsr_slave_0: entered promiscuous mode [ 86.283055][ T5777] hsr_slave_1: entered promiscuous mode [ 86.289555][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.297910][ T5777] Cannot create hsr debugfs directory [ 86.315815][ T51] Bluetooth: hci2: command tx timeout [ 86.321519][ T51] Bluetooth: hci3: command tx timeout [ 86.335509][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.342542][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.371642][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.553893][ T5776] hsr_slave_0: entered promiscuous mode [ 86.561313][ T5776] hsr_slave_1: entered promiscuous mode [ 86.568131][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.575819][ T5776] Cannot create hsr debugfs directory [ 86.749097][ T5769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.781308][ T5769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.810091][ T5769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.820847][ T5769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.905947][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 86.920970][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 86.967727][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 86.983727][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.099144][ T5777] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.124818][ T5777] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.155923][ T5777] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.217093][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.224411][ T5777] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.331843][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.378626][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.403778][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.420316][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.452052][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.519653][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.527127][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.562404][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.596328][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.603540][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.669318][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.737385][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.744599][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.812383][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.819645][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.901527][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.985786][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.067838][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.080391][ T51] Bluetooth: hci0: command tx timeout [ 88.131973][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.139262][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.163502][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.170700][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.214560][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.237440][ T51] Bluetooth: hci1: command tx timeout [ 88.290936][ T2965] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.298221][ T2965] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.327433][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.334657][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.373513][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.397542][ T51] Bluetooth: hci2: command tx timeout [ 88.403037][ T51] Bluetooth: hci3: command tx timeout [ 88.480368][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.672692][ T5769] veth0_vlan: entered promiscuous mode [ 88.701560][ T5772] veth0_vlan: entered promiscuous mode [ 88.733977][ T5772] veth1_vlan: entered promiscuous mode [ 88.794810][ T5769] veth1_vlan: entered promiscuous mode [ 88.847682][ T5772] veth0_macvtap: entered promiscuous mode [ 88.883854][ T5772] veth1_macvtap: entered promiscuous mode [ 88.932696][ T5769] veth0_macvtap: entered promiscuous mode [ 88.962309][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.973177][ T5769] veth1_macvtap: entered promiscuous mode [ 88.985752][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.010059][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.034634][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.044565][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.056538][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.065387][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.107050][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.118832][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.132541][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.173589][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.185929][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.199547][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.239530][ T5769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.261602][ T5769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.271201][ T5769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.283011][ T5769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.309240][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.334014][ T5776] veth0_vlan: entered promiscuous mode [ 89.389874][ T3530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.402709][ T5776] veth1_vlan: entered promiscuous mode [ 89.443188][ T3530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.524205][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.541617][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.572275][ T5777] veth0_vlan: entered promiscuous mode [ 89.587098][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.599967][ T5776] veth0_macvtap: entered promiscuous mode [ 89.631174][ T5776] veth1_macvtap: entered promiscuous mode [ 89.647824][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.660015][ T5777] veth1_vlan: entered promiscuous mode [ 89.719521][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.730477][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.748288][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.762682][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.786276][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.848314][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.866636][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.878010][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.893351][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.911420][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.929002][ T31] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.937390][ T31] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.980795][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.008970][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.019539][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.029199][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.041261][ T5777] veth0_macvtap: entered promiscuous mode [ 90.081672][ T5777] veth1_macvtap: entered promiscuous mode [ 90.142993][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.154900][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.155251][ T51] Bluetooth: hci0: command tx timeout [ 90.170823][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.183235][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.202815][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.214441][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.228255][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.258635][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.275864][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.291346][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.306541][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.318087][ T51] Bluetooth: hci1: command tx timeout [ 90.328648][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.342039][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.353401][ T5836] syz.0.1[5836]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 90.368079][ T5836] loop0: detected capacity change from 0 to 128 [ 90.377560][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.447546][ T5777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.475320][ T51] Bluetooth: hci3: command tx timeout [ 90.478956][ T5774] Bluetooth: hci2: command tx timeout [ 90.501187][ T5836] syz.0.1: attempt to access beyond end of device [ 90.501187][ T5836] loop0: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 90.522981][ T5777] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.532228][ T5777] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.541395][ T5777] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.664088][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.684449][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.771772][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.779950][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.814573][ T2965] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.823020][ T2965] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.934302][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.981769][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.424170][ T5838] loop3: detected capacity change from 0 to 40427 [ 91.500450][ T5838] F2FS-fs (loop3): invalid crc value [ 91.542811][ T5838] F2FS-fs (loop3): Found nat_bits in checkpoint [ 91.678451][ T5838] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 91.892829][ T5838] syz.3.6: attempt to access beyond end of device [ 91.892829][ T5838] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 92.063823][ T5772] syz-executor: attempt to access beyond end of device [ 92.063823][ T5772] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 92.105796][ T5772] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 92.235645][ T5774] Bluetooth: hci0: command tx timeout [ 92.246976][ T788] cfg80211: failed to load regulatory.db [ 92.396327][ T5774] Bluetooth: hci1: command tx timeout [ 92.436720][ T5874] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17'. [ 92.484457][ T5876] loop2: detected capacity change from 0 to 1024 [ 92.556110][ T5774] Bluetooth: hci3: command tx timeout [ 92.557243][ T51] Bluetooth: hci2: command tx timeout [ 92.627391][ T5876] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 92.981885][ T5886] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.030806][ T5777] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.081009][ T5890] loop1: detected capacity change from 0 to 512 [ 93.169765][ T5890] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 93.204347][ T5890] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.252675][ T5890] EXT4-fs (loop1): shut down requested (2) [ 93.321722][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.704854][ T5908] warning: `syz.1.28' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.048662][ T5917] loop1: detected capacity change from 0 to 1024 [ 94.084624][ T5917] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 94.243591][ T5909] loop2: detected capacity change from 0 to 32768 [ 94.306207][ T5909] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 94.465481][ T5909] XFS (loop2): Ending clean mount [ 94.487128][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.520596][ T5909] XFS (loop2): Quotacheck needed: Please wait. [ 94.668620][ T5909] XFS (loop2): Quotacheck: Done. [ 94.741010][ T5932] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.107031][ T5777] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 96.243241][ T5961] loop3: detected capacity change from 0 to 1024 [ 96.318377][ T5961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.609463][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.787120][ T5956] loop0: detected capacity change from 0 to 32768 [ 96.794783][ T5956] ======================================================= [ 96.794783][ T5956] WARNING: The mand mount option has been deprecated and [ 96.794783][ T5956] and is ignored by this kernel. Remove the mand [ 96.794783][ T5956] option from the mount to silence this warning. [ 96.794783][ T5956] ======================================================= [ 96.856791][ T5967] loop3: detected capacity change from 0 to 1024 [ 96.918245][ T5956] JBD2: Ignoring recovery information on journal [ 96.982485][ T5959] loop2: detected capacity change from 0 to 32768 [ 97.079809][ T28] audit: type=1800 audit(1777086409.066:2): pid=5967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.44" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 97.144311][ T5956] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 97.473512][ T5972] loop1: detected capacity change from 0 to 4096 [ 97.523489][ T5956] syz.0.41 (5956) used greatest stack depth: 18768 bytes left [ 97.621836][ T5769] ocfs2: Unmounting device (7,0) on (node local) [ 98.464329][ T5981] loop1: detected capacity change from 0 to 2048 [ 98.553793][ T5981] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.608074][ T5974] loop0: detected capacity change from 0 to 32768 [ 98.703528][ T5981] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 98.705759][ T5974] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 98.745568][ T5981] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 98.760973][ T5981] EXT4-fs (loop1): This should not happen!! Data will be lost [ 98.760973][ T5981] [ 98.771052][ T5981] EXT4-fs (loop1): Total free blocks count 0 [ 98.777241][ T5981] EXT4-fs (loop1): Free/Dirty block details [ 98.783424][ T5981] EXT4-fs (loop1): free_blocks=66060288 [ 98.789264][ T5981] EXT4-fs (loop1): dirty_blocks=16 [ 98.794615][ T5981] EXT4-fs (loop1): Block reservation details [ 98.800918][ T5981] EXT4-fs (loop1): i_reserved_data_blocks=1 [ 98.906328][ T5974] XFS (loop0): Ending clean mount [ 98.955291][ T5974] XFS (loop0): Quotacheck needed: Please wait. [ 99.062024][ T5974] XFS (loop0): Quotacheck: Done. [ 99.101325][ T31] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 99.463455][ T5769] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 99.682124][ T6006] loop2: detected capacity change from 0 to 4096 [ 99.837817][ T6007] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.071485][ T6011] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 32 already freed [ 100.125363][ T6011] NILFS (loop2): nilfs_palloc_freev (ino=3): entry number 191 already freed [ 100.156574][ T6011] NILFS (loop2): nilfs_sufile_do_free: segment 9 is already clean [ 100.306302][ T5808] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 100.515171][ T5808] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 100.570061][ T5808] usb 1-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 100.585004][ T5808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.608854][ T5808] usb 1-1: Product: syz [ 100.613113][ T5808] usb 1-1: Manufacturer: syz [ 100.625059][ T5808] usb 1-1: SerialNumber: syz [ 100.633245][ T6022] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 100.883415][ T5808] usb 1-1: selecting invalid altsetting 1 [ 100.996016][ T6030] loop3: detected capacity change from 0 to 64 [ 101.083086][ T5808] LME2510(C): Firmware Status: 06 03 47 00 00 00 [ 101.083157][ T5808] usb 1-1: dvb_usb_v2: found a 'DM04_LME2510C_DVB-S RS2000' in warm state [ 101.120021][ T5808] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 101.130063][ T6032] syz.2.64 uses obsolete (PF_INET,SOCK_PACKET) [ 101.151462][ T5808] usb 1-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 15) [ 101.172287][ T5808] dvbdev: DVB: registering new adapter (DM04_LME2510C_DVB-S RS2000) [ 101.184490][ T5808] usb 1-1: media controller created [ 101.193104][ T5808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 101.285809][ T6009] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 101.307983][ T5808] DVB: Unable to find symbol m88rs2000_attach() [ 101.320604][ T5808] LME2510(C): DM04/QQBOX Not Powered up or not Supported [ 101.320659][ T5808] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 101.379764][ T5808] usb 1-1: USB disconnect, device number 2 [ 101.765063][ T6047] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.045831][ T6057] mmap: syz.3.75 (6057) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 102.072827][ T6056] loop2: detected capacity change from 0 to 1024 [ 102.143865][ T28] audit: type=1800 audit(1777086414.136:3): pid=6056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.74" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 102.438701][ T6064] loop0: detected capacity change from 0 to 4096 [ 102.446882][ T6064] EXT4-fs: Ignoring removed nomblk_io_submit option [ 102.495706][ T6064] EXT4-fs (loop0): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 102.552498][ T6064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.646047][ T28] audit: type=1800 audit(1777086414.646:4): pid=6064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.77" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 102.799114][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.071088][ T6071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.87'. [ 103.275815][ T6076] loop2: detected capacity change from 0 to 4096 [ 103.312396][ T6078] sock: sock_set_timeout: `syz.1.81' (pid 6078) tries to set negative timeout [ 103.827031][ T6084] Driver unsupported XDP return value 0 on prog (id 4) dev N/A, expect packet loss! [ 103.858857][ T6073] loop3: detected capacity change from 0 to 32768 [ 104.035006][ T5808] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 104.247350][ T5808] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 104.256301][ T27] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 104.263893][ T5808] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 104.275316][ T5808] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 104.285534][ T5808] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 104.296628][ T5808] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 104.309868][ T5808] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 104.319449][ T5808] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 104.327859][ T5808] usb 2-1: Product: syz [ 104.332083][ T5808] usb 2-1: Manufacturer: syz [ 104.347171][ T5808] cdc_wdm 2-1:1.0: skipping garbage [ 104.353882][ T5808] cdc_wdm 2-1:1.0: skipping garbage [ 104.377050][ T5808] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 104.383888][ T5808] cdc_wdm 2-1:1.0: Unknown control protocol [ 104.488197][ T27] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 104.509569][ T27] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 104.519596][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.528080][ T27] usb 1-1: Product: syz [ 104.532306][ T27] usb 1-1: Manufacturer: syz [ 104.538133][ T27] usb 1-1: SerialNumber: syz [ 104.576282][ T27] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 104.875699][ T5805] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 104.970243][ T6086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.979496][ T6086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.000752][ T27] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 105.022582][ T27] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 105.043154][ T27] usb 1-1: media controller created [ 105.075174][ T5805] usb 4-1: Using ep0 maxpacket: 8 [ 105.087562][ T5805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 105.102076][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.107194][ T5805] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 105.123675][ T5759] usb 2-1: USB disconnect, device number 2 [ 105.140129][ T5805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.153722][ T5805] usb 4-1: config 0 descriptor?? [ 105.265842][ T27] usb 1-1: USB disconnect, device number 3 [ 105.390055][ T5805] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 105.622373][ T27] usb 4-1: USB disconnect, device number 2 [ 106.280023][ T6091] netlink: 'syz.2.97': attribute type 28 has an invalid length. [ 106.554819][ T6103] loop0: detected capacity change from 0 to 1024 [ 106.605056][ T28] audit: type=1800 audit(1777086418.596:5): pid=6103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.90" name="file1" dev="loop0" ino=20 res=0 errno=0 [ 106.807781][ T28] audit: type=1326 audit(1777086418.806:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09119cdd9 code=0x7ffc0000 [ 106.917266][ T28] audit: type=1326 audit(1777086418.806:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff09113e159 code=0x7ffc0000 [ 107.037916][ T28] audit: type=1326 audit(1777086418.806:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff09113e159 code=0x7ffc0000 [ 107.165323][ T28] audit: type=1326 audit(1777086418.806:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09119cdd9 code=0x7ffc0000 [ 107.292403][ T28] audit: type=1326 audit(1777086418.826:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff09113e159 code=0x7ffc0000 [ 107.360334][ T28] audit: type=1326 audit(1777086418.826:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09119cdd9 code=0x7ffc0000 [ 107.471626][ T28] audit: type=1326 audit(1777086418.826:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff09113e159 code=0x7ffc0000 [ 107.575322][ T28] audit: type=1326 audit(1777086418.826:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09119cdd9 code=0x7ffc0000 [ 107.598161][ T28] audit: type=1326 audit(1777086418.826:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09119cdd9 code=0x7ffc0000 [ 107.620547][ T28] audit: type=1326 audit(1777086418.826:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff09113e159 code=0x7ffc0000 [ 107.642589][ T28] audit: type=1326 audit(1777086418.826:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff09119cdd9 code=0x7ffc0000 [ 107.667479][ T28] audit: type=1326 audit(1777086418.826:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff09113e159 code=0x7ffc0000 [ 107.725020][ T28] audit: type=1326 audit(1777086418.826:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6100 comm="syz.2.91" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7ff09113e159 code=0x7ffc0000 [ 108.047312][ T6111] loop0: detected capacity change from 0 to 4096 [ 108.055696][ T6107] loop3: detected capacity change from 0 to 32768 [ 108.085209][ T6107] (syz.3.92,6107,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 108.137656][ T6107] (syz.3.92,6107,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 108.228867][ T6107] JBD2: Ignoring recovery information on journal [ 108.359618][ T6107] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 108.561660][ T6123] netlink: 100 bytes leftover after parsing attributes in process `syz.2.98'. [ 108.729824][ T6125] loop0: detected capacity change from 0 to 16 [ 108.759936][ T6125] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 108.942146][ T5772] ocfs2: Unmounting device (7,3) on (node local) [ 109.107801][ T6130] loop0: detected capacity change from 0 to 256 [ 109.656754][ T6141] loop1: detected capacity change from 0 to 1024 [ 109.716300][ T6141] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.833019][ T5776] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.882874][ T6132] loop2: detected capacity change from 0 to 32768 [ 109.905742][ T6132] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop2 scanned by syz.2.104 (6132) [ 109.945191][ T5805] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 109.989932][ T6132] BTRFS info (device loop2): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 110.026968][ T6132] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 110.037342][ T6132] BTRFS info (device loop2): using free space tree [ 110.165279][ T5805] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.184822][ T5805] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 110.224276][ T5805] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 110.234456][ T6132] BTRFS info (device loop2): enabling ssd optimizations [ 110.242208][ T5805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.260787][ T6132] BTRFS info (device loop2): auto enabling async discard [ 110.270889][ T5805] usb 1-1: Product: syz [ 110.299937][ T5805] usb 1-1: Manufacturer: syz [ 110.304630][ T5805] usb 1-1: SerialNumber: syz [ 110.376925][ T6162] loop3: detected capacity change from 0 to 4096 [ 110.576815][ T6132] fs-verity: sha512 using implementation "sha512-avx2" [ 110.679437][ T6132] BTRFS info (device loop2): setting compat-ro feature flag for VERITY (0x4) [ 110.716027][ T5759] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 110.937280][ T5759] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.964083][ T5759] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.980055][ T6172] loop3: detected capacity change from 0 to 4096 [ 110.992615][ T5777] BTRFS info (device loop2): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f [ 111.017202][ T5759] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.063411][ T5759] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.083733][ T6174] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.108277][ T5759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.142501][ T5759] usb 2-1: config 0 descriptor?? [ 111.422964][ T5805] cdc_ncm 1-1:1.0: bind() failure [ 111.455956][ T5805] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 111.479195][ T5805] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 111.517931][ T5805] usbtest: probe of 1-1:1.1 failed with error -71 [ 111.548062][ T5805] usb 1-1: USB disconnect, device number 4 [ 111.671231][ T5759] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 111.789802][ T5759] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 111.879389][ T6183] loop3: detected capacity change from 0 to 512 [ 111.989353][ T6183] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 112.017945][ T5808] usb 2-1: USB disconnect, device number 3 [ 112.049842][ T6182] fido_id[6182]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 112.158546][ T6183] EXT4-fs (loop3): 1 orphan inode deleted [ 112.168050][ T6183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.186020][ T6183] ext4 filesystem being mounted at /27/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.197551][ T61] __quota_error: 74 callbacks suppressed [ 112.197566][ T61] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 112.248790][ T61] EXT4-fs error (device loop3): ext4_release_dquot:6989: comm kworker/u4:5: Failed to release dquot type 1 [ 112.349929][ T6188] loop0: detected capacity change from 0 to 2048 [ 112.409945][ T6188] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 112.448575][ T6183] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 112.536739][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.540391][ T6179] (syz.2.111,6179,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 112.575944][ T6179] (syz.2.111,6179,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 112.613955][ T6179] JBD2: Ignoring recovery information on journal [ 112.708075][ T6191] "syz.3.116" (6191) uses obsolete ecb(arc4) skcipher [ 112.787488][ T6179] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 112.924047][ T6194] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 112.951185][ T6194] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.100627][ T6200] set_capacity_and_notify: 2 callbacks suppressed [ 113.100642][ T6200] loop3: detected capacity change from 0 to 4096 [ 113.125622][ T789] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 113.168723][ T5769] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.315122][ T789] usb 2-1: Using ep0 maxpacket: 32 [ 113.318011][ T5777] ocfs2: Unmounting device (7,2) on (node local) [ 113.351606][ T789] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 113.375491][ T789] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.383607][ T789] usb 2-1: Product: syz [ 113.429700][ T789] usb 2-1: Manufacturer: syz [ 113.434390][ T789] usb 2-1: SerialNumber: syz [ 113.511462][ T789] usb 2-1: config 0 descriptor?? [ 113.778050][ T789] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 004 [ 113.802465][ T2965] Bluetooth: hci4: Frame reassembly failed (-84) [ 113.835063][ T6211] netlink: 8 bytes leftover after parsing attributes in process `syz.2.122'. [ 114.035058][ T8] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 114.055782][ T6196] i2c i2c-1: failure reading data [ 114.079243][ T5759] usb 2-1: USB disconnect, device number 4 [ 114.227845][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 114.244967][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 114.260095][ T8] usb 4-1: New USB device found, idVendor=0925, idProduct=8066, bcdDevice= 0.00 [ 114.269486][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.289769][ T8] usb 4-1: config 0 descriptor?? [ 114.454573][ T6226] netlink: 'syz.2.132': attribute type 10 has an invalid length. [ 114.605648][ T3530] Bluetooth: hci5: Frame reassembly failed (-84) [ 114.700539][ T28] audit: type=1326 audit(1777086426.696:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6230 comm="syz.1.134" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a9219cdd9 code=0x0 [ 114.736007][ T8] hid-generic 0003:0925:8066.0002: unbalanced collection at end of report description [ 114.753289][ T8] hid-generic: probe of 0003:0925:8066.0002 failed with error -22 [ 114.952188][ T27] usb 4-1: USB disconnect, device number 3 [ 115.551070][ T6234] loop3: detected capacity change from 0 to 1024 [ 115.593643][ T6234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 115.634839][ T6234] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.804850][ T6234] EXT4-fs error (device loop3): ext4_map_blocks:720: inode #15: comm syz.3.135: lblock 0 mapped to illegal pblock 0 (length 1) [ 115.831599][ T6234] EXT4-fs (loop3): Remounting filesystem read-only [ 115.845140][ T5771] Bluetooth: hci4: command 0x1003 tx timeout [ 115.853210][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 115.918351][ T5772] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 116.305162][ T5808] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 116.516989][ T5808] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.534967][ T5808] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.546776][ T5808] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 116.565035][ T5808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 116.584966][ T5808] usb 1-1: SerialNumber: syz [ 116.635173][ T51] Bluetooth: hci5: command 0x1003 tx timeout [ 116.642443][ T5774] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 116.826648][ T5808] usb 1-1: 0:2 : does not exist [ 116.847503][ T5808] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 116.852468][ T6250] loop3: detected capacity change from 0 to 40427 [ 116.886147][ T5808] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 116.898816][ T6250] F2FS-fs (loop3): invalid crc value [ 116.912965][ T6250] F2FS-fs (loop3): Found nat_bits in checkpoint [ 116.933611][ T5808] usb 1-1: 5:0: failed to get current value for ch 15 (-22) [ 117.000728][ T6250] F2FS-fs (loop3): Start checkpoint disabled! [ 117.032191][ T5808] usb 1-1: USB disconnect, device number 5 [ 117.077879][ T6250] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 117.133291][ T5762] udevd[5762]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.163879][ T6254] loop1: detected capacity change from 0 to 32768 [ 117.205187][ T6254] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop1 scanned by syz.1.144 (6254) [ 117.291744][ T6254] BTRFS info (device loop1): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 117.345370][ T6254] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 117.386872][ T6254] BTRFS info (device loop1): using free space tree [ 117.464370][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.145'. [ 117.484363][ T6264] netlink: 'syz.2.145': attribute type 18 has an invalid length. [ 117.500729][ T6264] netlink: 4 bytes leftover after parsing attributes in process `syz.2.145'. [ 117.555836][ T6254] BTRFS info (device loop1): enabling ssd optimizations [ 117.563384][ T6254] BTRFS info (device loop1): auto enabling async discard [ 117.623197][ T2965] kworker/u4:9: attempt to access beyond end of device [ 117.623197][ T2965] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 117.640251][ T2965] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 117.647466][ T2965] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 117.765882][ T6277] loop0: detected capacity change from 0 to 256 [ 117.773265][ T6277] exfat: Deprecated parameter 'utf8' [ 117.816294][ T6277] exfat: Deprecated parameter 'utf8' [ 117.902520][ T6277] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 118.131512][ T5776] BTRFS info (device loop1): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409 [ 118.450836][ T6013] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 10 /dev/loop1 scanned by udevd (6013) [ 118.463405][ T6288] loop2: detected capacity change from 0 to 2048 [ 118.568071][ T6292] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 118.909859][ T6292] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 118.943178][ T6292] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4) [ 118.955374][ T5759] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 118.987233][ T6292] Remounting filesystem read-only [ 119.009896][ T3530] NILFS (loop2): discard dirty page: offset=4096, ino=6 [ 119.039313][ T3530] NILFS (loop2): discard dirty block: blocknr=39, size=1024 [ 119.068430][ T3530] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 119.093978][ T3530] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 119.121445][ T3530] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 119.149324][ T3530] NILFS (loop2): discard dirty page: offset=0, ino=3 [ 119.156418][ T5759] usb 2-1: Using ep0 maxpacket: 8 [ 119.168676][ T5759] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.200969][ T3530] NILFS (loop2): discard dirty block: blocknr=42, size=1024 [ 119.212816][ T5759] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 119.222888][ T3530] NILFS (loop2): discard dirty block: blocknr=43, size=1024 [ 119.245773][ T3530] NILFS (loop2): discard dirty block: blocknr=44, size=1024 [ 119.253258][ T3530] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 119.265009][ T5759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.330180][ T3530] NILFS (loop2): discard dirty page: offset=65536, ino=3 [ 119.349952][ T5759] usb 2-1: config 0 descriptor?? [ 119.359900][ T3530] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 119.369312][ T3530] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 119.384772][ T3530] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 119.393010][ T3530] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 119.402589][ T3530] NILFS (loop2): discard dirty page: offset=98304, ino=3 [ 119.409864][ T3530] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 119.424101][ T3530] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 119.439316][ T3530] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 119.450984][ T3530] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 119.464020][ T3530] NILFS (loop2): discard dirty page: offset=196608, ino=3 [ 119.502097][ T3530] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 119.604122][ T3530] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 119.620440][ T3530] NILFS (loop2): discard dirty block: blocknr=49, size=1024 [ 119.629482][ T3530] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 119.646949][ T5759] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 119.728606][ T3530] NILFS (loop2): discard dirty page: offset=0, ino=18 [ 119.762374][ T3530] NILFS (loop2): discard dirty block: blocknr=0, size=1024 [ 119.778431][ T3530] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 119.787684][ T3530] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 119.796856][ T3530] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 119.807917][ T3530] NILFS (loop2): discard dirty page: offset=0, ino=2 [ 119.814780][ T3530] NILFS (loop2): discard dirty block: blocknr=18, size=1024 [ 119.823136][ T3530] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 119.889673][ T3530] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 119.917578][ T3530] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 119.931364][ T5759] usb 2-1: USB disconnect, device number 5 [ 119.957956][ T3530] NILFS (loop2): discard dirty page: offset=0, ino=5 [ 119.976005][ T3530] NILFS (loop2): discard dirty block: blocknr=41, size=1024 [ 119.989301][ T3530] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 120.000729][ T3530] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 120.010050][ T3530] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 120.016009][ T6309] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 120.020450][ T3530] NILFS (loop2): discard dirty page: offset=0, ino=4 [ 120.036776][ T3530] NILFS (loop2): discard dirty block: blocknr=40, size=1024 [ 120.044310][ T3530] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 120.054810][ T3530] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 120.063928][ T3530] NILFS (loop2): discard dirty block: blocknr=18446744073709551615, size=1024 [ 120.084769][ T6288] NILFS (loop2): mounting fs with errors [ 120.134177][ T6292] ------------[ cut here ]------------ [ 120.140140][ T6292] WARNING: CPU: 0 PID: 6292 at fs/buffer.c:1188 mark_buffer_dirty+0x2bb/0x4c0 [ 120.149779][ T6292] Modules linked in: [ 120.153780][ T6292] CPU: 0 PID: 6292 Comm: segctord Not tainted syzkaller #0 [ 120.161221][ T6292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 120.171564][ T6292] RIP: 0010:mark_buffer_dirty+0x2bb/0x4c0 [ 120.177505][ T6292] Code: 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 9f 9a fc ff e8 5a b6 88 ff 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 ea 08 e8 ff e8 45 b6 88 ff <0f> 0b e9 84 fd ff ff e8 39 b6 88 ff 0f 0b e9 b0 fd ff ff e8 2d b6 [ 120.197274][ T6292] RSP: 0018:ffffc9000c9976f0 EFLAGS: 00010293 [ 120.203397][ T6292] RAX: ffffffff81fe6bbb RBX: ffff88805cbab488 RCX: ffff88802b1ebc00 [ 120.211500][ T6292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 120.219615][ T6292] RBP: ffffc9000c997b01 R08: ffff88805cbab48f R09: 1ffff1100b975691 [ 120.227674][ T6292] R10: dffffc0000000000 R11: ffffed100b975692 R12: 1ffff1100b91f68f [ 120.235924][ T6292] R13: ffff88805c8fb488 R14: ffff88801e362328 R15: 1ffff1100b91f691 [ 120.243939][ T6292] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 120.253392][ T6292] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.260187][ T6292] CR2: 0000001b2d720ff8 CR3: 000000005fe0d000 CR4: 00000000003506f0 [ 120.268230][ T6292] Call Trace: [ 120.271541][ T6292] [ 120.274502][ T6292] nilfs_segctor_do_construct+0x307/0x68a0 [ 120.280401][ T6292] ? verify_lock_unused+0x140/0x140 [ 120.285671][ T6292] ? verify_lock_unused+0x140/0x140 [ 120.290904][ T6292] ? nilfs_transaction_unlock+0x220/0x220 [ 120.296701][ T6292] ? nilfs_bmap_test_and_clear_dirty+0x50/0x70 [ 120.302893][ T6292] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 120.308417][ T6292] ? __lock_acquire+0x7d40/0x7d40 [ 120.313471][ T6292] ? __rwlock_init+0x150/0x150 [ 120.318444][ T6292] ? do_raw_spin_unlock+0x121/0x230 [ 120.323678][ T6292] ? _raw_spin_unlock+0x28/0x40 [ 120.328622][ T6292] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 120.334133][ T6292] nilfs_segctor_construct+0x17b/0x690 [ 120.339679][ T6292] nilfs_segctor_thread+0x536/0x10d0 [ 120.345082][ T6292] ? nilfs_iput_work_func+0x70/0x70 [ 120.350324][ T6292] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 120.356783][ T6292] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 120.362756][ T6292] ? wake_bit_function+0x200/0x200 [ 120.367980][ T6292] ? __kthread_parkme+0x7a/0x1c0 [ 120.372981][ T6292] kthread+0x2fa/0x390 [ 120.377136][ T6292] ? nilfs_iput_work_func+0x70/0x70 [ 120.382365][ T6292] ? kthread_blkcg+0xd0/0xd0 [ 120.387018][ T6292] ret_from_fork+0x48/0x80 [ 120.391478][ T6292] ? kthread_blkcg+0xd0/0xd0 [ 120.399533][ T6292] ret_from_fork_asm+0x11/0x20 [ 120.404370][ T6292] [ 120.409362][ T6292] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 120.416737][ T6292] CPU: 0 PID: 6292 Comm: segctord Not tainted syzkaller #0 [ 120.423984][ T6292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 120.434082][ T6292] Call Trace: [ 120.437408][ T6292] [ 120.440378][ T6292] dump_stack_lvl+0x18c/0x250 [ 120.445116][ T6292] ? show_regs_print_info+0x20/0x20 [ 120.450358][ T6292] ? load_image+0x420/0x420 [ 120.454910][ T6292] panic+0x2dc/0x730 [ 120.458865][ T6292] ? bpf_jit_dump+0xd0/0xd0 [ 120.463387][ T6292] ? ret_from_fork_asm+0x11/0x20 [ 120.468346][ T6292] __warn+0x2e0/0x470 [ 120.472341][ T6292] ? mark_buffer_dirty+0x2bb/0x4c0 [ 120.477503][ T6292] ? mark_buffer_dirty+0x2bb/0x4c0 [ 120.482644][ T6292] report_bug+0x2be/0x4f0 [ 120.486982][ T6292] ? mark_buffer_dirty+0x2bb/0x4c0 [ 120.492107][ T6292] ? mark_buffer_dirty+0x2bb/0x4c0 [ 120.497231][ T6292] ? mark_buffer_dirty+0x2bd/0x4c0 [ 120.502372][ T6292] handle_bug+0xcf/0x120 [ 120.506635][ T6292] exc_invalid_op+0x1a/0x50 [ 120.511159][ T6292] asm_exc_invalid_op+0x1a/0x20 [ 120.516037][ T6292] RIP: 0010:mark_buffer_dirty+0x2bb/0x4c0 [ 120.521808][ T6292] Code: 00 00 00 5b 41 5c 41 5e 41 5f 5d e9 9f 9a fc ff e8 5a b6 88 ff 48 89 df 5b 41 5c 41 5e 41 5f 5d e9 ea 08 e8 ff e8 45 b6 88 ff <0f> 0b e9 84 fd ff ff e8 39 b6 88 ff 0f 0b e9 b0 fd ff ff e8 2d b6 [ 120.541432][ T6292] RSP: 0018:ffffc9000c9976f0 EFLAGS: 00010293 [ 120.547505][ T6292] RAX: ffffffff81fe6bbb RBX: ffff88805cbab488 RCX: ffff88802b1ebc00 [ 120.555484][ T6292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 120.563469][ T6292] RBP: ffffc9000c997b01 R08: ffff88805cbab48f R09: 1ffff1100b975691 [ 120.571452][ T6292] R10: dffffc0000000000 R11: ffffed100b975692 R12: 1ffff1100b91f68f [ 120.579437][ T6292] R13: ffff88805c8fb488 R14: ffff88801e362328 R15: 1ffff1100b91f691 [ 120.587438][ T6292] ? mark_buffer_dirty+0x2bb/0x4c0 [ 120.592582][ T6292] nilfs_segctor_do_construct+0x307/0x68a0 [ 120.598422][ T6292] ? verify_lock_unused+0x140/0x140 [ 120.603667][ T6292] ? verify_lock_unused+0x140/0x140 [ 120.608921][ T6292] ? nilfs_transaction_unlock+0x220/0x220 [ 120.614688][ T6292] ? nilfs_bmap_test_and_clear_dirty+0x50/0x70 [ 120.620962][ T6292] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 120.626460][ T6292] ? __lock_acquire+0x7d40/0x7d40 [ 120.631524][ T6292] ? __rwlock_init+0x150/0x150 [ 120.636332][ T6292] ? do_raw_spin_unlock+0x121/0x230 [ 120.641549][ T6292] ? _raw_spin_unlock+0x28/0x40 [ 120.646420][ T6292] ? nilfs_segctor_confirm+0x24d/0x2d0 [ 120.651892][ T6292] nilfs_segctor_construct+0x17b/0x690 [ 120.657370][ T6292] nilfs_segctor_thread+0x536/0x10d0 [ 120.662720][ T6292] ? nilfs_iput_work_func+0x70/0x70 [ 120.667955][ T6292] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 120.673868][ T6292] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 120.679779][ T6292] ? wake_bit_function+0x200/0x200 [ 120.684930][ T6292] ? __kthread_parkme+0x7a/0x1c0 [ 120.689912][ T6292] kthread+0x2fa/0x390 [ 120.694004][ T6292] ? nilfs_iput_work_func+0x70/0x70 [ 120.699217][ T6292] ? kthread_blkcg+0xd0/0xd0 [ 120.703824][ T6292] ret_from_fork+0x48/0x80 [ 120.708252][ T6292] ? kthread_blkcg+0xd0/0xd0 [ 120.712867][ T6292] ret_from_fork_asm+0x11/0x20 [ 120.717672][ T6292] [ 120.721320][ T6292] Kernel Offset: disabled [ 120.725744][ T6292] Rebooting in 86400 seconds..